$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer File: 45dffcef-d7d8-4b58-b4f5-bbecc695baff.cer (raw, json) Hash identifier: AiZ7RfqCQRWu28omg1o2KGbiLbVSoPzz0w6M6waOIvg= Subject key identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844CEAD8D5EEC53A9424A4DA350 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 07 Feb 2024 01:45:20 +0000 Certificate not after: Tue 12 May 2026 00:45:20 +0000 Subordinate resources: AS: 3737 IP: 204.186.0.0/16 IP: 209.50.128.0/19 IP: 209.173.0.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ce:ad:8d:5e:ec:53:a9:42:4a:4d:a3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 7 01:45:20 2024 GMT Not After : May 12 00:45:20 2026 GMT Subject: CN=45dffcef-d7d8-4b58-b4f5-bbecc695baff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:23:a2:03:91:ed:9e:3d:ee:04:1e:c0:4a:88: e5:7e:a4:20:3a:a0:dc:14:af:3e:25:94:84:65:c5: f4:1a:11:31:60:f1:19:9c:4c:a9:16:a9:7a:12:60: 3e:4f:d5:d7:58:54:1b:65:c6:90:a4:73:c4:da:10: 2d:05:cd:53:56:fc:72:5a:82:1b:eb:17:2a:77:f7: b5:b0:7e:32:48:a3:bd:a7:1e:83:00:0d:7d:c1:0b: 2d:59:5d:1a:b2:db:98:be:75:18:77:94:d5:e4:d9: a8:ff:44:5a:b7:b4:82:32:8b:4c:28:d2:94:cd:02: 91:46:fb:78:89:3f:80:1d:f5:ef:92:17:30:89:cb: b8:1d:3f:e0:e9:a8:91:7d:a5:51:bc:3a:08:11:ac: 92:71:2d:d7:89:48:ad:12:2d:28:df:fc:eb:ce:80: 31:33:a4:15:00:e2:38:1a:c1:d0:18:3c:1e:86:23: 42:63:e9:00:3a:e7:90:3e:8a:01:94:78:46:84:d9: c8:9a:73:85:c8:3c:82:35:c1:ef:6b:85:1f:23:8e: 21:f2:41:85:21:65:ec:16:3e:6b:2f:96:ad:74:15: d2:ac:ac:a8:69:a0:dc:5d:8b:42:16:37:be:35:21: f0:4f:82:77:73:ea:c9:be:be:67:72:cf:85:f1:d5: 88:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:86:A7:E4:41:E2:5A:ED:5C:FA:0B:FA:19:22:87:7B:E8:61:62:FE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45dffcef-d7d8-4b58-b4f5-bbecc695baff/45dffcef-d7d8-4b58-b4f5-bbecc695baff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.186.0.0/16 209.50.128.0/19 209.173.0.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3737 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:29:22:7c:fa:01:c2:b1:b8:53:da:70:03:ad:e8:d2:e9:17: e7:ba:a1:62:76:cf:be:fd:33:7a:e8:e8:9e:d3:36:4e:0f:21: 7e:68:9b:e3:f7:a5:57:31:70:2d:25:06:bc:38:6e:fe:40:69: 74:0d:31:70:58:99:cf:9d:10:b8:63:41:4d:2a:da:ff:d1:16: 2b:3f:76:30:a1:e3:70:d9:bc:2b:f7:11:d6:db:ed:1b:7c:65: c8:0b:ce:69:2f:b4:4f:35:e1:71:15:38:a8:fd:c3:a9:ac:e6: 1f:0f:5d:82:f5:c9:d1:23:c5:be:1c:96:8f:7b:ee:12:1a:69: fb:35:e9:b7:1d:bd:59:e2:3b:b1:a1:e5:ff:f3:ed:fe:16:17: d7:ca:9f:ed:28:fa:c0:61:76:5f:6b:f7:57:e5:71:9e:50:bc: 1b:90:7e:51:03:ed:20:a8:02:ce:21:cb:b0:d3:a0:61:a5:22: 91:56:e2:f8:dd:32:08:cd:01:9a:9a:79:b6:59:f2:d2:ad:f6: 53:e6:bb:cf:52:b4:34:4a:4c:c0:1a:a9:92:87:f3:3b:29:3f: 9e:40:3b:02:30:78:57:5e:75:47:aa:cf:84:fb:fa:fc:02:04: b8:93:43:42:76:66:eb:65:2a:14:ae:13:41:8e:93:75:17:59: 88:fa:67:49 -----BEGIN CERTIFICATE----- MIIHEzCCBfugAwIBAgIUAQ0Mn0MoWETOrY1e7FOpQkpNo1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDIwNzAxNDUyMFoXDTI2MDUxMjAwNDUyMFowLzEtMCsGA1UEAxMk NDVkZmZjZWYtZDdkOC00YjU4LWI0ZjUtYmJlY2M2OTViYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCOiA5Htnj3uBB7ASojlfqQgOqDcFK8+JZSE ZcX0GhExYPEZnEypFql6EmA+T9XXWFQbZcaQpHPE2hAtBc1TVvxyWoIb6xcqd/e1 sH4ySKO9px6DAA19wQstWV0astuYvnUYd5TV5Nmo/0Rat7SCMotMKNKUzQKRRvt4 iT+AHfXvkhcwicu4HT/g6aiRfaVRvDoIEayScS3XiUitEi0o3/zrzoAxM6QVAOI4 GsHQGDwehiNCY+kAOueQPooBlHhGhNnImnOFyDyCNcHva4UfI44h8kGFIWXsFj5r L5atdBXSrKyoaaDcXYtCFje+NSHwT4J3c+rJvr5ncs+F8dWISwIDAQABo4IEJTCC BCEwHQYDVR0OBBYEFNiGp+RB4lrtXPoL+hkih3voYWL+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80 NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5NWJhZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzQ1ZGZmY2VmLWQ3ZDgtNGI1OC1i NGY1LWJiZWNjNjk1YmFmZi80NWRmZmNlZi1kN2Q4LTRiNTgtYjRmNS1iYmVjYzY5 NWJhZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKgYIKwYBBQUH AQcBAf8EGzAZMBcEAgABMBEDAwDMugMEBdEygAMEBdGtADAZBggrBgEFBQcBCAEB /wQKMAigBjAEAgIOmTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcKSJ8+gHCsbhT2nADrejS6RfnuqFids++ /TN66Oie0zZODyF+aJvj96VXMXAtJQa8OG7+QGl0DTFwWJnPnRC4Y0FNKtr/0RYr P3YwoeNw2bwr9xHW2+0bfGXIC85pL7RPNeFxFTio/cOprOYfD12C9cnRI8W+HJaP e+4SGmn7Nem3Hb1Z4juxoeX/8+3+FhfXyp/tKPrAYXZfa/dX5XGeULwbkH5RA+0g qALOIcuw06BhpSKRVuL43TIIzQGamnm2WfLSrfZT5rvPUrQ0SkzAGqmSh/M7KT+e QDsCMHhXXnVHqs+E+/r8AgS4k0NCdmbrZSoUrhNBjpN1F1mI+mdJ -----END CERTIFICATE-----Generated at Sat May 4 15:05:45 2024 by rpki-client on console-fra.rpki-client.org