$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560.cer File: 35dd34c4-644d-463f-8aba-5a3d509d5560.cer (raw, json) Hash identifier: nXUWKOKwQwfSBdmeHi74j1YZ98UDsl2bYLzAMnPJV7Y= Subject key identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584772295F348E60C605A8030800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Oct 2024 00:45:27 +0000 Certificate not after: Sat 09 Jan 2027 01:45:27 +0000 Subordinate resources: IP: 139.64.232.0/22 IP: 142.202.40.0/22 IP: 2606:2c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:72:29:5f:34:8e:60:c6:05:a8:03:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 6 00:45:27 2024 GMT Not After : Jan 9 01:45:27 2027 GMT Subject: CN=35dd34c4-644d-463f-8aba-5a3d509d5560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4b:74:99:d3:ee:b9:6e:3b:37:01:6e:66:43: 80:d4:26:a1:ed:be:c0:f7:82:98:e5:a0:15:e9:e0: 2b:4f:40:c8:68:7e:9d:62:9a:c2:cc:e3:66:ca:0d: 0c:7b:af:e9:5c:24:5b:bc:15:cb:69:4f:e7:c7:30: f6:d2:8b:e9:74:7d:f7:20:99:52:cd:19:d6:a8:6d: 6d:bd:bd:1e:05:4f:1e:fc:9a:21:ea:aa:42:81:ce: 81:f3:c1:f9:7d:c0:59:84:97:c3:f2:bd:a8:80:ca: b8:a3:b6:ff:1d:63:13:a6:b5:43:90:59:f7:2a:cf: 53:95:36:8a:fb:21:f5:1e:17:e9:80:02:f4:bd:3d: 4e:13:cd:97:b0:ba:67:f0:e0:ba:e4:f4:01:7c:47: 2e:a0:dc:7e:a8:a2:05:4f:6d:bc:c4:9c:59:d5:51: c7:38:02:ed:2c:7b:73:17:35:35:07:54:ae:47:51: 66:44:c4:2b:36:fd:6d:5f:af:60:39:73:4e:0a:43: 4a:7e:c6:dc:50:4d:21:6c:bf:0f:18:11:f2:ae:b9: 50:3a:f0:37:a2:aa:41:d5:ca:e7:64:5e:fc:9c:94: 2e:cc:6a:6e:ee:4e:cc:bb:07:29:65:79:c0:f5:f8: de:81:3a:b8:a7:c5:56:3d:b1:8c:f5:e8:5a:24:32: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:68:B5:45:30:7A:DA:0B:73:6E:15:EE:60:89:9C:2F:9E:EE:1C:3F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/35dd34c4-644d-463f-8aba-5a3d509d5560/35dd34c4-644d-463f-8aba-5a3d509d5560.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 139.64.232.0/22 142.202.40.0/22 IPv6: 2606:2c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:bb:9c:84:d6:a1:3d:1d:39:3c:27:d1:51:e1:27:9e:91:64: 3b:a5:6a:09:c2:bb:40:d9:1e:cc:13:c6:91:2c:52:ab:55:7f: ee:2b:d2:41:4b:bb:8f:ed:56:0d:0c:8c:4f:e9:6e:c1:88:d8: 9f:b1:38:d1:1a:3e:97:23:31:15:fb:07:e2:8c:d5:7a:24:29: 67:b7:52:33:3c:b6:51:6d:ad:63:7a:d9:45:26:95:00:bb:4d: 74:86:1d:87:44:33:d6:ac:ee:35:3a:14:62:51:db:08:6d:02: 70:18:28:c7:82:ba:b9:e9:d9:91:3d:ec:ce:06:dd:d6:7a:2d: e8:b7:b3:ab:fe:e8:70:0c:6d:44:63:ed:0c:ea:a3:79:63:f6: 0c:e7:b3:be:3e:0a:88:11:32:61:ad:8e:0c:bd:f6:7a:08:6d: 94:41:eb:13:18:77:3f:7f:4a:2a:78:9e:28:b9:36:ee:4a:9f: a6:64:c1:fe:50:7d:09:9c:3c:6f:02:ea:a0:00:f1:11:af:99: fb:39:3d:c2:5e:47:d0:bc:66:32:57:4e:44:69:00:02:a8:8d: c4:87:24:0c:06:62:66:7d:43:3d:43:71:f0:76:3f:71:1e:5f: 92:15:31:60:e5:6d:8e:e1:13:8e:38:71:c8:c9:41:b2:e8:87: 7d:92:f8:26 -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWEdyKV80jmDGBagDCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTAwNjAwNDUyN1oXDTI3MDEwOTAxNDUyN1owLzEtMCsGA1UEAxMk MzVkZDM0YzQtNjQ0ZC00NjNmLThhYmEtNWEzZDUwOWQ1NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEt0mdPuuW47NwFuZkOA1Cah7b7A94KY5aAV 6eArT0DIaH6dYprCzONmyg0Me6/pXCRbvBXLaU/nxzD20ovpdH33IJlSzRnWqG1t vb0eBU8e/Joh6qpCgc6B88H5fcBZhJfD8r2ogMq4o7b/HWMTprVDkFn3Ks9TlTaK +yH1HhfpgAL0vT1OE82XsLpn8OC65PQBfEcuoNx+qKIFT228xJxZ1VHHOALtLHtz FzU1B1SuR1FmRMQrNv1tX69gOXNOCkNKfsbcUE0hbL8PGBHyrrlQOvA3oqpB1crn ZF78nJQuzGpu7k7MuwcpZXnA9fjegTq4p8VWPbGM9ehaJDLhfQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFN5otUUwetoLc24V7mCJnC+e7hw/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z NWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5ZDU1NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM1ZGQzNGM0LTY0NGQtNDYzZi04 YWJhLTVhM2Q1MDlkNTU2MC8zNWRkMzRjNC02NDRkLTQ2M2YtOGFiYS01YTNkNTA5 ZDU1NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAKLQOgDBAKOyigwDQQCAAIwBwMFACYGAsAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAULuchNahPR05PCfRUeEnnpFkO6VqCcK7QNkezBPGkSxSq1V/7ivSQUu7 j+1WDQyMT+luwYjYn7E40Ro+lyMxFfsH4ozVeiQpZ7dSMzy2UW2tY3rZRSaVALtN dIYdh0Qz1qzuNToUYlHbCG0CcBgox4K6uenZkT3szgbd1not6Lezq/7ocAxtRGPt DOqjeWP2DOezvj4KiBEyYa2ODL32eghtlEHrExh3P39KKnieKLk27kqfpmTB/lB9 CZw8bwLqoADxEa+Z+zk9wl5H0LxmMldORGkAAqiNxIckDAZiZn1DPUNx8HY/cR5f khUxYOVtjuETjjhxyMlBsuiHfZL4Jg== -----END CERTIFICATE-----Generated at Thu Nov 21 16:28:32 2024 by rpki-client on console-ams.rpki-client.org