$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer File: f4f85718-cda0-442f-9727-709a536e1e27.cer (raw, json) Hash identifier: ggQb5Afq3Ehvcb2Rl7aa30tGJXqncf9QwgTidZjCzxI= Subject key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285841E483538FA058BDB8B8765C18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Thu 31 Jul 2025 19:06:39 +0000 Subordinate resources: IP: 63.136.112.0/21 IP: 162.211.136.0/22 IP: 192.0.4.0/22 IP: 199.201.84.0/22 IP: 208.157.144.0/21 IP: 208.168.224.0/19 IP: 209.27.52.0/22 IP: 209.27.60.0/22 IP: 2606:600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:53:8f:a0:58:bd:b8:b8:76:5c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 31 19:06:39 2025 GMT Subject: CN=f4f85718-cda0-442f-9727-709a536e1e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:bb:f8:df:98:55:1c:ef:a5:0d:59:34:04: c1:50:5f:2e:a2:8c:02:04:7b:de:32:42:fc:73:41: 69:5b:21:55:da:ba:4c:9f:f3:ac:d7:9a:e5:ce:24: 00:fd:fe:e2:c9:e4:7e:98:10:fa:78:44:e1:09:2c: 21:3a:3d:d6:e0:07:22:86:7d:94:e0:12:78:38:ec: 1a:7d:03:ff:33:1d:7f:15:82:eb:8a:ae:a3:c9:82: 43:38:35:13:ac:3e:a9:a2:73:14:4f:f5:ec:32:58: 37:e0:4d:21:57:c5:7d:3a:1a:d9:c2:00:40:5a:2a: ca:a8:b4:48:8d:f6:3c:df:51:22:ec:e3:da:93:d9: 86:d7:75:40:e9:39:3b:9c:57:9e:bb:fa:af:ac:be: cc:80:04:42:bb:2a:09:db:2f:0e:4b:3a:ad:49:f2: b1:64:84:67:46:e1:50:57:0f:39:1c:fa:78:6f:33: b8:23:53:be:78:79:3e:9b:2d:ad:73:64:48:84:20: 37:31:7b:ae:7c:d7:3e:6b:e1:42:cf:d9:05:39:c6: 3f:de:e6:e2:68:fd:fe:b3:4a:35:a8:e6:05:62:24: 08:c3:56:18:15:a4:9a:a1:2c:9b:6b:45:09:c6:54: 30:a3:96:84:f3:21:c3:cc:41:5d:f5:b0:6b:89:fd: f2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 63.136.112.0/21 162.211.136.0/22 192.0.4.0/22 199.201.84.0/22 208.157.144.0/21 208.168.224.0/19 209.27.52.0/22 209.27.60.0/22 IPv6: 2606:600::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:69:cb:29:2d:d0:f1:d6:38:d4:29:38:0b:9b:d2:8d:14:eb: f8:d9:27:00:32:2a:d9:17:44:ad:bc:f8:a6:df:7a:ee:4f:f6: 8f:8f:b5:a3:d7:30:5c:2d:3c:7d:0b:f4:b5:e4:f5:f0:dc:2b: bc:45:da:9a:33:5b:36:1d:90:2d:d9:d8:64:97:15:bb:5d:eb: 4b:2a:31:3f:5d:2b:2f:74:55:c1:6e:af:90:09:72:33:27:36: d8:b7:5d:99:88:2c:cc:8d:c9:d5:dd:9d:3e:3b:25:9b:15:1c: 1e:f4:60:1b:d7:7b:ee:3b:42:98:c6:44:64:fe:ff:9a:cd:c8: 10:6b:de:73:46:66:3f:c4:d1:65:d2:a3:9e:bd:ee:3f:b2:d4: 2b:b9:f4:85:d5:4e:e1:96:d9:9d:7f:ad:14:70:45:46:fc:cf: 58:27:d3:fb:e8:e6:4e:21:6a:c3:cb:7b:97:49:af:69:3d:39: 02:71:79:0e:88:46:eb:11:7c:4a:59:64:1b:da:c1:92:8a:7d: 0f:07:38:51:9a:8c:10:e3:64:f7:ff:b5:46:c8:16:3a:f6:80: 2c:46:ae:2f:f3:41:55:10:38:a0:8b:e2:31:d1:4a:75:fa:db: fe:a6:dd:11:a6:8f:0e:9a:10:87:32:c8:39:e9:3a:f9:9d:2b: 59:8b:f3:b5 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWEHkg1OPoFi9uLh2XBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDczMTE5MDYzOVowLzEtMCsGA1UEAxMk ZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUxZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJu7+N+YVRzvpQ1ZNATBUF8uoowCBHveMkL8 c0FpWyFV2rpMn/Os15rlziQA/f7iyeR+mBD6eEThCSwhOj3W4Acihn2U4BJ4OOwa fQP/Mx1/FYLriq6jyYJDODUTrD6ponMUT/XsMlg34E0hV8V9OhrZwgBAWirKqLRI jfY831Ei7OPak9mG13VA6Tk7nFeeu/qvrL7MgARCuyoJ2y8OSzqtSfKxZIRnRuFQ Vw85HPp4bzO4I1O+eHk+my2tc2RIhCA3MXuufNc+a+FCz9kFOcY/3ubiaP3+s0o1 qOYFYiQIw1YYFaSaoSyba0UJxlQwo5aE8yHDzEFd9bBrif3y2wIDAQABo4IEODCC BDQwHQYDVR0OBBYEFGtv4LsjBughpf8tT2+fXDWvO0J/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m NGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Y0Zjg1NzE4LWNkYTAtNDQyZi05 NzI3LTcwOWE1MzZlMWUyNy9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2 ZTFlMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAM/iHADBAKi04gDBALAAAQDBALHyVQDBAPQnZAD BAXQqOADBALRGzQDBALRGzwwDQQCAAIwBwMFACYGBgAwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABWnLKS3Q 8dY41Ck4C5vSjRTr+NknADIq2RdErbz4pt967k/2j4+1o9cwXC08fQv0teT18Nwr vEXamjNbNh2QLdnYZJcVu13rSyoxP10rL3RVwW6vkAlyMyc22LddmYgszI3J1d2d PjslmxUcHvRgG9d77jtCmMZEZP7/ms3IEGvec0ZmP8TRZdKjnr3uP7LUK7n0hdVO 4ZbZnX+tFHBFRvzPWCfT++jmTiFqw8t7l0mvaT05AnF5DohG6xF8SllkG9rBkop9 Dwc4UZqMEONk9/+1RsgWOvaALEauL/NBVRA4oIviMdFKdfrb/qbdEaaPDpoQhzLI Oek6+Z0rWYvztQ== -----END CERTIFICATE-----