$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer File: 9696ca72-0d62-4fc3-b383-c596c4f11958.cer (raw, json) Hash identifier: aSbiUjxbimnIsxpUCv11UpDQavlOlrUBn5BmGoifxXc= Subject key identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843666D8EDEACC89AEBD3152580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Oct 2023 00:45:24 +0000 Certificate not after: Sat 03 Jan 2026 01:45:24 +0000 Subordinate resources: AS: 3562 IP: 134.252.0.0/16 IP: 146.246.0.0/16 IP: 192.73.208.0/24 IP: 192.160.228.0/24 IP: 198.206.219.0/24 IP: 198.206.221.0/24 IP: 204.238.65.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:66:6d:8e:de:ac:c8:9a:eb:d3:15:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 1 00:45:24 2023 GMT Not After : Jan 3 01:45:24 2026 GMT Subject: CN=9696ca72-0d62-4fc3-b383-c596c4f11958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:52:60:f0:15:27:53:58:66:8f:be:36:f9: 3c:0a:2a:45:c4:df:26:b2:45:6f:e4:5c:d4:44:30: ea:47:25:14:5d:df:a8:00:88:9c:ad:f6:c0:0f:fb: 69:74:73:e9:de:81:ae:ec:fe:c2:b9:72:43:f2:df: ef:b3:8a:9b:56:a7:fc:54:f3:d2:45:53:40:6d:b2: 2c:0b:fa:de:af:4e:df:e1:da:9f:97:30:51:3c:3d: 1c:70:eb:b9:3f:ac:d9:23:fe:5d:d3:81:4c:d6:e9: a7:23:96:7a:8c:f9:db:c5:3c:4b:40:18:c8:72:a2: f6:0a:15:86:6d:37:35:38:ad:d9:85:d3:b3:f0:a5: ae:95:07:02:38:39:95:78:da:ee:34:5f:17:70:d0: f9:df:86:37:a4:6b:06:97:28:47:55:9f:68:2a:97: fb:8a:42:bf:d5:2e:b8:1d:ce:57:23:e7:fb:e7:a3: e4:f6:f4:12:38:ee:f4:bf:27:a6:7f:12:65:14:97: e5:02:c1:ab:df:fa:a1:64:89:7b:29:05:4a:85:33: 78:61:76:c4:27:85:4f:78:21:06:67:3b:a0:03:f9: cd:d7:c0:8c:9a:6a:b0:65:a4:1b:e4:c4:ce:38:07: 0b:d9:15:8f:f5:33:1a:7f:05:53:96:7c:f6:1b:30: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 134.252.0.0/16 146.246.0.0/16 192.73.208.0/24 192.160.228.0/24 198.206.219.0/24 198.206.221.0/24 204.238.65.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3562 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:54:75:af:3f:13:82:27:6d:cf:25:c7:7c:78:b2:6d:c6:95: c9:84:61:88:62:89:e4:aa:e2:09:0b:56:99:db:23:03:5b:47: a8:e7:2f:fc:be:a4:a4:06:64:64:7d:a1:c8:30:7e:20:21:d8: e9:1c:13:63:27:05:50:02:fb:68:0a:23:00:44:31:93:10:da: 86:19:c1:1d:2b:44:bb:d1:52:f5:91:8c:1c:fe:94:b7:ac:21: 5a:64:98:eb:af:61:f2:31:0d:fe:8b:f6:1a:38:9a:e5:d4:91: 08:d2:6e:48:a2:ef:f2:3e:17:56:a1:ec:2e:43:af:d1:90:50: ff:05:0f:20:9a:37:73:a8:c9:5a:b4:f1:24:e4:db:84:60:6c: da:1c:d1:2f:46:13:ae:ff:e6:eb:62:16:30:72:1a:1b:09:29: 71:87:c7:30:0b:6a:6f:4d:12:10:35:e6:5c:b7:71:98:b0:e6: 9d:05:e9:9d:92:a8:27:99:58:89:54:cf:02:57:3b:93:be:f6: 77:e8:1e:4f:53:10:dd:45:a2:64:97:63:a2:dc:e9:3c:dc:bd: c4:12:71:f0:86:99:77:6b:f8:30:a9:03:72:79:e1:40:34:50: 7d:43:f3:77:a9:f7:ef:b7:82:af:af:f6:a4:72:cb:35:08:ea: 38:43:4a:3e -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWENmbY7erMia69MVJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTAwMTAwNDUyNFoXDTI2MDEwMzAxNDUyNFowLzEtMCsGA1UEAxMk OTY5NmNhNzItMGQ2Mi00ZmMzLWIzODMtYzU5NmM0ZjExOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K1SYPAVJ1NYZo++Nvk8CipFxN8mskVv5FzU RDDqRyUUXd+oAIicrfbAD/tpdHPp3oGu7P7CuXJD8t/vs4qbVqf8VPPSRVNAbbIs C/rer07f4dqflzBRPD0ccOu5P6zZI/5d04FM1umnI5Z6jPnbxTxLQBjIcqL2ChWG bTc1OK3ZhdOz8KWulQcCODmVeNruNF8XcND534Y3pGsGlyhHVZ9oKpf7ikK/1S64 Hc5XI+f756Pk9vQSOO70vyemfxJlFJflAsGr3/qhZIl7KQVKhTN4YXbEJ4VPeCEG ZzugA/nN18CMmmqwZaQb5MTOOAcL2RWP9TMafwVTlnz2GzBSYQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFC5V/JEdRK4Oc4asaXkUPNfNSsQDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 Njk2Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2YzRmMTE5NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk2OTZjYTcyLTBkNjItNGZjMy1i MzgzLWM1OTZjNGYxMTk1OC85Njk2Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2YzRm MTE5NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMC4EAgABMCgDAwCG/AMDAJL2AwQAwEnQAwQAwKDkAwQAxs7bAwQA xs7dAwQAzO5BMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAg3qMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGVU da8/E4Inbc8lx3x4sm3GlcmEYYhiieSq4gkLVpnbIwNbR6jnL/y+pKQGZGR9ocgw fiAh2OkcE2MnBVAC+2gKIwBEMZMQ2oYZwR0rRLvRUvWRjBz+lLesIVpkmOuvYfIx Df6L9ho4muXUkQjSbkii7/I+F1ah7C5Dr9GQUP8FDyCaN3OoyVq08STk24RgbNoc 0S9GE67/5utiFjByGhsJKXGHxzALam9NEhA15ly3cZiw5p0F6Z2SqCeZWIlUzwJX O5O+9nfoHk9TEN1FomSXY6Lc6TzcvcQScfCGmXdr+DCpA3J54UA0UH1D83ep9++3 gq+v9qRyyzUI6jhDSj4= -----END CERTIFICATE-----Generated at Mon May 13 02:04:19 2024 by rpki-client on console-fra.rpki-client.org