$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer File: 06795d2e-ca43-4b22-8995-31898670bf14.cer (raw, json) Hash identifier: Bm/I6saQDhuj7IuBk+1hCvXlA+kcbpEpF4h/wsUg5qw= Subject key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285846E57FB196AE5543C66DAE9200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Aug 2024 15:30:25 +0000 Certificate not after: Mon 16 Nov 2026 01:45:25 +0000 Subordinate resources: AS: 395213 IP: 27.0.224.0/22 IP: 64.18.136.0/22 IP: 161.38.56.0/22 IP: 193.149.136.0/24 IP: 195.95.191.0/24 IP: 199.201.125.0/24 IP: 204.10.52.0/22 IP: 2605:ce40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:e5:7f:b1:96:ae:55:43:c6:6d:ae:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 16 15:30:25 2024 GMT Not After : Nov 16 01:45:25 2026 GMT Subject: CN=06795d2e-ca43-4b22-8995-31898670bf14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:63:92:e2:9e:9c:6c:04:f0:45:90:1f:f4: 55:66:62:f3:e9:02:d2:33:54:d2:5c:3c:c7:03:96: 89:c9:c7:da:08:93:c8:89:95:5f:7b:95:ce:55:e4: 90:03:68:31:b0:e2:bc:f0:d9:e3:c3:53:5e:2f:5e: 75:6b:56:ea:3a:0c:11:bb:cc:56:06:16:9b:55:d8: a3:69:db:ac:dd:1b:36:b6:e8:72:16:48:3b:59:ce: b7:e3:23:07:cf:aa:f0:3b:dd:9a:54:47:cc:14:e3: 48:03:76:ff:b0:e3:f0:d0:0c:4b:c6:9a:2b:c2:11: 6f:13:5b:9b:ef:8e:74:1d:99:6d:d2:e1:b6:21:44: 04:f9:83:81:b0:18:13:1c:4d:e9:9d:45:e8:30:32: 0c:11:31:e6:28:2d:43:89:81:ca:c8:6b:bd:74:86: 4e:48:ee:d2:6c:9e:7b:43:44:13:23:e3:15:b8:9a: 97:71:cc:5c:bf:7a:32:54:44:c5:73:0f:ab:4e:c0: f2:58:31:0e:d9:28:35:2d:46:e6:73:17:fe:ff:03: d7:92:94:fe:5d:67:ff:62:d5:6e:35:b5:10:f6:3a: ed:a7:26:a2:e9:2a:e1:4f:e6:e8:fb:e4:74:16:c2: 62:df:d4:fb:77:24:df:09:28:70:b7:35:b8:d8:6f: ce:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 27.0.224.0/22 64.18.136.0/22 161.38.56.0/22 193.149.136.0/24 195.95.191.0/24 199.201.125.0/24 204.10.52.0/22 IPv6: 2605:ce40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395213 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:cd:85:46:cf:77:ed:26:11:8f:4a:98:3f:9e:0c:42:14:e9: ba:3a:be:ef:7b:d2:55:a1:0b:1f:a0:b0:ad:e3:b4:2e:a8:f1: 0e:5b:00:cb:fb:98:c0:c7:4d:96:91:69:f0:c7:63:36:a2:0a: 32:ad:5d:5d:03:a9:cc:44:c1:1e:4f:65:f2:d9:d1:a2:60:ff: 10:e7:43:6b:e3:31:7e:55:54:06:ac:07:db:79:16:49:30:1b: 41:7c:e9:9b:a7:b4:80:24:50:98:6a:15:01:1a:e4:5b:90:7c: 3a:cf:e9:33:34:e9:de:e3:43:88:82:01:af:aa:2a:7c:a6:52: dc:15:5f:68:2e:d0:c1:35:06:22:f9:3e:6c:5a:5e:c0:d0:2a: e6:a8:bf:4d:ce:4f:2d:61:d4:dd:76:9d:68:50:9e:26:f0:9f: 73:b9:1c:a4:77:43:7b:53:11:84:a7:50:0a:d2:1a:84:90:cb: 98:21:fa:2f:21:44:01:51:18:bc:08:e2:ea:aa:e5:ac:71:f0: 72:43:28:2f:a7:ee:b1:ed:0e:d1:ee:91:b0:b4:67:af:7a:96: f6:6b:8f:d1:9c:a3:b0:e7:3e:da:24:fc:e1:c1:00:48:62:2f: 27:e1:e9:0d:e5:dc:fd:03:b3:69:ff:cf:79:fb:40:75:59:4b: 2e:da:e5:30 -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEblf7GWrlVDxm2ukgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDgxNjE1MzAyNVoXDTI2MTExNjAxNDUyNVowLzEtMCsGA1UEAxMk MDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBiZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPljkuKenGwE8EWQH/RVZmLz6QLSM1TSXDzH A5aJycfaCJPIiZVfe5XOVeSQA2gxsOK88Nnjw1NeL151a1bqOgwRu8xWBhabVdij adus3Rs2tuhyFkg7Wc634yMHz6rwO92aVEfMFONIA3b/sOPw0AxLxporwhFvE1ub 7450HZlt0uG2IUQE+YOBsBgTHE3pnUXoMDIMETHmKC1DiYHKyGu9dIZOSO7SbJ57 Q0QTI+MVuJqXccxcv3oyVETFcw+rTsDyWDEO2Sg1LUbmcxf+/wPXkpT+XWf/YtVu NbUQ9jrtpyai6SrhT+bo++R0FsJi39T7dyTfCShwtzW42G/OhQIDAQABo4IETjCC BEowHQYDVR0OBBYEFMiP88ggeeNl1O/rRgBAWyxHYv4jMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w Njc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzA2Nzk1ZDJlLWNhNDMtNGIyMi04 OTk1LTMxODk4NjcwYmYxNC8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3 MGJmMTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAIbAOADBAJAEogDBAKhJjgDBADBlYgDBADDX78D BADHyX0DBALMCjQwDQQCAAIwBwMFACYFzkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBgfNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAG/NhUbPd+0mEY9KmD+eDEIU6bo6vu970lWhCx+gsK3j tC6o8Q5bAMv7mMDHTZaRafDHYzaiCjKtXV0DqcxEwR5PZfLZ0aJg/xDnQ2vjMX5V VAasB9t5FkkwG0F86ZuntIAkUJhqFQEa5FuQfDrP6TM06d7jQ4iCAa+qKnymUtwV X2gu0ME1BiL5PmxaXsDQKuaov03OTy1h1N12nWhQnibwn3O5HKR3Q3tTEYSnUArS GoSQy5gh+i8hRAFRGLwI4uqq5axx8HJDKC+n7rHtDtHukbC0Z696lvZrj9Gco7Dn Ptok/OHBAEhiLyfh6Q3l3P0Ds2n/z3n7QHVZSy7a5TA= -----END CERTIFICATE-----Generated at Thu Nov 21 16:28:24 2024 by rpki-client on console-ams.rpki-client.org