$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df.cer File: 1407f58d-27a8-42a5-b73e-1fe35081c6df.cer (raw, json) Hash identifier: W7mZhBe1ea0zCEPME3hfRBRSXEkWon9piXvBx17i69I= Subject key identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843FA818431F268258E83F53700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Nov 2023 01:45:15 +0000 Certificate not after: Wed 25 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 32586 IP: 52.129.28.0/22 IP: 52.144.27.0/24 IP: 148.66.40.0/21 IP: 168.245.238.0/23 IP: 173.45.192.0/19 IP: 192.107.144.0/24 IP: 199.102.128.0/22 IP: 204.58.15.0/24 IP: 208.103.158.0/24 IP: 2604:dc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:fa:81:84:31:f2:68:25:8e:83:f5:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 23 01:45:15 2023 GMT Not After : Feb 25 01:45:15 2026 GMT Subject: CN=1407f58d-27a8-42a5-b73e-1fe35081c6df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:11:b8:cf:cc:cc:56:93:54:b3:1e:90:b6:b3: 1b:a1:f6:5c:e3:b7:37:4c:63:a2:99:20:33:d3:b4: 5a:52:ab:05:c1:c2:ae:51:29:e7:e3:17:55:58:90: 72:2d:2c:cd:d0:f8:71:1b:38:62:b0:68:83:94:eb: f0:9f:4d:ec:b5:5f:c3:b6:9b:bd:8c:31:b2:23:07: ba:92:99:16:21:1f:5f:db:8b:3a:23:c6:a8:0b:16: 4d:ff:be:13:bb:9c:b3:a7:1a:89:3b:3d:f0:ea:3a: dd:dc:5b:e2:8d:e6:bb:7b:f4:f8:2f:12:aa:f1:16: e4:52:38:c4:73:31:bc:52:d3:32:0d:80:f8:e0:45: f6:97:f4:99:3d:b1:84:17:ed:ee:dc:d3:ce:5d:b7: 3c:ac:df:a6:ba:ba:75:7a:8e:7a:25:86:48:f3:56: 2c:46:26:46:dd:de:ac:9c:21:be:a1:c4:5a:c2:fe: 8d:01:15:ee:b1:28:3a:13:54:54:09:b8:67:4c:80: 4c:ae:e3:ff:6a:bf:aa:1d:6d:aa:3d:42:63:e7:15: e8:83:d8:f4:8c:45:13:6f:41:3e:3b:cc:8f:61:e9: 43:2b:37:67:fe:6b:ee:5e:72:5c:38:1b:08:e7:79: d1:eb:b9:07:6c:27:e2:0c:c5:6e:3d:16:a3:bc:54: 62:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:71:C2:20:1B:80:74:2D:F5:7C:81:C8:82:0D:AA:AB:E0:FD:1B:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1407f58d-27a8-42a5-b73e-1fe35081c6df/1407f58d-27a8-42a5-b73e-1fe35081c6df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 52.129.28.0/22 52.144.27.0/24 148.66.40.0/21 168.245.238.0/23 173.45.192.0/19 192.107.144.0/24 199.102.128.0/22 204.58.15.0/24 208.103.158.0/24 IPv6: 2604:dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32586 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0b:3c:de:1f:df:34:bc:34:82:e9:e2:b2:d3:b0:20:68:e0: de:34:48:de:ce:54:09:d5:26:3a:cc:2e:46:39:01:a3:6a:5a: 46:3a:5b:7d:c6:e5:f4:94:9d:20:7b:e1:82:53:95:99:9d:a9: 38:e2:f2:36:6a:74:92:f2:94:52:92:bb:a3:58:72:45:ce:79: 18:8d:3a:ba:28:9d:e4:10:c0:19:81:a3:ec:de:3b:ce:cd:34: e8:b8:1a:06:1a:33:76:10:db:44:58:e5:1e:88:d9:ce:98:c0: f8:ad:0b:f8:3a:91:bb:8e:bc:b4:fd:ed:ac:06:95:dc:84:1e: 53:24:2d:f2:33:5e:e6:33:b2:6b:a1:96:5e:b6:22:f9:98:ac: f5:05:5b:2e:80:d1:12:87:cf:8c:46:03:d2:30:1e:58:9d:32: 26:65:56:8a:56:4c:ca:49:ab:62:54:2a:e3:01:e9:36:4b:40: 60:23:b1:2e:ae:d8:51:29:7e:35:cc:16:36:f2:b7:26:76:13: 5b:a2:fe:bc:33:7a:02:f3:8f:8c:fd:d6:22:b8:1d:83:ba:42: 53:26:c3:ec:34:cb:b1:05:22:68:d0:f2:fa:5e:97:c8:c0:61: ff:d5:cb:43:cd:ad:b9:46:17:e1:39:e5:48:b2:96:a4:be:2b: 35:d5:28:48 -----BEGIN CERTIFICATE----- MIIHRzCCBi+gAwIBAgIUAQ0Mn0MoWEP6gYQx8mgljoP1NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTEyMzAxNDUxNVoXDTI2MDIyNTAxNDUxNVowLzEtMCsGA1UEAxMk MTQwN2Y1OGQtMjdhOC00MmE1LWI3M2UtMWZlMzUwODFjNmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhG4z8zMVpNUsx6QtrMbofZc47c3TGOimSAz 07RaUqsFwcKuUSnn4xdVWJByLSzN0PhxGzhisGiDlOvwn03stV/Dtpu9jDGyIwe6 kpkWIR9f24s6I8aoCxZN/74Tu5yzpxqJOz3w6jrd3Fvijea7e/T4LxKq8RbkUjjE czG8UtMyDYD44EX2l/SZPbGEF+3u3NPOXbc8rN+murp1eo56JYZI81YsRiZG3d6s nCG+ocRawv6NARXusSg6E1RUCbhnTIBMruP/ar+qHW2qPUJj5xXog9j0jEUTb0E+ O8yPYelDKzdn/mvuXnJcOBsI53nR67kHbCfiDMVuPRajvFRiIQIDAQABo4IEWTCC BFUwHQYDVR0OBBYEFKlxwiAbgHQt9XyByIINqqvg/RsgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x NDA3ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUzNTA4MWM2ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE0MDdmNThkLTI3YTgtNDJhNS1i NzNlLTFmZTM1MDgxYzZkZi8xNDA3ZjU4ZC0yN2E4LTQyYTUtYjczZS0xZmUzNTA4 MWM2ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBAI0gRwDBAA0kBsDBAOUQigDBAGo9e4DBAWtLcAD BADAa5ADBALHZoADBADMOg8DBADQZ54wDQQCAAIwBwMFACYEDcAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICf0owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdAs83h/fNLw0gunistOwIGjg3jRI 3s5UCdUmOswuRjkBo2paRjpbfcbl9JSdIHvhglOVmZ2pOOLyNmp0kvKUUpK7o1hy Rc55GI06uiid5BDAGYGj7N47zs006LgaBhozdhDbRFjlHojZzpjA+K0L+DqRu468 tP3trAaV3IQeUyQt8jNe5jOya6GWXrYi+Zis9QVbLoDREofPjEYD0jAeWJ0yJmVW ilZMykmrYlQq4wHpNktAYCOxLq7YUSl+NcwWNvK3JnYTW6L+vDN6AvOPjP3WIrgd g7pCUybD7DTLsQUiaNDy+l6XyMBh/9XLQ82tuUYX4TnlSLKWpL4rNdUoSA== -----END CERTIFICATE-----Generated at Mon May 13 01:43:45 2024 by rpki-client on console-ams.rpki-client.org