$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer File: 2d9c8c49-35fe-42fb-a908-c07b97255b4a.cer (raw, json) Hash identifier: F2tjoGrcOIVeW9XxyqYUjPIqKqjbd+CrNDFxrtLbeeM= Subject key identifier: DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858438D83120C79364A027B6ACC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Oct 2023 00:45:16 +0000 Certificate not after: Sat 17 Jan 2026 01:45:16 +0000 Subordinate resources: AS: 177 -- 180 IP: 141.211.0.0 -- 141.213.255.255 IP: 141.216.0.0/16 IP: 192.12.80.0/24 IP: 192.231.253.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:8d:83:12:0c:79:36:4a:02:7b:6a:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 15 00:45:16 2023 GMT Not After : Jan 17 01:45:16 2026 GMT Subject: CN=2d9c8c49-35fe-42fb-a908-c07b97255b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:eb:25:35:94:b3:b1:a5:e1:23:d5:cc:49:69: 5a:bc:66:65:90:36:85:6e:77:a1:f0:65:d1:78:70: f0:f7:09:55:f2:31:9c:84:81:37:27:01:c4:ee:0b: 3f:c1:3a:44:9c:cf:3c:0c:11:50:7a:b4:dd:18:3d: 60:e4:11:3b:f0:80:32:47:83:56:04:23:09:db:fd: 8b:56:d8:5b:d8:ce:14:3f:7f:84:b8:2d:dd:a6:12: 51:f5:94:88:41:77:20:8d:39:40:4f:e8:7e:5b:02: 40:09:aa:d0:f0:68:cb:55:a0:38:4a:78:26:9f:40: 6f:c7:d9:88:89:80:36:6d:79:56:7e:5a:01:82:c4: 39:ad:98:25:6a:8e:6a:fd:5e:eb:77:54:38:b4:00: b0:5e:68:83:09:b4:72:e5:5e:48:60:a8:63:89:3c: 49:28:e4:04:68:a6:1d:40:e3:6e:c0:28:55:32:be: a2:cb:00:ec:d4:c4:67:53:55:f7:a5:59:59:c0:1a: 75:23:37:39:18:63:ce:1b:ae:25:5f:3a:65:7f:6c: 49:15:1d:c7:3c:c6:12:46:be:93:ee:a6:26:77:d9: 6c:18:bb:d3:95:8d:5c:08:8f:7e:59:49:b3:30:19: 2a:4a:c2:83:e3:22:94:4d:ec:f4:fc:67:81:24:01: 07:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:AA:75:38:5A:90:C6:36:0B:ED:CA:72:F4:F4:17:4A:0E:93:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2d9c8c49-35fe-42fb-a908-c07b97255b4a/2d9c8c49-35fe-42fb-a908-c07b97255b4a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 141.211.0.0-141.213.255.255 141.216.0.0/16 192.12.80.0/24 192.231.253.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 177-180 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:e0:bf:69:02:b1:67:32:ce:9a:18:85:b3:9b:fa:03:54:35: 89:48:26:15:11:2c:b2:16:d3:ca:b2:e8:14:fd:cf:2d:9e:72: 87:7d:a0:32:17:c0:79:c0:bb:bb:f5:db:19:8e:1f:47:8f:b0: 58:11:c0:f7:ce:1e:e4:1e:d1:15:03:3f:e6:8b:c2:cd:13:1b: 67:ce:df:30:49:1e:42:cf:8d:af:14:16:f2:81:02:6e:c6:28: 21:ab:5e:73:ee:ea:61:ff:8d:75:3c:b2:9d:6e:0a:d7:10:73: 10:55:cc:b4:88:cc:44:85:3a:85:72:3b:a5:62:29:93:df:ab: 70:40:a3:73:e1:fe:5c:09:a0:34:92:2c:01:fe:75:8d:0f:43: 0f:b4:a6:32:2a:73:f4:49:07:ff:57:5d:b7:10:c2:bc:5d:79: b6:d4:a6:d3:a8:2e:a2:59:4c:49:ee:ff:93:ff:8b:cd:ce:eb: dc:e3:4a:a9:0c:55:46:ae:07:f0:cb:95:de:c5:23:fd:0f:f6: d5:e9:84:a4:f7:d9:49:8d:c2:eb:65:c9:f7:f1:85:71:23:44: 1f:b6:7a:f2:2b:88:9e:58:69:f6:ae:aa:8a:f4:31:52:a3:b3: 25:5e:d2:7d:8f:4f:30:9d:76:ec:65:88:59:36:9a:d9:b4:80: 17:6f:ac:49 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEONgxIMeTZKAntqzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTAxNTAwNDUxNloXDTI2MDExNzAxNDUxNlowLzEtMCsGA1UEAxMk MmQ5YzhjNDktMzVmZS00MmZiLWE5MDgtYzA3Yjk3MjU1YjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuslNZSzsaXhI9XMSWlavGZlkDaFbneh8GXR eHDw9wlV8jGchIE3JwHE7gs/wTpEnM88DBFQerTdGD1g5BE78IAyR4NWBCMJ2/2L Vthb2M4UP3+EuC3dphJR9ZSIQXcgjTlAT+h+WwJACarQ8GjLVaA4Sngmn0Bvx9mI iYA2bXlWfloBgsQ5rZglao5q/V7rd1Q4tACwXmiDCbRy5V5IYKhjiTxJKOQEaKYd QONuwChVMr6iywDs1MRnU1X3pVlZwBp1Izc5GGPOG64lXzplf2xJFR3HPMYSRr6T 7qYmd9lsGLvTlY1cCI9+WUmzMBkqSsKD4yKUTez0/GeBJAEHwQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFN69qnU4WpDGNgvtynL09BdKDpM+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y ZDljOGM0OS0zNWZlLTQyZmItYTkwOC1jMDdiOTcyNTViNGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzJkOWM4YzQ5LTM1ZmUtNDJmYi1h OTA4LWMwN2I5NzI1NWI0YS8yZDljOGM0OS0zNWZlLTQyZmItYTkwOC1jMDdiOTcy NTViNGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMCMEAgABMB0wCgMDAI3TAwMBjdQDAwCN2AMEAMAMUAMEAMDn/TAf BggrBgEFBQcBCAEB/wQQMA6gDDAKMAgCAgCxAgIAtDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAU4L9pArFn Ms6aGIWzm/oDVDWJSCYVESyyFtPKsugU/c8tnnKHfaAyF8B5wLu79dsZjh9Hj7BY EcD3zh7kHtEVAz/mi8LNExtnzt8wSR5Cz42vFBbygQJuxighq15z7uph/411PLKd bgrXEHMQVcy0iMxEhTqFcjulYimT36twQKNz4f5cCaA0kiwB/nWND0MPtKYyKnP0 SQf/V123EMK8XXm21KbTqC6iWUxJ7v+T/4vNzuvc40qpDFVGrgfwy5XexSP9D/bV 6YSk99lJjcLrZcn38YVxI0QftnryK4ieWGn2rqqK9DFSo7MlXtJ9j08wnXbsZYhZ NprZtIAXb6xJ -----END CERTIFICATE-----Generated at Mon May 13 02:02:42 2024 by rpki-client on console-fra.rpki-client.org