$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer File: 3104c204-288d-4f87-83c2-99a30908dea3.cer (raw, json) Hash identifier: BQl3bVN7I4O4ofVHlDJWWsDRPKzz/e3cwB5ZxIwcMpw= Subject key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584846732F86741E5B236A11CE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Dec 2024 01:45:33 +0000 Certificate not after: Fri 26 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 394353 IP: 192.228.79.0/24 IP: 199.9.14.0/23 IP: 2001:500:84::/48 IP: 2001:500:200::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:46:73:2f:86:74:1e:5b:23:6a:11:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 21 01:45:33 2024 GMT Not After : Mar 26 00:45:33 2027 GMT Subject: CN=3104c204-288d-4f87-83c2-99a30908dea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dc:47:13:5e:1a:60:05:e5:99:d1:43:90:bc: b7:73:a7:c1:2f:40:04:28:40:9f:3f:b0:f5:d5:5e: 25:bb:ae:b1:c9:7f:05:c3:f2:50:f7:62:44:69:47: f7:92:f6:03:8f:85:65:22:a7:9b:7c:37:21:eb:e6: 36:4e:e6:3a:a8:aa:42:de:b0:39:b4:71:f0:21:ed: b6:b0:ff:ef:f3:f9:e6:9c:8c:37:37:0c:92:41:22: 68:a9:af:40:e0:a9:cf:62:e4:57:d2:4a:e5:71:71: 20:cd:22:fd:e6:3c:52:82:0b:4e:53:a6:f0:7d:e1: f5:8e:3d:24:40:b1:69:ad:b5:41:33:d4:45:b7:ab: 4d:3c:4d:18:89:5a:32:35:72:f3:84:03:64:12:81: ac:3d:a2:d3:01:30:f5:49:95:39:50:64:62:7c:5b: 59:f0:c5:1a:96:da:bb:70:32:af:7e:c4:b7:fb:f8: 30:51:27:24:da:d8:d7:9e:7b:73:a5:0d:4b:d5:01: c6:bf:d7:56:dd:97:f7:da:b9:04:5b:7f:2d:2a:37: 72:c5:45:29:e2:46:6a:9e:42:72:30:fb:cd:61:bd: 88:f5:d7:cf:f6:65:c4:c3:6e:29:6e:6b:0f:4f:5c: 3f:88:c6:6f:c1:92:44:8d:fe:e4:2b:b2:83:4b:50: 7b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.228.79.0/24 199.9.14.0/23 IPv6: 2001:500:84::/48 2001:500:200::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394353 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:23:be:a6:00:03:19:eb:4b:75:c2:eb:30:9e:87:8d:3b:b9: af:14:4c:5a:d0:68:c4:b4:66:75:4c:fb:50:d5:cc:25:c3:3d: 8c:c5:7a:1b:ae:f6:8f:72:c8:3c:a7:1b:b8:09:47:a5:b2:55: e0:c0:15:84:22:27:3c:96:2a:d3:ff:6a:d2:37:51:a6:c6:6c: b9:00:71:60:0d:a9:cf:02:f2:af:c2:b1:83:0f:76:ce:26:77: 9f:8e:4f:0d:2c:c4:70:14:64:b3:1e:dd:6a:02:4a:c6:d0:9c: 2f:30:8c:4e:cc:8d:11:60:9b:b7:57:a4:0e:66:2e:d4:fb:87: e1:fe:0d:c4:77:52:e8:7d:93:65:a4:ca:38:7b:dc:ab:1f:36: ea:7f:37:58:49:bf:f8:32:84:b5:cc:3e:aa:8a:df:ef:93:03: 8c:c8:af:e6:d4:05:bd:75:ac:96:1d:5d:b0:29:e5:05:cb:22: 62:80:14:7d:b3:96:fe:f9:6c:10:a8:ee:f5:bf:41:3c:c5:c1: 4e:65:62:32:9e:56:aa:fe:b1:fe:ed:44:5e:f8:ca:d6:9e:e3: 47:20:b9:1f:95:85:91:d8:d9:7a:02:fb:6d:e2:5f:f7:94:80: 30:3b:1a:31:65:00:69:d2:8e:8a:4e:25:8b:4d:cf:67:21:ba: 8d:70:86:b7 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEhGcy+GdB5bI2oRzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTIyMTAxNDUzM1oXDTI3MDMyNjAwNDUzM1owLzEtMCsGA1UEAxMk MzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhkZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNxHE14aYAXlmdFDkLy3c6fBL0AEKECfP7D1 1V4lu66xyX8Fw/JQ92JEaUf3kvYDj4VlIqebfDch6+Y2TuY6qKpC3rA5tHHwIe22 sP/v8/nmnIw3NwySQSJoqa9A4KnPYuRX0krlcXEgzSL95jxSggtOU6bwfeH1jj0k QLFprbVBM9RFt6tNPE0YiVoyNXLzhANkEoGsPaLTATD1SZU5UGRifFtZ8MUaltq7 cDKvfsS3+/gwUSck2tjXnntzpQ1L1QHGv9dW3Zf32rkEW38tKjdyxUUp4kZqnkJy MPvNYb2I9dfP9mXEw24pbmsPT1w/iMZvwZJEjf7kK7KDS1B7fQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFHZd+T1HSs8j8CDmh3CsK5iZLwPiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z MTA0YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzMxMDRjMjA0LTI4OGQtNGY4Ny04 M2MyLTk5YTMwOTA4ZGVhMy8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkw OGRlYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwPwYIKwYBBQUH AQcBAf8EMDAuMBIEAgABMAwDBADA5E8DBAHHCQ4wGAQCAAIwEgMHACABBQAAhAMH BCABBQACADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGBHEwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaCO+ pgADGetLdcLrMJ6HjTu5rxRMWtBoxLRmdUz7UNXMJcM9jMV6G672j3LIPKcbuAlH pbJV4MAVhCInPJYq0/9q0jdRpsZsuQBxYA2pzwLyr8Kxgw92ziZ3n45PDSzEcBRk sx7dagJKxtCcLzCMTsyNEWCbt1ekDmYu1PuH4f4NxHdS6H2TZaTKOHvcqx826n83 WEm/+DKEtcw+qorf75MDjMiv5tQFvXWslh1dsCnlBcsiYoAUfbOW/vlsEKju9b9B PMXBTmViMp5Wqv6x/u1EXvjK1p7jRyC5H5WFkdjZegL7beJf95SAMDsaMWUAadKO ik4li03PZyG6jXCGtw== -----END CERTIFICATE-----Generated at Mon Jan 20 00:12:57 2025 by rpki-client on console-fra.rpki-client.org