$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730.cer File: 04b45e42-c2e7-4254-9ecb-472a7693a730.cer (raw, json) Hash identifier: ulg0iJ9IGlKZPoX9HlcitLz9MNn6nc+uQcD9M0RoV8A= Subject key identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844A2029AF7167F2C2E8CA95F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Jan 2024 01:45:20 +0000 Certificate not after: Sun 26 Apr 2026 00:45:20 +0000 Subordinate resources: AS: 397377 IP: 63.246.143.0/24 IP: 161.199.88.0/24 IP: 207.229.66.0/24 IP: 2605:51c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:a2:02:9a:f7:16:7f:2c:2e:8c:a9:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 22 01:45:20 2024 GMT Not After : Apr 26 00:45:20 2026 GMT Subject: CN=04b45e42-c2e7-4254-9ecb-472a7693a730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:0e:37:7d:06:85:fc:49:54:7c:c9:24:85: d5:67:5b:1a:0d:37:82:8d:12:4b:79:66:ac:9c:0d: 6f:f7:81:88:0d:75:88:53:ed:5c:f9:49:cb:86:4b: 46:0c:61:97:45:55:95:11:ba:b9:86:30:95:9e:a2: 4d:ff:4b:94:9f:24:2a:6b:25:d8:35:8f:7f:53:13: f3:09:57:6f:df:a4:3b:34:8c:a5:d6:be:cf:50:84: 6f:23:44:05:e7:a5:a6:ce:6b:8d:77:ed:09:e8:27: d2:d7:50:f2:45:34:0a:91:12:8f:f5:3d:ff:1a:6d: 2e:e0:4c:90:5a:44:cb:81:6a:59:8e:60:b6:60:ea: 76:ce:6c:ba:2e:94:37:48:80:1e:bc:d8:6c:dd:79: b2:1c:66:8a:30:4d:b4:29:3b:ec:73:a7:2b:89:e5: 30:60:1f:5b:a2:2f:ba:c0:9d:ab:57:3c:8a:81:62: e3:32:6c:45:cd:a1:0f:a1:60:10:2e:c6:16:f6:b4: 72:e7:ec:bc:61:e8:f4:bc:c1:38:ee:cc:a4:f0:cf: e9:d0:27:fb:f8:28:02:7e:f4:c1:ac:11:84:c1:14: 3d:6b:8b:c7:ea:d6:e3:6c:32:3a:61:42:bf:16:51: 22:d9:f8:db:25:f6:4c:f4:df:21:47:1d:58:f6:cc: 31:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:50:B3:98:79:BE:37:C0:83:54:8F:CB:DD:FC:D2:44:6A:51:C8:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04b45e42-c2e7-4254-9ecb-472a7693a730/04b45e42-c2e7-4254-9ecb-472a7693a730.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 63.246.143.0/24 161.199.88.0/24 207.229.66.0/24 IPv6: 2605:51c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397377 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c0:48:80:bf:79:9f:b3:10:27:e5:6f:92:60:d9:f9:38:ab: 02:fa:b9:05:d0:e0:da:22:68:ca:e3:3c:bb:64:1c:34:ae:4a: 1d:22:3a:1c:11:da:d4:2a:14:ea:0e:85:3c:70:0b:de:9e:02: a4:76:f2:03:22:b9:aa:cb:8f:07:e6:5c:7b:a5:7f:c9:2c:0c: c4:55:a6:61:d9:01:4b:88:62:0f:41:76:32:cd:ff:d3:d1:88: ad:22:10:c0:47:66:4c:70:11:7f:04:f8:15:16:2f:b2:1a:0d: 9c:09:e8:e8:c2:90:a2:7e:e8:81:3d:d5:29:b6:47:66:b5:9b: 75:48:de:3d:b9:8c:34:53:55:ef:a2:5f:22:d5:4b:cb:0f:e3: 8b:a6:26:fb:d8:b3:72:ad:d6:0e:c5:e3:e0:0f:0e:c0:cd:72: f7:f4:80:66:64:6f:54:1a:8c:4d:86:26:c1:44:a0:77:81:9b: 95:30:0d:08:7a:78:bb:4e:19:8f:b5:a0:c1:eb:19:d2:f9:17: cf:7b:a3:9d:ab:d6:f8:aa:9a:f5:8b:d2:b3:3b:42:3d:19:90: 38:6b:6b:d9:ba:1a:bb:ba:ba:c9:1e:ac:f1:05:88:9d:6f:8c: ab:d7:f1:cc:8e:52:b0:cb:8c:23:f9:95:14:1f:ac:70:9c:63: 21:62:bd:2b -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWESiApr3Fn8sLoypXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDEyMjAxNDUyMFoXDTI2MDQyNjAwNDUyMFowLzEtMCsGA1UEAxMk MDRiNDVlNDItYzJlNy00MjU0LTllY2ItNDcyYTc2OTNhNzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx94ON30GhfxJVHzJJIXVZ1saDTeCjRJLeWas nA1v94GIDXWIU+1c+UnLhktGDGGXRVWVEbq5hjCVnqJN/0uUnyQqayXYNY9/UxPz CVdv36Q7NIyl1r7PUIRvI0QF56WmzmuNd+0J6CfS11DyRTQKkRKP9T3/Gm0u4EyQ WkTLgWpZjmC2YOp2zmy6LpQ3SIAevNhs3XmyHGaKME20KTvsc6crieUwYB9boi+6 wJ2rVzyKgWLjMmxFzaEPoWAQLsYW9rRy5+y8Yej0vME47syk8M/p0Cf7+CgCfvTB rBGEwRQ9a4vH6tbjbDI6YUK/FlEi2fjbJfZM9N8hRx1Y9swxfQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFN9Qs5h5vjfAg1SPy9380kRqUcjOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w NGI0NWU0Mi1jMmU3LTQyNTQtOWVjYi00NzJhNzY5M2E3MzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzA0YjQ1ZTQyLWMyZTctNDI1NC05 ZWNiLTQ3MmE3NjkzYTczMC8wNGI0NWU0Mi1jMmU3LTQyNTQtOWVjYi00NzJhNzY5 M2E3MzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAA/9o8DBAChx1gDBADP5UIwDQQCAAIwBwMFACYF UcAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhBBMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGvASIC/eZ+z ECflb5Jg2fk4qwL6uQXQ4NoiaMrjPLtkHDSuSh0iOhwR2tQqFOoOhTxwC96eAqR2 8gMiuarLjwfmXHulf8ksDMRVpmHZAUuIYg9BdjLN/9PRiK0iEMBHZkxwEX8E+BUW L7IaDZwJ6OjCkKJ+6IE91Sm2R2a1m3VI3j25jDRTVe+iXyLVS8sP44umJvvYs3Kt 1g7F4+APDsDNcvf0gGZkb1QajE2GJsFEoHeBm5UwDQh6eLtOGY+1oMHrGdL5F897 o52r1viqmvWL0rM7Qj0ZkDhra9m6Gru6uskerPEFiJ1vjKvX8cyOUrDLjCP5lRQf rHCcYyFivSs= -----END CERTIFICATE-----Generated at Sat Apr 27 15:35:02 2024 by rpki-client on console-ams.rpki-client.org