$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47.cer File: afc9c4c7-de4a-4066-870e-383d770d6d47.cer (raw, json) Hash identifier: VFihvB3QgM56bZ5wt+eSIlWeTjSiOJ9CYAVs0p5S1Ko= Subject key identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584543D0825E05E48303C0563960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 20 Mar 2024 00:45:21 +0000 Certificate not after: Tue 23 Jun 2026 00:45:21 +0000 Subordinate resources: AS: 14500 IP: 68.70.144.0/20 IP: 173.244.80.0/20 IP: 192.151.132.0/22 IP: 199.182.116.0/22 IP: 2607:72c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:43:d0:82:5e:05:e4:83:03:c0:56:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 20 00:45:21 2024 GMT Not After : Jun 23 00:45:21 2026 GMT Subject: CN=afc9c4c7-de4a-4066-870e-383d770d6d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:c0:f5:4a:c3:38:0c:e3:0a:84:33:17:37: 0a:ca:dd:ab:39:dc:17:09:f2:7a:fd:e3:a4:17:56: 97:73:63:18:45:6c:b4:c5:d4:78:4f:2e:ff:50:44: 2e:fc:fb:f8:da:06:28:d3:1d:63:13:17:37:d8:bc: d5:f6:07:d1:90:d9:ca:fc:76:00:7e:f4:2d:ea:84: d7:1a:84:76:ff:b1:9f:69:9b:7c:cf:5b:47:87:aa: 53:e5:b7:8a:97:8f:df:7e:90:7b:89:21:40:01:ea: c3:09:89:03:26:22:f7:40:53:89:3d:cf:0b:b5:6c: ef:93:bc:83:7e:97:52:bc:b5:98:24:08:a4:c2:c8: 66:27:cf:0d:ee:29:25:94:86:9c:43:58:e6:27:ca: 80:e3:f7:59:f8:a0:6d:14:75:0a:da:cb:1d:20:be: 03:b6:00:bc:c9:3e:6b:5a:d1:db:a4:42:26:1c:83: c7:40:54:3d:89:1a:85:22:79:52:84:8e:b5:2b:9a: bd:4b:43:90:15:6c:97:14:5b:ad:b3:1b:e8:7e:3f: 70:c9:30:39:95:24:67:52:dd:8e:25:07:f8:ed:cb: 9c:a6:fb:0f:12:c3:38:b8:8b:59:09:5b:63:fc:b6: 6a:45:20:20:9f:4c:02:d9:be:5d:10:d1:03:19:04: a8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:C1:BE:D9:BF:A4:7E:8F:5C:B0:0B:D4:F8:82:50:30:CC:D9:F2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/afc9c4c7-de4a-4066-870e-383d770d6d47/afc9c4c7-de4a-4066-870e-383d770d6d47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 68.70.144.0/20 173.244.80.0/20 192.151.132.0/22 199.182.116.0/22 IPv6: 2607:72c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14500 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:66:cc:a7:d6:85:62:d0:cb:cc:41:b7:fb:79:64:05:2d:5c: 9c:e9:a2:3e:c1:1c:3f:cc:bd:b2:80:b1:58:2d:dd:41:ae:5b: 09:15:4f:08:b0:a6:0f:84:51:8e:86:38:e8:95:79:2c:d0:1d: e7:72:86:98:fb:a9:8e:1c:8e:6e:13:ef:cb:8f:76:f7:1d:a0: 17:09:0a:8b:36:ac:9e:41:70:94:2a:a3:38:76:62:6f:e9:3c: c1:a6:80:d8:d9:ff:61:3d:b7:39:4e:50:2f:09:70:68:2a:a3: ba:98:95:13:2f:49:d0:a8:0c:45:a8:fe:cb:bd:04:de:08:d2: 35:7d:26:07:fd:21:a1:da:9c:6a:f9:6c:04:42:d3:ac:69:ea: ae:90:ce:e0:b0:a9:c4:0b:9e:0c:a8:3c:a3:e3:6b:fb:19:04: b2:2b:ac:21:34:f6:bd:3e:83:5a:d5:40:5a:15:2e:ab:02:ba: 27:a6:c9:b8:96:78:fa:b8:ac:80:ec:a7:c4:78:67:d2:95:90: 14:21:4b:69:ce:9a:f0:2f:1d:a5:4b:97:b4:33:74:2f:ce:6a: b2:f3:e6:de:16:14:1f:6d:00:95:9c:ce:8a:27:12:b4:cb:83: ef:ce:0f:4b:71:e9:f9:a9:b1:c7:62:cd:ae:46:ae:7c:d9:84: 06:4a:32:fb -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEVD0IJeBeSDA8BWOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDMyMDAwNDUyMVoXDTI2MDYyMzAwNDUyMVowLzEtMCsGA1UEAxMk YWZjOWM0YzctZGU0YS00MDY2LTg3MGUtMzgzZDc3MGQ2ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9PA9UrDOAzjCoQzFzcKyt2rOdwXCfJ6/eOk F1aXc2MYRWy0xdR4Ty7/UEQu/Pv42gYo0x1jExc32LzV9gfRkNnK/HYAfvQt6oTX GoR2/7GfaZt8z1tHh6pT5beKl4/ffpB7iSFAAerDCYkDJiL3QFOJPc8LtWzvk7yD fpdSvLWYJAikwshmJ88N7ikllIacQ1jmJ8qA4/dZ+KBtFHUK2ssdIL4DtgC8yT5r WtHbpEImHIPHQFQ9iRqFInlShI61K5q9S0OQFWyXFFutsxvofj9wyTA5lSRnUt2O JQf47cucpvsPEsM4uItZCVtj/LZqRSAgn0wC2b5dENEDGQSoewIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFF19wb7Zv6R+j1ywC9T4glAwzNnyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h ZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcwZDZkNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FmYzljNGM3LWRlNGEtNDA2Ni04 NzBlLTM4M2Q3NzBkNmQ0Ny9hZmM5YzRjNy1kZTRhLTQwNjYtODcwZS0zODNkNzcw ZDZkNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARERpADBASt9FADBALAl4QDBALHtnQwDQQCAAIw BwMFACYHcsAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICOKQwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAe2bM p9aFYtDLzEG3+3lkBS1cnOmiPsEcP8y9soCxWC3dQa5bCRVPCLCmD4RRjoY46JV5 LNAd53KGmPupjhyObhPvy4929x2gFwkKizasnkFwlCqjOHZib+k8waaA2Nn/YT23 OU5QLwlwaCqjupiVEy9J0KgMRaj+y70E3gjSNX0mB/0hodqcavlsBELTrGnqrpDO 4LCpxAueDKg8o+Nr+xkEsiusITT2vT6DWtVAWhUuqwK6J6bJuJZ4+risgOynxHhn 0pWQFCFLac6a8C8dpUuXtDN0L85qsvPm3hYUH20AlZzOiicStMuD784PS3Hp+amx x2LNrkaufNmEBkoy+w== -----END CERTIFICATE-----Generated at Mon May 13 19:44:43 2024 by rpki-client on console-ams.rpki-client.org