$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a.cer File: 945a7f76-bce3-4d85-a81e-c84df8d5197a.cer (raw, json) Hash identifier: g10oPXQe9/MDTL8mX7pmTSzE7oJXcD/ldERg6jL4Rsk= Subject key identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844A797F9CFF985D0AABF1F5534 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 24 Jan 2024 01:45:20 +0000 Certificate not after: Tue 28 Apr 2026 00:45:20 +0000 Subordinate resources: AS: 21803 IP: 67.223.160.0/20 IP: 69.39.0.0/19 IP: 209.140.0.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:a7:97:f9:cf:f9:85:d0:aa:bf:1f:55:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 24 01:45:20 2024 GMT Not After : Apr 28 00:45:20 2026 GMT Subject: CN=945a7f76-bce3-4d85-a81e-c84df8d5197a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:19:58:dd:a4:2e:f9:43:1c:d7:b8:28:25:f2: 75:8a:45:fa:eb:e2:66:1c:d4:c0:f4:42:f0:01:2a: 85:5b:b8:4f:18:99:0f:3f:c5:df:c2:6c:f5:06:21: af:b3:65:c9:74:98:05:33:74:f7:25:28:b0:68:5c: 04:b1:7e:2d:65:85:38:17:89:cd:5d:4a:ac:50:ba: 68:f9:61:9e:3a:e2:13:2f:b2:e5:21:26:1c:9d:c6: 20:27:47:ff:d2:da:f8:d0:92:21:03:ca:06:07:35: c6:e2:dc:88:02:3b:a3:82:2c:4f:2c:c4:ab:0e:52: 23:a2:13:8d:d6:ef:d0:0a:43:fa:a5:62:82:34:f9: cc:ac:b3:93:47:e1:ef:f6:54:08:50:73:1d:46:09: 82:a1:b5:ac:ce:71:da:86:a3:34:00:22:57:72:78: 38:cd:0f:f9:43:92:d3:9b:84:d4:39:d3:87:4e:b3: 5b:29:4a:13:33:40:45:da:25:eb:38:15:74:41:26: c2:a3:47:93:55:ce:57:58:39:90:92:d6:30:63:ee: 9e:bd:01:5f:54:84:b4:c8:43:96:ca:60:dc:19:7d: 14:8e:c5:1c:3d:9e:ce:47:bd:cc:5e:02:5c:e6:90: 1c:e7:f1:4d:df:48:d7:c3:84:32:37:2a:79:16:9d: 6e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C6:DE:90:7F:B7:32:31:C1:9A:67:A5:4D:69:1C:15:20:7D:75:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/945a7f76-bce3-4d85-a81e-c84df8d5197a/945a7f76-bce3-4d85-a81e-c84df8d5197a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 67.223.160.0/20 69.39.0.0/19 209.140.0.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a3:14:71:cc:e3:75:6c:b4:d2:b2:57:29:c0:a5:eb:e2:e7: 1e:63:90:6c:28:3d:c5:fe:30:d3:35:6a:70:d1:22:5e:66:85: f0:9c:e9:8f:62:bc:5a:f6:4e:28:a1:df:a0:44:75:f2:cc:95: 5d:86:a1:82:31:d7:89:7b:78:8a:6b:a8:e2:b5:af:1f:f4:67: 91:f0:25:83:b0:2d:79:51:75:de:f8:f2:cc:b7:b2:42:c7:43: 65:20:3b:04:9c:cc:0f:df:12:9f:61:cb:25:16:bc:92:39:0c: 9d:37:f4:52:ef:f5:91:d1:fa:05:b2:ee:dd:ad:53:bf:b5:3f: da:07:db:bf:f7:9c:d8:42:2f:00:e6:89:5b:0d:65:ce:1f:8e: cb:b9:44:f1:e0:34:29:aa:6d:3b:04:54:08:fd:e4:f2:41:ce: 5b:0e:7a:9c:03:fc:50:86:99:22:53:9f:a9:44:aa:f1:1b:8b: d0:e6:73:13:f7:aa:f1:8d:2e:82:df:47:b8:3a:8d:46:bb:64: 48:48:00:7a:f6:49:72:88:13:18:f2:b9:a3:48:6b:b3:9e:03: 82:c2:cd:f8:85:86:80:9f:92:a2:62:bc:4a:9c:a2:2d:5a:47: 00:8e:41:50:52:f4:09:89:21:ad:61:57:8d:1f:eb:55:bb:2e: 43:71:0d:5f -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWESnl/nP+YXQqr8fVTQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDEyNDAxNDUyMFoXDTI2MDQyODAwNDUyMFowLzEtMCsGA1UEAxMk OTQ1YTdmNzYtYmNlMy00ZDg1LWE4MWUtYzg0ZGY4ZDUxOTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshlY3aQu+UMc17goJfJ1ikX66+JmHNTA9ELw ASqFW7hPGJkPP8Xfwmz1BiGvs2XJdJgFM3T3JSiwaFwEsX4tZYU4F4nNXUqsULpo +WGeOuITL7LlISYcncYgJ0f/0tr40JIhA8oGBzXG4tyIAjujgixPLMSrDlIjohON 1u/QCkP6pWKCNPnMrLOTR+Hv9lQIUHMdRgmCobWsznHahqM0ACJXcng4zQ/5Q5LT m4TUOdOHTrNbKUoTM0BF2iXrOBV0QSbCo0eTVc5XWDmQktYwY+6evQFfVIS0yEOW ymDcGX0UjsUcPZ7OR73MXgJc5pAc5/FN30jXw4QyNyp5Fp1ucwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFMnG3pB/tzIxwZpnpU1pHBUgfXXwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhkNTE5N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk0NWE3Zjc2LWJjZTMtNGQ4NS1h ODFlLWM4NGRmOGQ1MTk3YS85NDVhN2Y3Ni1iY2UzLTRkODUtYTgxZS1jODRkZjhk NTE5N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBARD36ADBAVFJwADBATRjAAwGQYIKwYBBQUHAQgB Af8ECjAIoAYwBAICVSswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV6MUcczjdWy00rJXKcCl6+LnHmOQbCg9 xf4w0zVqcNEiXmaF8Jzpj2K8WvZOKKHfoER18syVXYahgjHXiXt4imuo4rWvH/Rn kfAlg7AteVF13vjyzLeyQsdDZSA7BJzMD98Sn2HLJRa8kjkMnTf0Uu/1kdH6BbLu 3a1Tv7U/2gfbv/ec2EIvAOaJWw1lzh+Oy7lE8eA0KaptOwRUCP3k8kHOWw56nAP8 UIaZIlOfqUSq8RuL0OZzE/eq8Y0ugt9HuDqNRrtkSEgAevZJcogTGPK5o0hrs54D gsLN+IWGgJ+SomK8SpyiLVpHAI5BUFL0CYkhrWFXjR/rVbsuQ3ENXw== -----END CERTIFICATE-----Generated at Sun May 12 15:05:24 2024 by rpki-client on console-fra.rpki-client.org