$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer File: ac42ca24-d785-4ab8-81d3-baec3a30b660.cer (raw, json) Hash identifier: ZA3vI1E11x0XQXVYQKFByUyHmWdkAI1h3W9IeqIfNBs= Subject key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858431B0D13CB80C4C6C85CA70300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 04 Sep 2023 00:45:22 +0000 Certificate not after: Sun 07 Dec 2025 01:45:22 +0000 Subordinate resources: AS: 18786 AS: 18953 AS: 64211 AS: 393713 IP: 64.79.48.0/20 IP: 74.123.32.0/22 IP: 162.254.112.0/22 IP: 192.157.20.0/22 IP: 199.91.176.0/22 IP: 199.193.180.0/22 IP: 204.62.56.0/21 IP: 208.72.76.0/22 IP: 208.77.8.0/23 IP: 208.82.84.0/22 IP: 208.89.176.0/22 IP: 216.146.224.0/20 IP: 2605:ce80::/32 IP: 2606:c080::/32 IP: 2607:ffe8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:1b:0d:13:cb:80:c4:c6:c8:5c:a7:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 4 00:45:22 2023 GMT Not After : Dec 7 01:45:22 2025 GMT Subject: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:b1:6b:77:52:3d:a8:0a:1c:25:ef:38:70: 80:3f:c1:64:68:5c:2c:24:7d:e8:e9:51:3b:36:ba: ce:3a:65:ad:32:bc:19:3a:44:cd:a3:31:cb:7e:b1: b3:c0:c2:ac:74:17:37:fe:62:f9:1f:4f:bc:63:fc: 76:7b:64:27:48:74:7c:58:91:4b:ca:fd:ef:c6:e9: 6a:7b:d7:86:60:2c:54:d2:8c:65:fa:19:d7:1e:e9: 45:24:92:67:d0:65:8a:02:b0:08:ba:7f:b1:7e:42: b4:b8:f5:e1:2e:ac:f5:77:93:fe:8c:e8:85:14:7f: 3b:4a:1b:37:05:3d:52:6d:15:bf:59:ce:0f:5c:3f: b2:4e:2d:2e:fc:a2:0b:f7:0d:fc:c7:89:3d:50:42: 65:24:59:07:58:77:81:1b:35:34:a4:19:ad:ab:48: 61:be:f1:f3:0e:a4:5b:2c:7d:40:73:3c:ae:d6:20: cb:ff:5f:08:86:61:e5:17:a6:0d:71:0b:f2:4f:0b: 4f:c7:4b:fb:39:0a:73:e5:f3:f6:73:77:48:ec:cb: f4:04:9e:fa:60:cb:cd:f9:2f:b3:30:7f:91:b1:15: 95:d4:ed:86:8b:4c:4f:07:b4:5f:0f:e6:b3:c3:f1: 3f:4b:8c:92:0b:42:ca:11:0d:01:f9:21:21:40:a7: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.79.48.0/20 74.123.32.0/22 162.254.112.0/22 192.157.20.0/22 199.91.176.0/22 199.193.180.0/22 204.62.56.0/21 208.72.76.0/22 208.77.8.0/23 208.82.84.0/22 208.89.176.0/22 216.146.224.0/20 IPv6: 2605:ce80::/32 2606:c080::/32 2607:ffe8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18786 18953 64211 393713 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ed:54:6b:44:97:18:2c:88:e0:2c:29:62:a6:68:3c:a7:34: a3:41:f5:23:22:42:21:2e:4d:85:90:4e:2a:22:35:07:1a:a1: ad:cd:43:f0:6e:a2:c1:40:63:74:f8:46:82:8a:7d:df:53:ba: 