$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer File: 96239d53-1062-4a21-8f97-639809abe5de.cer (raw, json) Hash identifier: C8T6mY2xn5kr2o9UF8hUv+Hav3BF8LnyaJVtzwZQb9s= Subject key identifier: D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858420115F009F8D0225D55C8D880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 May 2023 00:45:16 +0000 Certificate not after: Thu 28 Aug 2025 00:45:16 +0000 Subordinate resources: AS: 22933 IP: 65.255.48.0/20 IP: 204.13.104.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:01:15:f0:09:f8:d0:22:5d:55:c8:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 26 00:45:16 2023 GMT Not After : Aug 28 00:45:16 2025 GMT Subject: CN=96239d53-1062-4a21-8f97-639809abe5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:92:7c:5c:70:c7:d6:b4:45:a6:5d:80:af:f7: 9a:db:74:79:04:4e:09:df:36:5d:4d:15:0a:22:1b: 67:74:c2:d0:46:11:85:61:93:bd:c5:ff:19:0f:71: a9:ae:2e:54:bb:11:b2:03:b6:2b:2a:c5:93:ff:97: 12:ad:2b:c4:6d:84:d3:4e:2d:4d:82:20:eb:07:c8: 79:14:01:0e:87:4d:44:37:5e:fb:20:66:97:0b:f8: c3:d3:05:5d:e5:26:08:b7:d6:80:8e:e9:ce:68:36: 95:4e:08:d0:80:ee:ef:c9:d1:bd:6f:44:c6:24:b6: 91:71:cd:79:c5:cd:fc:10:c1:f3:47:57:4d:d0:0d: 8a:7d:04:91:ea:80:31:7a:39:a6:5e:3e:4e:7a:5b: a6:5f:25:20:33:40:09:35:6d:82:1d:23:c0:94:29: 2b:14:e7:bc:be:30:aa:7e:06:f2:f6:18:42:59:bf: 7e:f4:d2:00:e0:a1:41:c1:ed:69:b4:c3:9a:82:c6: 09:12:98:db:fd:4b:94:39:1a:67:73:01:ea:e3:c7: 34:b1:29:b8:0e:79:5a:11:e2:c0:5b:d8:4e:71:f8: fa:04:71:64:16:b5:ff:59:d3:c0:e7:e4:4f:f2:4f: f4:d2:55:42:6e:22:fb:4e:6f:fa:98:f0:35:38:15: 35:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 65.255.48.0/20 204.13.104.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22933 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:30:7c:26:14:c4:c9:0f:3d:fb:4e:00:01:6f:4f:7e:0e:69: ff:d1:b7:28:ea:f1:9f:1c:03:e8:ec:65:d6:d8:74:66:49:a0: 8e:a7:78:82:99:27:8e:52:6c:f3:75:b0:78:8a:ad:de:48:85: 2c:c9:20:d2:c3:d9:4d:db:6f:ff:c7:00:d9:47:13:01:f9:2c: bd:17:6b:d3:b2:b7:5d:93:81:2e:82:81:83:9b:71:33:f2:a0: 65:a8:4f:7b:fd:9d:c8:7a:7e:bf:09:e7:8a:35:9c:15:7e:3c: 04:75:85:4e:9a:62:8c:6e:d6:8d:ef:65:31:c4:98:02:e4:8e: 34:eb:ad:d2:43:f8:d4:b8:d0:91:dc:6a:dd:83:c7:77:92:f1: fb:8f:f7:6c:8e:14:98:ce:72:12:bd:c8:6c:16:be:d2:65:2c: 99:d9:23:af:06:6e:60:d1:f3:56:ba:2a:14:39:81:4c:0e:6f: 13:f7:a7:b2:d8:e2:fe:de:96:c3:67:61:2a:71:49:34:e8:4a: d0:91:f2:71:de:2f:ce:2d:0c:7e:f9:cc:aa:cd:fb:dc:72:92: a6:4d:39:6e:96:5c:f2:78:de:32:a4:4a:00:23:d1:4b:2c:53: 11:58:03:a0:ea:51:da:0f:ca:7e:df:42:e6:49:81:3b:8e:83: f1:5a:9e:64 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEIBFfAJ+NAiXVXI2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUyNjAwNDUxNloXDTI1MDgyODAwNDUxNlowLzEtMCsGA1UEAxMk OTYyMzlkNTMtMTA2Mi00YTIxLThmOTctNjM5ODA5YWJlNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupJ8XHDH1rRFpl2Ar/ea23R5BE4J3zZdTRUK IhtndMLQRhGFYZO9xf8ZD3Gpri5UuxGyA7YrKsWT/5cSrSvEbYTTTi1NgiDrB8h5 FAEOh01EN177IGaXC/jD0wVd5SYIt9aAjunOaDaVTgjQgO7vydG9b0TGJLaRcc15 xc38EMHzR1dN0A2KfQSR6oAxejmmXj5OelumXyUgM0AJNW2CHSPAlCkrFOe8vjCq fgby9hhCWb9+9NIA4KFBwe1ptMOagsYJEpjb/UuUORpncwHq48c0sSm4DnlaEeLA W9hOcfj6BHFkFrX/WdPA5+RP8k/00lVCbiL7Tm/6mPA1OBU1DQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFNngPxdF1Ib2OGfeMWDJ3WHGhRYWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 NjIzOWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4MDlhYmU1ZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk2MjM5ZDUzLTEwNjItNGEyMS04 Zjk3LTYzOTgwOWFiZTVkZS85NjIzOWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4MDlh YmU1ZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARB/zADBALMDWgwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICWZUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAazB8JhTEyQ89+04AAW9Pfg5p/9G3KOrxnxwD6Oxl 1th0Zkmgjqd4gpknjlJs83WweIqt3kiFLMkg0sPZTdtv/8cA2UcTAfksvRdr07K3 XZOBLoKBg5txM/KgZahPe/2dyHp+vwnnijWcFX48BHWFTppijG7Wje9lMcSYAuSO NOut0kP41LjQkdxq3YPHd5Lx+4/3bI4UmM5yEr3IbBa+0mUsmdkjrwZuYNHzVroq FDmBTA5vE/enstji/t6Ww2dhKnFJNOhK0JHycd4vzi0MfvnMqs373HKSpk05bpZc 8njeMqRKACPRSyxTEVgDoOpR2g/Kft9C5kmBO46D8VqeZA== -----END CERTIFICATE-----Generated at Sun May 12 15:25:50 2024 by rpki-client on console-ams.rpki-client.org