$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer File: fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer (raw, json) Hash identifier: RQaDFFm7aoNMshK8vNiN6OSeIbLu+sIqDDgdXr7B/Tg= Subject key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285845094DEA1BAFFD06A9BED4AE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 Feb 2024 01:45:20 +0000 Certificate not after: Tue 02 Jun 2026 00:45:20 +0000 Subordinate resources: IP: 131.253.1.0/24 IP: 131.253.3.0/24 IP: 131.253.5.0 -- 131.253.6.255 IP: 131.253.8.0/24 IP: 131.253.12.0 -- 131.253.18.255 IP: 131.253.21.0 -- 131.253.47.255 IP: 131.253.61.0 -- 131.253.255.255 IP: 132.245.0.0/16 IP: 134.170.0.0/16 IP: 134.177.0.0/16 IP: 137.116.0.0/15 IP: 137.135.0.0/16 IP: 138.91.0.0/16 IP: 141.251.0.0/16 IP: 168.61.0.0 -- 168.63.255.255 IP: 192.32.0.0/16 IP: 192.48.225.0/24 IP: 192.84.159.0 -- 192.84.161.255 IP: 198.49.8.0/24 IP: 198.200.130.0/24 IP: 198.206.164.0/24 IP: 199.30.16.0/20 IP: 199.74.210.0/24 IP: 199.242.32.0 -- 199.242.55.255 IP: 204.152.140.0/23 IP: 205.174.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:09:4d:ea:1b:af:fd:06:a9:be:d4:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 28 01:45:20 2024 GMT Not After : Jun 2 00:45:20 2026 GMT Subject: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:20:da:e2:91:3d:c9:8a:13:ee:fd:f0:14: c0:25:3e:2c:93:87:2c:04:31:c1:cf:88:39:90:d4: 31:2e:e8:cf:81:af:06:53:c8:70:6b:cf:3c:ed:a0: 89:13:85:2d:51:51:13:b9:26:46:7b:3c:bd:2c:98: 5c:ae:c3:6e:e9:26:14:25:3f:e5:c6:6d:00:ec:6e: 0b:8b:3b:17:a7:f1:a8:a5:80:c8:a3:7c:52:d1:30: 5e:8f:aa:2e:67:64:2c:b5:fa:83:36:f0:9b:8b:f0: fa:9c:0d:ee:f9:35:e4:fa:5d:e4:9c:cc:44:31:1e: 92:9b:92:0f:74:4a:7f:40:8e:14:c4:e4:d9:64:06: e5:51:db:c7:ce:33:b7:99:ce:f1:66:f9:1e:e2:67: 6b:9a:0e:b8:b6:c6:dc:bc:93:d5:35:1e:81:c4:90: 5e:d2:52:ef:6d:e4:66:df:93:d2:5f:37:eb:69:b2: 06:1a:0a:ca:3a:c3:26:42:2c:59:9c:8a:fa:ba:4d: 75:64:89:78:69:26:ce:18:e9:3f:36:9a:32:47:66: 69:13:1b:87:62:dc:a7:d7:5e:98:83:17:aa:4e:b2: 33:b9:05:a3:67:70:d4:81:75:4a:f2:07:61:d1:ae: ce:15:01:49:43:a9:c8:33:bb:7f:87:9a:0f:9d:bd: c4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 131.253.1.0/24 131.253.3.0/24 131.253.5.0-131.253.6.255 131.253.8.0/24 131.253.12.0-131.253.18.255 131.253.21.0-131.253.47.255 131.253.61.0-131.253.255.255 132.245.0.0/16 134.170.0.0/16 134.177.0.0/16 137.116.0.0/15 137.135.0.0/16 138.91.0.0/16 141.251.0.0/16 168.61.0.0-168.63.255.255 192.32.0.0/16 192.48.225.0/24 192.84.159.0-192.84.161.255 198.49.8.0/24 198.200.130.0/24 198.206.164.0/24 199.30.16.0/20 199.74.210.0/24 199.242.32.0-199.242.55.255 204.152.140.0/23 205.174.