$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer File: 0d86638a-2e12-4aa4-bdcd-22665b26e57c.cer (raw, json) Hash identifier: qCyFoeLrysxBoLOQhlSP2czX5BLXDC0Fnbvgpgwxb+k= Subject key identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858487E48DCF2E496ACC2FAEB4CA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Jan 2025 01:45:33 +0000 Certificate not after: Thu 15 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 2906 AS: 40027 IP: 23.246.0.0/18 IP: 45.57.0.0/17 IP: 64.120.128.0/17 IP: 66.197.128.0/17 IP: 108.175.32.0/20 IP: 192.173.64.0/18 IP: 198.38.96.0/19 IP: 198.45.48.0/20 IP: 2620:10c:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7e:48:dc:f2:e4:96:ac:c2:fa:eb:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 10 01:45:33 2025 GMT Not After : Apr 15 00:45:33 2027 GMT Subject: CN=0d86638a-2e12-4aa4-bdcd-22665b26e57c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:d3:fe:b3:19:f9:c5:49:31:8d:53:fa:b1: 60:90:f0:c9:26:95:8f:3a:81:27:70:74:d4:c6:69: 06:d3:d7:b1:ac:d4:22:ac:16:1a:3c:26:08:33:4e: 5e:1d:da:05:09:63:51:ed:a3:d4:9e:f1:cb:99:c7: 8b:02:26:fd:63:fd:d7:fd:9d:45:b4:06:30:ec:f0: b4:d7:e7:8f:55:6f:f7:45:40:b6:85:2f:d9:53:67: 12:82:69:51:cb:83:6b:83:33:d4:83:d5:2e:4f:a9: 7c:f3:07:42:8f:78:ea:af:cf:92:c6:d7:5c:a1:c5: f6:4d:d4:cd:00:3e:5f:da:76:17:81:8f:c3:0a:b9: ae:43:fa:df:4a:3c:11:6b:6a:57:03:a1:4b:d8:a3: 7b:35:20:40:e4:d7:11:32:18:4c:62:a8:05:23:8f: ab:7a:d3:ed:3a:3c:17:13:6a:4a:a0:f0:c0:c5:ed: 25:7b:08:7e:3b:b5:04:31:85:e4:a6:0b:99:a5:fc: 17:00:dc:09:27:5a:e3:d5:2f:3b:0d:c4:b2:72:38: c2:fe:cd:9d:92:aa:9d:be:32:6b:76:8a:e8:ef:41: c9:2a:f2:fb:02:e9:62:58:52:36:eb:2d:50:a6:76: 77:60:5b:27:67:77:b3:f8:f5:3e:33:32:69:56:bd: bf:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:46:71:B4:EB:9B:8E:63:06:78:A4:72:C1:68:25:40:B3:3F:13:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0d86638a-2e12-4aa4-bdcd-22665b26e57c/0d86638a-2e12-4aa4-bdcd-22665b26e57c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.246.0.0/18 45.57.0.0/17 64.120.128.0/17 66.197.128.0/17 108.175.32.0/20 192.173.64.0/18 198.38.96.0/19 198.45.48.0/20 IPv6: 2620:10c:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2906 40027 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:cc:e5:7f:c9:7c:79:96:c8:7d:cd:d4:15:9a:c8:cd:16:26: 81:00:69:bd:87:73:3e:02:9c:27:ca:95:93:d8:2a:c4:d9:39: 