$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer File: 43ac5ede-1d27-41a5-932c-21832f3ef95c.cer (raw, json) Hash identifier: 7mZronc5w1cNLgA8/DYtoF5dwOJaG7xuzAg2JUWwFmw= Subject key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858451A0E0564F1229069ADEAF940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Mar 2024 01:45:20 +0000 Certificate not after: Mon 08 Jun 2026 00:45:20 +0000 Subordinate resources: AS: 11186 AS: 11734 AS: 54622 IP: 104.151.136.0/21 IP: 104.153.192.0/22 IP: 199.19.208.0/22 IP: 199.189.64.0/22 IP: 208.74.28.0/22 IP: 208.74.48.0/22 IP: 208.82.204.0/22 IP: 208.91.48.0/22 IP: 209.134.48.0/20 IP: 2607:f148::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:1a:0e:05:64:f1:22:90:69:ad:ea:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 5 01:45:20 2024 GMT Not After : Jun 8 00:45:20 2026 GMT Subject: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:f3:35:38:ed:13:37:29:cb:6b:4f:45:35: f4:cd:21:19:8e:44:b7:9e:cb:7f:c7:8d:0c:1c:83: 38:14:4e:59:b6:cb:15:cd:55:83:8e:af:b7:fc:16: b4:fe:f1:23:ea:a4:e5:c9:6e:57:22:4f:69:77:ea: fa:06:fa:32:8b:cd:6b:44:96:53:a9:54:b5:39:a4: 83:98:d4:bc:95:8b:c5:d6:85:43:58:f5:d9:17:ba: 25:9a:df:09:45:88:97:8c:e8:f0:18:22:ab:e8:7a: 4b:4d:e8:98:a1:bd:b9:1c:6e:42:89:03:11:50:ed: 34:2b:d5:6e:c7:9b:67:1e:bf:cc:f0:ca:69:5d:cf: c0:ec:56:91:f2:ac:f3:e1:01:a4:43:36:d9:47:bb: 47:a9:19:b9:29:c0:b5:c9:90:c4:31:1f:5f:53:3b: 06:27:89:e7:17:9a:55:f2:0c:1c:02:f8:84:fb:83: 97:00:79:78:9e:fe:81:90:26:70:f4:40:f7:28:a3: 38:10:45:f4:68:03:7e:31:7e:b8:48:4d:e2:c8:a3: 36:61:34:cc:81:c7:5f:14:b7:4f:00:3c:61:06:23: 95:54:13:4e:7a:9f:6f:7c:1e:a5:ce:6b:b0:74:10: 49:20:23:b5:02:68:14:98:de:02:ba:51:48:fd:f6: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 104.151.136.0/21 104.153.192.0/22 199.19.208.0/22 199.189.64.0/22 208.74.28.0/22 208.74.48.0/22 208.82.204.0/22 208.91.48.0/22 209.134.48.0/20 IPv6: 2607:f148::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11186 11734 54622 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:54:84:b1:4d:76:1a:ff:e6:01:c9:04:ff:e6:4f:99:9b:13: 85:22:b3:89:9a:25:db:d8:af:94:f0:f0:a6:88:32:5c:eb:92: 52:56:8c:64:e2:45:8f:7a:52:68:6d:97:b0:3c:42:21:df:1d: 32:ac:cd:6d:6a:46:0e:2d:53:e0:f9:a8:93:c2:e7:c7:cd:79: 66:2b:70:e7:ef:fb:36:bd:14:f9:1f:29:e8:8e:96:07:b0:83: b7:76:c2:bf:12:67:4d:3d:3a:2c:eb:ed:30:50:60:39:b1:92: 39:51:31:c3:b8:1f:18:25:45:88:75:38:70:df:2e:f9:ee:ad: 9a:ce:dc:88:79:7e:bd:56:4a:5d:36:a4:64:4e:34:d7:50:f6: 14:34:c2:fd:d3:46:10:91:9d:24:e1:e8:54:95:a9:ec:41:a0: b4:c9:90:2a:77:d8:cd:2d:bc:73:b7:cc:fb:5a:58:1d:72:04: 32:81:e6:9c:09:3b:bb:a4:49:1d:cf:7b:d1:c9:8d:29:d9:cf: 5e:25:3f:62:81:22:88:44:c6:9b:37:1e:da:73:1f:b0:ba:62: e2:f8:68:d1:17:12:99:9a:7d:e3:4a:b6:9c:8d:81:c3:b7:11: b6:a0:a0:cd:b8:4a:78:3a:b4:cb:10:b6:d9:8a:83:48:8c:4b: 54:d9:e6:60 -----BEGIN CERTIFICATE----- MIIHUDCCBjigAwIBAgIUAQ0Mn0MoWEUaDgVk8SKQaa3q+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDMwNTAxNDUyMFoXDTI2MDYwODAwNDUyMFowLzEtMCsGA1UEAxMk NDNhYzVlZGUtMWQyNy00MWE1LTkzMmMtMjE4MzJmM2VmOTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe3zNTjtEzcpy2tPRTX0zSEZjkS3nst/x40M HIM4FE5ZtssVzVWDjq+3/Ba0/vEj6qTlyW5XIk9pd+r6Bvoyi81rRJZTqVS1OaSD mNS8lYvF1oVDWPXZF7olmt8JRYiXjOjwGCKr6HpLTeiYob25HG5CiQMRUO00K9Vu x5tnHr/M8MppXc/A7FaR8qzz4QGkQzbZR7tHqRm5KcC1yZDEMR9fUzsGJ4nnF5pV 8gwcAviE+4OXAHl4nv6BkCZw9ED3KKM4EEX0aAN+MX64SE3iyKM2YTTMgcdfFLdP ADxhBiOVVBNOep9vfB6lzmuwdBBJICO1AmgUmN4CulFI/fYYywIDAQABo4IEYjCC BF4wHQYDVR0OBBYEFAk+SCh3rslmXefxPznjt36En5rNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYzZWY5NWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQzYWM1ZWRlLTFkMjctNDFhNS05 MzJjLTIxODMyZjNlZjk1Yy80M2FjNWVkZS0xZDI3LTQxYTUtOTMyYy0yMTgzMmYz ZWY5NWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXgYIKwYBBQUH AQcBAf8ETzBNMDwEAgABMDYDBANol4gDBAJomcADBALHE9ADBALHvUADBALQShwD BALQSjADBALQUswDBALQWzADBATRhjAwDQQCAAIwBwMFACYH8UgwIgYIKwYBBQUH AQgBAf8EEzARoA8wDQICK7ICAi3WAgMA1V4wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZlSEsU12Gv/mAckE /+ZPmZsThSKziZol29ivlPDwpogyXOuSUlaMZOJFj3pSaG2XsDxCId8dMqzNbWpG Di1T4Pmok8Lnx815Zitw5+/7Nr0U+R8p6I6WB7CDt3bCvxJnTT06LOvtMFBgObGS OVExw7gfGCVFiHU4cN8u+e6tms7ciHl+vVZKXTakZE4011D2FDTC/dNGEJGdJOHo VJWp7EGgtMmQKnfYzS28c7fM+1pYHXIEMoHmnAk7u6RJHc970cmNKdnPXiU/YoEi iETGmzce2nMfsLpi4vho0RcSmZp940q2nI2Bw7cRtqCgzbhKeDq0yxC22YqDSIxL VNnmYA== -----END CERTIFICATE-----Generated at Sun May 12 15:03:54 2024 by rpki-client on console-fra.rpki-client.org