$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer File: 1bc71531-d2c0-473c-ad3a-63f1af5e6981.cer (raw, json) Hash identifier: xQMiRIcupbaX4OxHeuoxK+TWXQL6cnzlWl9ddeAOi08= Subject key identifier: FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858456710D1EFB7B984C6776E3A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Apr 2024 15:48:14 +0000 Certificate not after: Thu 11 Sep 2025 00:45:17 +0000 Subordinate resources: IP: 74.116.156.0/22 IP: 209.142.84.0/22 IP: 209.209.116.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:67:10:d1:ef:b7:b9:84:c6:77:6e:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 1 15:48:14 2024 GMT Not After : Sep 11 00:45:17 2025 GMT Subject: CN=1bc71531-d2c0-473c-ad3a-63f1af5e6981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:d5:df:24:9e:11:13:b8:ab:e0:e9:36:98: 1e:15:d8:b1:95:60:b3:26:27:d9:db:7b:76:7c:be: bf:dc:4c:df:49:80:33:1f:30:1c:37:00:31:48:a2: 2c:b2:2a:97:a1:e6:1f:19:a0:27:b5:83:d8:c7:95: 95:9e:b0:30:0c:cd:78:58:1f:87:74:a3:42:d8:fc: 74:56:6b:0c:a4:e3:c5:4f:f8:3b:52:e3:b9:0a:08: db:74:41:c8:40:04:e7:ae:b0:99:c0:a3:61:f1:77: 68:61:97:50:c1:68:9e:7e:75:41:9a:ce:b2:bd:6e: a4:16:dc:dc:4e:f0:e0:5c:47:55:40:7b:5e:b0:0c: 7d:e2:e2:1c:55:46:72:9e:69:8f:01:25:61:ea:26: 55:ea:f2:00:c2:d7:d6:e3:93:2f:f7:ef:6a:28:64: 71:2a:ce:bb:e3:3a:d9:6c:ed:98:49:32:b0:60:21: 48:3e:aa:28:09:22:ed:3a:3b:ba:12:99:b6:b0:84: 0c:c2:a4:00:59:e0:29:27:e7:7c:fd:02:00:d4:00: 39:b2:d6:c4:a2:eb:7d:01:2a:75:0e:01:80:89:5e: 5c:63:1a:60:79:46:29:19:f3:7a:d4:95:8d:84:46: 1e:29:ba:72:36:2d:9c:37:c4:96:5d:c5:c2:12:00: c2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:63:C0:80:49:96:F9:75:B7:9D:2B:BC:5A:76:94:F7:00:04:E8:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1bc71531-d2c0-473c-ad3a-63f1af5e6981/1bc71531-d2c0-473c-ad3a-63f1af5e6981.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 74.116.156.0/22 209.142.84.0/22 209.209.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:4c:1f:d7:c9:60:df:b1:35:4a:ba:67:63:8e:56:9b:66:84: 82:4a:f9:3a:bb:b7:85:7f:9e:ff:e1:da:b5:e6:66:b2:a6:04: a4:70:20:c0:d5:7a:a4:5f:40:bc:1e:5b:6f:5c:f4:3a:74:7f: 7c:a8:03:12:1b:54:06:3c:11:ff:a3:00:b3:9b:ba:3b:f3:99: 52:12:53:1e:c2:ea:16:b6:25:b4:97:2f:1b:cf:db:1d:58:00: cf:39:e6:2a:fd:8e:0a:2e:8e:81:bc:5b:25:e3:9c:20:81:0f: b9:9b:1b:0d:ce:e4:1e:41:39:e9:19:80:fb:4e:ad:8c:c2:a6: bd:49:72:09:1f:73:b9:7d:4d:4d:59:e3:b5:91:ff:8c:bf:69: b2:5b:47:f4:51:fd:bc:b4:68:d3:bf:e9:d6:44:82:f0:3e:5d: dc:fb:04:2e:f2:b6:70:23:66:f8:eb:1e:09:25:96:36:a6:b7: aa:0e:ef:6b:7f:02:51:6b:86:de:2f:ec:de:25:00:93:22:98: c6:db:b7:a1:28:ad:c0:5a:16:44:aa:9d:de:24:02:39:9f:63: e1:a9:5f:16:06:f8:90:c7:d9:0b:aa:11:2e:b0:a0:18:56:a4: 32:a8:27:15:5e:3a:e9:26:4d:a5:ca:1e:cd:d9:1f:c0:f8:15: b7:f5:ae:d3 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEVnENHvt7mExnduOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDQwMTE1NDgxNFoXDTI1MDkxMTAwNDUxN1owLzEtMCsGA1UEAxMk MWJjNzE1MzEtZDJjMC00NzNjLWFkM2EtNjNmMWFmNWU2OTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxLV3ySeERO4q+DpNpgeFdixlWCzJifZ23t2 fL6/3EzfSYAzHzAcNwAxSKIssiqXoeYfGaAntYPYx5WVnrAwDM14WB+HdKNC2Px0 VmsMpOPFT/g7UuO5CgjbdEHIQATnrrCZwKNh8XdoYZdQwWiefnVBms6yvW6kFtzc TvDgXEdVQHtesAx94uIcVUZynmmPASVh6iZV6vIAwtfW45Mv9+9qKGRxKs674zrZ bO2YSTKwYCFIPqooCSLtOju6Epm2sIQMwqQAWeApJ+d8/QIA1AA5stbEout9ASp1 DgGAiV5cYxpgeUYpGfN61JWNhEYeKbpyNi2cN8SWXcXCEgDC9wIDAQABo4IECzCC BAcwHQYDVR0OBBYEFP1jwIBJlvl1t50rvFp2lPcABOhsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x YmM3MTUzMS1kMmMwLTQ3M2MtYWQzYS02M2YxYWY1ZTY5ODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFiYzcxNTMxLWQyYzAtNDczYy1h ZDNhLTYzZjFhZjVlNjk4MS8xYmM3MTUzMS1kMmMwLTQ3M2MtYWQzYS02M2YxYWY1 ZTY5ODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJKdJwDBALRjlQDBALR0XQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcEwf 18lg37E1SrpnY45Wm2aEgkr5Oru3hX+e/+HateZmsqYEpHAgwNV6pF9AvB5bb1z0 OnR/fKgDEhtUBjwR/6MAs5u6O/OZUhJTHsLqFrYltJcvG8/bHVgAzznmKv2OCi6O gbxbJeOcIIEPuZsbDc7kHkE56RmA+06tjMKmvUlyCR9zuX1NTVnjtZH/jL9psltH 9FH9vLRo07/p1kSC8D5d3PsELvK2cCNm+OseCSWWNqa3qg7va38CUWuG3i/s3iUA kyKYxtu3oSitwFoWRKqd3iQCOZ9j4alfFgb4kMfZC6oRLrCgGFakMqgnFV466SZN pcoezdkfwPgVt/Wu0w== -----END CERTIFICATE-----Generated at Mon May 13 01:43:45 2024 by rpki-client on console-ams.rpki-client.org