70:6c:9d:fa:d5:da:73:01:5e:99:3c:97:78:b0:82:5e:d6:c9: 60:60:ea:fc:83:c5:39:f1:46:c8:93:ac:31:33:15:a1:88:14: c9:4f:e9:8c:7c:ad:61:d0:7a:70:92:98:ba:df:ce:00:b0:e7: bb:e5:1e:73:69:a5:f2:67:c9:8f:96:42:65:81:76:a2:92:a1: 1b:a0:07:be:bb:94:89:3d:5a:4d:e1:a8:ee:eb:58:34:05:e3: 49:05:09:52:3e:03:67:9f:df:0c:76:4d:2f:96:11:09:e2:4f: dc:7c:84:b7:d5:4f:f1:b1:f4:88:d4:dd:9a:40:54:a7:00:12: 10:06:21:90:52:4e:b9:8c:ef:65:24:7f:c0:3f:40:1e:11:55: de:d9:b5:cc:1e:39:01:2a:16:2e:0d:5e:81:14:0a:0c:45:f4: 6b:60:22:02:eb:78:85:ad:f7:b7:71:17:07:d7:e1:54:ff:2a: 50:d6:8d:6b:a6:9f:10:07:18:27:78:21:42:ca:58:f9:69:c2: 8a:27:06:eb:61:e7:55:d9:e3:ce:ae:a3:1a:9f:4d:9b:e4:13: 41:52:d6:95 -----BEGIN CERTIFICATE----- MIIHSDCCBjCgAwIBAgIUAQ0Mn0MoWEh+SNzy5JaswvrrTKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDExMDAxNDUzM1oXDTI3MDQxNTAwNDUzM1owLzEtMCsGA1UEAxMk MGQ4NjYzOGEtMmUxMi00YWE0LWJkY2QtMjI2NjViMjZlNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8rT/rMZ+cVJMY1T+rFgkPDJJpWPOoEncHTU xmkG09exrNQirBYaPCYIM05eHdoFCWNR7aPUnvHLmceLAib9Y/3X/Z1FtAYw7PC0 1+ePVW/3RUC2hS/ZU2cSgmlRy4NrgzPUg9UuT6l88wdCj3jqr8+SxtdcocX2TdTN AD5f2nYXgY/DCrmuQ/rfSjwRa2pXA6FL2KN7NSBA5NcRMhhMYqgFI4+retPtOjwX E2pKoPDAxe0lewh+O7UEMYXkpguZpfwXANwJJ1rj1S87DcSycjjC/s2dkqqdvjJr doro70HJKvL7AuliWFI26y1QpnZ3YFsnZ3ez+PU+MzJpVr2/PQIDAQABo4IEWjCC BFYwHQYDVR0OBBYEFFhGcbTrm45jBnikcsFoJUCzPxPXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8w ZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIyNmU1N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzBkODY2MzhhLTJlMTItNGFhNC1i ZGNkLTIyNjY1YjI2ZTU3Yy8wZDg2NjM4YS0yZTEyLTRhYTQtYmRjZC0yMjY2NWIy NmU1N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWgYIKwYBBQUH AQcBAf8ESzBJMDYEAgABMDADBAYX9gADBActOQADBAdAeIADBAdCxYADBARsryAD BAbArUADBAXGJmADBATGLTAwDwQCAAIwCQMHBCYgAQxwADAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgILWgIDAJxbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABbM5X/JfHmWyH3N1BWayM0WJoEA ab2Hcz4CnCfKlZPYKsTZOXBsnfrV2nMBXpk8l3iwgl7WyWBg6vyDxTnxRsiTrDEz FaGIFMlP6Yx8rWHQenCSmLrfzgCw57vlHnNppfJnyY+WQmWBdqKSoRugB767lIk9 Wk3hqO7rWDQF40kFCVI+A2ef3wx2TS+WEQniT9x8hLfVT/Gx9IjU3ZpAVKcAEhAG IZBSTrmM72Ukf8A/QB4RVd7ZtcweOQEqFi4NXoEUCgxF9GtgIgLreIWt97dxFwfX 4VT/KlDWjWumnxAHGCd4IULKWPlpwoonButh51XZ486uoxqfTZvkE0FS1pU= -----END CERTIFICATE-----Generated at Sun Jan 12 16:14:29 2025 by rpki-client on console-fra.rpki-client.org