$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer File: 64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.cer (raw, json) Hash identifier: NS1rBpM6se5g7a2V0upSVuBA+nmyX9mv6Fmq8uqhacc= Subject key identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858457BA62FB3BA7FCE2FF426EF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Apr 2024 00:45:21 +0000 Certificate not after: Mon 13 Jul 2026 00:45:21 +0000 Subordinate resources: IP: 143.127.0.0/16 IP: 166.98.0.0/16 IP: 198.153.190.0 -- 198.153.196.255 IP: 198.187.197.0 -- 198.187.198.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7b:a6:2f:b3:ba:7f:ce:2f:f4:26:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 9 00:45:21 2024 GMT Not After : Jul 13 00:45:21 2026 GMT Subject: CN=64d7cb2e-117c-431e-95aa-a0cc4c2d89bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:a8:a3:26:24:56:4d:3f:ae:40:95:7d:d1: 64:2b:3f:96:a7:95:e0:d3:3f:23:ce:f3:e0:44:7c: c1:dd:c6:2a:6b:9d:d6:ca:0f:6f:b4:e9:31:1a:50: 98:4e:a3:e7:de:85:ca:53:d7:24:d8:41:9d:94:cd: ed:44:a3:90:fa:f8:ca:09:01:36:87:33:21:eb:68: 57:bd:01:2c:35:30:cd:33:f8:68:80:f3:96:15:3d: 27:d0:02:61:df:42:b6:d7:87:00:63:1b:f1:23:bb: 8a:2f:da:b2:2a:2c:9b:70:59:12:d2:6f:91:dc:97: 95:ae:ce:22:ba:99:7b:61:c8:e4:41:8a:52:86:82: 4a:e8:d3:b8:35:ba:86:96:21:e6:a9:39:22:f9:53: d8:39:07:04:6b:45:b1:65:78:d2:39:7a:2c:cb:81: cb:80:49:6b:21:ba:c9:27:e3:e8:58:91:4e:f9:19: 8a:88:58:14:40:0b:53:f7:aa:fd:da:7e:21:f6:8f: 4f:73:69:e2:b9:c5:9b:dc:e9:ed:2e:03:00:d5:a0: b9:97:1d:f2:89:dc:56:0e:91:27:3c:53:be:f6:fb: b2:71:0d:33:5a:25:1e:bb:63:33:5f:1d:89:06:2a: c0:a1:4f:e8:e8:1c:3d:5a:bc:3b:b5:38:08:e7:72: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E2:B8:94:7B:96:D5:C0:1A:70:F2:1E:9D:CD:AB:DB:F5:EE:AB:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb/64d7cb2e-117c-431e-95aa-a0cc4c2d89bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 143.127.0.0/16 166.98.0.0/16 198.153.190.0-198.153.196.255 198.187.197.0-198.187.198.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:50:ad:0f:d7:f8:22:14:17:a9:b6:a3:a2:3c:6b:9f:e9:03: 99:36:33:79:9b:2c:6b:a0:51:c6:78:61:55:22:fe:43:9a:d6: d5:5c:08:01:32:0a:f3:0f:9a:8e:4b:ec:ee:92:9a:9c:7d:88: 1d:ac:16:c8:fe:f7:b3:cb:53:d7:59:0d:95:ec:76:af:de:30: de:29:cc:7a:1a:a3:b3:1d:59:5b:7f:77:14:ba:f3:be:eb:65: df:12:80:b2:e8:5c:e5:93:28:b7:43:bd:9b:b2:7f:f9:0b:bf: 51:e4:f7:ef:ed:e2:33:00:86:2f:72:5e:f6:bd:f8:50:f1:43: de:50:e9:79:ea:a7:58:2e:d0:e3:79:ad:18:60:fc:12:fc:c8: c1:a6:d3:c7:ac:4a:04:87:26:9b:5d:35:f8:89:28:ac:8e:69: 3f:85:93:62:af:22:f3:b2:6a:1c:c3:74:e3:f6:f9:55:ab:bd: 9f:21:d6:60:01:00:0f:3e:dc:c0:31:2b:ed:6e:c0:67:6a:38: 25:fa:cb:8c:73:f2:4d:dd:a3:cb:4e:51:da:f2:ff:59:32:dc: 49:51:d8:f8:5d:53:4b:c8:af:b5:a4:fb:7e:fa:c4:b6:b1:7a: 47:59:35:b4:c1:45:3a:a9:f2:36:1f:81:f9:83:a4:d5:29:e4: 6b:81:f5:4b -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEV7pi+zun/OL/Qm7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDQwOTAwNDUyMVoXDTI2MDcxMzAwNDUyMVowLzEtMCsGA1UEAxMk NjRkN2NiMmUtMTE3Yy00MzFlLTk1YWEtYTBjYzRjMmQ4OWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXWooyYkVk0/rkCVfdFkKz+Wp5Xg0z8jzvPg RHzB3cYqa53Wyg9vtOkxGlCYTqPn3oXKU9ck2EGdlM3tRKOQ+vjKCQE2hzMh62hX vQEsNTDNM/hogPOWFT0n0AJh30K214cAYxvxI7uKL9qyKiybcFkS0m+R3JeVrs4i upl7YcjkQYpShoJK6NO4NbqGliHmqTki+VPYOQcEa0WxZXjSOXosy4HLgElrIbrJ J+PoWJFO+RmKiFgUQAtT96r92n4h9o9Pc2niucWb3OntLgMA1aC5lx3yidxWDpEn PFO+9vuycQ0zWiUeu2MzXx2JBirAoU/o6Bw9Wrw7tTgI53Ig0QIDAQABo4IEHzCC BBswHQYDVR0OBBYEFDTiuJR7ltXAGnDyHp3Nq9v17qs3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 NGQ3Y2IyZS0xMTdjLTQzMWUtOTVhYS1hMGNjNGMyZDg5YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY0ZDdjYjJlLTExN2MtNDMxZS05 NWFhLWEwY2M0YzJkODliYi82NGQ3Y2IyZS0xMTdjLTQzMWUtOTVhYS1hMGNjNGMy ZDg5YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMCwEAgABMCYDAwCPfwMDAKZiMAwDBAHGmb4DBADGmcQwDAMEAMa7 xQMEAMa7xjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQCTUK0P1/giFBeptqOiPGuf6QOZNjN5myxroFHGeGFV Iv5DmtbVXAgBMgrzD5qOS+zukpqcfYgdrBbI/vezy1PXWQ2V7Hav3jDeKcx6GqOz HVlbf3cUuvO+62XfEoCy6Fzlkyi3Q72bsn/5C79R5Pfv7eIzAIYvcl72vfhQ8UPe UOl56qdYLtDjea0YYPwS/MjBptPHrEoEhyabXTX4iSisjmk/hZNiryLzsmocw3Tj 9vlVq72fIdZgAQAPPtzAMSvtbsBnajgl+suMc/JN3aPLTlHa8v9ZMtxJUdj4XVNL yK+1pPt++sS2sXpHWTW0wUU6qfI2H4H5g6TVKeRrgfVL -----END CERTIFICATE-----Generated at Mon May 13 13:03:23 2024 by rpki-client on console-fra.rpki-client.org