$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer File: 161143c9-c030-4270-91a4-41e54bbb2357.cer (raw, json) Hash identifier: tofUOvMiGW8ABozN5hJ4LiCJvStUOO2Y5R4qDbD1k2I= Subject key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843EF56C824BF296C68F7AD1B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 Nov 2023 01:45:15 +0000 Certificate not after: Sat 21 Feb 2026 01:45:15 +0000 Subordinate resources: IP: 198.245.245.0 -- 198.245.246.255 IP: 199.230.0.0 -- 199.230.9.255 IP: 205.174.0.0/20 IP: 206.209.64.0 -- 206.209.75.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:ef:56:c8:24:bf:29:6c:68:f7:ad:1b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 19 01:45:15 2023 GMT Not After : Feb 21 01:45:15 2026 GMT Subject: CN=161143c9-c030-4270-91a4-41e54bbb2357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:a5:4e:25:2e:29:ab:b1:5d:7d:c1:76:0c: 7c:e3:27:9e:67:d1:c0:a6:0b:62:1b:a1:c6:c6:bd: a6:ac:9a:39:73:fa:17:74:11:89:d6:3a:f8:11:bb: 7f:81:b9:c3:81:a0:ba:bf:1f:6e:47:36:78:2d:e4: 20:c0:11:88:12:f6:4f:c0:5a:9f:3d:a4:2a:e6:7a: 6f:0b:c1:2a:a5:57:f5:11:29:ae:e4:e2:82:18:f7: 71:db:8e:6f:ba:fe:e9:ac:f7:3b:34:82:77:ff:d2: d3:f6:78:2a:72:2d:e4:a0:e6:56:9f:60:6f:0f:1e: 05:a7:7d:62:a8:9b:f4:0a:05:1b:99:fc:7d:a0:da: 3e:b7:28:f5:dd:45:f4:0c:10:b8:ca:68:e4:b0:cc: 85:57:50:81:f8:38:0c:28:56:6e:b2:8a:b7:57:0f: 1b:1c:f1:f9:30:ae:fb:01:1f:31:6b:44:84:cb:ad: 7c:ad:6b:d0:e8:3d:ad:1d:0d:f5:b4:47:a3:c2:67: 1f:89:a4:5c:a5:10:08:d4:be:3c:58:0e:d4:4b:fc: eb:b1:71:c6:13:33:f7:5e:c2:6c:db:dc:b0:f8:1e: f4:72:a4:45:4b:94:10:95:4d:2c:23:32:65:2b:14: 7a:07:30:4b:6c:6b:fa:27:1d:44:9a:d6:a6:c3:04: 44:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.245.245.0-198.245.246.255 199.230.0.0-199.230.9.255 205.174.0.0/20 206.209.64.0-206.209.75.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d5:95:17:a6:b3:9f:44:e7:2a:b9:0c:8d:13:ef:f0:aa:de: d0:46:c9:50:36:d1:85:67:28:31:4a:1d:e6:23:c9:7e:5b:33: 8b:fd:30:33:e5:f7:e9:b9:7f:a6:4b:04:8d:8c:ea:94:0f:29: 16:b7:e5:f9:00:fd:a6:93:f2:36:d5:51:bb:0d:6c:67:22:b2: 20:bd:8c:ad:2b:72:c0:86:04:70:8f:95:9a:a0:cd:4d:e5:b6: 87:64:3f:9f:c8:76:91:5b:4d:13:e7:b8:bd:16:6f:bc:8c:5f: 36:88:41:39:f5:d5:8f:0f:0f:b8:b5:93:c8:53:3d:65:83:21: d3:33:89:69:f6:d0:fb:f4:05:9a:35:2e:77:a6:e8:2c:9d:f8: eb:1d:b6:46:33:eb:eb:9d:ad:44:ac:03:53:de:3b:22:4b:dd: 35:eb:f7:1c:9f:f3:95:5e:df:00:a0:6b:ef:e2:43:af:36:5b: 61:0f:4a:2a:fb:9c:96:0c:b1:ad:4b:14:3b:e9:05:43:ad:2e: 08:65:42:a9:82:89:1e:9b:95:93:27:d4:ea:44:01:5b:da:8e: 7a:c8:ba:67:13:7c:50:d2:7f:e4:7c:71:b1:ef:c2:2d:49:80: d3:40:61:d6:d8:cc:e5:1c:83:54:32:4a:03:0e:a4:09:42:d2: 4c:82:9b:a2 -----BEGIN CERTIFICATE----- MIIHFjCCBf6gAwIBAgIUAQ0Mn0MoWEPvVsgkvylsaPetGyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTExOTAxNDUxNVoXDTI2MDIyMTAxNDUxNVowLzEtMCsGA1UEAxMk MTYxMTQzYzktYzAzMC00MjcwLTkxYTQtNDFlNTRiYmIyMzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSilTiUuKauxXX3Bdgx84yeeZ9HApgtiG6HG xr2mrJo5c/oXdBGJ1jr4Ebt/gbnDgaC6vx9uRzZ4LeQgwBGIEvZPwFqfPaQq5npv C8EqpVf1ESmu5OKCGPdx245vuv7prPc7NIJ3/9LT9ngqci3koOZWn2BvDx4Fp31i qJv0CgUbmfx9oNo+tyj13UX0DBC4ymjksMyFV1CB+DgMKFZusoq3Vw8bHPH5MK77 AR8xa0SEy618rWvQ6D2tHQ31tEejwmcfiaRcpRAI1L48WA7US/zrsXHGEzP3XsJs 29yw+B70cqRFS5QQlU0sIzJlKxR6BzBLbGv6Jx1EmtamwwREgwIDAQABo4IEKDCC BCQwHQYDVR0OBBYEFD8fke5RR5QEDmgCVcdrwip02c5sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x NjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJiYjIzNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE2MTE0M2M5LWMwMzAtNDI3MC05 MWE0LTQxZTU0YmJiMjM1Ny8xNjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJi YjIzNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MDUEAgABMC8wDAMEAMb19QMEAMb19jALAwMBx+YDBAHH5ggDBATN rgAwDAMEBs7RQAMEAs7RSDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAm1ZUXprOfROcquQyNE+/wqt7QRslQ NtGFZygxSh3mI8l+WzOL/TAz5ffpuX+mSwSNjOqUDykWt+X5AP2mk/I21VG7DWxn IrIgvYytK3LAhgRwj5WaoM1N5baHZD+fyHaRW00T57i9Fm+8jF82iEE59dWPDw+4 tZPIUz1lgyHTM4lp9tD79AWaNS53pugsnfjrHbZGM+vrna1ErANT3jsiS9016/cc n/OVXt8AoGvv4kOvNlthD0oq+5yWDLGtSxQ76QVDrS4IZUKpgokem5WTJ9TqRAFb 2o56yLpnE3xQ0n/kfHGx78ItSYDTQGHW2MzlHINUMkoDDqQJQtJMgpui -----END CERTIFICATE-----Generated at Thu Nov 21 16:28:25 2024 by rpki-client on console-ams.rpki-client.org