$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda.cer File: 26f87379-b07b-41fb-8976-6fd9e7149fda.cer (raw, json) Hash identifier: LjN+E2uGECuhGHu9NEW+dJeUHJx3cRspz977Nj5IInU= Subject key identifier: B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285846609244DDE8B8454BD29C1A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 30 Jun 2024 00:45:19 +0000 Certificate not after: Sat 03 Oct 2026 00:45:19 +0000 Subordinate resources: AS: 19016 AS: 394081 IP: 24.245.224.0/20 IP: 64.93.96.0/20 IP: 142.0.240.0/20 IP: 161.129.128.0/21 IP: 216.36.128.0/18 IP: 216.38.232.0/22 IP: 2607::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:60:92:44:dd:e8:b8:45:4b:d2:9c:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 30 00:45:19 2024 GMT Not After : Oct 3 00:45:19 2026 GMT Subject: CN=26f87379-b07b-41fb-8976-6fd9e7149fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:6c:5d:bd:88:be:d4:7b:36:cc:24:78:d5:9d: 46:3e:9f:20:bd:e1:32:1b:b0:4c:8b:88:6d:89:a2: af:3b:cf:50:a9:a4:e3:34:ec:41:99:33:4d:e2:b2: ff:45:d2:a9:99:e9:ea:89:91:55:df:56:90:33:59: f7:3f:33:7d:65:bd:92:30:11:7c:34:a7:14:35:d6: 44:38:93:5c:20:9a:45:6a:65:94:89:5b:96:56:56: 85:8d:7f:08:7d:31:4d:09:54:b4:4d:4c:46:81:1f: 92:cc:63:f3:fa:68:01:04:01:f8:57:5c:7b:b6:f2: c0:21:01:cd:65:ca:16:75:69:67:be:52:61:b7:ea: b1:2e:e7:85:10:53:aa:d5:5c:7d:72:b0:b1:33:58: 8c:2d:e5:36:d7:c2:8f:cf:7b:8c:6c:24:e1:cd:40: 8f:32:13:4e:7e:2e:94:c8:d8:ed:27:20:a1:8a:f5: 86:d1:4a:50:9f:84:d6:4a:2a:bd:06:af:f9:0f:18: 5a:98:af:4e:52:98:02:44:3a:63:b6:42:0a:9e:13: b7:b1:da:0e:bb:40:99:f5:5b:52:56:cb:5b:5e:af: f4:3e:12:3e:06:06:4e:46:38:94:1c:7d:5d:2d:8d: 1a:21:ad:08:d7:52:8d:f8:85:a4:7a:03:cf:2d:5b: d6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E3:8B:C0:B5:ED:73:06:2C:85:6C:E9:D3:69:C8:9E:A9:E3:DB:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/26f87379-b07b-41fb-8976-6fd9e7149fda/26f87379-b07b-41fb-8976-6fd9e7149fda.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 24.245.224.0/20 64.93.96.0/20 142.0.240.0/20 161.129.128.0/21 216.36.128.0/18 216.38.232.0/22 IPv6: 2607::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19016 394081 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:9e:4f:4c:f4:6d:14:bf:20:ac:c0:30:32:9e:2d:ae:13:57: 1b:1e:c1:c0:e0:8f:78:64:f5:bc:5a:bb:6f:38:86:e0:45:ae: ec:66:d0:45:c5:00:47:df:8d:0e:0a:56:72:6d:72:bf:e4:a8: 8c:e3:c2:3c:ec:34:66:63:fe:bb:88:da:cd:55:e6:4e:c8:ba: 7a:a9:3b:01:cd:3b:51:c8:cc:4a:1d:9c:41:ae:09:bf:81:4b: 01:9f:9c:fc:e4:42:95:5c:9c:3e:42:3a:50:fe:f9:63:b0:de: d0:b4:eb:e5:bb:b2:06:ce:dd:f1:f0:96:21:96:db:f4:04:fe: f6:6d:cd:d3:15:94:a1:3b:bc:92:f8:f7:50:9b:2f:dd:9d:a0: c2:99:c5:e1:b3:73:d3:8e:a0:99:24:68:91:8c:45:22:5a:4f: d9:88:85:5f:2f:de:89:e9:f9:1e:4e:78:66:69:42:8b:9f:82: 7c:61:be:f4:a7:98:97:00:8d:e1:60:51:36:0f:6d:55:d8:eb: 7b:66:eb:78:64:56:63:ff:ad:0d:d1:f7:ab:a4:aa:98:1d:23: 21:ba:2e:b0:5d:05:a8:6d:c2:81:bc:d1:ec:ec:5f:d5:db:a2: 5e:33:65:ca:36:4e:47:cc:1f:20:24:2c:50:51:88:39:c9:78: 3c:6c:13:c7 -----BEGIN CERTIFICATE----- MIIHOjCCBiKgAwIBAgIUAQ0Mn0MoWEZgkkTd6LhFS9KcGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDYzMDAwNDUxOVoXDTI2MTAwMzAwNDUxOVowLzEtMCsGA1UEAxMk MjZmODczNzktYjA3Yi00MWZiLTg5NzYtNmZkOWU3MTQ5ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mxdvYi+1Hs2zCR41Z1GPp8gveEyG7BMi4ht iaKvO89QqaTjNOxBmTNN4rL/RdKpmenqiZFV31aQM1n3PzN9Zb2SMBF8NKcUNdZE OJNcIJpFamWUiVuWVlaFjX8IfTFNCVS0TUxGgR+SzGPz+mgBBAH4V1x7tvLAIQHN ZcoWdWlnvlJht+qxLueFEFOq1Vx9crCxM1iMLeU218KPz3uMbCThzUCPMhNOfi6U yNjtJyChivWG0UpQn4TWSiq9Bq/5DxhamK9OUpgCRDpjtkIKnhO3sdoOu0CZ9VtS VstbXq/0PhI+BgZORjiUHH1dLY0aIa0I11KN+IWkegPPLVvWgQIDAQABo4IETDCC BEgwHQYDVR0OBBYEFLPji8C17XMGLIVs6dNpyJ6p49vfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8y NmY4NzM3OS1iMDdiLTQxZmItODk3Ni02ZmQ5ZTcxNDlmZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzI2Zjg3Mzc5LWIwN2ItNDFmYi04 OTc2LTZmZDllNzE0OWZkYS8yNmY4NzM3OS1iMDdiLTQxZmItODk3Ni02ZmQ5ZTcx NDlmZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAQY9eADBARAXWADBASOAPADBAOhgYADBAbYJIAD BALYJugwDQQCAAIwBwMFACYHAAAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICSkgC AwYDYTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQAlnk9M9G0UvyCswDAyni2uE1cbHsHA4I94ZPW8WrtvOIbg Ra7sZtBFxQBH340OClZybXK/5KiM48I87DRmY/67iNrNVeZOyLp6qTsBzTtRyMxK HZxBrgm/gUsBn5z85EKVXJw+QjpQ/vljsN7QtOvlu7IGzt3x8JYhltv0BP72bc3T FZShO7yS+PdQmy/dnaDCmcXhs3PTjqCZJGiRjEUiWk/ZiIVfL96J6fkeTnhmaUKL n4J8Yb70p5iXAI3hYFE2D21V2Ot7Zut4ZFZj/60N0ferpKqYHSMhui6wXQWobcKB vNHs7F/V26JeM2XKNk5HzB8gJCxQUYg5yXg8bBPH -----END CERTIFICATE-----Generated at Thu Nov 21 15:39:29 2024 by rpki-client on console-fra.rpki-client.org