$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.cer File: 9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.cer (raw, json) Hash identifier: pMXhzgi/XYZBrksiSqFsNj4xRVN45X7AllfkqGdvXvg= Subject key identifier: 8D:D4:37:3B:88:29:65:6B:C0:50:0B:AA:B0:8E:D8:67:0B:E4:F3:F9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584347B804F15341632CD4A6D300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Sep 2023 00:45:22 +0000 Certificate not after: Tue 23 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 63251 IP: 64.237.96.0/22 IP: 104.245.52.0/22 IP: 137.83.28.0/23 IP: 148.59.42.0/24 IP: 161.38.255.0/24 IP: 192.139.135.0/24 IP: 204.152.129.0/24 IP: 216.250.244.0/23 IP: 2605:c680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:47:b8:04:f1:53:41:63:2c:d4:a6:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 20 00:45:22 2023 GMT Not After : Dec 23 01:45:22 2025 GMT Subject: CN=9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:88:27:68:64:bb:13:91:c1:41:f4:2f:d9: b3:93:87:73:87:5f:b6:32:9d:64:57:7d:a5:4d:4c: 03:16:c4:1f:d8:78:93:87:fd:1b:98:6c:fa:08:3d: bf:48:84:be:5d:69:96:a3:43:86:76:cf:d1:1d:da: 73:af:f1:fd:fe:b9:36:c3:57:24:db:7f:31:20:9b: 4f:8b:67:33:b6:d4:42:71:55:b2:c7:f3:32:06:70: 88:6a:9a:94:5d:45:b5:e8:46:43:5f:42:c3:54:f3: 49:84:75:5b:69:fc:b5:3e:12:5c:e4:8d:cc:02:78: 13:1c:18:2c:e1:ee:d6:aa:53:9c:77:5a:db:01:cd: bf:58:af:3a:11:0c:dd:de:41:98:56:f1:2a:cc:da: 7f:c6:77:6b:2b:cb:3c:63:b2:e1:66:36:24:df:e7: 8d:08:66:fe:31:99:0a:91:e7:8d:f6:e8:ce:27:19: c9:3e:c0:ca:9a:4e:43:3b:23:fc:b7:c8:15:ec:c3: af:25:04:76:60:4f:dd:bd:30:eb:94:40:4d:82:dc: 4b:77:f3:03:7e:30:d1:be:60:8c:e1:91:80:fc:41: d4:15:01:6d:e4:81:f0:86:66:62:1a:f8:13:d4:ef: b8:f6:78:a6:59:b6:a0:7b:e4:3b:87:e4:4d:da:e6: 25:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:37:3B:88:29:65:6B:C0:50:0B:AA:B0:8E:D8:67:0B:E4:F3:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.237.96.0/22 104.245.52.0/22 137.83.28.0/23 148.59.42.0/24 161.38.255.0/24 192.139.135.0/24 204.152.129.0/24 216.250.244.0/23 IPv6: 2605:c680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63251 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:58:5c:06:31:aa:2e:a4:32:3a:83:6b:dd:59:d5:b5:e1:70: 90:22:9f:a9:2b:59:b0:44:06:56:df:6b:f3:09:94:a8:a8:68: 97:68:18:2c:4f:75:0c:0a:52:69:79:ff:00:8b:20:dd:d2:bd: e7:fa:53:e8:7e:38:53:0f:ef:76:e0:0a:d9:8c:be:58:9b:29: 12:1f:5f:52:6a:07:10:1d:8e:89:9e:dc:c5:ca:20:0f:b2:ea: 92:ea:e2:c6:a1:9e:b9:0e:61:59:4e:c5:13:d0:75:e7:62:10: 45:40:3e:dd:23:64:ba:09:1c:25:56:a7:23:68:21:c4:22:f5: 8e:95:2d:82:3c:c7:e5:64:62:48:4d:d8:20:84:74:0d:33:fe: 36:8c:3f:12:d9:8f:3a:72:62:fd:37:d1:e7:a0:40:8d:17:f1: b4:fd:31:5e:5c:9e:56:ea:89:4b:54:43:ee:4b:a6:ce:57:39: 64:fc:ca:08:eb:61:b3:c2:eb:07:47:fa:0d:e7:75:08:28:0a: 1b:0f:fb:7e:25:59:b1:2e:1b:64:c5:b7:36:fe:ea:36:65:bc: 71:79:b5:fd:c3:fd:a5:7e:ce:20:0d:2f:ee:de:52:14:2d:90: 7c:51:8b:92:12:0d:34:41:0b:59:50:4a:32:27:2f:93:97:c3: 93:58:2b:14 -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUAQ0Mn0MoWENHuATxU0FjLNSm0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDkyMDAwNDUyMloXDTI1MTIyMzAxNDUyMlowLzEtMCsGA1UEAxMk OWE2MmI5ZWMtMjBlYS00M2ZjLThmN2UtZGIyYzgyZTQxZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTKIJ2hkuxORwUH0L9mzk4dzh1+2Mp1kV32l TUwDFsQf2HiTh/0bmGz6CD2/SIS+XWmWo0OGds/RHdpzr/H9/rk2w1ck238xIJtP i2czttRCcVWyx/MyBnCIapqUXUW16EZDX0LDVPNJhHVbafy1PhJc5I3MAngTHBgs 4e7WqlOcd1rbAc2/WK86EQzd3kGYVvEqzNp/xndrK8s8Y7LhZjYk3+eNCGb+MZkK keeN9ujOJxnJPsDKmk5DOyP8t8gV7MOvJQR2YE/dvTDrlEBNgtxLd/MDfjDRvmCM 4ZGA/EHUFQFt5IHwhmZiGvgT1O+49nimWbage+Q7h+RN2uYlXwIDAQABo4IEVDCC BFAwHQYDVR0OBBYEFI3UNzuIKWVrwFALqrCO2GcL5PP5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 YTYyYjllYy0yMGVhLTQzZmMtOGY3ZS1kYjJjODJlNDFlYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzlhNjJiOWVjLTIwZWEtNDNmYy04 ZjdlLWRiMmM4MmU0MWViMy85YTYyYjllYy0yMGVhLTQzZmMtOGY3ZS1kYjJjODJl NDFlYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAJA7WADBAJo9TQDBAGJUxwDBACUOyoDBAChJv8D BADAi4cDBADMmIEDBAHY+vQwDQQCAAIwBwMFACYFxoAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAPcTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACBYXAYxqi6kMjqDa91Z1bXhcJAin6krWbBE Blbfa/MJlKioaJdoGCxPdQwKUml5/wCLIN3Svef6U+h+OFMP73bgCtmMvlibKRIf X1JqBxAdjome3MXKIA+y6pLq4sahnrkOYVlOxRPQdediEEVAPt0jZLoJHCVWpyNo IcQi9Y6VLYI8x+VkYkhN2CCEdA0z/jaMPxLZjzpyYv030eegQI0X8bT9MV5cnlbq iUtUQ+5Lps5XOWT8ygjrYbPC6wdH+g3ndQgoChsP+34lWbEuG2TFtzb+6jZlvHF5 tf3D/aV+ziANL+7eUhQtkHxRi5ISDTRBC1lQSjInL5OXw5NYKxQ= -----END CERTIFICATE-----Generated at Mon May 13 02:04:20 2024 by rpki-client on console-fra.rpki-client.org