$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer File: 14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer (raw, json) Hash identifier: +fJHFNQ8b5SM2rWdZMJ2wji0FQ/gd6bmF1ENxoj1oIQ= Subject key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844728CEFEDB2D36FC6A24B5C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jan 2024 01:45:15 +0000 Certificate not after: Thu 09 Apr 2026 00:45:15 +0000 Subordinate resources: AS: 11368 AS: 12276 AS: 63055 IP: 149.112.5.0/24 IP: 192.33.255.0/24 IP: 206.197.187.0/24 IP: 2001:504:30::/48 IP: 2620:8b:e000::/48 IP: 2620:11a:b000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:72:8c:ef:ed:b2:d3:6f:c6:a2:4b:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 5 01:45:15 2024 GMT Not After : Apr 9 00:45:15 2026 GMT Subject: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:77:cf:be:19:37:5b:29:4d:42:7e:e5:64: bc:21:0a:74:8e:1a:be:a7:e2:66:d5:30:f9:c8:c9: 2a:74:cd:2a:92:13:3f:fa:8e:44:02:c5:c8:10:30: 84:ce:c0:46:6e:74:b6:52:20:18:44:59:0b:89:15: 3a:df:87:5a:4d:33:17:8f:27:e3:41:64:cc:76:11: 44:ff:37:dd:b7:fa:4b:a2:71:55:03:c3:ab:87:81: d9:1e:88:a6:4f:76:f8:5d:59:96:50:ec:10:cd:e1: 82:a1:5f:ab:8e:97:4d:8d:e2:9e:d5:93:39:14:94: 6c:99:10:0e:b6:ea:ed:38:6f:77:c2:ec:a9:29:36: 2d:9f:13:b5:ce:12:b3:28:09:a9:9d:7a:3d:f7:01: 55:56:a2:0c:d4:6a:a7:e5:5d:10:4a:fd:c2:95:4d: d9:f3:07:ed:ed:13:df:d8:66:ff:cf:a9:be:7e:60: 6d:71:01:a4:f1:d7:c3:11:88:4b:df:9f:0a:73:81: c0:f1:54:7d:c8:62:ba:70:a5:94:d6:a6:cf:1b:ca: 3f:89:5e:68:88:88:36:1e:cb:d2:66:8b:70:ed:82: 00:96:c7:7d:ca:8d:b7:7f:d8:b6:3f:02:20:74:43: d6:06:ac:a9:47:bf:b2:9a:e6:71:50:55:dc:f6:8c: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 149.112.5.0/24 192.33.255.0/24 206.197.187.0/24 IPv6: 2001:504:30::/48 2620:8b:e000::/48 2620:11a:b000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11368 12276 63055 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:8a:01:c6:47:10:3a:60:e7:0d:89:99:a9:cd:a8:5d:59:fb: 71:14:5e:00:8d:a7:bd:2d:52:83:92:0c:0b:5a:72:bf:d1:de: 59:86:95:4d:bc:77:0b:22:81:b6:98:b0:ee:1c:2e:24:22:88: cd:f6:9c:1c:47:fa:cf:bc:10:49:83:71:29:e8:c7:ac:7c:ec: d4:62:00:e8:05:0f:42:45:4e:7e:83:9f:2e:63:27:2d:0d:68: 0b:44:cf:e5:32:58:4e:2a:09:51:08:4f:b8:b3:00:63:0b:b9: 30:09:44:13:fd:8e:db:32:2c:e3:96:31:78:d3:19:7b:13:59: 23:a1:f1:4c:b8:80:c9:ea:57:d3:e2:59:8c:69:a1:ff:08:d4: d3:e2:84:a5:71:57:c4:be:5c:6c:12:1c:ff:5d:a8:e1:4e:b5: a4:8b:5a:23:e1:c4:12:0d:f2:91:9e:79:8d:3a:8e:2a:3d:13: eb:f8:55:b3:6f:97:b6:08:6d:f4:7f:44:9e:27:fa:77:3b:d9: ec:5f:b6:a2:8d:e0:c3:27:69:6f:36:89:b9:d1:01:31:8a:a0: 98:e0:87:b8:6e:00:76:01:3c:78:ce:81:b1:03:cf:3e:2d:49: 9f:08:b4:a8:d0:3c:d3:d1:ba:94:b2:95:c5:cf:ba:ba:da:8b: f8:56:32:dc -----BEGIN CERTIFICATE----- MIIHQDCCBiigAwIBAgIUAQ0Mn0MoWERyjO/tstNvxqJLXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDEwNTAxNDUxNVoXDTI2MDQwOTAwNDUxNVowLzEtMCsGA1UEAxMk MTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2NmNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtF3z74ZN1spTUJ+5WS8IQp0jhq+p+Jm1TD5 yMkqdM0qkhM/+o5EAsXIEDCEzsBGbnS2UiAYRFkLiRU634daTTMXjyfjQWTMdhFE /zfdt/pLonFVA8Orh4HZHoimT3b4XVmWUOwQzeGCoV+rjpdNjeKe1ZM5FJRsmRAO turtOG93wuypKTYtnxO1zhKzKAmpnXo99wFVVqIM1Gqn5V0QSv3ClU3Z8wft7RPf 2Gb/z6m+fmBtcQGk8dfDEYhL358Kc4HA8VR9yGK6cKWU1qbPG8o/iV5oiIg2HsvS Zotw7YIAlsd9yo23f9i2PwIgdEPWBqypR7+ymuZxUFXc9owXbQIDAQABo4IEUjCC BE4wHQYDVR0OBBYEFP36X9OCyVrHgeaysFS0ydHwHLU8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x NGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE0YzllMGNlLTBmMTItNGJjOC05 ODljLTVkMzMyYTdjZjUyMi8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3 Y2Y1MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTgYIKwYBBQUH AQcBAf8EPzA9MBgEAgABMBIDBACVcAUDBADAIf8DBADOxbswIQQCAAIwGwMHACAB BQQAMAMHACYgAIvgAAMHBCYgARqwADAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgIs aAICL/QCAwD2TzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCPigHGRxA6YOcNiZmpzahdWftxFF4Ajae9LVKD kgwLWnK/0d5ZhpVNvHcLIoG2mLDuHC4kIojN9pwcR/rPvBBJg3Ep6MesfOzUYgDo BQ9CRU5+g58uYyctDWgLRM/lMlhOKglRCE+4swBjC7kwCUQT/Y7bMizjljF40xl7 E1kjofFMuIDJ6lfT4lmMaaH/CNTT4oSlcVfEvlxsEhz/XajhTrWki1oj4cQSDfKR nnmNOo4qPRPr+FWzb5e2CG30f0SeJ/p3O9nsX7aijeDDJ2lvNom50QExiqCY4Ie4 bgB2ATx4zoGxA88+LUmfCLSo0DzT0bqUspXFz7q62ov4VjLc -----END CERTIFICATE-----Generated at Mon May 6 02:01:12 2024 by rpki-client on console-fra.rpki-client.org