$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer File: 3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer (raw, json) Hash identifier: GZIF27xlf7z4PRy+UN3eIghZU9OV2tO2TPBh4/gyPNY= Subject key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844D1783C7DDD73C71E9933A520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Feb 2024 01:45:20 +0000 Certificate not after: Wed 13 May 2026 00:45:20 +0000 Subordinate resources: IP: 64.33.224.0/19 IP: 66.115.192.0/18 IP: 66.128.160.0/19 IP: 66.231.0.0/19 IP: 208.53.192.0/18 IP: 209.151.176.0/20 IP: 216.106.192.0/18 IP: 216.249.192.0/18 IP: 2607:fc00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:d1:78:3c:7d:dd:73:c7:1e:99:33:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 8 01:45:20 2024 GMT Not After : May 13 00:45:20 2026 GMT Subject: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:3c:92:20:c2:8e:df:7e:99:83:8c:c0:7c: db:17:a3:2d:00:0f:4b:09:02:b7:0c:aa:e8:20:c3: 31:6d:e4:b4:28:a4:3a:89:8f:29:ec:7f:9e:8a:8c: 63:3c:a3:3d:8e:3a:4a:9b:ce:0c:4f:25:45:27:fd: 30:4f:d3:2f:57:e0:7e:3f:44:92:8a:e6:18:31:09: 46:5f:21:8f:be:b6:50:4f:d2:62:c7:ee:cb:24:43: 46:c4:46:c2:46:65:f5:0f:43:d1:76:8b:6f:0c:a6: 40:53:36:51:54:46:81:8e:6d:e1:fe:9a:65:37:79: e9:d2:15:64:60:d3:15:13:a3:f0:92:21:dc:53:ca: e5:0a:01:aa:7c:97:62:a0:ac:62:98:31:e0:74:a2: 27:ae:66:c6:d9:29:84:98:74:5e:b8:45:51:c1:28: fd:8d:e0:90:74:1a:11:71:1a:ea:48:b5:dd:a5:79: 7f:04:8f:51:b2:d7:a7:36:4d:86:f8:cc:9d:c6:96: 18:ee:6c:f5:d0:68:d0:63:d6:ff:14:e2:ad:0a:87: 81:e1:ec:7c:7b:a9:06:51:d2:a4:5b:13:61:95:c7: 89:a3:fb:d7:d6:aa:ed:3f:18:29:1e:3b:9f:5e:11: db:b3:4f:e5:02:f5:e8:43:a1:8f:6d:12:5c:9a:26: 0c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.33.224.0/19 66.115.192.0/18 66.128.160.0/19 66.231.0.0/19 208.53.192.0/18 209.151.176.0/20 216.106.192.0/18 216.249.192.0/18 IPv6: 2607:fc00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:01:6a:e7:ad:4f:a4:3c:65:c8:29:76:83:ce:c2:66:04:dc: bf:95:0a:9e:97:68:81:81:4a:7e:fb:bc:00:9b:8a:78:5f:d0: 0c:fd:99:61:b4:9a:f0:84:4f:6d:e7:18:23:8a:e7:f9:72:0a: 6f:8d:ef:94:4b:4c:bc:14:a4:56:8c:9e:d9:db:cc:68:b9:91: 1d:ae:fe:ef:0c:0d:8d:64:b5:73:9b:7f:12:96:e9:10:2d:22: 49:14:c3:6b:0d:6a:ce:0d:2e:6a:13:89:2a:27:a8:c9:08:e4: 84:60:59:4a:83:05:f8:37:dd:9b:50:0e:15:4a:a0:29:bc:3b: 49:62:e5:ce:1b:4f:67:72:f6:b4:f5:8f:f2:e7:7f:e2:86:cc: fb:77:cd:12:88:ad:5e:fc:53:4c:09:f1:ca:fa:a3:9c:d5:64: de:0f:3f:a2:15:4f:0d:11:e9:5d:99:08:0e:e5:00:9a:c6:54: 02:6d:dc:bb:eb:6d:ff:77:41:9c:6c:e5:66:17:56:11:0a:2f: d9:7b:21:5d:24:60:f8:ad:90:50:aa:0b:19:dc:84:bc:20:38: 0c:bd:16:4a:34:2c:22:4e:37:db:f1:75:73:c8:72:7b:fe:eb: 9d:7b:4a:91:11:59:01:ec:00:8b:46:44:d4:df:d9:89:1d:50: 59:a0:3d:82 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWETReDx93XPHHpkzpSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDIwODAxNDUyMFoXDTI2MDUxMzAwNDUyMFowLzEtMCsGA1UEAxMk M2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GE8kiDCjt9+mYOMwHzbF6MtAA9LCQK3DKro IMMxbeS0KKQ6iY8p7H+eioxjPKM9jjpKm84MTyVFJ/0wT9MvV+B+P0SSiuYYMQlG XyGPvrZQT9Jix+7LJENGxEbCRmX1D0PRdotvDKZAUzZRVEaBjm3h/pplN3np0hVk YNMVE6PwkiHcU8rlCgGqfJdioKximDHgdKInrmbG2SmEmHReuEVRwSj9jeCQdBoR cRrqSLXdpXl/BI9RstenNk2G+MydxpYY7mz10GjQY9b/FOKtCoeB4ex8e6kGUdKk WxNhlceJo/vX1qrtPxgpHjufXhHbs0/lAvXoQ6GPbRJcmiYMlwIDAQABo4IEODCC BDQwHQYDVR0OBBYEFNzJCDZV525bpbBnoeZg0yOpYUQgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z ZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzNkN2ZiMWMyLWYzODctNDgyZC1h NmZlLWRjNWE4NDRmODVlZi8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0 Zjg1ZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAVAIeADBAZCc8ADBAVCgKADBAVC5wADBAbQNcAD BATRl7ADBAbYasADBAbY+cAwDQQCAAIwBwMFACYH/AAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcAFq561P pDxlyCl2g87CZgTcv5UKnpdogYFKfvu8AJuKeF/QDP2ZYbSa8IRPbecYI4rn+XIK b43vlEtMvBSkVoye2dvMaLmRHa7+7wwNjWS1c5t/EpbpEC0iSRTDaw1qzg0uahOJ KieoyQjkhGBZSoMF+Dfdm1AOFUqgKbw7SWLlzhtPZ3L2tPWP8ud/4obM+3fNEoit XvxTTAnxyvqjnNVk3g8/ohVPDRHpXZkIDuUAmsZUAm3cu+tt/3dBnGzlZhdWEQov 2XshXSRg+K2QUKoLGdyEvCA4DL0WSjQsIk432/F1c8hye/7rnXtKkRFZAewAi0ZE 1N/ZiR1QWaA9gg== -----END CERTIFICATE-----Generated at Sun May 12 15:24:30 2024 by rpki-client on console-ams.rpki-client.org