$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer File: 14c9e0ce-0f12-4bc8-989c-5d332a7cf522.cer (raw, json) Hash identifier: 3hSW1C94fU8MkEIq/u+LapgXyS+pG+XimnldlVoKhOc= Subject key identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858477CDFEC102A835B5A8C151740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Oct 2024 20:51:22 +0000 Certificate not after: Thu 09 Apr 2026 00:45:15 +0000 Subordinate resources: AS: 11368 AS: 12276 AS: 40271 AS: 63055 IP: 149.112.5.0/24 IP: 149.112.115.0/24 IP: 192.33.255.0/24 IP: 206.197.187.0/24 IP: 2001:504:30::/48 IP: 2620:8b:e000::/48 IP: 2620:11a:b000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:7c:df:ec:10:2a:83:5b:5a:8c:15:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 9 20:51:22 2024 GMT Not After : Apr 9 00:45:15 2026 GMT Subject: CN=14c9e0ce-0f12-4bc8-989c-5d332a7cf522 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:77:cf:be:19:37:5b:29:4d:42:7e:e5:64: bc:21:0a:74:8e:1a:be:a7:e2:66:d5:30:f9:c8:c9: 2a:74:cd:2a:92:13:3f:fa:8e:44:02:c5:c8:10:30: 84:ce:c0:46:6e:74:b6:52:20:18:44:59:0b:89:15: 3a:df:87:5a:4d:33:17:8f:27:e3:41:64:cc:76:11: 44:ff:37:dd:b7:fa:4b:a2:71:55:03:c3:ab:87:81: d9:1e:88:a6:4f:76:f8:5d:59:96:50:ec:10:cd:e1: 82:a1:5f:ab:8e:97:4d:8d:e2:9e:d5:93:39:14:94: 6c:99:10:0e:b6:ea:ed:38:6f:77:c2:ec:a9:29:36: 2d:9f:13:b5:ce:12:b3:28:09:a9:9d:7a:3d:f7:01: 55:56:a2:0c:d4:6a:a7:e5:5d:10:4a:fd:c2:95:4d: d9:f3:07:ed:ed:13:df:d8:66:ff:cf:a9:be:7e:60: 6d:71:01:a4:f1:d7:c3:11:88:4b:df:9f:0a:73:81: c0:f1:54:7d:c8:62:ba:70:a5:94:d6:a6:cf:1b:ca: 3f:89:5e:68:88:88:36:1e:cb:d2:66:8b:70:ed:82: 00:96:c7:7d:ca:8d:b7:7f:d8:b6:3f:02:20:74:43: d6:06:ac:a9:47:bf:b2:9a:e6:71:50:55:dc:f6:8c: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FA:5F:D3:82:C9:5A:C7:81:E6:B2:B0:54:B4:C9:D1:F0:1C:B5:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14c9e0ce-0f12-4bc8-989c-5d332a7cf522/14c9e0ce-0f12-4bc8-989c-5d332a7cf522.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 149.112.5.0/24 149.112.115.0/24 192.33.255.0/24 206.197.187.0/24 IPv6: 2001:504:30::/48 2620:8b:e000::/48 2620:11a:b000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11368 12276 40271 63055 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:c1:8c:7b:f5:2d:eb:17:a4:15:fa:b9:16:a8:a1:c6:a5:2a: 4e:53:90:fb:d5:8f:b4:ce:a1:26:89:96:d9:fe:d0:18:9b:59: 