$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer File: c32e4c57-f588-46c2-a752-708ae6efb1cc.cer (raw, json) Hash identifier: NauWKTcsVR26Ef2c9PqyuLubYYGQo491ss6xdJ8SNNI= Subject key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285845575B48B111ED91268DC9B000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Mar 2024 00:45:19 +0000 Certificate not after: Tue 30 Jun 2026 00:45:19 +0000 Subordinate resources: IP: 23.233.0.0/17 IP: 24.52.192.0/18 IP: 24.212.128.0/17 IP: 24.246.0.0 -- 24.246.95.255 IP: 45.72.128.0/17 IP: 104.195.128.0/17 IP: 104.246.128.0/17 IP: 107.179.128.0/17 IP: 107.190.0.0/17 IP: 108.162.128.0/18 IP: 135.23.0.0/16 IP: 192.0.128.0/17 IP: 198.48.128.0/17 IP: 198.84.128.0/17 IP: 207.136.64.0/18 IP: 209.161.192.0/18 IP: 216.154.0.0 -- 216.154.191.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:57:5b:48:b1:11:ed:91:26:8d:c9:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 27 00:45:19 2024 GMT Not After : Jun 30 00:45:19 2026 GMT Subject: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:dd:1d:bb:d0:61:b0:8b:31:0c:92:94:80:ce: 1b:ed:99:ba:b1:e1:0f:cc:90:2e:fd:90:b4:fd:0a: ee:61:6a:27:2c:8a:f1:2e:86:8a:1b:67:78:c3:f2: c3:49:e8:22:2a:7e:e3:26:b1:2d:aa:eb:d8:47:11: 3f:90:a5:79:89:68:07:97:bc:23:d7:4d:07:3a:94: 70:c5:1f:6c:a3:91:eb:61:58:16:54:56:2b:cc:fb: aa:fc:85:0f:f3:ea:9b:05:5d:5d:f0:e4:af:76:ce: 71:57:51:55:c6:80:5b:8f:e1:41:82:e8:70:a9:e6: 34:e5:3d:c6:ce:6a:e5:7f:f5:9d:89:4a:db:26:96: 6d:5e:05:17:75:cf:83:0d:e4:a2:52:3c:82:57:42: 14:ff:90:63:97:ff:2e:71:77:26:03:45:6f:79:23: cf:63:1c:d8:ff:89:50:6a:dd:b7:aa:82:73:a2:5b: f6:df:c7:af:c1:56:aa:57:ac:62:8d:68:a6:44:c6: c0:7b:90:8d:62:a6:9f:30:57:97:c6:5b:a3:8c:46: be:90:75:10:0d:a2:e5:f2:87:ef:45:52:2d:35:f1: 0d:87:42:24:80:4b:1f:04:9a:b7:79:05:0c:2c:24: 70:fd:38:da:49:91:a1:57:d5:f3:93:1e:bb:78:2f: 26:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.233.0.0/17 24.52.192.0/18 24.212.128.0/17 24.246.0.0-24.246.95.255 45.72.128.0/17 104.195.128.0/17 104.246.128.0/17 107.179.128.0/17 107.190.0.0/17 108.162.128.0/18 135.23.0.0/16 192.0.128.0/17 198.48.128.0/17 198.84.128.0/17 207.136.64.0/18 209.161.192.0/18 216.154.0.0-216.154.191.