$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5.cer File: 18c22446-23f2-433c-bff0-b35a75738dd5.cer (raw, json) Hash identifier: vZSAHeeIyW67+45HAC4KNbULOGW6GWGT5+xDngwppPM= Subject key identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858431842703A46C1685ACDD84400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Sep 2023 00:45:28 +0000 Certificate not after: Sat 06 Dec 2025 01:45:28 +0000 Subordinate resources: AS: 394436 IP: 138.43.114.0/24 IP: 199.85.7.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:18:42:70:3a:46:c1:68:5a:cd:d8:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 3 00:45:28 2023 GMT Not After : Dec 6 01:45:28 2025 GMT Subject: CN=18c22446-23f2-433c-bff0-b35a75738dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:92:1c:95:7c:61:fe:52:f6:18:fd:cd:65:ee: 0c:59:a9:1b:d5:9a:61:c2:11:6e:54:b6:73:dd:c7: 7d:a4:f9:5e:b9:a1:c6:e5:65:ac:6c:65:02:7a:e4: 7c:5f:3f:3a:57:08:d0:ae:73:d1:9e:f9:4a:cf:6c: b2:1e:5d:c7:de:38:16:f2:5d:04:98:2e:67:ad:e3: ce:28:f5:d9:f8:a0:83:ee:66:08:96:52:71:cb:bc: c5:2e:17:e5:8e:7d:04:57:89:33:f2:28:4b:9a:40: a6:03:33:78:84:03:94:34:fe:e8:4e:22:4b:b7:a5: 27:e6:73:ab:f2:39:26:67:bc:15:12:f0:ac:dc:62: b0:34:f4:29:20:a7:25:0c:02:33:ca:61:06:9d:f3: 31:72:21:31:eb:a3:8f:50:3d:a6:a1:d6:79:a1:1d: fb:51:5e:a8:9b:2f:88:fb:03:79:cf:22:6b:6d:ea: 23:06:d4:fa:e7:fc:25:42:27:de:74:7a:7c:4e:78: 11:ca:72:36:cc:a6:77:81:2f:2e:83:7e:72:e2:b9: b9:09:9c:98:82:79:3e:46:ec:30:fe:5c:f9:bc:a8: 07:44:dc:98:30:ee:77:6b:62:cd:a7:2e:e2:4a:af: 72:e6:c2:a1:68:39:7b:71:bc:a0:21:30:ff:c5:d6: ee:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:84:FA:82:AB:89:52:E5:C3:DE:8E:A7:86:B7:2C:C5:48:52:91:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/18c22446-23f2-433c-bff0-b35a75738dd5/18c22446-23f2-433c-bff0-b35a75738dd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 138.43.114.0/24 199.85.7.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394436 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:72:54:d9:e4:35:81:ea:40:b7:eb:d2:a4:dd:22:cd:fb:87: dd:6b:fa:57:a6:5c:57:6e:9d:cc:26:95:e5:a5:87:26:02:5b: 23:f3:7a:a3:bf:95:5f:07:d7:d0:cf:2f:e7:4f:c2:13:75:99: 2d:be:a3:90:7d:8d:d9:3c:f4:f4:39:41:70:ff:a1:c3:14:33: 11:82:c3:0a:9a:14:5e:2f:fe:84:01:ee:43:83:4c:f1:ce:d9: b1:77:7b:e1:2a:d5:ef:b6:d9:e3:ce:63:83:cb:59:0e:d8:a3: 58:a0:e5:90:10:ae:8f:07:e0:2b:50:43:50:b7:e0:50:ff:0b: 1d:06:90:87:22:8f:c3:65:e1:a2:5e:55:a5:86:04:56:f3:58: d5:73:46:31:c4:b7:a9:fe:19:da:72:0f:47:11:00:ae:27:5d: 9d:ad:c1:fb:15:bf:e2:77:1a:63:65:2e:57:8b:90:8e:71:36: f4:3f:9d:a6:86:81:bd:6c:1d:07:e0:1b:9e:7a:a1:70:55:5a: 90:94:20:67:11:b4:ee:94:46:bf:35:51:86:f1:93:73:cb:6c: f8:9f:62:7e:c0:aa:91:c4:b1:0f:c3:24:f3:1b:83:fd:9b:95: 55:c8:2f:66:e2:8e:6c:95:98:cf:9c:c5:fe:61:5b:7c:4c:f5: d0:85:b6:69 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEMYQnA6RsFoWs3YRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDkwMzAwNDUyOFoXDTI1MTIwNjAxNDUyOFowLzEtMCsGA1UEAxMk MThjMjI0NDYtMjNmMi00MzNjLWJmZjAtYjM1YTc1NzM4ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspIclXxh/lL2GP3NZe4MWakb1ZphwhFuVLZz 3cd9pPleuaHG5WWsbGUCeuR8Xz86VwjQrnPRnvlKz2yyHl3H3jgW8l0EmC5nrePO KPXZ+KCD7mYIllJxy7zFLhfljn0EV4kz8ihLmkCmAzN4hAOUNP7oTiJLt6Un5nOr 8jkmZ7wVEvCs3GKwNPQpIKclDAIzymEGnfMxciEx66OPUD2modZ5oR37UV6omy+I +wN5zyJrbeojBtT65/wlQifedHp8TngRynI2zKZ3gS8ug35y4rm5CZyYgnk+Ruww /lz5vKgHRNyYMO53a2LNpy7iSq9y5sKhaDl7cbygITD/xdbucQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFPGE+oKriVLlw96Op4a3LMVIUpHVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x OGMyMjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVhNzU3MzhkZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzE4YzIyNDQ2LTIzZjItNDMzYy1i ZmYwLWIzNWE3NTczOGRkNS8xOGMyMjQ0Ni0yM2YyLTQzM2MtYmZmMC1iMzVhNzU3 MzhkZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACKK3IDBADHVQcwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBgTEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHNyVNnkNYHqQLfr0qTdIs37h91r+lemXFduncwm leWlhyYCWyPzeqO/lV8H19DPL+dPwhN1mS2+o5B9jdk89PQ5QXD/ocMUMxGCwwqa FF4v/oQB7kODTPHO2bF3e+Eq1e+22ePOY4PLWQ7Yo1ig5ZAQro8H4CtQQ1C34FD/ Cx0GkIcij8Nl4aJeVaWGBFbzWNVzRjHEt6n+GdpyD0cRAK4nXZ2twfsVv+J3GmNl LleLkI5xNvQ/naaGgb1sHQfgG556oXBVWpCUIGcRtO6URr81UYbxk3PLbPifYn7A qpHEsQ/DJPMbg/2blVXIL2bijmyVmM+cxf5hW3xM9dCFtmk= -----END CERTIFICATE-----Generated at Tue May 7 21:40:32 2024 by rpki-client on console-ams.rpki-client.org