$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer File: 564c92f5-eb04-448d-8939-379434b228b3.cer (raw, json) Hash identifier: aMKztjS6j24k3e7alB4l/PUVUZScU0hkaSJqfYgzfnQ= Subject key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858420C40ABFA5B48318AFDE4F570 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 30 May 2023 00:45:16 +0000 Certificate not after: Mon 01 Sep 2025 00:45:16 +0000 Subordinate resources: IP: 142.165.0.0/16 IP: 204.83.0.0/16 IP: 207.195.0.0/17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:0c:40:ab:fa:5b:48:31:8a:fd:e4:f5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 30 00:45:16 2023 GMT Not After : Sep 1 00:45:16 2025 GMT Subject: CN=564c92f5-eb04-448d-8939-379434b228b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:cd:98:7b:c4:fa:66:2c:60:41:3a:14:d1: 23:af:42:4e:d4:15:13:d4:55:80:5f:29:3b:af:09: a1:5d:82:c7:04:2c:85:d3:5a:41:95:31:d8:4e:61: fd:a2:50:3f:07:c4:06:e8:83:d4:bd:cd:0d:9d:51: c4:2e:9a:ff:b5:59:59:a7:41:11:49:93:91:a5:fb: 90:0e:fa:6e:51:e5:2f:95:28:c7:0a:95:99:02:29: 59:28:e9:5f:65:15:ae:08:d9:a6:d4:55:ca:31:03: 7e:1c:c1:62:71:18:22:d6:a8:56:63:f8:89:70:0c: 51:1a:aa:e2:e7:ad:9c:05:ee:6f:06:76:ab:c9:ad: af:f0:00:5c:8d:7d:77:65:03:57:5f:8c:5c:d8:4b: 72:a4:11:75:1e:33:18:04:2d:de:aa:b4:60:a6:9b: 47:eb:b3:fe:c8:0f:00:07:72:1e:8f:e9:df:aa:25: c6:77:cf:56:68:37:d4:70:57:ab:e5:e8:83:6b:37: 1e:d6:5c:a9:71:ee:94:95:32:c9:8b:9a:6d:2e:f9: 6c:06:04:be:30:b5:2b:b6:6a:d1:60:dd:02:7d:a0: 81:ed:1e:e7:44:7a:d3:50:71:a7:29:de:40:1b:c5: 78:63:80:97:54:ae:08:92:f7:a4:2d:66:26:60:51: f8:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 142.165.0.0/16 204.83.0.0/16 207.195.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fd:ca:19:93:23:eb:42:ed:60:31:cd:72:9d:32:c1:31:a2: 26:a5:cc:94:98:da:e0:a0:f4:fe:be:5e:24:43:95:cc:3a:bf: e9:83:23:ef:13:66:26:ad:c6:03:82:5d:2b:e7:75:51:ca:a4: 73:90:04:74:b6:57:55:b5:53:bb:be:b8:3c:4c:5b:22:d9:01: d4:4a:90:e8:aa:9a:c0:52:7c:97:b9:cc:14:cc:e5:8a:1b:5a: 31:e2:a2:52:3c:67:e9:8c:1e:7f:d2:8c:fe:bb:7d:00:d8:c9: 02:fb:05:1b:e7:71:89:b2:c0:99:24:14:37:57:cd:87:f3:f7: 1e:8f:81:7e:f5:84:b3:1e:21:3c:1d:6d:e1:e0:d9:05:3f:f2: dd:7e:8b:0f:1a:5f:ce:22:c1:7c:b7:95:3e:48:88:90:6c:2d: 76:dd:b7:e9:60:5c:a8:14:85:1f:f9:b8:0b:c6:4e:8d:82:dd: b1:cb:60:1e:8b:87:a1:f6:14:2f:24:81:64:cb:b3:62:7c:5e: 45:5f:b4:89:10:2f:da:bd:3a:df:f4:ec:1a:8a:34:9b:e4:74: da:8d:c2:94:20:3b:dc:3e:e2:b1:bb:28:45:7e:35:7c:17:e0: a3:33:52:58:0b:f7:73:ff:f6:52:c9:f8:6e:d8:26:9a:e9:ac: b5:9e:9e:27 -----BEGIN CERTIFICATE----- MIIG9zCCBd+gAwIBAgIUAQ0Mn0MoWEIMQKv6W0gxiv3k9XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUzMDAwNDUxNloXDTI1MDkwMTAwNDUxNlowLzEtMCsGA1UEAxMk NTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIyOGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSrNmHvE+mYsYEE6FNEjr0JO1BUT1FWAXyk7 rwmhXYLHBCyF01pBlTHYTmH9olA/B8QG6IPUvc0NnVHELpr/tVlZp0ERSZORpfuQ DvpuUeUvlSjHCpWZAilZKOlfZRWuCNmm1FXKMQN+HMFicRgi1qhWY/iJcAxRGqri 562cBe5vBnarya2v8ABcjX13ZQNXX4xc2EtypBF1HjMYBC3eqrRgpptH67P+yA8A B3Iej+nfqiXGd89WaDfUcFer5eiDazce1lypce6UlTLJi5ptLvlsBgS+MLUrtmrR YN0CfaCB7R7nRHrTUHGnKd5AG8V4Y4CXVK4IkvekLWYmYFH4KwIDAQABo4IECTCC BAUwHQYDVR0OBBYEFN12b+Jml6WTYhGkWDzk1cnhWdSAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81 NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzU2NGM5MmY1LWViMDQtNDQ4ZC04 OTM5LTM3OTQzNGIyMjhiMy81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRi MjI4YjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKQYIKwYBBQUH AQcBAf8EGjAYMBYEAgABMBADAwCOpQMDAMxTAwQHz8MAMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJX9yhmT I+tC7WAxzXKdMsExoialzJSY2uCg9P6+XiRDlcw6v+mDI+8TZiatxgOCXSvndVHK pHOQBHS2V1W1U7u+uDxMWyLZAdRKkOiqmsBSfJe5zBTM5YobWjHiolI8Z+mMHn/S jP67fQDYyQL7BRvncYmywJkkFDdXzYfz9x6PgX71hLMeITwdbeHg2QU/8t1+iw8a X84iwXy3lT5IiJBsLXbdt+lgXKgUhR/5uAvGTo2C3bHLYB6Lh6H2FC8kgWTLs2J8 XkVftIkQL9q9Ot/07BqKNJvkdNqNwpQgO9w+4rG7KEV+NXwX4KMzUlgL93P/9lLJ +G7YJprprLWenic= -----END CERTIFICATE-----Generated at Thu Apr 18 17:57:49 2024 by rpki-client on console-ams.rpki-client.org