$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer File: b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer (raw, json) Hash identifier: aVpRBs+aq5iBhr+QNxMplSm38/cdgdLU31mG0BMizgQ= Subject key identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858423E80FC5B3E07B8AF6ED64C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 17 Jun 2023 00:45:16 +0000 Certificate not after: Fri 19 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 6491 IP: 204.89.198.0/24 IP: 206.197.69.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:3e:80:fc:5b:3e:07:b8:af:6e:d6:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 17 00:45:16 2023 GMT Not After : Sep 19 00:45:16 2025 GMT Subject: CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a8:c2:41:10:ad:af:80:66:10:d9:86:3f:08: 4b:e0:c8:4b:24:5a:21:9e:e0:59:db:32:cc:c8:dd: df:ce:56:76:c0:bd:8d:62:8c:4e:91:8d:07:79:a9: 12:f8:be:70:f9:fd:62:11:20:17:a9:f2:2e:54:c3: 15:5f:88:11:89:a4:36:4c:46:21:68:78:4e:c7:e3: 7e:83:ff:0c:f0:b3:a6:d2:14:ae:d4:1e:7c:01:71: d9:35:11:b8:26:32:89:9e:02:45:13:4f:f1:66:09: 5f:a4:86:27:b1:96:b0:c8:22:d6:4d:e7:4f:92:33: cb:a2:da:e6:7c:68:0f:86:58:ec:ce:df:ed:42:db: 6c:27:c0:43:be:34:ee:da:b7:e9:cb:f7:6c:18:23: c1:fe:ca:5e:50:25:3a:ec:1a:7b:a0:f1:f2:8b:02: 0c:8c:54:7b:f4:f4:2d:c1:fc:c4:f5:e2:89:9b:c5: 62:e1:8d:70:6d:0a:08:9d:1a:04:82:40:1d:73:64: e9:9a:61:2f:f6:a9:2a:33:7b:3e:c5:be:c1:21:0a: 01:05:44:29:20:2d:ee:3f:58:4f:89:aa:93:4a:00: bf:54:a1:d3:02:48:cc:82:ba:e9:89:58:ed:51:2a: 2d:c6:a1:c1:ed:56:aa:69:a1:42:1e:14:dd:f2:a7: a2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.89.198.0/24 206.197.69.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6491 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:22:0f:0c:dd:11:9f:ff:f9:ea:82:8e:80:01:38:fc:c5:42: ba:45:d0:37:42:2e:75:76:1e:9d:86:ce:38:1d:7a:d2:f7:9e: 0a:53:d7:d6:9a:f7:b4:56:c3:a2:71:3e:c1:28:1d:4d:21:86: 6b:38:65:81:89:84:80:3e:11:9f:4e:07:32:fa:a0:e8:3e:21: 64:b7:69:b7:3f:87:e3:b9:b3:2e:03:74:e5:17:3f:02:32:0f: 03:fc:51:1f:68:23:92:d6:ed:45:3d:66:b7:41:25:71:da:20: 01:1a:a2:f5:67:87:3a:8e:fe:6a:a3:6b:63:15:d1:21:fe:e9: 04:1e:fe:83:05:2a:68:df:4a:ee:78:e1:df:04:44:d0:3f:26: 4d:71:21:91:69:d3:fb:5c:b3:85:8b:de:e1:8d:f4:ce:8c:a9: 67:bb:1a:7a:56:33:a3:c4:fc:76:95:01:8f:8c:b2:7b:22:4a: 75:9f:be:21:63:de:e6:b7:37:75:42:32:c8:f6:b3:9a:82:47: 97:77:44:5d:c8:92:44:80:79:90:9f:63:d6:3f:96:16:ca:cb: dc:6b:b2:a3:22:9f:69:9d:c7:7e:49:45:30:ec:bb:16:82:c7: 7f:d3:fd:84:37:10:5b:5c:19:de:ff:58:af:49:8a:b1:f4:b7: 85:f4:b6:9b -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEI+gPxbPge4r27WTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDYxNzAwNDUxNloXDTI1MDkxOTAwNDUxNlowLzEtMCsGA1UEAxMk YjJjZDBkNTEtOGI5OS00MmM4LTkxYWYtMmZmMzRhNDRhZTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ajCQRCtr4BmENmGPwhL4MhLJFohnuBZ2zLM yN3fzlZ2wL2NYoxOkY0HeakS+L5w+f1iESAXqfIuVMMVX4gRiaQ2TEYhaHhOx+N+ g/8M8LOm0hSu1B58AXHZNRG4JjKJngJFE0/xZglfpIYnsZawyCLWTedPkjPLotrm fGgPhljszt/tQttsJ8BDvjTu2rfpy/dsGCPB/speUCU67Bp7oPHyiwIMjFR79PQt wfzE9eKJm8Vi4Y1wbQoInRoEgkAdc2TpmmEv9qkqM3s+xb7BIQoBBUQpIC3uP1hP iaqTSgC/VKHTAkjMgrrpiVjtUSotxqHB7VaqaaFCHhTd8qeiMwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBscQ/2AajCo40MRRsLWeOJLv/AUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MmNkMGQ1MS04Yjk5LTQyYzgtOTFhZi0yZmYzNGE0NGFlOTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IyY2QwZDUxLThiOTktNDJjOC05 MWFmLTJmZjM0YTQ0YWU5My9iMmNkMGQ1MS04Yjk5LTQyYzgtOTFhZi0yZmYzNGE0 NGFlOTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADMWcYDBADOxUUwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICGVswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAFSIPDN0Rn//56oKOgAE4/MVCukXQN0IudXYenYbO OB160veeClPX1pr3tFbDonE+wSgdTSGGazhlgYmEgD4Rn04HMvqg6D4hZLdptz+H 47mzLgN05Rc/AjIPA/xRH2gjktbtRT1mt0ElcdogARqi9WeHOo7+aqNrYxXRIf7p BB7+gwUqaN9K7njh3wRE0D8mTXEhkWnT+1yzhYve4Y30zoypZ7saelYzo8T8dpUB j4yyeyJKdZ++IWPe5rc3dUIyyPazmoJHl3dEXciSRIB5kJ9j1j+WFsrL3GuyoyKf aZ3HfklFMOy7FoLHf9P9hDcQW1wZ3v9Yr0mKsfS3hfS2mw== -----END CERTIFICATE-----Generated at Sun May 12 15:05:27 2024 by rpki-client on console-fra.rpki-client.org