$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b.cer File: 2059c963-068e-4fba-a7d6-639c3f36a91b.cer (raw, json) Hash identifier: ieIQLDJtuMofwQCnWKbH0X0jZXWhLzMxJbyJ1Mq5i3Y= Subject key identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843EC8C1A8B0B3C883E07CF8020 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Nov 2023 01:45:15 +0000 Certificate not after: Fri 20 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 397424 IP: 204.10.191.0/24 IP: 209.126.64.0/22 IP: 216.247.236.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:ec:8c:1a:8b:0b:3c:88:3e:07:cf:80:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 18 01:45:15 2023 GMT Not After : Feb 20 01:45:15 2026 GMT Subject: CN=2059c963-068e-4fba-a7d6-639c3f36a91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:84:cc:13:12:03:f0:4f:7e:86:f5:9f:ce:73: b4:5d:21:72:99:bf:e9:66:66:ef:d9:9b:03:aa:db: 89:bf:96:64:b7:a1:b3:bd:4e:a4:b5:50:41:a5:8d: e8:9b:e3:b7:a1:74:e1:36:f3:43:60:c3:17:4e:78: ab:ed:82:5c:1a:ec:1c:da:f5:e7:5e:07:30:1d:ee: 55:c0:26:1f:bb:e0:f2:cc:26:18:da:24:9a:e8:2d: e4:6e:40:3f:2a:42:5c:db:4d:71:a5:08:83:70:98: cb:20:b0:21:56:ea:b6:ff:1e:d8:cf:db:0e:eb:9e: 37:26:11:c1:dd:aa:b2:ed:58:37:be:34:a2:b0:3b: 15:b9:17:ad:d6:44:46:bf:cf:eb:76:7b:e9:d3:56: e0:c3:ea:d8:55:25:fc:30:cf:3d:27:1e:ca:a2:9f: 11:2e:f9:26:02:f1:ff:6c:3a:e9:79:47:9c:6e:e2: 8c:83:47:1f:89:10:25:ef:5a:a7:ae:09:05:32:86: da:0b:b9:c5:22:e2:3c:63:8e:9c:c8:d7:7f:e9:65: 9f:22:22:d7:0f:3d:23:1f:0d:fb:fb:42:1e:9c:b5: 80:ca:0b:5e:2b:3d:35:4a:b8:62:ec:f2:28:f2:92: 34:fe:d4:c1:d8:3e:22:a2:96:5e:75:0d:92:1b:ac: ba:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D6:58:0B:07:2C:61:5E:BD:DE:FF:F5:21:5C:B4:74:FE:92:DB:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2059c963-068e-4fba-a7d6-639c3f36a91b/2059c963-068e-4fba-a7d6-639c3f36a91b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.10.191.0/24 209.126.64.0/22 216.247.236.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397424 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:59:81:af:95:a8:4f:02:4d:34:cc:d7:03:1b:1d:67:d8:5e: 71:df:42:52:91:97:48:33:eb:5e:b6:37:21:fa:45:3a:7e:1f: 2c:02:cd:b5:7d:e8:cf:8f:b2:92:cd:5b:69:85:b2:bd:46:66: e0:7b:24:f4:dc:b9:98:1d:3b:52:a8:c8:d3:f2:ac:2d:fc:ae: 96:a9:9b:3a:6a:20:7f:6c:c2:80:59:58:be:f8:c8:6d:db:68: ff:75:69:06:3c:e3:6f:2f:de:51:91:d4:aa:60:dc:17:27:a8: f1:e9:71:b5:92:56:76:fa:99:fa:09:76:8c:cb:ed:cb:ac:c1: 6a:d2:59:88:55:cd:d6:2b:a7:73:d0:02:98:4d:43:23:ea:95: 4a:3c:13:0a:64:fe:c3:7a:e7:1c:f5:3f:5f:5c:a7:af:aa:28: 40:71:b8:39:11:aa:03:23:f7:eb:ae:06:eb:25:14:14:31:04: 78:f4:e8:69:66:db:21:51:34:79:dc:b7:ed:17:a2:86:54:d6: a0:1b:0b:59:59:60:bc:6c:89:56:cb:99:d5:7e:ae:72:55:a5: 66:3e:93:7f:c2:d2:a6:b4:a2:51:c6:08:54:92:0b:03:9e:ec: 35:52:37:7f:ba:53:1d:b7:c1:76:80:f0:29:9a:a7:e0:1f:85: 26:4e:9a:63 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEPsjBqLCzyIPgfPgCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTExODAxNDUxNVoXDTI2MDIyMDAxNDUxNVowLzEtMCsGA1UEAxMk MjA1OWM5NjMtMDY4ZS00ZmJhLWE3ZDYtNjM5YzNmMzZhOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoTMExID8E9+hvWfznO0XSFymb/pZmbv2ZsD qtuJv5Zkt6GzvU6ktVBBpY3om+O3oXThNvNDYMMXTnir7YJcGuwc2vXnXgcwHe5V wCYfu+DyzCYY2iSa6C3kbkA/KkJc201xpQiDcJjLILAhVuq2/x7Yz9sO6543JhHB 3aqy7Vg3vjSisDsVuRet1kRGv8/rdnvp01bgw+rYVSX8MM89Jx7Kop8RLvkmAvH/ bDrpeUecbuKMg0cfiRAl71qnrgkFMobaC7nFIuI8Y46cyNd/6WWfIiLXDz0jHw37 +0IenLWAygteKz01Srhi7PIo8pI0/tTB2D4iopZedQ2SG6y6OwIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFFjWWAsHLGFevd7/9SFctHT+ktstMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y MDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2YzNmE5MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzIwNTljOTYzLTA2OGUtNGZiYS1h N2Q2LTYzOWMzZjM2YTkxYi8yMDU5Yzk2My0wNjhlLTRmYmEtYTdkNi02MzljM2Yz NmE5MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADMCr8DBALRfkADBADY9+wwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhBwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABpZga+VqE8CTTTM1wMbHWfYXnHfQlKR l0gz6162NyH6RTp+HywCzbV96M+PspLNW2mFsr1GZuB7JPTcuZgdO1KoyNPyrC38 rpapmzpqIH9swoBZWL74yG3baP91aQY8428v3lGR1Kpg3BcnqPHpcbWSVnb6mfoJ dozL7cuswWrSWYhVzdYrp3PQAphNQyPqlUo8Ewpk/sN65xz1P19cp6+qKEBxuDkR qgMj9+uuBuslFBQxBHj06Glm2yFRNHnct+0XooZU1qAbC1lZYLxsiVbLmdV+rnJV pWY+k3/C0qa0olHGCFSSCwOe7DVSN3+6Ux23wXaA8Cmap+AfhSZOmmM= -----END CERTIFICATE-----Generated at Sun May 12 15:03:51 2024 by rpki-client on console-fra.rpki-client.org