$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer File: 9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.cer (raw, json) Hash identifier: fKz8xP+jAM7kC3Lw6i7JiGYk9t7O2XXPpEq6+saBSmo= Subject key identifier: D8:04:99:C3:5D:E6:FD:0F:C1:4C:7F:69:43:0D:E6:05:64:7D:F8:3B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285842CE8745F26122A7CCE83FFF70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:20 +0000 Certificate not after: Sat 11 Oct 2025 00:45:16 +0000 Subordinate resources: IP: 173.195.104.0/23 IP: 2606:37c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:45:f2:61:22:a7:cc:e8:3f:ff:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 7 14:54:20 2023 GMT Not After : Oct 11 00:45:16 2025 GMT Subject: CN=9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1a:9d:f3:11:ed:b0:c4:11:98:32:5a:2f:d1: b5:f4:de:56:89:05:3b:57:b4:5e:80:ad:fb:da:a6: b6:29:5b:98:33:e7:35:cd:01:35:b4:34:4f:79:43: 13:a4:83:be:f9:97:89:43:d7:18:6a:5c:b4:a7:40: 54:aa:73:2b:1a:a0:fb:f1:f7:ab:57:79:36:51:5c: 1b:5b:a6:9c:e3:7e:01:31:18:58:7d:dc:6f:a4:ed: 27:71:0a:cb:58:a4:17:56:a4:8c:6e:9c:22:c7:a3: 6d:6f:65:1a:7d:87:a3:60:9c:2a:ed:15:71:11:04: 69:47:98:a3:0d:36:e1:d8:91:38:41:4a:df:27:8f: 38:a2:35:4f:2f:01:0f:d6:f5:2b:9d:c2:28:3a:df: 22:ff:6a:7b:c9:3f:77:27:23:e7:5b:88:87:8e:8d: b4:5b:c6:97:e0:11:77:6f:e9:08:1e:a4:23:2d:ab: e5:be:82:42:bd:56:06:72:0f:b2:20:41:20:c4:d4: 7f:c1:6d:08:0c:bf:e4:3b:d1:c7:ea:56:ab:08:d5: 23:ce:de:c2:79:84:3c:42:f3:50:2d:78:b8:29:ce: 2d:53:3c:99:0e:f8:da:e0:ab:09:ee:3d:0f:47:c1: e3:5f:5a:cf:67:f0:45:70:17:bb:9b:03:81:23:ee: 92:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:04:99:C3:5D:E6:FD:0F:C1:4C:7F:69:43:0D:E6:05:64:7D:F8:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4/9c48cd25-c529-44a9-a7ae-f3e4bf72d9b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 173.195.104.0/23 IPv6: 2606:37c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:89:67:57:29:c3:ab:ff:a5:db:75:0b:a3:c7:59:6d:9b:00: 1a:50:9c:cd:85:80:5c:8a:6e:ed:d8:cc:55:c6:5f:aa:a9:ad: 2c:5d:41:80:b0:c3:fa:1b:3c:07:87:24:7c:0c:a8:2c:16:9b: 2f:2d:eb:b1:6f:20:41:ee:5b:b1:0e:a4:f9:47:be:c8:1d:ff: a3:cb:e8:04:a9:3b:f6:f4:fe:5f:da:11:af:2a:c0:dd:cc:f5: df:76:53:65:75:e1:a5:72:0f:2d:8a:51:71:7b:05:2a:68:60: af:87:1f:cd:f7:f5:71:87:ad:e9:f5:94:5d:a5:be:33:36:7f: 45:33:27:cf:18:b9:e3:b9:dd:34:b2:b5:55:f0:68:92:39:d8: e4:b6:4b:f7:78:ca:77:bb:5f:c9:5a:9a:28:26:fd:d2:83:e5: 17:09:73:b9:cc:03:13:57:80:b3:60:d7:0c:a8:29:49:33:b2: 8b:46:02:19:35:8d:87:c4:3d:49:2c:a1:16:f1:c6:7a:aa:5c: 44:2b:ec:94:c9:44:12:ac:42:7b:42:d8:8f:56:1b:0c:53:1b: a2:9c:02:a3:7c:5a:b8:35:8c:7e:64:02:69:f9:30:41:79:d4: 6d:9a:18:c1:33:16:5e:53:c5:8c:ad:86:61:ad:02:5a:d4:d4: 1f:43:a6:52 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWELOh0XyYSKnzOg//3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDgwNzE0NTQyMFoXDTI1MTAxMTAwNDUxNlowLzEtMCsGA1UEAxMk OWM0OGNkMjUtYzUyOS00NGE5LWE3YWUtZjNlNGJmNzJkOWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRqd8xHtsMQRmDJaL9G19N5WiQU7V7RegK37 2qa2KVuYM+c1zQE1tDRPeUMTpIO++ZeJQ9cYaly0p0BUqnMrGqD78ferV3k2UVwb W6ac434BMRhYfdxvpO0ncQrLWKQXVqSMbpwix6Ntb2UafYejYJwq7RVxEQRpR5ij DTbh2JE4QUrfJ484ojVPLwEP1vUrncIoOt8i/2p7yT93JyPnW4iHjo20W8aX4BF3 b+kIHqQjLavlvoJCvVYGcg+yIEEgxNR/wW0IDL/kO9HH6larCNUjzt7CeYQ8QvNQ LXi4Kc4tUzyZDvja4KsJ7j0PR8HjX1rPZ/BFcBe7mwOBI+6SwwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFNgEmcNd5v0PwUx/aUMN5gVkffg7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 YzQ4Y2QyNS1jNTI5LTQ0YTktYTdhZS1mM2U0YmY3MmQ5YjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzljNDhjZDI1LWM1MjktNDRhOS1h N2FlLWYzZTRiZjcyZDliNC85YzQ4Y2QyNS1jNTI5LTQ0YTktYTdhZS1mM2U0YmY3 MmQ5YjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAGtw2gwDQQCAAIwBwMFACYGN8AwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA VIlnVynDq/+l23ULo8dZbZsAGlCczYWAXIpu7djMVcZfqqmtLF1BgLDD+hs8B4ck fAyoLBabLy3rsW8gQe5bsQ6k+Ue+yB3/o8voBKk79vT+X9oRryrA3cz133ZTZXXh pXIPLYpRcXsFKmhgr4cfzff1cYet6fWUXaW+MzZ/RTMnzxi547ndNLK1VfBokjnY 5LZL93jKd7tfyVqaKCb90oPlFwlzucwDE1eAs2DXDKgpSTOyi0YCGTWNh8Q9SSyh FvHGeqpcRCvslMlEEqxCe0LYj1YbDFMbopwCo3xauDWMfmQCafkwQXnUbZoYwTMW XlPFjK2GYa0CWtTUH0OmUg== -----END CERTIFICATE-----Generated at Mon May 13 01:45:28 2024 by rpki-client on console-ams.rpki-client.org