$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer File: e98db606-926a-43a7-aa62-47481a8d81d0.cer (raw, json) Hash identifier: qFY2CGLy8vdkv2qUGpUrNA+KARxDBYS4b5UVcXvWB58= Subject key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285841E4835241B83875C94846FB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Tue 22 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 19795 AS: 53379 AS: 53496 IP: 74.112.64.0/21 IP: 74.121.48.0/21 IP: 74.121.132.0/22 IP: 129.33.138.0/23 IP: 129.33.239.0 -- 129.33.240.255 IP: 129.33.243.0/24 IP: 129.41.76.0/23 IP: 129.41.88.0/23 IP: 129.41.167.0/24 IP: 129.41.172.0/22 IP: 129.41.222.0/24 IP: 170.225.227.0 -- 170.225.228.255 IP: 192.156.219.0/24 IP: 199.255.32.0/22 IP: 208.73.4.0/22 IP: 208.85.48.0/21 IP: 208.95.132.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:52:41:b8:38:75:c9:48:46:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 22 19:06:39 2025 GMT Subject: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:89:3b:b8:6e:ea:9c:b0:c7:cf:45:a7:61: ab:1b:d4:38:00:7b:d5:c8:f4:27:cf:3a:c5:25:31: 32:40:9e:02:85:ce:9e:c9:7c:e2:c8:c1:dd:b7:02: 70:e9:7a:ce:a1:92:b4:60:90:ed:33:40:37:61:81: fd:6c:db:b1:76:16:9a:d7:c8:f9:e1:87:f2:2e:97: ae:9e:6d:9f:b3:63:fb:c0:8b:61:5d:c0:ee:ee:f8: 81:8a:47:15:46:42:0c:3b:85:82:84:e9:d2:cd:34: 3d:fb:ef:c0:56:3c:81:12:8e:99:43:00:3b:a7:8f: 23:41:37:d0:cc:82:a1:dc:c7:a3:53:71:5e:fa:d8: 98:43:af:0f:8f:2b:93:24:3b:dd:de:46:30:71:af: e8:a6:22:61:e3:b8:26:d4:30:d3:20:a2:2c:c6:ee: f4:e1:6b:0c:f5:7a:d9:34:55:fa:a0:94:c0:e7:ce: 81:ca:5d:f0:dd:c1:67:b1:68:9b:51:89:60:e1:7d: 5e:57:89:68:ef:6a:cb:bb:85:17:c8:46:72:41:88: 81:b8:f3:f8:bd:89:76:9d:08:7a:76:e4:d7:8d:73: 13:7f:60:5c:74:b9:fa:06:52:76:74:d8:27:25:ff: 94:75:9b:21:77:54:f7:59:c7:1d:62:7d:37:1f:29: d3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 74.112.64.0/21 74.121.48.0/21 74.121.132.0/22 129.33.138.0/23 129.33.239.0-129.33.240.255 129.33.243.0/24 129.41.76.0/23 129.41.88.0/23 129.41.167.0/24 129.41.172.0/22 129.41.222.0/24 170.225.227.0-170.225.228.255 192.156.219.0/24 199.255.32.0/22 208.73.4.0/22 208.85.48.0/21 208.95.132.