$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer File: 0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer (raw, json) Hash identifier: PXJaxiya7gfwC9KWveErZmpnAT6syvdAOEXkn05BDzw= Subject key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584379F855852BFF41802928A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Oct 2023 00:45:22 +0000 Certificate not after: Sat 10 Jan 2026 01:45:22 +0000 Subordinate resources: AS: 2906 AS: 40027 IP: 23.246.0.0/18 IP: 45.57.0.0/17 IP: 64.120.128.0/17 IP: 66.197.128.0/17 IP: 108.175.32.0/20 IP: 192.173.64.0/18 IP: 198.38.96.0/19 IP: 198.45.48.0/20 IP: 2620:10c:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:79:f8:55:85:2b:ff:41:80:29:28:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 8 00:45:22 2023 GMT Not After : Jan 10 01:45:22 2026 GMT Subject: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:d3:fe:b3:19:f9:c5:49:31:8d:53:fa:b1: 60:90:f0:c9:26:95:8f:3a:81:27:70:74:d4:c6:69: 06:d3:d7:b1:ac:d4:22:ac:16:1a:3c:26:08:33:4e: 5e:1d:da:05:09:63:51:ed:a3:d4:9e:f1:cb:99:c7: 8b:02:26:fd:63:fd:d7:fd:9d:45:b4:06:30:ec:f0: b4:d7:e7:8f:55:6f:f7:45:40:b6:85:2f:d9:53:67: 12:82:69:51:cb:83:6b:83:33:d4:83:d5:2e:4f:a9: 7c:f3:07:42:8f:78:ea:af:cf:92:c6:d7:5c:a1:c5: f6:4d:d4:cd:00:3e:5f:da:76:17:81:8f:c3:0a:b9: ae:43:fa:df:4a:3c:11:6b:6a:57:03:a1:4b:d8:a3: 7b:35:20:40:e4:d7:11:32:18:4c:62:a8:05:23:8f: ab:7a:d3:ed:3a:3c:17:13:6a:4a:a0:f0:c0:c5:ed: 25:7b:08:7e:3b:b5:04:31:85:e4:a6:0b:99:a5:fc: 17:00:dc:09:27:5a:e3:d5:2f:3b:0d:c4:b2:72:38: c2:fe:cd:9d:92:aa:9d:be:32:6b:76:8a:e8:ef:41: c9:2a:f2:fb:02:e9:62:58:52:36:eb:2d:50:a6:76: 77:60:5b:27:67:77:b3:f8:f5:3e:33:32:69:56:bd: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.246.0.0/18 45.57.0.0/17 64.120.128.0/17 66.197.128.0/17 108.175.32.0/20 192.173.64.0/18 198.38.96.0/19 198.45.48.0/20 IPv6: 2620:10c:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2906 40027 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:94:c0:f3:c6:11:76:89:1d:d1:ad:2d:81:8e:ca:6f:45:12: a6:a9:bb:c8:82:97:22:96:7c:d0:e4:76:20:e2:67:ca:1a:50: 6e:4b:ce:8b:3a:88:85:d6:58:16:58:0d:ff:e9:19:b3:b3:1f: 72:d8:1d:61:b8:aa:99:66:23:c0:0c:20:2e:81:af:d6:0c:38: 56:48:1d:c8:c3:85:6a:41:f7:30:fa:d2:da:9d:e2:9b:82:cb: 6f:70:c1:dd:f0:87:e3:cd:3a:03:9c:0b:29:19:de:58:be:7a: 48:b7:e3:2e:70:96:54:17:6d:a1:28:0a:3b:17:ca:75:30:25: 13:21:50:22:2b:9d:d6:ad:d0:54:03:5f:2f:8f:d0:0a:5e:6a: a5:74:8b:1b:3a:4c:9c:53:9e:fb:d3:48:88:05:56:86:dc:ca: 50:6f:df:5f:76:da:dc:4c:40:73:af:23:7a:fd:f6:9f:2b:bb: 51:15:70:c6:cf:b1:d1:42:e5:27:d3:d0:6d:a4:2b:3c:f2:d1: 9e:1d:40:d9:5f:1a:9e:bb:8e:15:0f:68:3a:0f:d7:8b:da:d3: 34:fe:56:cd:8a:a3:b7:0a:6f:54:7a:bc:ff:3d:82:1c:fc:69: 35:74:03:8c:11:16:da:51:cc:4c:6d:81:d2:77:6f:a2:34:ef: cb:9c:ef:08 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWEN5+FWFK/9BgCkopgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTAwODAwNDUyMloXDTI2MDExMDAxNDUyMlowLzEtMCsGA1UEAxMk MGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZlNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8rT/rMZ+cVJMY1T+rFgkPDJJpWPOoEncHTU xmkG09exrNQirBYaPCYIM05eHdoFCWNR7aPUnvHLmceLAib9Y/3X/Z1FtAYw7PC0 1+ePVW/3RUC2hS/ZU2cSgmlRy4NrgzPUg9UuT6l88wdCj3jqr8+SxtdcocX2TdTN AD5f2nYXgY/DCrmuQ/rfSjwRa2pXA6FL2KN7NSBA5NcRMhhMYqgFI4+retPtOjwX E2pKoPDAxe0lewh+O7UEMYXkpguZpfwXANwJJ1rj1S87DcSycjjC/s2dkqqdvjJr doro70HJKvL7AuliWFI26y1QpnZ3YFsnZ3ez+PU+MzJpVr2/PQIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFFhGcbTrm45jBnikcsFoJUCzPxPXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w ZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzBkODY2MzhhLTJlMTItNGFhNC1i ZGNkLTIyNjY1YjI2ZTU3Yy8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIy NmU1N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWgYIKwYBBQUH AQcBAf8ESzBJMDYEAgABMDADBAYX9gADBActOQADBAdAeIADBAdCxYADBARsryAD BAbArUADBAXGJmADBATGLTAwDwQCAAIwCQMHBCYgAQxwADAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgILWgIDAJxbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAF6UwPPGEXaJHdGtLYGOym9FEqap u8iClyKWfNDkdiDiZ8oaUG5Lzos6iIXWWBZYDf/pGbOzH3LYHWG4qplmI8AMIC6B r9YMOFZIHcjDhWpB9zD60tqd4puCy29wwd3wh+PNOgOcCykZ3li+eki34y5wllQX baEoCjsXynUwJRMhUCIrndat0FQDXy+P0ApeaqV0ixs6TJxTnvvTSIgFVobcylBv 31922txMQHOvI3r99p8ru1EVcMbPsdFC5SfT0G2kKzzy0Z4dQNlfGp67jhUPaDoP 14va0zT+Vs2Ko7cKb1R6vP89ghz8aTV0A4wRFtpRzExtgdJ3b6I078uc7wg= -----END CERTIFICATE-----Generated at Mon May 13 13:02:38 2024 by rpki-client on console-fra.rpki-client.org