$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6.cer File: 927c3915-8496-4bf8-860b-fc702af0efb6.cer (raw, json) Hash identifier: QJxzLco2JG0er/VVNBTrrkaxLzrWLLM5WR2X1XSfNnw= Subject key identifier: 57:97:70:F7:9B:8C:15:69:98:0C:3C:5D:3E:9A:07:1F:6E:E0:8B:26 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858455CF0AA12DBDAB799ED451440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6/927c3915-8496-4bf8-860b-fc702af0efb6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Mar 2024 00:45:21 +0000 Certificate not after: Thu 02 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 398559 AS: 399975 AS: 400842 IP: 23.161.144.0/23 IP: 163.123.220.0/22 IP: 2600:c800::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5c:f0:aa:12:db:da:b7:99:ed:45:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 29 00:45:21 2024 GMT Not After : Jul 2 00:45:21 2026 GMT Subject: CN=927c3915-8496-4bf8-860b-fc702af0efb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:4b:a7:38:91:da:8c:e0:20:04:cb:67:18: c7:94:9a:b5:3c:cd:4b:82:d9:4e:1d:af:42:6e:d0: ec:96:d2:b9:09:8e:e7:e7:fe:ae:e0:3e:f0:32:3d: 1d:e8:8b:21:99:5d:f2:7e:5d:61:d5:1d:2b:ed:a3: 6e:9d:07:03:36:f5:a4:b4:e5:8a:7d:a6:5d:8a:e0: 86:c7:31:15:61:da:f2:87:50:a7:cf:45:4e:e6:d0: 5d:04:53:f7:39:7d:77:57:0f:c1:2f:b0:39:ae:21: 95:64:3a:53:c5:96:d2:de:70:20:b2:b6:62:66:6c: 63:ba:f2:9b:0b:01:66:62:c3:63:27:83:00:9a:bc: 17:84:34:57:74:eb:cb:14:e8:f5:cf:cc:a2:71:21: 61:0b:83:59:1e:11:56:9f:a1:4c:c8:49:38:37:27: 18:77:d7:ce:ca:91:14:28:6b:69:e0:aa:35:b0:5f: 2d:fc:07:a6:f0:cc:f1:ed:d8:86:b1:f1:be:f5:84: 18:a5:55:4d:47:4f:43:94:90:a6:66:42:65:37:46: b2:55:d0:bb:e9:2f:82:6e:69:46:55:94:5e:50:a6: d5:8c:28:47:61:c8:f7:2c:4e:94:46:4d:11:36:67: 7f:64:97:36:0d:45:b6:95:26:c2:6c:2f:10:20:54: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:97:70:F7:9B:8C:15:69:98:0C:3C:5D:3E:9A:07:1F:6E:E0:8B:26 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/927c3915-8496-4bf8-860b-fc702af0efb6/927c3915-8496-4bf8-860b-fc702af0efb6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.161.144.0/23 163.123.220.0/22 IPv6: 2600:c800::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398559 399975 400842 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c9:be:3d:36:b6:ab:30:fe:31:96:57:cf:e7:65:03:f6:36: e1:df:75:6a:03:43:1d:a3:65:21:16:6f:3b:2a:b8:35:8a:e1: a2:4f:3a:5b:ac:67:b3:fb:0d:85:5e:59:94:5e:7c:31:44:73: 8b:98:eb:4c:3d:fb:0e:22:21:b5:32:0b:55:c0:b2:74:8e:10: 28:60:e2:fd:ad:88:c2:60:43:2c:60:61:24:8b:7d:bf:55:55: 7b:97:d9:94:61:35:63:80:11:7e:3a:98:d9:13:59:78:a7:aa: 46:4f:50:95:02:98:50:b1:90:39:d5:9d:d8:57:05:1d:a0:49: 27:ce:7d:17:0a:4b:6d:ad:1d:0b:6a:c0:a1:b0:1f:4d:8d:c9: d8:ff:63:5f:d3:32:cb:94:50:b9:ae:f2:56:59:a1:8c:1f:83: 74:8d:32:ba:80:eb:e9:68:ab:fe:a3:6f:22:4b:f2:75:ee:0c: 5b:ad:71:d8:4d:9d:ac:46:7f:d2:47:7f:ce:5a:5f:a8:a4:84: a8:c1:db:82:9d:da:aa:37:a1:e2:5a:9a:61:fb:ab:8d:c1:3f: 60:d8:cd:9a:7d:a0:f6:a5:31:5b:9c:02:65:df:fc:fe:dd:bd: 12:14:7a:8b:28:8f:e1:af:8a:71:71:46:21:67:9b:a6:cf:3c: 46:cb:74:a0 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEVc8KoS29q3me1FFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDMyOTAwNDUyMVoXDTI2MDcwMjAwNDUyMVowLzEtMCsGA1UEAxMk OTI3YzM5MTUtODQ5Ni00YmY4LTg2MGItZmM3MDJhZjBlZmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZBLpziR2ozgIATLZxjHlJq1PM1LgtlOHa9C btDsltK5CY7n5/6u4D7wMj0d6IshmV3yfl1h1R0r7aNunQcDNvWktOWKfaZdiuCG xzEVYdryh1Cnz0VO5tBdBFP3OX13Vw/BL7A5riGVZDpTxZbS3nAgsrZiZmxjuvKb CwFmYsNjJ4MAmrwXhDRXdOvLFOj1z8yicSFhC4NZHhFWn6FMyEk4NycYd9fOypEU KGtp4Ko1sF8t/Aem8Mzx7diGsfG+9YQYpVVNR09DlJCmZkJlN0ayVdC76S+CbmlG VZReUKbVjChHYcj3LE6URk0RNmd/ZJc2DUW2lSbCbC8QIFTjrwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFFeXcPebjBVpmAw8XT6aBx9u4IsmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 MjdjMzkxNS04NDk2LTRiZjgtODYwYi1mYzcwMmFmMGVmYjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzkyN2MzOTE1LTg0OTYtNGJmOC04 NjBiLWZjNzAyYWYwZWZiNi85MjdjMzkxNS04NDk2LTRiZjgtODYwYi1mYzcwMmFm MGVmYjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAEXoZADBAKje9wwDQQCAAIwBwMFBCYAyAAwJAYI KwYBBQUHAQgBAf8EFTAToBEwDwIDBhTfAgMGGmcCAwYdyjBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRyb49 NrarMP4xllfP52UD9jbh33VqA0Mdo2UhFm87Krg1iuGiTzpbrGez+w2FXlmUXnwx RHOLmOtMPfsOIiG1MgtVwLJ0jhAoYOL9rYjCYEMsYGEki32/VVV7l9mUYTVjgBF+ OpjZE1l4p6pGT1CVAphQsZA51Z3YVwUdoEknzn0XCkttrR0LasChsB9NjcnY/2Nf 0zLLlFC5rvJWWaGMH4N0jTK6gOvpaKv+o28iS/J17gxbrXHYTZ2sRn/SR3/OWl+o pISowduCndqqN6HiWpph+6uNwT9g2M2afaD2pTFbnAJl3/z+3b0SFHqLKI/hr4px cUYhZ5umzzxGy3Sg -----END CERTIFICATE-----Generated at Mon May 13 02:04:19 2024 by rpki-client on console-fra.rpki-client.org