$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer File: b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.cer (raw, json) Hash identifier: dByrpcbgY0xfjes/PoOurGBXD/r1gEt3KkBCnt3pjJs= Subject key identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844DCA2F88E4BF947E47CBF8E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Feb 2024 01:45:20 +0000 Certificate not after: Sun 17 May 2026 00:45:20 +0000 Subordinate resources: IP: 64.45.64.0/18 IP: 65.18.0.0 -- 65.18.111.255 IP: 141.114.0.0/16 IP: 204.197.0.0/17 IP: 207.166.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:dc:a2:f8:8e:4b:f9:47:e4:7c:bf:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 12 01:45:20 2024 GMT Not After : May 17 00:45:20 2026 GMT Subject: CN=b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f1:07:d1:b3:61:56:9b:39:2f:d1:7e:e3:32: aa:ae:74:37:60:ba:6d:45:5f:f3:22:0c:c6:67:ae: fc:2b:50:97:47:2c:66:95:94:f3:d6:c1:fc:18:90: 90:4b:97:09:b3:b5:ff:e4:36:32:35:f9:2d:a6:f4: 8c:2c:22:f0:09:7d:17:4e:a9:86:9b:d6:78:1d:05: 9f:14:59:b3:4e:ae:13:3c:ab:39:9b:8c:82:5c:ce: 01:a8:fb:2e:6f:c2:51:d9:77:3e:9b:09:11:b3:49: 2c:9b:e7:ba:8e:02:92:eb:f0:d4:7e:cb:5f:f3:2f: 85:4c:67:e3:8c:01:56:38:71:c8:30:18:6c:10:90: fc:6a:e9:11:83:d2:0f:7c:0d:c2:98:40:af:cb:19: 9d:68:93:b0:3f:b0:1e:16:f8:87:7c:10:6b:d4:8f: 1d:51:82:7d:09:55:a0:80:85:49:a0:2f:8e:ee:b3: b0:de:50:1a:ce:c4:d1:3a:76:ff:06:0a:f8:f0:04: e5:cf:62:9a:bf:7b:9f:d3:02:eb:fd:63:8f:e7:3a: 4e:f9:d2:88:0b:b5:3f:ec:8f:b3:43:a7:41:1e:8b: 94:f1:86:66:aa:96:76:c4:3c:91:5d:b8:81:e5:53: a3:a9:66:64:e3:67:eb:5c:18:50:12:f7:09:53:c3: 94:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:6B:5F:18:8A:61:5B:23:82:C3:F2:A9:75:14:55:A5:21:B1:87:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d/b17ce22b-61a0-4ae9-9cc0-f50f3bb7530d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.45.64.0/18 65.18.0.0-65.18.111.255 141.114.0.0/16 204.197.0.0/17 207.166.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2b:c5:93:76:9a:6e:a9:e2:b3:12:7c:13:22:db:0a:1a:09: bc:0b:a0:5a:09:c7:76:14:a4:04:32:2f:22:5a:20:f5:9a:75: 06:83:63:02:ca:f3:4e:db:b2:ca:70:6b:0f:a6:69:4f:25:45: 94:6b:7d:5b:bc:67:21:bd:67:03:f4:81:60:54:7d:f5:5e:7d: 94:d3:88:04:b1:45:16:c9:6b:48:bd:29:53:17:9e:60:dd:a9: d8:8d:d3:c6:f0:18:53:81:e0:14:41:cc:23:0b:9f:0c:cb:96: 6a:44:10:c0:af:b1:be:5d:70:9a:1a:d1:7d:33:2e:db:59:b2: 29:0a:02:db:09:be:1d:32:f2:7c:71:0c:c8:84:a6:17:87:eb: 7b:73:ca:50:46:5e:88:ef:8f:62:66:34:4c:5a:19:8d:fa:2a: 17:d9:2a:d1:90:d6:24:be:21:9a:00:04:e7:36:e4:65:6c:59: 3f:64:1b:21:b1:b3:be:0f:0a:1d:78:33:f3:38:6d:6f:58:16: 90:7f:f0:ff:65:dd:47:77:3a:14:16:97:18:9b:0a:ad:3e:53: 38:d1:e5:c3:65:8f:73:5b:95:11:a2:2e:98:26:ba:8a:92:63: 4e:99:94:57:0c:43:bc:44:e7:71:92:01:34:de:4e:1d:51:d6: 45:4c:34:9e -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWETcoviOS/lH5Hy/jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDIxMjAxNDUyMFoXDTI2MDUxNzAwNDUyMFowLzEtMCsGA1UEAxMk YjE3Y2UyMmItNjFhMC00YWU5LTljYzAtZjUwZjNiYjc1MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PEH0bNhVps5L9F+4zKqrnQ3YLptRV/zIgzG Z678K1CXRyxmlZTz1sH8GJCQS5cJs7X/5DYyNfktpvSMLCLwCX0XTqmGm9Z4HQWf FFmzTq4TPKs5m4yCXM4BqPsub8JR2Xc+mwkRs0ksm+e6jgKS6/DUfstf8y+FTGfj jAFWOHHIMBhsEJD8aukRg9IPfA3CmECvyxmdaJOwP7AeFviHfBBr1I8dUYJ9CVWg gIVJoC+O7rOw3lAazsTROnb/Bgr48ATlz2Kav3uf0wLr/WOP5zpO+dKIC7U/7I+z Q6dBHouU8YZmqpZ2xDyRXbiB5VOjqWZk42frXBhQEvcJU8OUswIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFLdrXxiKYVsjgsPyqXUUVaUhsYfhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2JiNzUzMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IxN2NlMjJiLTYxYTAtNGFlOS05 Y2MwLWY1MGYzYmI3NTMwZC9iMTdjZTIyYi02MWEwLTRhZTktOWNjMC1mNTBmM2Ji NzUzMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMCoEAgABMCQDBAZALUAwCwMDAUESAwQEQRJgAwMAjXIDBAfMxQAD BAXPpuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAcivFk3aabqnisxJ8EyLbChoJvAugWgnHdhSkBDIvIlog 9Zp1BoNjAsrzTtuyynBrD6ZpTyVFlGt9W7xnIb1nA/SBYFR99V59lNOIBLFFFslr SL0pUxeeYN2p2I3TxvAYU4HgFEHMIwufDMuWakQQwK+xvl1wmhrRfTMu21myKQoC 2wm+HTLyfHEMyISmF4fre3PKUEZeiO+PYmY0TFoZjfoqF9kq0ZDWJL4hmgAE5zbk ZWxZP2QbIbGzvg8KHXgz8zhtb1gWkH/w/2XdR3c6FBaXGJsKrT5TONHlw2WPc1uV EaIumCa6ipJjTpmUVwxDvETncZIBNN5OHVHWRUw0ng== -----END CERTIFICATE-----Generated at Sun May 12 15:25:52 2024 by rpki-client on console-ams.rpki-client.org