$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95.cer File: 35be4068-f7e5-404b-9693-dcff4b2e8f95.cer (raw, json) Hash identifier: jVWN14XM1/z0tPAh3sYZj1/4P046xnXOG/4bmUI/Omc= Subject key identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858434A82B513EA3DF09B1109FCE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 21 Sep 2023 00:45:22 +0000 Certificate not after: Wed 24 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 17019 IP: 104.254.24.0/21 IP: 199.91.172.0/22 IP: 199.193.152.0/22 IP: 2604:2d00::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:4a:82:b5:13:ea:3d:f0:9b:11:09:fc:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 21 00:45:22 2023 GMT Not After : Dec 24 01:45:22 2025 GMT Subject: CN=35be4068-f7e5-404b-9693-dcff4b2e8f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:00:6a:c0:32:6e:e0:21:83:4e:e8:74:da:9a: 0f:87:00:c9:53:1b:e3:77:61:cb:fd:5a:84:ab:e4: ae:7a:6e:58:b2:93:93:56:1d:14:0c:b9:13:9b:11: 19:27:c2:77:9d:4a:e6:a1:4b:26:48:3d:6d:06:9d: 68:fc:e1:36:9e:7a:61:08:9c:69:cf:64:4b:a9:67: e9:0c:b0:84:fe:6e:d3:29:91:6a:1c:bc:be:5f:f0: b5:0e:ed:64:ef:3e:ba:52:88:bc:23:f8:dc:d0:cf: f4:77:85:b1:67:42:52:9e:e3:c0:9d:aa:a8:66:21: 04:0b:91:12:15:d5:ce:e5:fe:a5:3b:48:9d:03:56: 14:4a:8d:ba:56:68:d1:47:ac:b9:43:72:73:00:74: b1:ee:4b:96:ab:6b:93:57:9c:94:ac:4f:3f:70:10: de:db:03:a0:4a:2d:1a:b3:69:f0:29:bd:85:ed:ec: 1a:53:33:98:bf:9e:96:ff:dd:e7:bd:8a:11:39:56: 78:50:f0:ba:5d:95:9e:e0:1c:47:f0:e8:ab:bf:e9: 56:0d:61:29:66:1f:f5:dc:cc:5e:bc:c2:61:76:a2: 3a:44:b7:f1:e8:73:96:a8:5d:9c:79:47:2a:02:94: f5:50:f3:45:2b:9c:fe:e2:9e:d6:e7:f1:1e:05:bd: b1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:9B:4D:25:4A:8B:FB:52:4F:3B:6E:96:D2:D8:02:62:D1:A9:07:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35be4068-f7e5-404b-9693-dcff4b2e8f95/35be4068-f7e5-404b-9693-dcff4b2e8f95.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.254.24.0/21 199.91.172.0/22 199.193.152.0/22 IPv6: 2604:2d00::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17019 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:ad:92:1c:7b:1b:99:ac:40:2f:36:af:e1:2e:9e:2b:8f:f7: fa:d4:bc:4f:ae:0e:de:3b:2b:e0:ce:19:33:1d:03:23:1a:30: fa:3c:5c:66:6a:31:9b:91:0f:a9:e3:71:79:b8:95:98:68:af: 9a:a2:8b:71:a6:24:04:3a:c7:52:c2:73:1a:f3:0f:f9:f9:17: d9:90:42:f8:e4:eb:73:00:f4:ef:b9:ea:5c:50:b5:00:15:a0: a1:cf:d2:b6:9d:2e:1d:cf:29:0f:19:06:71:ba:fc:08:1f:89: 23:02:7c:0e:8c:5c:5d:a6:67:8c:ba:bf:6a:d0:c5:49:83:62: a6:ad:00:07:ef:95:3d:40:9e:8f:03:c0:d9:8a:d1:13:b6:1b: 09:03:66:17:c5:ee:2d:fb:fa:56:ec:a9:62:46:b6:4e:42:a7: 48:01:bd:12:57:d0:e7:4f:56:74:d2:39:f6:26:bf:39:d3:be: aa:3e:3c:7f:48:81:a4:9e:ea:77:ac:19:bc:91:b2:36:0b:64: 70:6d:d0:d9:a4:42:db:e4:a0:8f:92:f6:74:36:8b:49:df:be: c9:ee:ea:43:ad:6e:4e:de:9b:ac:22:70:f8:27:70:ff:97:87: f2:fa:1a:6b:40:78:ab:22:9e:13:88:bc:ba:f2:5a:f7:31:2d: b9:93:4a:cc -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWENKgrUT6j3wmxEJ/OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDkyMTAwNDUyMloXDTI1MTIyNDAxNDUyMlowLzEtMCsGA1UEAxMk MzViZTQwNjgtZjdlNS00MDRiLTk2OTMtZGNmZjRiMmU4Zjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxABqwDJu4CGDTuh02poPhwDJUxvjd2HL/VqE q+Suem5YspOTVh0UDLkTmxEZJ8J3nUrmoUsmSD1tBp1o/OE2nnphCJxpz2RLqWfp DLCE/m7TKZFqHLy+X/C1Du1k7z66Uoi8I/jc0M/0d4WxZ0JSnuPAnaqoZiEEC5ES FdXO5f6lO0idA1YUSo26VmjRR6y5Q3JzAHSx7kuWq2uTV5yUrE8/cBDe2wOgSi0a s2nwKb2F7ewaUzOYv56W/93nvYoROVZ4UPC6XZWe4BxH8Oirv+lWDWEpZh/13Mxe vMJhdqI6RLfx6HOWqF2ceUcqApT1UPNFK5z+4p7W5/EeBb2xnQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFMebTSVKi/tSTztultLYAmLRqQfPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z NWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIyZThmOTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM1YmU0MDY4LWY3ZTUtNDA0Yi05 NjkzLWRjZmY0YjJlOGY5NS8zNWJlNDA2OC1mN2U1LTQwNGItOTY5My1kY2ZmNGIy ZThmOTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBANo/hgDBALHW6wDBALHwZgwDgQCAAIwCAMGBCYE LQAAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAkJ7MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIetkhx7G5ms QC82r+EuniuP9/rUvE+uDt47K+DOGTMdAyMaMPo8XGZqMZuRD6njcXm4lZhor5qi i3GmJAQ6x1LCcxrzD/n5F9mQQvjk63MA9O+56lxQtQAVoKHP0radLh3PKQ8ZBnG6 /AgfiSMCfA6MXF2mZ4y6v2rQxUmDYqatAAfvlT1Ano8DwNmK0RO2GwkDZhfF7i37 +lbsqWJGtk5Cp0gBvRJX0OdPVnTSOfYmvznTvqo+PH9IgaSe6nesGbyRsjYLZHBt 0NmkQtvkoI+S9nQ2i0nfvsnu6kOtbk7em6wicPgncP+Xh/L6GmtAeKsinhOIvLry WvcxLbmTSsw= -----END CERTIFICATE-----Generated at Sun May 12 15:03:52 2024 by rpki-client on console-fra.rpki-client.org