4c:e8:d7:40:86:cb:79:da:bb:5c:99:d1:1c:c1:32:24:57:ae: f0:b9:64:0d:18:81:fe:54:28:8b:7e:3e:09:49:57:fa:04:75: 86:68:d6:7d:04:1c:37:53:5c:2a:d5:8c:5d:04:58:21:93:3f: dd:c1:de:3e:f6:74:4d:61:f3:6b:be:cc:db:22:3b:74:69:fc: c9:a0:d2:de:32:33:82:28:ca:b9:4f:da:1a:f4:87:0a:ff:68: aa:45:f1:e4:ae:20:2a:c3:db:51:62:7b:40:1f:15:09:1a:47: 46:00:35:c2:97:c0:c4:48:c5:8f:c4:6c:21:61:3c:97:91:af: 81:f3:09:cd:5d:55:b1:02:05:f3:46:c6:8d:34:ad:99:c5:3a: 01:71:fc:0a:0d:f0:2d:8e:99:ec:df:b4:61:b5:2f:a6:1f:af: e4:28:5b:69:38:84:43:e0:f8:c1:ea:11:fa:00:b8:60:e3:5f: 1e:25:64:0d:ae:76:e6:57:85:b5:c6:ad:76:1c:ed:b9:f4:1c: 25:94:02:c1 -----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWEMbDRPLgMTGyFynAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDkwNDAwNDUyMloXDTI1MTIwNzAxNDUyMlowLzEtMCsGA1UEAxMk YWM0MmNhMjQtZDc4NS00YWI4LTgxZDMtYmFlYzNhMzBiNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSWxa3dSPagKHCXvOHCAP8FkaFwsJH3o6VE7 NrrOOmWtMrwZOkTNozHLfrGzwMKsdBc3/mL5H0+8Y/x2e2QnSHR8WJFLyv3vxulq e9eGYCxU0oxl+hnXHulFJJJn0GWKArAIun+xfkK0uPXhLqz1d5P+jOiFFH87Shs3 BT1SbRW/Wc4PXD+yTi0u/KIL9w38x4k9UEJlJFkHWHeBGzU0pBmtq0hhvvHzDqRb LH1Aczyu1iDL/18IhmHlF6YNcQvyTwtPx0v7OQpz5fP2c3dI7Mv0BJ76YMvN+S+z MH+RsRWV1O2Gi0xPB7RfD+azw/E/S4ySC0LKEQ0B+SEhQKcaTwIDAQABo4IEhzCC BIMwHQYDVR0OBBYEFPS29e8Lg0l5a1BiWfA2Ro3nCB+vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h YzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2EzMGI2NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FjNDJjYTI0LWQ3ODUtNGFiOC04 MWQzLWJhZWMzYTMwYjY2MC9hYzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2Ez MGI2NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwfgYIKwYBBQUH AQcBAf8EbzBtME4EAgABMEgDBARATzADBAJKeyADBAKi/nADBALAnRQDBALHW7AD BALHwbQDBAPMPjgDBALQSEwDBAHQTQgDBALQUlQDBALQWbADBATYkuAwGwQCAAIw FQMFACYFzoADBQAmBsCAAwUAJgf/6DAnBggrBgEFBQcBCAEB/wQYMBagFDASAgJJ YgICSgkCAwD60wIDBgHxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFntVGtElxgsiOAsKWKmaDynNKNB9SMi QiEuTYWQTioiNQcaoa3NQ/BuosFAY3T4RoKKfd9Tukzo10CGy3nau1yZ0RzBMiRX rvC5ZA0Ygf5UKIt+PglJV/oEdYZo1n0EHDdTXCrVjF0EWCGTP93B3j72dE1h82u+ zNsiO3Rp/Mmg0t4yM4IoyrlP2hr0hwr/aKpF8eSuICrD21Fie0AfFQkaR0YANcKX wMRIxY/EbCFhPJeRr4HzCc1dVbECBfNGxo00rZnFOgFx/AoN8C2OmezftGG1L6Yf r+QoW2k4hEPg+MHqEfoAuGDjXx4lZA2uduZXhbXGrXYc7bn0HCWUAsE= -----END CERTIFICATE-----Generated at Mon May 13 17:12:35 2024 by rpki-client on console-ams.rpki-client.org