$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer File: 1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer (raw, json) Hash identifier: MKijOUa2aYAwIfHjPzxmeuyGV3eoCNZFUtKeImQvP1M= Subject key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858438AB85FA546C3F8AB1026B580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Oct 2023 00:45:14 +0000 Certificate not after: Fri 16 Jan 2026 01:45:14 +0000 Subordinate resources: AS: 396986 IP: 71.18.0.0/16 IP: 101.45.0.0/16 IP: 130.44.212.0/22 IP: 139.177.224.0/19 IP: 147.160.176.0/20 IP: 192.64.14.0/23 IP: 199.103.24.0/23 IP: 2605:340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 27 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:8a:b8:5f:a5:46:c3:f8:ab:10:26:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 14 00:45:14 2023 GMT Not After : Jan 16 01:45:14 2026 GMT Subject: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:97:4f:e8:14:d6:23:b0:bc:e0:78:fc:66:cf: 56:7f:55:56:83:2f:fc:5e:83:ac:4b:ab:b1:ee:05: 7b:a3:3c:d5:c7:5a:39:a1:87:f3:3f:3d:67:45:64: 6d:4b:22:7b:cf:fe:ed:91:9d:15:7c:92:ce:b1:c6: a0:29:ed:66:99:f5:02:45:bb:8b:75:1f:71:4e:05: 4a:3b:27:37:19:14:3d:b5:cc:7b:88:ed:e3:3b:12: 08:19:f0:76:a9:97:e4:91:af:d6:8f:dd:01:e1:89: b8:d0:0e:42:1e:30:fb:ac:98:8e:32:81:73:77:0b: 6a:06:6d:a7:e0:1c:4f:24:6c:ab:1a:63:10:9d:7e: b3:35:12:9d:c1:eb:4a:ce:5b:a7:bc:ed:f6:fd:a2: ed:ef:54:2a:67:fc:22:f4:39:df:b6:c0:b6:6d:a2: 12:31:18:09:cb:86:db:7f:ce:5b:a8:a4:12:f1:73: de:a0:fa:3b:75:d9:54:68:ff:40:e5:c4:e2:ec:b1: c1:13:45:11:9a:70:c5:5d:b3:12:3e:64:02:69:6a: 54:d2:4b:d3:c6:93:7a:86:fa:40:89:84:61:5a:12: 50:4c:b8:f6:34:47:aa:90:f4:a3:cb:53:ac:61:7f: 30:3e:6e:17:5b:6a:d2:02:8e:00:d6:cb:e1:90:bb: dc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 71.18.0.0/16 101.45.0.0/16 130.44.212.0/22 139.177.224.0/19 147.160.176.0/20 192.64.14.0/23 199.103.24.0/23 IPv6: 2605:340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396986 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:56:49:a4:28:c1:7d:92:3e:2f:b9:d4:ea:ca:fa:06:b3:14: d4:c9:18:0d:c4:6a:c0:e9:45:50:0a:38:74:1e:db:ce:31:1f: a4:ae:c6:dd:d7:94:53:cf:be:9d:42:31:0e:d2:77:4f:2e:02: 35:c9:e8:58:3b:2c:f5:7e:e5:00:2d:5b:2c:59:8b:28:96:5d: 0e:c8:2e:53:cc:83:5e:61:6f:cf:12:c6:61:71:2c:d8:dd:86: 8c:95:02:10:f0:01:f6:57:2b:7a:09:ed:4d:f0:84:60:04:17: 6b:57:e7:c2:7c:cf:43:cb:7f:06:b2:c9:6e:00:20:6d:3f:c7: 19:a4:b3:d5:3c:ad:b8:29:ed:e9:49:d0:78:d5:4a:06:e6:6f: 17:96:5b:67:52:ce:5a:cd:89:c7:5d:06:25:c4:38:71:be:97: 12:70:6a:7f:6b:f8:b5:78:fa:e8:98:24:48:ef:dc:98:d2:5f: eb:ba:84:32:98:96:40:25:d7:70:dc:c8:ab:5c:20:ec:66:c9: 01:00:5a:ba:61:64:33:c1:f4:13:d4:1f:fd:5f:45:19:19:ac: 6d:b3:ea:dd:a6:1a:1c:f7:7a:22:1f:ff:43:bf:ce:09:e6:85: 08:e2:1a:88:21:64:bb:49:ad:a2:94:07:f1:4d:f9:1a:25:7a: e3:67:d5:be -----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgIUAQ0Mn0MoWEOKuF+lRsP4qxAmtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTAxNDAwNDUxNFoXDTI2MDExNjAxNDUxNFowLzEtMCsGA1UEAxMk MWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVmMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJdP6BTWI7C84Hj8Zs9Wf1VWgy/8XoOsS6ux 7gV7ozzVx1o5oYfzPz1nRWRtSyJ7z/7tkZ0VfJLOscagKe1mmfUCRbuLdR9xTgVK Oyc3GRQ9tcx7iO3jOxIIGfB2qZfkka/Wj90B4Ym40A5CHjD7rJiOMoFzdwtqBm2n 4BxPJGyrGmMQnX6zNRKdwetKzlunvO32/aLt71QqZ/wi9DnftsC2baISMRgJy4bb f85bqKQS8XPeoPo7ddlUaP9A5cTi7LHBE0URmnDFXbMSPmQCaWpU0kvTxpN6hvpA iYRhWhJQTLj2NEeqkPSjy1OsYX8wPm4XW2rSAo4A1svhkLvcOwIDAQABo4IETDCC BEgwHQYDVR0OBBYEFNnfe6M68wQRk3GCcDJU74JBLV9TMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x ZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFkNjMzOGE1LTdjNjAtNGRjNS1i MWQ4LTFjNTA0YTRlZjM0NS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0 ZWYzNDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwUAYIKwYBBQUH AQcBAf8EQTA/MC4EAgABMCgDAwBHEgMDAGUtAwQCgizUAwQFi7HgAwQEk6CwAwQB wEAOAwQBx2cYMA0EAgACMAcDBQAmBQNAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYOujBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQB0VkmkKMF9kj4vudTqyvoGsxTUyRgNxGrA6UVQCjh0HtvO MR+krsbd15RTz76dQjEO0ndPLgI1yehYOyz1fuUALVssWYsoll0OyC5TzINeYW/P EsZhcSzY3YaMlQIQ8AH2Vyt6Ce1N8IRgBBdrV+fCfM9Dy38GssluACBtP8cZpLPV PK24Ke3pSdB41UoG5m8XlltnUs5azYnHXQYlxDhxvpcScGp/a/i1ePromCRI79yY 0l/ruoQymJZAJddw3MirXCDsZskBAFq6YWQzwfQT1B/9X0UZGaxts+rdphoc93oi H/9Dv84J5oUI4hqIIWS7Sa2ilAfxTfkaJXrjZ9W+ -----END CERTIFICATE-----Generated at Thu Apr 25 22:45:43 2024 by rpki-client on console-fra.rpki-client.org