$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer File: 1e0f0616-6e03-49de-b5f8-4b874e6d8539.cer (raw, json) Hash identifier: ko6X1c7tq8p/Pvh9rqKXb+WBILwoI/pSmASsteJoh9M= Subject key identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285846E95DD62095950DFCC8BCD100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 18 Aug 2024 00:45:25 +0000 Certificate not after: Sat 21 Nov 2026 01:45:25 +0000 Subordinate resources: AS: 10482 AS: 19075 AS: 25983 IP: 24.64.0.0/13 IP: 24.76.0.0 -- 24.87.255.255 IP: 24.108.0.0/15 IP: 50.64.0.0 -- 50.72.255.255 IP: 68.144.0.0/13 IP: 70.64.0.0/12 IP: 72.29.224.0/19 IP: 96.48.0.0/13 IP: 174.0.0.0/13 IP: 184.64.0.0/13 IP: 204.12.144.0/20 IP: 208.98.192.0/18 IP: 2001:4e8::/32 IP: 2604:3d00::/28 IP: 2606:b800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:e9:5d:d6:20:95:95:0d:fc:c8:bc:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 18 00:45:25 2024 GMT Not After : Nov 21 01:45:25 2026 GMT Subject: CN=1e0f0616-6e03-49de-b5f8-4b874e6d8539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:12:e5:a3:e3:a5:7e:c9:30:40:88:b6:b7: 5f:3d:3e:2a:0c:67:cb:a4:f9:7c:ba:78:d9:ed:d7: 4d:7e:8f:d3:e0:2b:68:06:94:41:68:68:e0:80:b5: a2:93:3d:48:b9:5e:7b:69:32:c6:0c:c6:c9:cf:39: e9:2b:86:43:5a:2e:12:48:9b:c6:44:f7:54:dd:24: b7:d0:05:c3:8e:ab:c4:a5:d1:18:69:9f:8c:e7:65: c2:39:8b:c2:ce:1b:b8:69:1f:e0:14:f8:23:62:17: ff:67:cb:d4:42:53:04:df:60:62:c4:2b:db:ea:83: a1:97:eb:80:fa:8c:d8:93:21:eb:df:5b:e6:21:64: 66:d1:cc:91:86:47:89:02:25:c8:2a:9c:33:13:a6: a6:66:27:56:e3:7b:12:71:2c:4b:bf:1e:91:12:fc: 69:ff:e1:3a:4f:c0:d8:46:0e:51:63:d6:ec:d9:09: 23:0e:87:76:20:90:25:ed:bb:a6:42:9e:77:85:24: 5c:8c:7c:fb:02:c0:87:2f:77:3c:de:ce:aa:fa:d2: de:51:71:2f:00:1e:2d:34:c3:6d:1e:61:6d:2b:99: 27:6f:f4:58:46:be:43:26:20:28:b2:03:17:ef:5a: b3:35:72:7f:7c:71:36:24:f9:01:ff:d7:39:4d:29: f9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7B:57:64:B0:C8:12:01:60:AE:B6:F3:E4:B4:F9:B6:73:7A:8F:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1e0f0616-6e03-49de-b5f8-4b874e6d8539/1e0f0616-6e03-49de-b5f8-4b874e6d8539.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 24.64.0.0/13 24.76.0.0-24.87.255.255 24.108.0.0/15 50.64.0.0-50.72.255.255 68.144.0.0/13 70.64.0.0/12 72.29.224.0/19 96.48.0.0/13 174.0.0.0/13 184.64.0.0/13 204.12.144.0/20 208.98.192.0/18 IPv6: 2001:4e8::/32 2604:3d00::/28 2606:b800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10482 19075 25983 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:8e:31:fd:a9:7b:e8:ed:0a:01:ef:30:cc:31:f6:dd:df:e2: 