$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a.cer File: b65380d4-1db9-4ed1-a660-7ee094b9800a.cer (raw, json) Hash identifier: oqohq9L9C9mEScFOGn6SYIh4FrDJjPyKBshWRwVdUzU= Subject key identifier: 41:85:92:1A:28:4A:58:5E:31:D8:A5:10:23:34:62:66:20:80:49:46 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285841E4835099C7DCB2F08CC199E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Thu 10 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 39987 IP: 64.49.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:50:99:c7:dc:b2:f0:8c:c1:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 10 19:06:39 2025 GMT Subject: CN=b65380d4-1db9-4ed1-a660-7ee094b9800a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:49:62:19:14:0c:b9:e0:ba:00:8d:9d:c0: 8f:f0:5f:43:19:1a:7c:f1:47:04:65:94:e2:de:ba: b0:d5:e7:39:57:dc:1b:8a:e1:a6:4e:6e:b1:db:26: ff:c4:86:7b:f9:9d:fb:d9:97:40:92:f5:d7:67:e8: 4f:40:0f:a8:92:5c:2f:64:10:32:84:17:c0:e8:05: f6:b2:3d:3f:0e:e2:ea:78:4e:2c:3b:1d:ac:96:7c: 54:af:b9:97:15:97:6a:e6:90:42:11:ca:6c:88:cd: 45:5d:a2:51:30:46:0f:c0:75:fd:56:83:32:2e:5d: 1e:64:68:b8:1d:d5:36:8c:7b:e0:b9:de:8d:d6:19: 36:51:42:e7:57:2f:92:9f:70:84:8b:4c:84:9d:70: 6c:dc:93:d9:7c:45:05:b7:33:72:25:71:42:46:5f: 12:30:cb:05:25:74:f8:50:ef:d4:66:27:2e:c3:b7: cf:31:c3:a5:5f:21:e6:67:a0:b5:01:52:22:1e:fd: bb:b5:09:b8:b4:27:f5:e2:03:c0:35:18:5a:9b:3e: 3f:ad:61:b1:9a:58:ae:36:ac:10:18:74:d4:06:57: 2d:d5:23:41:06:c9:80:01:be:cc:c8:40:23:8d:20: a6:37:01:f9:95:5e:bb:d5:5a:fb:7c:4a:50:60:e9: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:92:1A:28:4A:58:5E:31:D8:A5:10:23:34:62:66:20:80:49:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.49.112.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39987 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:30:38:73:3f:51:c7:30:ee:a8:ec:b6:97:e8:91:b0:0d:b7: a6:ee:1e:89:78:ed:55:66:54:63:c2:f6:2d:91:11:0e:22:a8: de:54:c8:f9:f9:d4:6d:42:39:f2:ed:cf:96:02:0c:d7:44:a4: 21:8c:18:bb:40:c0:23:06:51:b3:80:a2:07:f2:e1:1f:bb:42: 49:14:6c:81:62:6c:a7:63:a0:23:bc:99:95:57:c5:d8:a4:48: 9c:fd:93:c5:44:cf:2c:64:50:e6:da:bb:f7:80:3c:70:db:63: 18:0b:1f:81:8d:28:7d:f1:d7:e6:6e:8c:e2:a7:14:c6:4d:d8: 3f:19:9c:25:34:7f:04:08:90:c6:1f:36:64:3a:0d:a9:af:41: 00:75:d5:02:1a:09:ea:48:ab:ac:ac:1b:c4:28:aa:77:08:8e: a8:e4:95:21:1a:87:53:27:0b:10:e7:0f:f7:7e:1a:2c:ff:fc: 35:e9:2d:fa:f3:78:38:25:29:b8:12:b9:97:bd:43:ba:89:80: 94:02:d8:e6:ee:fa:90:9e:04:e3:1f:72:ed:ef:75:81:fa:80: 35:bb:2d:34:de:72:b7:b8:05:7d:d0:6c:91:3e:24:f4:54:50: 4e:24:98:91:ed:ec:51:5e:8c:34:e5:ae:75:7c:65:51:42:74: 5f:b2:c9:26 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEHkg1CZx9yy8IzBmeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcxMDE5MDYzOVowLzEtMCsGA1UEAxMk YjY1MzgwZDQtMWRiOS00ZWQxLWE2NjAtN2VlMDk0Yjk4MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvBJYhkUDLngugCNncCP8F9DGRp88UcEZZTi 3rqw1ec5V9wbiuGmTm6x2yb/xIZ7+Z372ZdAkvXXZ+hPQA+oklwvZBAyhBfA6AX2 sj0/DuLqeE4sOx2slnxUr7mXFZdq5pBCEcpsiM1FXaJRMEYPwHX9VoMyLl0eZGi4 HdU2jHvgud6N1hk2UULnVy+Sn3CEi0yEnXBs3JPZfEUFtzNyJXFCRl8SMMsFJXT4 UO/UZicuw7fPMcOlXyHmZ6C1AVIiHv27tQm4tCf14gPANRhamz4/rWGxmliuNqwQ GHTUBlct1SNBBsmAAb7MyEAjjSCmNwH5lV671Vr7fEpQYOkCkwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEGFkhooSlheMdilECM0YmYggElGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i NjUzODBkNC0xZGI5LTRlZDEtYTY2MC03ZWUwOTRiOTgwMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2I2NTM4MGQ0LTFkYjktNGVkMS1h NjYwLTdlZTA5NGI5ODAwYS9iNjUzODBkNC0xZGI5LTRlZDEtYTY2MC03ZWUwOTRi OTgwMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARAMXAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJwzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFEwOHM/Uccw7qjstpfokbANt6buHol47VVmVGPC9i2REQ4i qN5UyPn51G1COfLtz5YCDNdEpCGMGLtAwCMGUbOAogfy4R+7QkkUbIFibKdjoCO8 mZVXxdikSJz9k8VEzyxkUObau/eAPHDbYxgLH4GNKH3x1+ZujOKnFMZN2D8ZnCU0 fwQIkMYfNmQ6DamvQQB11QIaCepIq6ysG8QoqncIjqjklSEah1MnCxDnD/d+Giz/ /DXpLfrzeDglKbgSuZe9Q7qJgJQC2Obu+pCeBOMfcu3vdYH6gDW7LTTecre4BX3Q bJE+JPRUUE4kmJHt7FFejDTlrnV8ZVFCdF+yySY= -----END CERTIFICATE-----Generated at Mon May 13 01:45:37 2024 by rpki-client on console-ams.rpki-client.org