$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a.cer File: 3923a777-f0da-4edf-8bcc-42b47f48310a.cer (raw, json) Hash identifier: NgSxiscoVMA9SdFNqvUDqGdFkFJzbyOUPxYrVqkq+wY= Subject key identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858456286081BA43140E9665BBC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 31 Mar 2024 00:45:21 +0000 Certificate not after: Sat 04 Jul 2026 00:45:21 +0000 Subordinate resources: IP: 64.45.128.0/19 IP: 64.238.0.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:62:86:08:1b:a4:31:40:e9:66:5b:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 31 00:45:21 2024 GMT Not After : Jul 4 00:45:21 2026 GMT Subject: CN=3923a777-f0da-4edf-8bcc-42b47f48310a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2c:25:82:d1:fa:79:2e:a9:d2:3d:18:d8:ca: b4:97:56:25:ac:23:aa:3b:ee:8f:25:b7:66:d3:e5: f1:a9:c9:20:18:3e:aa:ec:30:3f:90:50:c4:67:43: ec:ea:90:f2:12:e3:85:19:df:4d:c5:57:f6:4d:ab: 75:0e:ee:f2:aa:ea:0e:3d:0f:3f:5c:55:5b:4a:01: e0:c3:07:be:14:7f:6f:1f:a9:49:7c:c9:f2:56:f0: 5d:ab:9d:d5:17:53:33:21:65:4e:d0:27:b8:98:1a: 6f:22:6c:71:2e:c5:a3:39:24:a2:1e:36:1c:9a:b4: f9:70:56:f9:04:b2:cf:2c:1e:b0:9e:65:6f:c3:0a: e5:7a:1c:53:fd:44:07:8a:e4:b9:af:67:00:c2:26: 87:32:c8:05:aa:f3:fd:41:87:d2:b2:24:6e:b7:80: e2:ae:a5:dd:24:a6:aa:95:79:35:40:bc:fc:82:04: 22:39:07:07:4d:53:d2:67:10:c7:29:05:57:3d:0a: bf:82:71:b1:2d:a7:0a:d5:6f:2d:9b:4a:ec:38:6a: 99:ef:9e:54:6f:d0:f5:bb:cc:ea:16:25:6f:3d:91: db:41:fc:1f:4f:e9:6d:08:de:48:d6:41:b8:a6:6f: ec:e1:f5:69:ed:90:40:86:a1:58:3b:78:65:20:d6: af:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A9:A2:19:1C:00:90:1A:1D:7D:CE:F7:F2:40:2D:3E:67:89:20:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3923a777-f0da-4edf-8bcc-42b47f48310a/3923a777-f0da-4edf-8bcc-42b47f48310a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.45.128.0/19 64.238.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:8d:3d:4d:c5:ab:bd:3d:02:f9:e6:94:b4:9e:c1:5f:85:e7: 28:a2:d4:8f:e6:a7:67:05:ec:b3:3b:0d:9a:58:49:12:17:fb: 66:b8:f7:e1:02:c2:a3:39:9c:2e:3b:74:0c:1e:8a:42:2f:f6: f2:8b:f2:e4:8d:3e:8a:08:3e:a6:b0:ae:ca:59:da:00:26:55: ca:cf:46:46:d8:68:89:90:89:0f:31:24:74:74:e4:88:5e:65: 6c:d4:ce:69:91:b3:fd:83:44:ec:f6:0a:53:7d:73:d4:02:f5: 56:ec:35:84:0e:79:8f:76:b1:a0:05:88:57:2a:ec:a7:96:5b: e5:cd:f8:98:91:02:85:ea:98:9a:e6:45:94:c5:99:5e:de:29: 0d:be:6e:f3:b7:d7:2b:32:aa:6e:55:04:9b:2e:0f:fb:6a:84: 44:0b:49:e8:f3:33:a9:dd:17:d0:ee:34:23:b0:91:4f:02:c5: 75:5e:d7:93:75:d5:ae:d4:55:6d:7b:14:10:94:30:c8:85:bc: 07:f3:5c:7f:be:9d:61:b4:ce:a1:21:43:ea:0f:be:54:f6:26: df:a2:24:25:18:85:e2:5e:5a:6b:9e:58:fc:47:74:55:ac:ef: 16:0c:b9:81:38:7a:cc:3c:07:c3:3d:59:5b:7b:18:d2:0d:d2: 24:45:42:9f -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEVihggbpDFA6WZbvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDMzMTAwNDUyMVoXDTI2MDcwNDAwNDUyMVowLzEtMCsGA1UEAxMk MzkyM2E3NzctZjBkYS00ZWRmLThiY2MtNDJiNDdmNDgzMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSwlgtH6eS6p0j0Y2Mq0l1YlrCOqO+6PJbdm 0+XxqckgGD6q7DA/kFDEZ0Ps6pDyEuOFGd9NxVf2Tat1Du7yquoOPQ8/XFVbSgHg wwe+FH9vH6lJfMnyVvBdq53VF1MzIWVO0Ce4mBpvImxxLsWjOSSiHjYcmrT5cFb5 BLLPLB6wnmVvwwrlehxT/UQHiuS5r2cAwiaHMsgFqvP9QYfSsiRut4DirqXdJKaq lXk1QLz8ggQiOQcHTVPSZxDHKQVXPQq/gnGxLacK1W8tm0rsOGqZ755Ub9D1u8zq FiVvPZHbQfwfT+ltCN5I1kG4pm/s4fVp7ZBAhqFYO3hlINavHQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFOKpohkcAJAaHX3O9/JALT5niSDZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z OTIzYTc3Ny1mMGRhLTRlZGYtOGJjYy00MmI0N2Y0ODMxMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzM5MjNhNzc3LWYwZGEtNGVkZi04 YmNjLTQyYjQ3ZjQ4MzEwYS8zOTIzYTc3Ny1mMGRhLTRlZGYtOGJjYy00MmI0N2Y0 ODMxMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAVALYADBARA7gAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAco09TcWrvT0C +eaUtJ7BX4XnKKLUj+anZwXsszsNmlhJEhf7Zrj34QLCozmcLjt0DB6KQi/28ovy 5I0+igg+prCuylnaACZVys9GRthoiZCJDzEkdHTkiF5lbNTOaZGz/YNE7PYKU31z 1AL1Vuw1hA55j3axoAWIVyrsp5Zb5c34mJECheqYmuZFlMWZXt4pDb5u87fXKzKq blUEmy4P+2qERAtJ6PMzqd0X0O40I7CRTwLFdV7Xk3XVrtRVbXsUEJQwyIW8B/Nc f76dYbTOoSFD6g++VPYm36IkJRiF4l5aa55Y/Ed0VazvFgy5gTh6zDwHwz1ZW3sY 0g3SJEVCnw== -----END CERTIFICATE-----Generated at Tue May 7 21:40:37 2024 by rpki-client on console-ams.rpki-client.org