1b:90:f4:25:30:4a:97:66:21:1d:e5:07:bb:34:d8:ac:5e:1c: 28:c0:40:53:62:3b:05:48:e6:8e:92:1f:35:dd:85:15:f4:ea: 77:20:8b:53:ba:df:d8:db:9b:23:fb:92:91:1d:cd:f6:06:e5: d5:aa:8b:6a:38:dc:a4:b8:be:3b:35:c9:7a:fb:ad:47:0b:bf: f0:2f:b2:4a:43:7e:8e:07:13:93:db:e7:d3:d3:d6:0e:85:98: 4e:02:47:31:53:f8:5d:04:b0:31:9c:44:a7:0c:7c:e3:aa:e1: b9:54:f0:68:88:71:c8:bb:ee:20:1c:71:31:32:a5:a7:24:2a: 1f:25:9d:16:1c:9d:95:7d:de:99:4e:d0:b5:96:9a:d7:fa:bb: 4e:fe:b8:e4:ab:11:38:ac:4b:60:63:8c:d3:e5:39:40:8e:53: 73:99:1f:78:e9:1e:13:94:0a:ad:02:4d:8a:22:b2:b9:8e:de: 03:15:d9:9a:bb:a7:61:2a:f1:87:48:50:2c:0b:54:f6:d1:57: f4:84:4c:d2:22:a1:c2:a8:84:23:61:67:1e:ff:28:75:82:e5: 53:3e:bc:96 -----BEGIN CERTIFICATE----- MIIHSzCCBjOgAwIBAgIUAQ0Mn0MoWEd83+wQKoNbWowVF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTAwOTIwNTEyMloXDTI2MDQwOTAwNDUxNVowLzEtMCsGA1UEAxMk MTRjOWUwY2UtMGYxMi00YmM4LTk4OWMtNWQzMzJhN2NmNTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtF3z74ZN1spTUJ+5WS8IQp0jhq+p+Jm1TD5 yMkqdM0qkhM/+o5EAsXIEDCEzsBGbnS2UiAYRFkLiRU634daTTMXjyfjQWTMdhFE /zfdt/pLonFVA8Orh4HZHoimT3b4XVmWUOwQzeGCoV+rjpdNjeKe1ZM5FJRsmRAO turtOG93wuypKTYtnxO1zhKzKAmpnXo99wFVVqIM1Gqn5V0QSv3ClU3Z8wft7RPf 2Gb/z6m+fmBtcQGk8dfDEYhL358Kc4HA8VR9yGK6cKWU1qbPG8o/iV5oiIg2HsvS Zotw7YIAlsd9yo23f9i2PwIgdEPWBqypR7+ymuZxUFXc9owXbQIDAQABo4IEXTCC BFkwHQYDVR0OBBYEFP36X9OCyVrHgeaysFS0ydHwHLU8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x NGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3Y2Y1MjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE0YzllMGNlLTBmMTItNGJjOC05 ODljLTVkMzMyYTdjZjUyMi8xNGM5ZTBjZS0wZjEyLTRiYzgtOTg5Yy01ZDMzMmE3 Y2Y1MjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMB4EAgABMBgDBACVcAUDBACVcHMDBADAIf8DBADOxbswIQQCAAIw GwMHACABBQQAMAMHACYgAIvgAAMHBCYgARqwADAnBggrBgEFBQcBCAEB/wQYMBag FDASAgIsaAICL/QCAwCdTwIDAPZPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIDBjHv1LesXpBX6uRaoocal Kk5TkPvVj7TOoSaJltn+0BibWRuQ9CUwSpdmIR3lB7s02KxeHCjAQFNiOwVI5o6S HzXdhRX06ncgi1O639jbmyP7kpEdzfYG5dWqi2o43KS4vjs1yXr7rUcLv/AvskpD fo4HE5Pb59PT1g6FmE4CRzFT+F0EsDGcRKcMfOOq4blU8GiIcci77iAccTEypack Kh8lnRYcnZV93plO0LWWmtf6u07+uOSrETisS2BjjNPlOUCOU3OZH3jpHhOUCq0C TYoisrmO3gMV2Zq7p2Eq8YdIUCwLVPbRV/SETNIiocKohCNhZx7/KHWC5VM+vJY= -----END CERTIFICATE-----Generated at Thu Nov 21 16:28:25 2024 by rpki-client on console-ams.rpki-client.org