$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer File: 8a8a1a2d-c949-4896-93b9-71f917048e79.cer (raw, json) Hash identifier: cTuqAhqtFsL/ZdKQHhS2f36TFSmSu0gvMDeCfsxJUow= Subject key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584445E1FD1FEF0096D1AB1B37A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Dec 2023 01:45:15 +0000 Certificate not after: Tue 24 Mar 2026 00:45:15 +0000 Subordinate resources: AS: 399804 IP: 66.187.4.0/22 IP: 158.51.124.0/22 IP: 2606:65c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:45:e1:fd:1f:ef:00:96:d1:ab:1b:37:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 20 01:45:15 2023 GMT Not After : Mar 24 00:45:15 2026 GMT Subject: CN=8a8a1a2d-c949-4896-93b9-71f917048e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:e9:02:fd:d5:ad:72:fb:cf:14:a3:09:60: 70:f1:d6:fe:47:4f:0e:52:cb:87:6a:8f:6c:e9:ae: c0:4b:2b:a8:9a:06:d9:1e:8b:be:f4:4e:ed:f8:18: e1:7f:f7:2c:99:d2:c3:6f:8d:1c:72:11:3d:eb:89: 92:4f:6e:00:91:8d:cb:07:00:2c:cd:cd:ca:ab:52: 96:7e:5c:da:82:39:22:ee:be:97:5b:27:b8:53:a1: 06:a8:ce:72:e0:89:39:a2:12:63:67:b4:db:bf:d8: 7e:ed:55:e5:48:ed:81:00:01:86:be:3c:a0:24:fe: aa:ea:5e:b8:a9:11:b7:ab:71:fa:10:6c:49:8c:82: 06:42:4d:d9:f2:ed:72:5f:6d:fc:d8:a3:44:8d:ac: 5f:5c:1c:f0:0e:42:a9:7a:a3:36:55:53:93:2b:78: a6:2e:1d:ab:09:e7:08:c2:0d:b7:35:1b:38:c7:87: 4c:2f:5c:31:98:d3:7a:e5:0b:f0:a2:ed:86:de:43: ee:48:67:d3:e4:b0:66:8a:2d:0d:a8:02:ed:09:39: 84:0e:b7:bf:4d:a7:41:d6:11:59:1c:65:e2:72:02: 44:1e:7c:49:5d:c4:34:49:27:41:0e:a5:c0:c5:e8: 1b:e3:6c:9e:fe:93:ff:16:79:22:18:2c:67:7b:86: 42:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 66.187.4.0/22 158.51.124.0/22 IPv6: 2606:65c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399804 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:8d:e0:8d:70:3d:ed:ac:71:c3:3a:ce:93:4c:11:fb:ab:04: fb:e1:78:5e:3a:ce:64:44:c5:e7:57:65:81:da:94:de:0a:4d: c1:b3:93:26:7f:0d:35:c7:a4:67:ff:f4:18:39:c1:04:a6:8c: a0:ea:7a:ae:fb:23:e1:00:d1:4f:e1:f1:d3:d8:ae:62:ea:d8: f6:92:f5:bc:53:bd:0a:1f:14:10:d0:0b:b1:8d:e5:81:91:d7: 73:d4:95:f0:73:d1:0f:a7:2c:84:dc:5b:23:ef:9a:5c:32:20: 38:d1:e8:ef:4e:d4:24:9f:6b:8b:03:28:c4:1b:06:43:f6:28: a6:62:7f:12:ad:de:01:cc:ff:c6:b5:20:0d:d4:ad:4f:77:c4: 20:bd:56:82:72:f4:bb:33:df:ab:a5:2b:c4:00:17:a4:11:c9: b6:02:7d:00:a6:87:0e:54:78:1b:87:d1:72:eb:fc:bd:86:b8: e5:3c:67:34:03:c3:12:bc:d2:e2:75:9b:af:ef:9e:d5:e6:68: 64:23:c2:f9:65:8a:d1:66:60:3c:7c:0b:20:ea:50:87:16:85: a9:82:7b:94:24:45:cc:58:bf:27:4a:fc:02:37:87:e2:e9:03: a0:aa:9d:8f:97:cb:45:34:ca:a6:12:25:a6:dd:5b:f9:6d:d0: df:4e:aa:e4 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWERF4f0f7wCW0asbN6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTIyMDAxNDUxNVoXDTI2MDMyNDAwNDUxNVowLzEtMCsGA1UEAxMk OGE4YTFhMmQtYzk0OS00ODk2LTkzYjktNzFmOTE3MDQ4ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZbpAv3VrXL7zxSjCWBw8db+R08OUsuHao9s 6a7ASyuomgbZHou+9E7t+Bjhf/csmdLDb40cchE964mST24AkY3LBwAszc3Kq1KW flzagjki7r6XWye4U6EGqM5y4Ik5ohJjZ7Tbv9h+7VXlSO2BAAGGvjygJP6q6l64 qRG3q3H6EGxJjIIGQk3Z8u1yX2382KNEjaxfXBzwDkKpeqM2VVOTK3imLh2rCecI wg23NRs4x4dML1wxmNN65Qvwou2G3kPuSGfT5LBmii0NqALtCTmEDre/TadB1hFZ HGXicgJEHnxJXcQ0SSdBDqXAxegb42ye/pP/FnkiGCxne4ZCmwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFMpl4nlEpZzKbxvGZbw3C41vuM/rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcwNDhlNzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzhhOGExYTJkLWM5NDktNDg5Ni05 M2I5LTcxZjkxNzA0OGU3OS84YThhMWEyZC1jOTQ5LTQ4OTYtOTNiOS03MWY5MTcw NDhlNzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJCuwQDBAKeM3wwDQQCAAIwBwMFACYGZcAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhm8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACON4I1wPe2sccM6zpNM EfurBPvheF46zmRExedXZYHalN4KTcGzkyZ/DTXHpGf/9Bg5wQSmjKDqeq77I+EA 0U/h8dPYrmLq2PaS9bxTvQofFBDQC7GN5YGR13PUlfBz0Q+nLITcWyPvmlwyIDjR 6O9O1CSfa4sDKMQbBkP2KKZifxKt3gHM/8a1IA3UrU93xCC9VoJy9Lsz36ulK8QA F6QRybYCfQCmhw5UeBuH0XLr/L2GuOU8ZzQDwxK80uJ1m6/vntXmaGQjwvllitFm YDx8CyDqUIcWhamCe5QkRcxYvydK/AI3h+LpA6CqnY+Xy0U0yqYSJabdW/lt0N9O quQ= -----END CERTIFICATE-----Generated at Sun May 12 22:43:08 2024 by rpki-client on console-fra.rpki-client.org