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cc:f9:47:7b:9f:33:3f:34:83:a5:80:df:b3:9d:90:e0:b3: ae:67:ba:04:c5:e5:bc:15:ad:b9:74:bb:96:3d:6b:02:2a:e6: a6:24:8c:73:d0:fd:90:4c:af:8f:a2:68:3b:8d:fe:82:5c:b1: 50:45:19:aa:a0:c9:c0:ce:79:41:98:3e:6f:1e:bd:53:c1:4b: f0:09:a3:15:8a:35:89:be:46:1c:38:0f:5d:f0:b7:2c:15:d1: e8:16:e2:6b:2b:5f:92:99:90:69:1c:17:f2:b7:fc:e3:49:2e: 8f:de:43:58:94:b2:db:3d:d4:68:85:bf:0b:11:9e:00:83:3e: 8d:81:f3:b1:f7:5f:2b:3f:b2:d8:22:ef:f7:71:cc:92:09:e3: 52:06:b2:1d:a2:93:b6:5e:aa:8d:c2:7c:b7:71:8a:86:1e:1b: f8:73:6a:df:d2:2d:90:24:4f:d9:b3:3c:fa:b4:06:77:d0:73: 1a:36:d0:05:4a:e8:4d:d8:84:6a:d4:d6:14:d6:02:4b:cc:8a: 39:d6:63:46:47:39:11:dc:c3:2a:82:58:5d:e0:a2:7a:d7:f3: fe:f2:32:7b:fd:05:d5:00:3e:a6:7d:98:27:f3:67:f9:e2:b4: d2:d4:79:62:80:c6:51:14:28:a7:d9:cd:fa:37:f7:fc:48:6b: d2:76:01:64 -----BEGIN CERTIFICATE----- MIIHtTCCBp2gAwIBAgIUAQ0Mn0MoWEUJTeobr/0Gqb7UroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDIyODAxNDUyMFoXDTI2MDYwMjAwNDUyMFowLzEtMCsGA1UEAxMk ZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3NDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsS0g2uKRPcmKE+798BTAJT4sk4csBDHBz4g5 kNQxLujPga8GU8hwa8887aCJE4UtUVETuSZGezy9LJhcrsNu6SYUJT/lxm0A7G4L izsXp/GopYDIo3xS0TBej6ouZ2QstfqDNvCbi/D6nA3u+TXk+l3knMxEMR6Sm5IP dEp/QI4UxOTZZAblUdvHzjO3mc7xZvke4mdrmg64tsbcvJPVNR6BxJBe0lLvbeRm 35PSXzfrabIGGgrKOsMmQixZnIr6uk11ZIl4aSbOGOk/NpoyR2ZpExuHYtyn116Y gxeqTrIzuQWjZ3DUgXVK8gdh0a7OFQFJQ6nIM7t/h5oPnb3EDwIDAQABo4IExzCC BMMwHQYDVR0OBBYEFLmj0JFWAovB8vJ3QS2CG87Sv9tDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m ZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZkZTFlM2QxLWQ4ZGEtNGZhOS04 MDY4LTFiNjQxY2FiNzQzZC9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNh Yjc0M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgeYGCCsGAQUF BwEHAQH/BIHWMIHTMIHQBAIAATCByQMEAIP9AQMEAIP9AzAMAwQAg/0FAwQAg/0G AwQAg/0IMAwDBAKD/QwDBACD/RIwDAMEAIP9FQMEBIP9IDALAwQAg/09AwMBg/wD AwCE9QMDAIaqAwMAhrEDAwGJdAMDAImHAwMAilsDAwCN+zAKAwMAqD0DAwaoAAMD AMAgAwQAwDDhMAwDBADAVJ8DBAHAVKADBADGMQgDBADGyIIDBADGzqQDBATHHhAD BADHStIwDAMEBcfyIAMEA8fyMAMEAcyYjAMEBM2u4DBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB9zPlHe58z PzSDpYDfs52Q4LOuZ7oExeW8Fa25dLuWPWsCKuamJIxz0P2QTK+Pomg7jf6CXLFQ RRmqoMnAznlBmD5vHr1TwUvwCaMVijWJvkYcOA9d8LcsFdHoFuJrK1+SmZBpHBfy t/zjSS6P3kNYlLLbPdRohb8LEZ4Agz6NgfOx918rP7LYIu/3ccySCeNSBrIdopO2 XqqNwny3cYqGHhv4c2rf0i2QJE/Zszz6tAZ30HMaNtAFSuhN2IRq1NYU1gJLzIo5 1mNGRzkR3MMqglhd4KJ61/P+8jJ7/QXVAD6mfZgn82f54rTS1HligMZRFCin2c36 N/f8SGvSdgFk -----END CERTIFICATE-----Generated at Sun May 12 02:18:17 2024 by rpki-client on console-ams.rpki-client.org