$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4.cer File: a920645f-6928-416c-87e9-a0135e5720e4.cer (raw, json) Hash identifier: 0sTfeMK6T/7jobFRUhMRdKBA6QNWkv7xpVjY4I6JqVk= Subject key identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285842792159998F171556B66DB880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Jul 2023 00:45:16 +0000 Certificate not after: Fri 10 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 13657 IP: 67.215.192.0/20 IP: 104.242.0.0 -- 104.242.223.255 IP: 216.235.0.0/20 IP: 2001:4900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:79:21:59:99:8f:17:15:56:b6:6d:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 8 00:45:16 2023 GMT Not After : Oct 10 00:45:16 2025 GMT Subject: CN=a920645f-6928-416c-87e9-a0135e5720e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8f:07:6f:ae:ef:ee:08:b1:c5:9d:f1:96:83: 36:e1:53:e1:0d:e5:da:c8:2c:28:0e:86:7c:a1:96: ce:92:02:3a:2e:4c:18:d3:7a:aa:cc:30:91:d7:79: 7a:30:95:e8:c6:5d:2d:60:53:14:c6:3e:56:20:92: 98:fe:50:3b:c5:20:56:b7:56:f9:ed:7c:1c:00:be: c7:42:a8:fb:7c:68:0f:c0:b3:cf:b7:57:69:ed:2b: 6c:e9:57:7e:83:64:d7:fb:28:57:42:08:bd:d6:8e: 6e:39:e2:a3:eb:a8:dd:72:45:7f:ef:1a:d3:a8:9b: 91:f6:d1:5f:60:09:48:ec:0d:7e:23:e0:89:0f:fe: 0c:f5:52:65:3f:bc:ab:7a:b2:a5:0b:2d:aa:fb:29: 0c:da:8b:9a:90:61:90:38:c3:45:0d:70:73:ae:f0: 4d:f9:c0:f0:23:65:7b:34:ae:bf:31:20:4c:d2:1d: 1e:b0:1a:fa:66:0e:81:00:a5:e0:2e:d6:f0:0d:fa: d3:49:6c:89:3d:21:a9:5d:72:2d:04:1d:ac:9a:5c: a5:e6:3f:2f:76:92:e7:e3:de:64:39:a0:f8:c2:b0: 00:6f:d1:1f:95:9c:68:d2:f0:ff:c2:1c:3d:2b:db: d2:45:43:50:2d:6a:b8:e1:a0:10:85:a9:cd:ef:10: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7A:36:95:23:AE:89:31:10:84:05:B7:7D:52:6F:5F:91:94:48:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a920645f-6928-416c-87e9-a0135e5720e4/a920645f-6928-416c-87e9-a0135e5720e4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 67.215.192.0/20 104.242.0.0-104.242.223.255 216.235.0.0/20 IPv6: 2001:4900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13657 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:be:c4:48:f4:b7:ed:f2:cb:c9:b5:ac:32:e4:56:e8:00:b1: c3:6b:9c:ae:27:93:8c:50:7f:2d:06:58:19:46:b3:99:f1:72: 87:47:9c:e3:aa:ea:81:02:9d:45:eb:d6:97:69:d5:93:f1:7b: b4:f6:0b:10:70:95:d2:76:f9:1d:af:7f:17:72:29:a3:7d:0c: 23:9b:4e:09:7c:27:85:c4:e7:f5:5a:4e:d8:1d:c3:45:84:a9: 7b:76:a6:69:e2:43:ec:08:9a:75:3a:31:89:75:44:5a:0a:49: 03:7a:7b:8a:4c:51:03:95:3d:0d:c0:b0:6b:d1:96:7a:85:a7: 7e:af:cf:17:39:3e:ef:19:36:04:d8:76:c2:bc:ba:ed:06:0f: 95:04:89:3c:d7:49:94:b4:fd:c0:a8:a2:b6:fa:4c:f1:c1:8b: 4f:09:cb:b7:e3:9a:77:87:e3:b6:3e:7c:8b:1f:b7:72:e5:c9: 0c:ba:51:e4:c3:c0:f5:d0:75:48:b1:8f:28:14:cd:5a:c2:f0: 2b:2a:53:ad:6d:93:77:9c:2f:07:c9:8c:b8:64:ba:8b:6f:39: 3b:b8:2f:0a:16:63:7e:e0:e7:e5:36:1b:39:9b:ca:02:ff:ef: 55:bb:2d:a2:c8:ed:64:98:e8:22:82:3e:07:13:00:09:e7:0e: 79:29:98:18 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEJ5IVmZjxcVVrZtuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDcwODAwNDUxNloXDTI1MTAxMDAwNDUxNlowLzEtMCsGA1UEAxMk YTkyMDY0NWYtNjkyOC00MTZjLTg3ZTktYTAxMzVlNTcyMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY8Hb67v7gixxZ3xloM24VPhDeXayCwoDoZ8 oZbOkgI6LkwY03qqzDCR13l6MJXoxl0tYFMUxj5WIJKY/lA7xSBWt1b57XwcAL7H Qqj7fGgPwLPPt1dp7Sts6Vd+g2TX+yhXQgi91o5uOeKj66jdckV/7xrTqJuR9tFf YAlI7A1+I+CJD/4M9VJlP7yrerKlCy2q+ykM2ouakGGQOMNFDXBzrvBN+cDwI2V7 NK6/MSBM0h0esBr6Zg6BAKXgLtbwDfrTSWyJPSGpXXItBB2smlyl5j8vdpLn495k OaD4wrAAb9EflZxo0vD/whw9K9vSRUNQLWq44aAQhanN7xB1/QIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFA56NpUjrokxEIQFt31Sb1+RlEgpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h OTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1NzIwZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2E5MjA2NDVmLTY5MjgtNDE2Yy04 N2U5LWEwMTM1ZTU3MjBlNC9hOTIwNjQ1Zi02OTI4LTQxNmMtODdlOS1hMDEzNWU1 NzIwZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB8EAgABMBkDBARD18AwCwMDAWjyAwQFaPLAAwQE2OsAMA0EAgAC MAcDBQAgAUkAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjVZMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABe+ xEj0t+3yy8m1rDLkVugAscNrnK4nk4xQfy0GWBlGs5nxcodHnOOq6oECnUXr1pdp 1ZPxe7T2CxBwldJ2+R2vfxdyKaN9DCObTgl8J4XE5/VaTtgdw0WEqXt2pmniQ+wI mnU6MYl1RFoKSQN6e4pMUQOVPQ3AsGvRlnqFp36vzxc5Pu8ZNgTYdsK8uu0GD5UE iTzXSZS0/cCoorb6TPHBi08Jy7fjmneH47Y+fIsft3LlyQy6UeTDwPXQdUixjygU zVrC8CsqU61tk3ecLwfJjLhkuotvOTu4LwoWY37g5+U2GzmbygL/71W7LaLI7WSY 6CKCPgcTAAnnDnkpmBg= -----END CERTIFICATE-----Generated at Mon May 13 02:04:22 2024 by rpki-client on console-fra.rpki-client.org