$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4.cer File: f35be5f0-d452-4cd8-859e-27da5839ddb4.cer (raw, json) Hash identifier: WrF7cwgMTG+3V7XgQ+I/zJcyAM2rhIPW0WmOFYCn7T8= Subject key identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858456F82BE3219E488DCF870F040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 04 Apr 2024 16:24:14 +0000 Certificate not after: Wed 28 Jan 2026 01:45:15 +0000 Subordinate resources: AS: 21659 AS: 63334 IP: 23.143.216.0/24 IP: 130.51.76.0/24 IP: 142.202.128.0/24 IP: 2602:fdd2::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:6f:82:be:32:19:e4:88:dc:f8:70:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 4 16:24:14 2024 GMT Not After : Jan 28 01:45:15 2026 GMT Subject: CN=f35be5f0-d452-4cd8-859e-27da5839ddb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:9d:a4:21:4d:fe:92:96:4e:04:9b:08:ed: 1b:78:ac:c9:68:66:60:1e:60:c9:93:5f:a2:ce:2b: b9:b4:25:22:fb:d8:7d:29:08:9f:97:14:10:9d:d2: f5:79:d2:f7:06:f9:21:68:e7:d8:c7:cc:e5:9c:58: b6:f8:79:7f:8e:da:00:c9:57:2d:c5:db:18:10:ca: ae:5e:8b:5f:7f:73:59:8c:2b:bc:a3:24:6f:25:e1: b7:08:46:30:c3:d2:65:2a:60:c7:d3:4e:28:c3:c4: 58:f9:a8:41:15:83:59:b1:e3:d0:8a:34:b8:8d:d0: 55:0e:ac:81:1e:c6:c8:d3:ea:4a:8a:f6:cf:1c:65: ca:a9:19:3f:69:14:2a:51:96:bb:d8:b8:b7:f0:02: 87:2b:51:cc:87:1d:ba:0e:8f:70:33:4f:8c:7d:65: c1:a8:34:20:12:5c:76:ef:44:df:d0:ca:55:2b:40: ed:ad:ab:0e:d0:1f:9f:67:61:aa:c7:bf:61:87:e4: fd:3f:d4:50:e0:f5:3e:a5:95:e5:40:59:2e:99:13: ba:af:da:94:74:99:6e:ed:ce:ce:1e:18:88:e9:73: ee:c5:a4:f0:1c:f7:01:45:ad:f2:ef:d8:42:d2:32: 93:d1:80:70:1f:16:d1:42:5f:48:f5:77:7a:4f:9a: 62:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D3:86:F9:79:3B:5D:0D:9C:FD:0F:F3:B5:6F:04:6D:8D:77:58:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f35be5f0-d452-4cd8-859e-27da5839ddb4/f35be5f0-d452-4cd8-859e-27da5839ddb4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.143.216.0/24 130.51.76.0/24 142.202.128.0/24 IPv6: 2602:fdd2::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21659 63334 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6a:d0:30:e2:b7:3b:53:c8:92:52:9c:6e:d4:24:d2:b6:9c: 73:89:44:98:b8:65:e2:da:13:64:08:bb:1c:06:1b:c4:0f:34: e8:ed:ba:68:8d:7f:ee:d3:69:77:2a:a1:0c:f4:48:28:7e:42: e8:80:c1:b4:42:b8:e0:f2:84:17:54:06:14:e6:15:84:e8:60: 78:9c:a1:67:71:f3:94:d0:a3:c3:a6:b0:7e:73:e5:09:9e:a5: d4:1c:1f:4e:3b:3e:93:6c:4b:ca:49:b6:55:04:94:9b:51:ab: ba:ec:a3:0c:42:66:14:01:21:f6:ca:98:5f:63:a2:ea:1d:82: 32:e3:7e:ab:dc:c5:87:f4:96:aa:c4:81:e5:8c:0c:f0:5b:d0: 4c:54:38:07:d2:b5:d5:eb:61:74:f5:d5:93:09:3e:2d:7f:21: bf:05:6a:39:5b:29:9d:85:0a:5d:3c:22:bd:de:f5:13:cb:47: 2f:36:fd:e8:16:81:dd:7c:fc:a1:f8:ab:13:12:04:e3:d5:96: ad:b2:a5:64:96:42:c3:19:9e:7f:db:6c:f5:66:42:75:10:1b: 38:3f:6d:32:c6:12:d5:7c:ea:fd:56:4b:ab:df:25:b1:e6:92: cd:5e:f2:70:e1:2b:c0:6f:2a:61:83:7a:ea:01:ae:22:90:66: 1a:bf:2e:da -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEVvgr4yGeSI3Phw8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDQwNDE2MjQxNFoXDTI2MDEyODAxNDUxNVowLzEtMCsGA1UEAxMk ZjM1YmU1ZjAtZDQ1Mi00Y2Q4LTg1OWUtMjdkYTU4MzlkZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N2dpCFN/pKWTgSbCO0beKzJaGZgHmDJk1+i ziu5tCUi+9h9KQiflxQQndL1edL3BvkhaOfYx8zlnFi2+Hl/jtoAyVctxdsYEMqu Xotff3NZjCu8oyRvJeG3CEYww9JlKmDH004ow8RY+ahBFYNZsePQijS4jdBVDqyB HsbI0+pKivbPHGXKqRk/aRQqUZa72Li38AKHK1HMhx26Do9wM0+MfWXBqDQgElx2 70Tf0MpVK0DtrasO0B+fZ2Gqx79hh+T9P9RQ4PU+pZXlQFkumRO6r9qUdJlu7c7O HhiI6XPuxaTwHPcBRa3y79hC0jKT0YBwHxbRQl9I9Xd6T5pijwIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFBbThvl5O10NnP0P87VvBG2Nd1jXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m MzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgzOWRkYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2YzNWJlNWYwLWQ0NTItNGNkOC04 NTllLTI3ZGE1ODM5ZGRiNC9mMzViZTVmMC1kNDUyLTRjZDgtODU5ZS0yN2RhNTgz OWRkYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXj9gDBACCM0wDBACOyoAwDgQCAAIwCAMGBCYC /dIAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlSbAgMA92YwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHmrQ MOK3O1PIklKcbtQk0racc4lEmLhl4toTZAi7HAYbxA806O26aI1/7tNpdyqhDPRI KH5C6IDBtEK44PKEF1QGFOYVhOhgeJyhZ3HzlNCjw6awfnPlCZ6l1BwfTjs+k2xL ykm2VQSUm1GruuyjDEJmFAEh9sqYX2Oi6h2CMuN+q9zFh/SWqsSB5YwM8FvQTFQ4 B9K11ethdPXVkwk+LX8hvwVqOVspnYUKXTwivd71E8tHLzb96BaB3Xz8ofirExIE 49WWrbKlZJZCwxmef9ts9WZCdRAbOD9tMsYS1Xzq/VZLq98lseaSzV7ycOErwG8q YYN66gGuIpBmGr8u2g== -----END CERTIFICATE-----Generated at Sun May 12 15:05:44 2024 by rpki-client on console-fra.rpki-client.org