$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer File: 2aa438c9-0cbb-4364-946d-9714249a8222.cer (raw, json) Hash identifier: CB7oIoftWooFEVQaHG3djvJGqchLu60CO7saAqd5e/I= Subject key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843F4EC27C4A3255FF971AD7CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Nov 2023 01:45:15 +0000 Certificate not after: Mon 23 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 32934 AS: 63293 IP: 66.220.144.0/20 IP: 69.63.176.0/20 IP: 69.171.224.0/19 IP: 74.119.76.0/22 IP: 129.134.0.0/16 IP: 157.240.0.0/16 IP: 173.252.64.0/18 IP: 204.15.20.0/22 IP: 2620:0:1c00::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:f4:ec:27:c4:a3:25:5f:f9:71:ad:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 21 01:45:15 2023 GMT Not After : Feb 23 01:45:15 2026 GMT Subject: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:90:5a:17:1d:50:ac:ae:47:ae:1a:20:bf:7a: 7a:90:d8:26:89:94:a2:ad:6d:15:14:24:33:c5:a8: 80:eb:d8:90:f8:4d:95:d9:6e:50:a6:f9:d7:11:fd: 08:a1:88:97:0f:f2:9c:ca:56:41:ed:2c:cf:51:e0: 92:0f:03:68:49:71:6c:2c:26:9c:62:8e:3f:d0:c1: 75:5d:9c:e3:64:8c:e1:7f:cc:59:2a:8d:92:97:4f: 38:c4:29:30:cc:1b:e7:e7:9b:9c:11:b4:30:f6:3f: 6d:4d:3b:30:1d:7a:c3:82:c1:93:dc:4c:27:ab:e1: f8:4d:72:63:de:4d:f1:91:77:41:84:cc:60:2a:16: 7e:d0:52:2f:6b:83:11:ac:bc:64:cf:67:9d:30:c0: e1:c3:d3:06:9d:45:fe:70:28:31:7b:da:71:f1:47: a8:a5:99:26:6d:4f:7f:46:5a:84:77:eb:1b:09:f5: cb:8c:e6:0d:17:b3:eb:dd:22:8c:83:35:c2:9b:75: b1:9e:09:8b:6a:ab:f6:3c:16:71:13:81:0b:8b:6c: 38:a0:7f:f2:e0:04:02:78:e4:68:e2:ff:cf:b2:3e: fb:e6:c2:49:2e:53:bc:48:f9:7d:b2:4e:9a:e9:ac: 8c:a2:c6:ef:3f:54:12:0d:40:26:4f:58:87:5b:0c: c2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.220.144.0/20 69.63.176.0/20 69.171.224.0/19 74.119.76.0/22 129.134.0.0/16 157.240.0.0/16 173.252.64.0/18 204.15.20.0/22 IPv6: 2620:0:1c00::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32934 63293 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3e:c9:c9:73:f9:6e:1c:03:ca:09:57:60:04:74:a6:2b:18: 0b:15:b1:4f:e3:98:77:13:b0:9e:02:d3:1a:03:5d:4a:80:6c: f5:c7:c6:a8:ab:90:2f:e5:50:df:bf:62:22:34:08:e9:26:1e: c4:cc:7d:59:5e:5d:2f:6d:c9:bc:93:7b:78:13:7c:53:e4:34: 1f:4e:3f:3e:5a:da:49:09:62:f7:8b:28:79:a6:ff:4d:b6:60: ae:4d:29:05:71:0e:13:b1:d6:be:fa:e5:62:86:09:c1:e8:9a: c4:fc:04:b8:df:06:5f:e4:cd:8f:bb:03:19:b2:25:ef:58:d6: 97:ac:48:bb:b3:c8:7d:04:7f:f7:c5:d5:15:20:0d:a1:70:59: f5:00:6c:1e:12:48:69:67:91:cf:60:3e:07:a8:59:d1:84:4a: fd:3d:43:0f:ca:74:13:bd:c0:1b:c6:c3:16:ce:77:c3:86:78: 65:0b:b2:b0:2d:ad:e1:f4:c6:5b:d0:86:a8:ab:84:39:92:d9: a9:c9:78:3d:bf:a7:0f:c8:7b:e3:43:cb:f8:b3:70:8a:7c:17: 86:08:0d:84:c7:3b:1c:55:ea:a3:61:37:a8:de:ca:37:c9:59: 0d:0e:8d:1e:6b:12:5f:51:6e:f0:f6:25:08:0b:07:66:36:6d: 40:98:a8:4c -----BEGIN CERTIFICATE----- MIIHRjCCBi6gAwIBAgIUAQ0Mn0MoWEP07CfEoyVf+XGtfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTEyMTAxNDUxNVoXDTI2MDIyMzAxNDUxNVowLzEtMCsGA1UEAxMk MmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4MjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZBaFx1QrK5Hrhogv3p6kNgmiZSirW0VFCQz xaiA69iQ+E2V2W5QpvnXEf0IoYiXD/KcylZB7SzPUeCSDwNoSXFsLCacYo4/0MF1 XZzjZIzhf8xZKo2Sl084xCkwzBvn55ucEbQw9j9tTTswHXrDgsGT3Ewnq+H4TXJj 3k3xkXdBhMxgKhZ+0FIva4MRrLxkz2edMMDhw9MGnUX+cCgxe9px8UeopZkmbU9/ RlqEd+sbCfXLjOYNF7Pr3SKMgzXCm3WxngmLaqv2PBZxE4ELi2w4oH/y4AQCeORo 4v/Psj775sJJLlO8SPl9sk6a6ayMosbvP1QSDUAmT1iHWwzCTQIDAQABo4IEWDCC BFQwHQYDVR0OBBYEFAUj35Mb/zlCnCr+e/96SzNW6F6wMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y YWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzJhYTQzOGM5LTBjYmItNDM2NC05 NDZkLTk3MTQyNDlhODIyMi8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5 YTgyMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwVwYIKwYBBQUH AQcBAf8ESDBGMDQEAgABMC4DBARC3JADBARFP7ADBAVFq+ADBAJKd0wDAwCBhgMD AJ3wAwQGrfxAAwQCzA8UMA4EAgACMAgDBgAmIAAAHDAfBggrBgEFBQcBCAEB/wQQ MA6gDDAKAgMAgKYCAwD3PTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDPsnJc/luHAPKCVdgBHSmKxgLFbFP 45h3E7CeAtMaA11KgGz1x8aoq5Av5VDfv2IiNAjpJh7EzH1ZXl0vbcm8k3t4E3xT 5DQfTj8+WtpJCWL3iyh5pv9NtmCuTSkFcQ4Tsda++uVihgnB6JrE/AS43wZf5M2P uwMZsiXvWNaXrEi7s8h9BH/3xdUVIA2hcFn1AGweEkhpZ5HPYD4HqFnRhEr9PUMP ynQTvcAbxsMWznfDhnhlC7KwLa3h9MZb0Iaoq4Q5ktmpyXg9v6cPyHvjQ8v4s3CK fBeGCA2ExzscVeqjYTeo3so3yVkNDo0eaxJfUW7w9iUICwdmNm1AmKhM -----END CERTIFICATE-----Generated at Mon May 13 02:02:42 2024 by rpki-client on console-fra.rpki-client.org