$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer File: cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.cer (raw, json) Hash identifier: lrnCa+61GXxraLojRn+OK9jZpFFFIZH/VFZZfxNw0Rc= Subject key identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285841E4834D9DF8CC4BEF57386B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 20 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 22966 IP: 198.51.243.0 -- 198.51.244.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:4d:9d:f8:cc:4b:ef:57:38:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jun 20 19:06:39 2025 GMT Subject: CN=cd2d7d85-61d0-4ba6-b4d2-afda9b820a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:2e:6e:03:69:5e:cf:9a:e1:d6:92:c9:8a: 70:7f:0b:eb:77:e0:22:38:f9:66:2d:3f:2a:6e:c8: ad:ca:e4:22:04:f6:9f:5f:83:b6:48:11:31:a5:3a: c7:65:e9:5c:10:17:32:45:0b:dd:12:2f:d7:ea:11: 40:69:94:6f:ba:18:7a:2b:97:0c:22:54:19:fe:e9: eb:b1:0b:3d:58:73:20:9a:0c:b7:00:b3:76:2e:4a: 79:1e:28:d8:34:36:f4:ce:c5:f3:50:8f:82:aa:2c: 4b:d1:fd:63:d3:4a:f5:18:cf:50:e8:17:fe:08:15: b6:d2:05:e2:33:ec:bd:b8:71:ea:89:0d:91:65:9c: f3:a3:57:95:97:2d:9c:f5:92:1f:ac:43:66:f6:a9: 03:fb:e5:4d:5c:30:f4:e4:7b:64:1e:76:36:21:54: c4:90:21:d6:1c:5e:8a:fc:73:86:ee:60:6c:30:be: 79:71:3f:63:1b:ef:74:5e:be:eb:66:6b:02:9d:c1: e2:33:6a:3b:6a:b9:b7:57:bb:98:3e:8c:a9:fe:d8: 5c:b9:83:9a:d1:85:8b:b7:6a:a0:b6:03:19:de:ee: ff:95:2f:ae:28:d4:78:79:3e:64:f2:65:19:f8:4b: 24:c6:3b:cf:5e:9f:96:74:32:9c:a1:80:7e:3f:5a: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:E1:8A:8F:B4:0F:B5:DB:1C:70:1F:86:FB:4A:BA:D5:E2:19:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78/cd2d7d85-61d0-4ba6-b4d2-afda9b820a78.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.51.243.0-198.51.244.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22966 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c6:28:a6:bc:de:5e:23:c2:52:c3:a2:2d:56:b8:30:ac:e5: a0:ff:86:a9:8a:ea:b1:12:60:95:a9:bd:bf:a1:cd:9b:48:40: 91:c8:be:21:f0:cd:dd:35:33:dc:c4:6c:48:bd:51:6a:59:40: b0:66:c8:41:b6:fb:1b:83:f5:96:d2:fc:70:c1:5f:4a:9c:30: a3:a6:66:25:82:a2:c3:37:e0:b6:94:c1:cc:c3:96:8a:a5:64: 58:0e:5d:5b:76:69:ea:28:50:5e:f6:f0:9a:83:30:fb:48:bf: 87:a8:f9:59:7d:94:20:0c:f3:5a:42:f7:d5:c6:93:16:c7:06: 01:1a:6f:8a:4f:06:45:1e:a4:58:d4:f2:0a:b2:0f:09:a7:a9: 01:b2:df:58:92:d5:87:79:8e:dd:af:e4:54:8b:b0:d1:48:af: 84:57:0d:d7:7e:46:1e:9f:36:d7:82:1a:f3:c3:21:26:81:0e: c2:59:5d:46:62:cc:91:6f:19:cf:04:6e:b7:1b:3b:29:fa:21: fd:2c:e4:b9:ea:ed:b7:84:d7:fc:25:c8:cf:53:ac:6c:b6:3b: 4d:97:99:2c:75:3b:94:18:86:91:28:c4:6d:2c:35:0c:44:83: 07:df:ee:a0:40:4b:76:60:72:26:1b:4c:03:f6:c0:cb:aa:c4: 15:8b:3b:45 -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWEHkg02d+MxL71c4a4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDYyMDE5MDYzOVowLzEtMCsGA1UEAxMk Y2QyZDdkODUtNjFkMC00YmE2LWI0ZDItYWZkYTliODIwYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3YubgNpXs+a4daSyYpwfwvrd+AiOPlmLT8q bsityuQiBPafX4O2SBExpTrHZelcEBcyRQvdEi/X6hFAaZRvuhh6K5cMIlQZ/unr sQs9WHMgmgy3ALN2Lkp5HijYNDb0zsXzUI+CqixL0f1j00r1GM9Q6Bf+CBW20gXi M+y9uHHqiQ2RZZzzo1eVly2c9ZIfrENm9qkD++VNXDD05HtkHnY2IVTEkCHWHF6K /HOG7mBsML55cT9jG+90Xr7rZmsCncHiM2o7arm3V7uYPoyp/thcuYOa0YWLt2qg tgMZ3u7/lS+uKNR4eT5k8mUZ+EskxjvPXp+WdDKcoYB+P1rRZQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFNYm4YqPtA+12xxwH4b7SrrV4hkKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j ZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4MjBhNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NkMmQ3ZDg1LTYxZDAtNGJhNi1i NGQyLWFmZGE5YjgyMGE3OC9jZDJkN2Q4NS02MWQwLTRiYTYtYjRkMi1hZmRhOWI4 MjBhNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMYz8wMEAMYz9DAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgJZtjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBjxiimvN5eI8JSw6ItVrgwrOWg/4apiuqxEmCV qb2/oc2bSECRyL4h8M3dNTPcxGxIvVFqWUCwZshBtvsbg/WW0vxwwV9KnDCjpmYl gqLDN+C2lMHMw5aKpWRYDl1bdmnqKFBe9vCagzD7SL+HqPlZfZQgDPNaQvfVxpMW xwYBGm+KTwZFHqRY1PIKsg8Jp6kBst9YktWHeY7dr+RUi7DRSK+EVw3XfkYenzbX ghrzwyEmgQ7CWV1GYsyRbxnPBG63Gzsp+iH9LOS56u23hNf8JcjPU6xstjtNl5ks dTuUGIaRKMRtLDUMRIMH3+6gQEt2YHImG0wD9sDLqsQViztF -----END CERTIFICATE-----Generated at Mon May 13 01:45:43 2024 by rpki-client on console-ams.rpki-client.org