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d4:ee:b8:12:42:4d:06:c0:1e:af:30:6d:31:f6:23:52:f7: 56:48:9e:98:4c:7f:77:25:d0:0d:4f:83:7e:03:36:6b:1b:c9: e2:c2:d1:01:9d:61:b7:4d:86:b2:0b:82:ff:e5:3f:f9:48:6e: 10:08:13:a3:05:9a:20:eb:35:ae:95:0e:74:8b:72:7a:1b:dd: 96:04:31:e5:07:a3:79:da:93:c3:ce:34:cf:f2:38:79:90:84: 85:c2:42:24:9f:ae:45:d4:2e:6b:a2:10:77:3b:72:e7:a4:c5: f5:e6:a5:da:3d:bc:3f:e3:b2:c0:55:b6:50:e3:c9:55:60:33: 6f:8e:ba:00:8c:ff:74:9d:bd:e7:f3:c6:91:30:7f:69:b9:47: 0c:3c:57:bd:d4:37:c2:d1:5e:e5:06:5c:80:07:d5:cf:3d:8b: 6c:34:53:5c:eb:ea:f3:f4:b5:6a:86:0e:cd:6e:dd:d5:91:42: 12:d7:45:57:0b:6a:6b:34:ae:f3:52:d8:13:cc:4a:c3:2c:e7: a4:42:29:8b:5d:3a:d6:9f:7f:0d:b6:2e:67:41:78:30:76:09: 3d:22:27:2d:7e:81:3d:64:34:c9:d7:a8:d6:4c:80:ee:5e:ef: 53:fa:88:f8:47:82:12:dd:06:75:3a:58:f0:a8:01:04:22:6d: a0:43:ac:d6 -----BEGIN CERTIFICATE----- MIIHWzCCBkOgAwIBAgIUAQ0Mn0MoWEVXW0ixEe2RJo3JsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDMyNzAwNDUxOVoXDTI2MDYzMDAwNDUxOVowLzEtMCsGA1UEAxMk YzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZiMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t0du9BhsIsxDJKUgM4b7Zm6seEPzJAu/ZC0 /QruYWonLIrxLoaKG2d4w/LDSegiKn7jJrEtquvYRxE/kKV5iWgHl7wj100HOpRw xR9so5HrYVgWVFYrzPuq/IUP8+qbBV1d8OSvds5xV1FVxoBbj+FBguhwqeY05T3G zmrlf/WdiUrbJpZtXgUXdc+DDeSiUjyCV0IU/5Bjl/8ucXcmA0VveSPPYxzY/4lQ at23qoJzolv238evwVaqV6xijWimRMbAe5CNYqafMFeXxlujjEa+kHUQDaLl8ofv RVItNfENh0IkgEsfBJq3eQUMLCRw/TjaSZGhV9Xzkx67eC8mEwIDAQABo4IEbTCC BGkwHQYDVR0OBBYEFFKlhQyFUpl3KRB6pLvrkJh0UPCJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j MzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2MzMmU0YzU3LWY1ODgtNDZjMi1h NzUyLTcwOGFlNmVmYjFjYy9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZl ZmIxY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgYwGCCsGAQUF BwEHAQH/BH0wezB5BAIAATBzAwQHF+kAAwQGGDTAAwQHGNSAMAsDAwEY9gMEBRj2 QAMEBy1IgAMEB2jDgAMEB2j2gAMEB2uzgAMEB2u+AAMEBmyigAMDAIcXAwQHwACA AwQHxjCAAwQHxlSAAwQGz4hAAwQG0aHAMAsDAwHYmgMEBtiagDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC 1O64EkJNBsAerzBtMfYjUvdWSJ6YTH93JdANT4N+AzZrG8niwtEBnWG3TYayC4L/ 5T/5SG4QCBOjBZog6zWulQ50i3J6G92WBDHlB6N52pPDzjTP8jh5kISFwkIkn65F 1C5rohB3O3LnpMX15qXaPbw/47LAVbZQ48lVYDNvjroAjP90nb3n88aRMH9puUcM PFe91DfC0V7lBlyAB9XPPYtsNFNc6+rz9LVqhg7Nbt3VkUIS10VXC2prNK7zUtgT zErDLOekQimLXTrWn38Nti5nQXgwdgk9IictfoE9ZDTJ16jWTIDuXu9T+oj4R4IS 3QZ1OljwqAEEIm2gQ6zW -----END CERTIFICATE-----Generated at Mon May 13 19:42:52 2024 by rpki-client on console-fra.rpki-client.org