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19795 53379 53496 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6f:15:5f:65:87:36:7d:ae:c4:9c:12:00:d2:13:4c:81:5d: 11:0a:ef:bc:0f:61:69:8e:64:60:92:4d:9d:9d:74:b3:47:38: 94:85:e2:bf:cd:bc:32:e8:6f:95:0e:c6:2e:9b:8b:3b:4f:4a: c5:7d:04:d0:55:63:fe:b1:8f:c7:e5:83:a3:38:89:3d:04:2e: 6f:f4:8f:66:1c:32:32:62:34:9d:65:34:51:34:f7:00:f5:68: c3:ac:54:5e:ec:00:66:9e:80:2a:85:db:ba:a5:87:d4:9f:35: 90:3e:c7:37:5c:0a:27:12:05:ca:b7:2e:18:4b:b8:9f:e6:45: 8e:5c:62:20:1c:ab:1c:e4:1b:3f:37:62:b4:38:c0:32:e2:a1: 0a:bd:5b:38:a8:d4:7b:88:25:35:81:11:eb:8f:da:ab:9b:2c: e7:9e:64:d7:49:9b:17:f1:41:31:6e:ac:d6:3f:2c:74:13:b4: 85:3e:00:c6:e0:ac:a9:84:02:88:db:bf:69:4b:ac:19:4a:03: f7:de:49:37:03:92:50:9d:72:f0:ca:18:d7:b6:d0:d8:a3:86: ea:ca:38:af:7d:f2:c3:62:6c:42:da:e6:77:b0:1c:00:6a:4d: 9a:75:39:54:bc:a8:40:d6:c8:bf:a3:54:68:36:38:cb:39:14: 70:02:8c:e5 -----BEGIN CERTIFICATE----- MIIHhDCCBmygAwIBAgIUAQ0Mn0MoWEHkg1JBuDh1yUhG+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDcyMjE5MDYzOVowLzEtMCsGA1UEAxMk ZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4MWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI2JO7hu6pywx89Fp2GrG9Q4AHvVyPQnzzrF JTEyQJ4Chc6eyXziyMHdtwJw6XrOoZK0YJDtM0A3YYH9bNuxdhaa18j54YfyLpeu nm2fs2P7wIthXcDu7viBikcVRkIMO4WChOnSzTQ9++/AVjyBEo6ZQwA7p48jQTfQ zIKh3MejU3Fe+tiYQ68PjyuTJDvd3kYwca/opiJh47gm1DDTIKIsxu704WsM9XrZ NFX6oJTA586Byl3w3cFnsWibUYlg4X1eV4lo72rLu4UXyEZyQYiBuPP4vYl2nQh6 duTXjXMTf2BcdLn6BlJ2dNgnJf+UdZshd1T3WccdYn03HynTtwIDAQABo4IEljCC BJIwHQYDVR0OBBYEFKEQbL+FdTxWQL0e3TyK4CYQXzO1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l OThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2U5OGRiNjA2LTkyNmEtNDNhNy1h YTYyLTQ3NDgxYThkODFkMC9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4 ZDgxZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgZAGCCsGAQUF BwEHAQH/BIGAMH4wfAQCAAEwdgMEA0pwQAMEA0p5MAMEAkp5hAMEAYEhijAMAwQA gSHvAwQAgSHwAwQAgSHzAwQBgSlMAwQBgSlYAwQAgSmnAwQCgSmsAwQAgSneMAwD BACq4eMDBACq4eQDBADAnNsDBALH/yADBALQSQQDBAPQVTADBALQX4QwIwYIKwYB BQUHAQgBAf8EFDASoBAwDgICTVMCAwDQgwIDAND4MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFtvFV9lhzZ9 rsScEgDSE0yBXREK77wPYWmOZGCSTZ2ddLNHOJSF4r/NvDLob5UOxi6biztPSsV9 BNBVY/6xj8flg6M4iT0ELm/0j2YcMjJiNJ1lNFE09wD1aMOsVF7sAGaegCqF27ql h9SfNZA+xzdcCicSBcq3LhhLuJ/mRY5cYiAcqxzkGz83YrQ4wDLioQq9Wzio1HuI JTWBEeuP2qubLOeeZNdJmxfxQTFurNY/LHQTtIU+AMbgrKmEAojbv2lLrBlKA/fe STcDklCdcvDKGNe20NijhurKOK998sNibELa5newHABqTZp1OVS8qEDWyL+jVGg2 OMs5FHACjOU= -----END CERTIFICATE-----Generated at Wed Apr 24 16:10:35 2024 by rpki-client on console-ams.rpki-client.org