$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98.cer File: 084cdd3f-c178-4428-8992-9e1b2922de98.cer (raw, json) Hash identifier: B9on1Hhm2awLbbv/a5j2SfunJZuPX852BlJ1k3MIPjM= Subject key identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844E23857C1361BE60CC8883C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Feb 2024 01:45:21 +0000 Certificate not after: Tue 19 May 2026 00:45:21 +0000 Subordinate resources: IP: 72.1.32.0 -- 72.1.45.255 IP: 209.240.128.0/19 IP: 216.104.160.0/19 IP: 2606:1400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e2:38:57:c1:36:1b:e6:0c:c8:88:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 14 01:45:21 2024 GMT Not After : May 19 00:45:21 2026 GMT Subject: CN=084cdd3f-c178-4428-8992-9e1b2922de98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:83:11:f6:04:81:9f:ac:a1:81:1d:38:ce:20: a5:bd:04:c3:e8:47:03:c9:3c:00:a0:a6:7f:27:e8: a3:39:d5:e7:ad:12:f2:aa:78:70:87:a9:eb:ce:60: dc:d4:ad:45:c3:bf:ee:bd:ea:42:99:9e:7c:59:f9: cc:fa:4a:97:00:b6:84:68:77:95:d0:36:a5:d5:24: ea:41:4a:3b:ad:aa:9e:10:63:39:2e:8b:79:d0:cb: 93:c6:54:81:b4:7b:17:1a:57:60:f6:99:dd:34:3d: e9:cc:dd:87:dd:b3:34:1a:83:a4:3e:48:26:78:23: 54:25:6e:13:46:86:86:8f:1b:98:50:f6:f9:83:dc: b8:7e:41:3b:e5:35:5d:53:68:0c:4d:7b:d8:49:fe: 80:93:c4:d8:14:99:5e:32:ea:84:22:63:fd:24:d1: 5f:2b:0c:13:06:38:57:7c:23:78:3a:35:63:87:2b: d3:73:3d:fc:04:da:f7:c4:49:04:69:fc:ca:a1:e9: bf:f3:86:93:0a:44:ef:1e:b5:3b:c6:50:23:11:81: 6e:b4:cf:cc:6b:da:e0:89:af:2c:5d:96:f4:18:e6: a3:15:94:15:2b:f9:73:fc:c0:19:83:56:4a:84:e1: 6e:7b:43:17:d5:a0:dc:63:31:e1:67:43:2e:11:41: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BA:92:69:6A:1D:B9:8C:0B:F1:E2:D8:01:C9:B7:A1:85:EC:7E:65 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/084cdd3f-c178-4428-8992-9e1b2922de98/084cdd3f-c178-4428-8992-9e1b2922de98.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 72.1.32.0-72.1.45.255 209.240.128.0/19 216.104.160.0/19 IPv6: 2606:1400::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:3f:60:09:97:60:a5:d0:5e:26:c3:f0:fa:8a:d7:2d:3d:04: 0e:b0:82:13:f1:07:ea:96:80:05:2f:9c:f7:8a:94:e0:58:c0: 21:cd:00:61:03:a7:4b:5e:17:7f:94:82:1b:61:05:94:60:0e: 2c:91:66:b0:67:10:66:be:fb:fa:b2:62:ea:83:ac:e0:a9:be: bb:62:82:90:01:4f:e1:c8:27:8c:32:46:a5:6b:bb:fa:43:a4: 12:01:6e:be:06:e9:fb:b2:c6:3d:3e:d5:8f:f7:3e:c2:5e:10: bc:2c:5d:6f:41:60:8a:f1:a6:ac:af:85:4b:d1:51:81:e9:e9: b2:a8:29:a8:bc:de:d4:de:5c:d9:c9:83:48:ee:2e:83:66:6a: 04:a4:7f:8a:56:94:a3:f6:15:41:bd:45:c7:5b:97:51:87:05: 96:40:db:81:e5:41:91:6e:ff:3d:62:6f:a7:c2:b0:6d:c3:6a: 84:db:c0:1b:0a:59:66:d3:6f:5c:8c:4a:b4:bc:6b:ec:d5:d3: 46:28:95:2f:d7:75:5e:06:c5:0c:34:a2:35:29:ee:dd:38:11: e1:09:50:50:0c:23:2d:97:1c:48:6e:73:76:de:e4:60:35:6b: d2:97:19:03:cb:b5:db:87:a4:2c:8b:50:95:93:36:67:d6:16: f0:bf:23:58 -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWETiOFfBNhvmDMiIPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDIxNDAxNDUyMVoXDTI2MDUxOTAwNDUyMVowLzEtMCsGA1UEAxMk MDg0Y2RkM2YtYzE3OC00NDI4LTg5OTItOWUxYjI5MjJkZTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYMR9gSBn6yhgR04ziClvQTD6EcDyTwAoKZ/ J+ijOdXnrRLyqnhwh6nrzmDc1K1Fw7/uvepCmZ58WfnM+kqXALaEaHeV0Dal1STq QUo7raqeEGM5Lot50MuTxlSBtHsXGldg9pndND3pzN2H3bM0GoOkPkgmeCNUJW4T RoaGjxuYUPb5g9y4fkE75TVdU2gMTXvYSf6Ak8TYFJleMuqEImP9JNFfKwwTBjhX fCN4OjVjhyvTcz38BNr3xEkEafzKoem/84aTCkTvHrU7xlAjEYFutM/Ma9rgia8s XZb0GOajFZQVK/lz/MAZg1ZKhOFue0MX1aDcYzHhZ0MuEUEsqwIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFGu6kmlqHbmMC/Hi2AHJt6GF7H5lMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w ODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjkyMmRlOTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzA4NGNkZDNmLWMxNzgtNDQyOC04 OTkyLTllMWIyOTIyZGU5OC8wODRjZGQzZi1jMTc4LTQ0MjgtODk5Mi05ZTFiMjky MmRlOTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMCAEAgABMBowDAMEBUgBIAMEAUgBLAMEBdHwgAMEBdhooDANBAIA AjAHAwUAJgYUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAGP2AJl2Cl0F4mw/D6itctPQQOsIIT8QfqloAF L5z3ipTgWMAhzQBhA6dLXhd/lIIbYQWUYA4skWawZxBmvvv6smLqg6zgqb67YoKQ AU/hyCeMMkala7v6Q6QSAW6+Bun7ssY9PtWP9z7CXhC8LF1vQWCK8aasr4VL0VGB 6emyqCmovN7U3lzZyYNI7i6DZmoEpH+KVpSj9hVBvUXHW5dRhwWWQNuB5UGRbv89 Ym+nwrBtw2qE28AbCllm029cjEq0vGvs1dNGKJUv13VeBsUMNKI1Ke7dOBHhCVBQ DCMtlxxIbnN23uRgNWvSlxkDy7Xbh6Qsi1CVkzZn1hbwvyNY -----END CERTIFICATE-----Generated at Mon May 13 12:17:56 2024 by rpki-client on console-ams.rpki-client.org