$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313.cer File: f5b47d91-eb0d-4085-9bc2-452042c0b313.cer (raw, json) Hash identifier: xMjfaAmfDLXoA/Lz151bA5Em+5w6zmN+sT4F5somPVw= Subject key identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858450ABF1ECFA683778EA8EED480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Feb 2024 14:09:15 +0000 Certificate not after: Fri 25 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 31775 IP: 64.201.232.0/22 IP: 104.153.28.0/22 IP: 104.244.192.0/22 IP: 149.76.32.0/19 IP: 162.0.160.0/19 IP: 199.241.26.0/23 IP: 2605:9480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:0a:bf:1e:cf:a6:83:77:8e:a8:ee:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 28 14:09:15 2024 GMT Not After : Jul 25 19:06:39 2025 GMT Subject: CN=f5b47d91-eb0d-4085-9bc2-452042c0b313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:4d:38:5e:0f:c0:3f:7a:85:02:07:2c:58: fc:37:5f:ee:5e:74:cd:57:ca:11:bd:ae:17:44:27: bb:81:fa:08:89:57:81:d9:df:2b:59:b7:15:b3:df: 7a:e9:06:53:2c:d9:6a:9d:55:51:48:1b:51:55:8b: 60:7f:27:22:95:fa:a8:aa:95:84:81:20:ec:72:64: 70:44:f4:b8:59:fc:52:01:9e:a9:bd:d0:ce:23:1f: 28:16:47:89:32:b1:7a:e3:7a:8e:d2:f1:63:b1:c4: 0e:69:67:0d:a3:84:65:98:2d:00:dd:22:93:cf:b1: d2:36:68:7a:70:2e:e8:30:e5:b4:42:15:d3:92:27: d8:29:7a:5f:d0:11:79:ba:a9:c9:e7:0d:a4:1e:88: 47:14:29:02:80:24:b0:9d:81:00:40:93:62:f5:f9: d7:aa:bb:d9:99:09:05:30:a5:69:7c:cd:75:10:31: 4b:f8:ea:45:4a:18:f7:04:60:b0:65:16:35:ce:41: 0a:d5:36:82:37:8f:bd:89:16:91:fd:f3:df:9a:92: bb:2f:54:11:c0:22:58:14:00:6e:5e:60:80:f3:f6: 82:2d:c0:98:ed:49:46:c5:cd:5e:b4:68:60:fa:48: a0:34:5f:ba:9d:c9:41:ef:b0:53:22:29:e4:6d:5e: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BF:03:3C:D2:A3:3B:F9:86:46:BD:ED:AF:DC:2E:21:F5:00:C2:70 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f5b47d91-eb0d-4085-9bc2-452042c0b313/f5b47d91-eb0d-4085-9bc2-452042c0b313.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.201.232.0/22 104.153.28.0/22 104.244.192.0/22 149.76.32.0/19 162.0.160.0/19 199.241.26.0/23 IPv6: 2605:9480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31775 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:01:ce:43:85:0d:09:fd:fc:6e:23:14:05:ca:7b:9b:bb:31: 7e:fc:87:9f:c0:09:07:e3:1d:0f:a2:8a:d6:6f:5d:7b:96:8b: 08:75:13:e9:81:fc:bc:56:17:e2:90:fb:e9:55:dd:8c:b0:54: 62:62:65:9a:2b:ef:5d:ad:02:8f:1b:ed:76:01:6e:1a:d4:12: 8b:19:a3:2b:61:af:a2:6b:24:1d:f5:c4:8e:d9:c0:f2:aa:ad: ef:21:25:85:1e:ef:de:ed:9c:df:2a:64:f6:48:97:9e:f5:51: 2a:e1:6b:0c:9e:66:98:3f:56:1e:1d:a9:72:10:0b:ef:b8:2b: 89:b6:86:8a:b9:c0:39:84:9e:80:77:88:38:df:da:a0:f1:c5: 3f:fd:10:ef:d1:65:9c:9b:1d:f5:e9:b8:f8:d9:24:6b:9a:57: 99:73:e3:b1:0c:5d:ef:ce:5e:e2:2c:5a:98:e9:93:7e:5c:19: 1f:52:a3:5e:2d:a9:36:eb:df:e7:46:b8:68:03:b0:66:c1:8f: 28:aa:ca:83:c7:29:b4:c2:83:96:cb:f3:6f:28:e3:63:7e:c7: 73:77:f9:78:f1:63:cb:2f:fc:7c:a1:d5:69:08:6e:d4:dd:8c: ef:ef:ca:4c:21:65:8f:24:f2:88:2f:cb:c2:4d:f9:0e:e1:09: 03:1e:bc:13 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWEUKvx7PpoN3jqju1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDIyODE0MDkxNVoXDTI1MDcyNTE5MDYzOVowLzEtMCsGA1UEAxMk ZjViNDdkOTEtZWIwZC00MDg1LTliYzItNDUyMDQyYzBiMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPBNOF4PwD96hQIHLFj8N1/uXnTNV8oRva4X RCe7gfoIiVeB2d8rWbcVs9966QZTLNlqnVVRSBtRVYtgfycilfqoqpWEgSDscmRw RPS4WfxSAZ6pvdDOIx8oFkeJMrF643qO0vFjscQOaWcNo4RlmC0A3SKTz7HSNmh6 cC7oMOW0QhXTkifYKXpf0BF5uqnJ5w2kHohHFCkCgCSwnYEAQJNi9fnXqrvZmQkF MKVpfM11EDFL+OpFShj3BGCwZRY1zkEK1TaCN4+9iRaR/fPfmpK7L1QRwCJYFABu XmCA8/aCLcCY7UlGxc1etGhg+kigNF+6nclB77BTIinkbV6MjwIDAQABo4IERzCC BEMwHQYDVR0OBBYEFN6/AzzSozv5hka97a/cLiH1AMJwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m NWI0N2Q5MS1lYjBkLTQwODUtOWJjMi00NTIwNDJjMGIzMTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Y1YjQ3ZDkxLWViMGQtNDA4NS05 YmMyLTQ1MjA0MmMwYjMxMy9mNWI0N2Q5MS1lYjBkLTQwODUtOWJjMi00NTIwNDJj MGIzMTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAJAyegDBAJomRwDBAJo9MADBAWVTCADBAWiAKAD BAHH8RowDQQCAAIwBwMFACYFlIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfB8w VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAZwHOQ4UNCf38biMUBcp7m7sxfvyHn8AJB+MdD6KK1m9de5aLCHUT 6YH8vFYX4pD76VXdjLBUYmJlmivvXa0CjxvtdgFuGtQSixmjK2GvomskHfXEjtnA 8qqt7yElhR7v3u2c3ypk9kiXnvVRKuFrDJ5mmD9WHh2pchAL77gribaGirnAOYSe gHeION/aoPHFP/0Q79FlnJsd9em4+Nkka5pXmXPjsQxd785e4ixamOmTflwZH1Kj Xi2pNuvf50a4aAOwZsGPKKrKg8cptMKDlsvzbyjjY37Hc3f5ePFjyy/8fKHVaQhu 1N2M7+/KTCFljyTyiC/Lwk35DuEJAx68Ew== -----END CERTIFICATE-----Generated at Mon May 13 02:04:39 2024 by rpki-client on console-fra.rpki-client.org