50:63:44:22:65:93:15:6d:6b:f6:37:80:c5:f5:8f:64:ec:79: c8:7d:a0:20:99:df:c8:b0:a8:6e:1b:16:ac:49:69:7a:01:17: 17:26:27:c3:0e:a2:4f:fe:68:29:d5:2a:c2:22:4d:ff:ab:37: 77:70:f9:df:d9:8a:d3:b1:8c:70:30:d7:e5:d3:0e:5d:0b:53: 82:e4:b3:82:58:70:83:45:e3:6b:ac:25:18:cd:60:7d:a9:c5: ac:cf:fd:63:4e:4c:c9:ed:2b:56:31:ce:07:3e:ef:28:82:a2: f6:10:a1:70:30:cd:03:0e:74:1c:39:37:6f:48:17:cc:1d:f4: 49:47:04:5e:31:b6:4e:d4:e8:9d:d5:b8:48:92:c9:c6:59:39: 2e:10:c6:37:49:f0:af:f9:d5:7d:fc:75:e0:37:89:b7:f9:ea: 82:85:db:e7:43:d2:8a:08:4c:89:ee:ba:37:d3:e4:c9:2a:88: ff:5b:63:a6:6c:ce:0e:32:3e:c6:73:7d:28:7e:4a:59:9a:05: d6:69:a8:5d:53:51:e3:f5:ed:11:c6:9d:b1:57:4d:e5:00:5d: c3:c5:a4:65:d8:47:a0:93:69:48:af:19:f9:54:e9:7d:ed:b8: 34:d8:c9:49 -----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWEbpXdYglZUN/Mi80QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDgxODAwNDUyNVoXDTI2MTEyMTAxNDUyNVowLzEtMCsGA1UEAxMk MWUwZjA2MTYtNmUwMy00OWRlLWI1ZjgtNGI4NzRlNmQ4NTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDAS5aPjpX7JMECItrdfPT4qDGfLpPl8unjZ 7ddNfo/T4CtoBpRBaGjggLWikz1IuV57aTLGDMbJzznpK4ZDWi4SSJvGRPdU3SS3 0AXDjqvEpdEYaZ+M52XCOYvCzhu4aR/gFPgjYhf/Z8vUQlME32BixCvb6oOhl+uA +ozYkyHr31vmIWRm0cyRhkeJAiXIKpwzE6amZidW43sScSxLvx6REvxp/+E6T8DY Rg5RY9bs2QkjDod2IJAl7bumQp53hSRcjHz7AsCHL3c83s6q+tLeUXEvAB4tNMNt HmFtK5knb/RYRr5DJiAosgMX71qzNXJ/fHE2JPkB/9c5TSn5RwIDAQABo4IEhzCC BIMwHQYDVR0OBBYEFHZ7V2SwyBIBYK628+S0+bZzeo+YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8x ZTBmMDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3NGU2ZDg1MzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzFlMGYwNjE2LTZlMDMtNDlkZS1i NWY4LTRiODc0ZTZkODUzOS8xZTBmMDYxNi02ZTAzLTQ5ZGUtYjVmOC00Yjg3NGU2 ZDg1MzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgYMGCCsGAQUF BwEHAQH/BHQwcjBTBAIAATBNAwMDGEAwCgMDAhhMAwMDGFADAwEYbDAKAwMGMkAD AwAySAMDA0SQAwMERkADBAVIHeADAwNgMAMDA64AAwMDuEADBATMDJADBAbQYsAw GwQCAAIwFQMFACABBOgDBQQmBD0AAwUAJga4ADAhBggrBgEFBQcBCAEB/wQSMBCg DjAMAgIo8gICSoMCAmV/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHSOMf2pe+jtCgHvMMwx9t3f4lBjRCJl kxVta/Y3gMX1j2Tsech9oCCZ38iwqG4bFqxJaXoBFxcmJ8MOok/+aCnVKsIiTf+r N3dw+d/ZitOxjHAw1+XTDl0LU4Lks4JYcINF42usJRjNYH2pxazP/WNOTMntK1Yx zgc+7yiCovYQoXAwzQMOdBw5N29IF8wd9ElHBF4xtk7U6J3VuEiSycZZOS4QxjdJ 8K/51X38deA3ibf56oKF2+dD0ooITInuujfT5MkqiP9bY6Zszg4yPsZzfSh+Slma BdZpqF1TUeP17RHGnbFXTeUAXcPFpGXYR6CTaUivGflU6X3tuDTYyUk= -----END CERTIFICATE-----Generated at Thu Nov 21 15:39:28 2024 by rpki-client on console-fra.rpki-client.org