$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6349ae29-26c8-4f3e-8fd7-4fdcd2e63310.cer File: 6349ae29-26c8-4f3e-8fd7-4fdcd2e63310.cer (raw, json) Hash identifier: /u70tORrVW4Z0aAD7aCsImp8siQlEpCpMpFKnPXuv4g= Subject key identifier: 99:49:3E:FF:0B:A6:6C:8F:64:DF:ED:F1:BD:85:25:25:58:5E:2B:AD Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285842176B695690F77CC5BE92D980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6349ae29-26c8-4f3e-8fd7-4fdcd2e63310/6349ae29-26c8-4f3e-8fd7-4fdcd2e63310.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6349ae29-26c8-4f3e-8fd7-4fdcd2e63310/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Jun 2023 00:45:16 +0000 Certificate not after: Fri 05 Sep 2025 00:45:16 +0000 Subordinate resources: IP: 206.80.235.0/24 IP: 206.81.111.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:17:6b:69:56:90:f7:7c:c5:be:92:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 3 00:45:16 2023 GMT Not After : Sep 5 00:45:16 2025 GMT Subject: CN=6349ae29-26c8-4f3e-8fd7-4fdcd2e63310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:73:0c:06:b9:7a:e3:23:19:b5:92:a3:04:59: 22:fa:61:08:10:ea:16:88:bb:ed:dc:c2:d4:25:d0: 84:57:ad:0c:ac:6d:4c:4c:a9:37:22:64:c2:c8:4f: 7d:f0:36:95:9a:04:43:d0:05:c9:7f:68:aa:98:18: 63:85:e0:5b:3a:3b:9c:97:18:70:df:40:d3:98:bc: db:b8:ac:70:4c:17:91:96:c5:4d:3c:65:0e:bd:0f: 29:72:75:e0:07:12:55:95:8f:32:86:eb:b9:e3:d8: 06:e9:64:0e:79:f0:b7:5d:8a:4e:a3:77:67:89:ff: 01:99:bb:bd:5c:2b:ea:a4:a0:e2:88:09:c6:9b:71: 16:99:51:b1:9f:5e:04:ff:4a:86:b7:0a:16:e6:7b: cc:f8:27:46:69:8b:ab:8e:2d:83:06:34:51:a0:e4: ec:2a:1a:44:bf:38:60:71:1d:c5:65:34:56:0b:b6: f7:ae:9b:78:13:96:49:75:79:14:7f:f0:eb:75:0e: 52:47:16:29:cf:d4:f4:d7:d5:a7:14:c5:74:02:81: 10:4c:bb:74:01:01:7b:b2:9a:ba:c6:16:f6:ed:bd: 0c:ae:b7:f3:b8:c6:44:dd:dd:56:b1:d6:b6:13:f5: 07:10:ae:85:f6:f8:75:9b:1a:1b:8d:ec:d5:6b:88: 9c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:49:3E:FF:0B:A6:6C:8F:64:DF:ED:F1:BD:85:25:25:58:5E:2B:AD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6349ae29-26c8-4f3e-8fd7-4fdcd2e63310/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6349ae29-26c8-4f3e-8fd7-4fdcd2e63310/6349ae29-26c8-4f3e-8fd7-4fdcd2e63310.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 206.80.235.0/24 206.81.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:6e:67:a2:e2:a4:50:d6:60:c5:e5:b7:b6:76:ec:ce:01:38: 04:88:02:69:0e:b9:98:ab:41:96:27:0d:1b:75:6b:91:af:91: 89:68:17:ad:06:0a:1a:0b:95:38:40:4b:2a:ed:7c:5c:e7:b2: b1:fc:b2:54:66:6a:f6:29:77:66:f3:41:b5:1a:b5:b7:82:b5: 9f:a5:6c:46:db:96:ed:84:5b:9e:70:55:12:83:d1:9a:b4:83: fc:bd:c4:c2:f5:9d:1f:d4:3e:f4:e0:56:9b:bc:cc:0f:0f:e6: ab:ab:10:e2:11:12:e7:74:3f:15:b6:68:52:25:d3:4c:34:b6: f6:6b:66:bb:6f:f0:73:99:6f:a8:28:f5:ff:6b:fc:29:68:b3: b0:88:ff:b8:b3:11:a2:8d:f0:76:40:d8:ec:93:12:22:35:99: a5:75:2f:d2:13:7d:18:8a:e6:81:bf:ba:da:94:87:6d:b1:01: ee:e5:69:ce:a6:05:b5:48:7b:a6:51:f8:b1:12:e8:d3:16:d1: 94:66:52:1e:51:38:b1:fd:44:6f:58:9f:84:70:ab:06:23:6e: 4e:e1:be:c8:4b:98:3d:ed:cf:8e:ee:ca:3f:7b:1d:ce:e4:10: 1e:99:94:e7:b8:ab:3f:be:43:50:db:20:bd:93:ed:82:20:04: 88:6c:fa:69 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEIXa2lWkPd8xb6S2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDYwMzAwNDUxNloXDTI1MDkwNTAwNDUxNlowLzEtMCsGA1UEAxMk NjM0OWFlMjktMjZjOC00ZjNlLThmZDctNGZkY2QyZTYzMzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3MMBrl64yMZtZKjBFki+mEIEOoWiLvt3MLU JdCEV60MrG1MTKk3ImTCyE998DaVmgRD0AXJf2iqmBhjheBbOjuclxhw30DTmLzb uKxwTBeRlsVNPGUOvQ8pcnXgBxJVlY8yhuu549gG6WQOefC3XYpOo3dnif8Bmbu9 XCvqpKDiiAnGm3EWmVGxn14E/0qGtwoW5nvM+CdGaYurji2DBjRRoOTsKhpEvzhg cR3FZTRWC7b3rpt4E5ZJdXkUf/DrdQ5SRxYpz9T019WnFMV0AoEQTLt0AQF7spq6 xhb27b0MrrfzuMZE3d1Wsda2E/UHEK6F9vh1mxobjezVa4icKQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFJlJPv8LpmyPZN/t8b2FJSVYXiutMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 MzQ5YWUyOS0yNmM4LTRmM2UtOGZkNy00ZmRjZDJlNjMzMTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzYzNDlhZTI5LTI2YzgtNGYzZS04 ZmQ3LTRmZGNkMmU2MzMxMC82MzQ5YWUyOS0yNmM4LTRmM2UtOGZkNy00ZmRjZDJl NjMzMTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADOUOsDBADOUW8wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC25nouKkUNZg xeW3tnbszgE4BIgCaQ65mKtBlicNG3Vrka+RiWgXrQYKGguVOEBLKu18XOeysfyy VGZq9il3ZvNBtRq1t4K1n6VsRtuW7YRbnnBVEoPRmrSD/L3EwvWdH9Q+9OBWm7zM Dw/mq6sQ4hES53Q/FbZoUiXTTDS29mtmu2/wc5lvqCj1/2v8KWizsIj/uLMRoo3w dkDY7JMSIjWZpXUv0hN9GIrmgb+62pSHbbEB7uVpzqYFtUh7plH4sRLo0xbRlGZS HlE4sf1Eb1ifhHCrBiNuTuG+yEuYPe3Pju7KP3sdzuQQHpmU57irP75DUNsgvZPt giAEiGz6aQ== -----END CERTIFICATE-----Generated at Sun May 12 15:04:33 2024 by rpki-client on console-fra.rpki-client.org