$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer File: 3d270043-5069-4b58-b6cb-4496aa37669d.cer (raw, json) Hash identifier: 7oc1ilzedVuIpOit2Ws67uQagIeWdOSy4yR4HIapU7w= Subject key identifier: CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285841E48354923E9F11EBE85FF500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Thu 07 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 14079 IP: 207.2.112.0/22 IP: 2602:fbd4::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:54:92:3e:9f:11:eb:e8:5f:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 7 19:06:39 2025 GMT Subject: CN=3d270043-5069-4b58-b6cb-4496aa37669d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:78:77:f2:ba:8e:6b:ae:4f:87:e6:5d:2e:a1: b9:e0:17:83:c2:eb:23:15:bc:1e:26:79:28:b1:62: f6:9c:c6:bb:c4:02:b9:8a:bd:0b:d6:44:e2:d3:2d: 69:d3:dd:38:01:ba:c1:80:42:98:a4:97:ce:ed:d1: 0e:11:e2:e1:60:05:fe:96:d3:91:02:aa:23:a5:1e: 6c:d9:74:06:9d:8c:a2:9f:13:2a:3f:cc:af:12:2b: 85:89:20:f0:91:2e:d9:44:73:b8:56:d2:39:5b:67: 54:88:de:f9:6d:42:78:d6:15:af:34:29:90:2f:29: f1:ef:ca:93:ee:ed:50:8d:0b:ef:d9:b4:ef:ca:4d: 65:cd:1e:ba:0e:56:6a:24:e1:b0:8d:bb:94:e3:d5: fd:f9:d8:01:63:6a:d7:8a:57:96:c5:82:e0:b2:93: a9:b4:4e:b4:85:f8:38:fa:5c:f0:3f:ed:e3:1c:46: 35:82:84:5f:85:fe:a6:94:80:21:44:b4:5e:9e:75: 09:58:d0:d0:b4:94:07:12:d9:52:06:90:d7:29:5b: 75:03:c9:c1:fb:7d:8f:31:5b:f4:e2:ec:03:9c:e7: a6:92:7f:cd:0a:fb:68:01:7b:ea:68:07:9c:0b:ec: 9f:e4:63:45:46:70:91:3b:d8:63:1f:a6:4f:6c:54: ed:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 207.2.112.0/22 IPv6: 2602:fbd4::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14079 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e0:a9:2b:fa:a3:69:b5:73:86:79:03:53:b8:13:ec:f8:35: 2a:43:38:42:38:89:6b:ef:fe:5c:d0:dd:24:db:16:6e:9a:be: d8:30:52:8d:59:1a:0f:80:8c:08:a5:53:82:7e:6f:00:50:ce: 4d:e0:a5:01:30:ba:bb:76:ab:34:85:90:dd:76:fa:0c:c8:24: 7c:38:4d:bf:90:ab:88:02:89:4a:e0:a4:62:f0:b0:ac:5a:fc: 3d:99:42:20:34:b0:d4:3a:29:ee:89:f2:75:e6:7c:20:aa:a8: b4:a5:5a:51:00:a2:62:34:0c:19:89:79:c0:06:d3:9b:51:01: f0:5d:30:d3:49:92:78:e5:bc:68:db:98:27:9e:ae:9d:51:7d: 34:08:4f:50:85:41:ad:8f:9e:9b:de:e8:05:d8:63:69:98:a7: 4b:73:46:31:36:2f:dd:cb:48:ab:8c:ac:38:d3:ea:08:3a:b1: a3:8f:65:88:80:8b:f6:90:8f:f8:da:aa:06:5c:f0:21:a0:11: 4e:18:f5:97:91:26:5a:0f:bc:4c:fb:91:4a:a3:c4:c5:40:11: b4:eb:0f:70:17:67:4b:a2:57:39:0a:da:64:12:87:93:af:11: 85:41:5d:5f:f6:f7:86:95:c9:f2:17:26:fb:66:d0:a7:da:0d: d5:cd:b6:1f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEHkg1SSPp8R6+hf9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwNzE5MDYzOVowLzEtMCsGA1UEAxMk M2QyNzAwNDMtNTA2OS00YjU4LWI2Y2ItNDQ5NmFhMzc2NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnh38rqOa65Ph+ZdLqG54BeDwusjFbweJnko sWL2nMa7xAK5ir0L1kTi0y1p0904AbrBgEKYpJfO7dEOEeLhYAX+ltORAqojpR5s 2XQGnYyinxMqP8yvEiuFiSDwkS7ZRHO4VtI5W2dUiN75bUJ41hWvNCmQLynx78qT 7u1QjQvv2bTvyk1lzR66DlZqJOGwjbuU49X9+dgBY2rXileWxYLgspOptE60hfg4 +lzwP+3jHEY1goRfhf6mlIAhRLRennUJWNDQtJQHEtlSBpDXKVt1A8nB+32PMVv0 4uwDnOemkn/NCvtoAXvqaAecC+yf5GNFRnCRO9hjH6ZPbFTtpwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMtf9BqgLfoeoZm2KTcJFzoOzE/JMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z ZDI3MDA0My01MDY5LTRiNTgtYjZjYi00NDk2YWEzNzY2OWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzNkMjcwMDQzLTUwNjktNGI1OC1i NmNiLTQ0OTZhYTM3NjY5ZC8zZDI3MDA0My01MDY5LTRiNTgtYjZjYi00NDk2YWEz NzY2OWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALPAnAwDgQCAAIwCAMGBCYC+9QAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjb/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGLgqSv6o2m1c4Z5A1O4E+z4NSpD OEI4iWvv/lzQ3STbFm6avtgwUo1ZGg+AjAilU4J+bwBQzk3gpQEwurt2qzSFkN12 +gzIJHw4Tb+Qq4gCiUrgpGLwsKxa/D2ZQiA0sNQ6Ke6J8nXmfCCqqLSlWlEAomI0 DBmJecAG05tRAfBdMNNJknjlvGjbmCeerp1RfTQIT1CFQa2Pnpve6AXYY2mYp0tz RjE2L93LSKuMrDjT6gg6saOPZYiAi/aQj/jaqgZc8CGgEU4Y9ZeRJloPvEz7kUqj xMVAEbTrD3AXZ0uiVzkK2mQSh5OvEYVBXV/294aVyfIXJvtm0KfaDdXNth8= -----END CERTIFICATE-----Generated at Mon May 13 17:10:15 2024 by rpki-client on console-ams.rpki-client.org