$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer File: 65dae2a0-0cb7-46e8-ae17-abeb06007e1a.cer (raw, json) Hash identifier: Fw7BRmn3WwcYo516C0cudnMktXpnYHvDbuclfupFBxA= Subject key identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584538A5C683DE11FDC47DFE5D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 16 Mar 2024 00:45:21 +0000 Certificate not after: Fri 19 Jun 2026 00:45:21 +0000 Subordinate resources: IP: 45.56.192.0 -- 45.56.203.255 IP: 63.141.32.0/23 IP: 63.141.48.0/20 IP: 67.22.60.0/22 IP: 96.126.64.0/21 IP: 104.243.208.0/21 IP: 104.247.92.0/24 IP: 199.58.252.0/22 IP: 209.126.88.0/22 IP: 2607:6b80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 22 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:38:a5:c6:83:de:11:fd:c4:7d:fe:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 16 00:45:21 2024 GMT Not After : Jun 19 00:45:21 2026 GMT Subject: CN=65dae2a0-0cb7-46e8-ae17-abeb06007e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:0e:7b:58:b3:ea:10:43:f3:0c:96:7f:09: e7:86:e8:37:c8:56:1f:72:a3:2b:49:f7:03:21:c5: 7a:f7:3e:be:e5:26:f6:f3:a1:9c:29:a8:44:99:a6: 56:5f:00:5d:c6:aa:e0:de:ae:bb:58:b8:f5:a0:51: 91:28:f9:59:ce:8c:3b:88:24:25:52:ff:ea:3d:b7: be:9b:67:ee:44:24:46:35:01:0d:02:50:6a:c6:e8: 48:f6:06:df:3e:e5:7c:ea:39:ec:3c:3f:8d:fa:95: 7c:ad:c6:91:69:0a:97:fd:4b:cb:a3:ee:99:c8:a8: 1a:5d:41:15:73:76:07:82:16:72:60:e0:47:7e:56: 3e:d9:76:7f:4a:6b:a7:bb:72:35:58:3a:14:0f:23: f8:ec:f7:0a:e7:10:8d:12:35:f4:f0:13:38:32:6c: 13:82:b0:7d:01:c2:4b:27:55:48:23:47:8e:86:f5: 31:d7:98:55:d8:98:47:aa:35:e0:3d:82:be:7b:87: d1:39:cf:07:9e:cb:02:2e:38:bb:7a:0e:5c:b1:b7: 4e:1f:c4:b4:9a:c6:df:24:e0:d0:ce:f4:f7:2f:9a: 2b:44:ce:f4:b9:3c:4b:ab:f9:a6:6f:cf:ca:d7:47: 10:12:c8:87:e9:51:8e:6b:8a:e7:51:c3:d6:dc:38: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:49:9D:8B:77:A3:3A:DF:1F:CD:4E:BA:51:CC:1A:A3:FA:A3:F6:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/65dae2a0-0cb7-46e8-ae17-abeb06007e1a/65dae2a0-0cb7-46e8-ae17-abeb06007e1a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.56.192.0-45.56.203.255 63.141.32.0/23 63.141.48.0/20 67.22.60.0/22 96.126.64.0/21 104.243.208.0/21 104.247.92.0/24 199.58.252.0/22 209.126.88.0/22 IPv6: 2607:6b80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:72:f4:df:72:ef:04:61:05:4a:3a:bc:63:9b:fc:53:30:2b: 2e:ba:a1:ae:88:68:70:da:ee:f9:b0:ec:6b:96:62:62:f1:42: 15:d1:9d:34:5d:cf:df:4e:77:64:2d:65:03:87:ca:89:96:1d: 69:d4:7a:a3:43:fa:dd:10:ad:c6:cc:38:cf:ce:15:7b:fb:f6: 21:02:a1:68:bd:2e:3f:22:4b:f8:3a:78:aa:89:d2:38:21:3e: 5f:50:02:8d:39:29:4a:b6:f9:f6:81:8c:3c:3f:ad:46:e8:b3: c7:b0:2c:18:62:db:30:cf:59:1c:67:23:d0:07:f5:fe:68:41: 06:fa:ee:ff:95:2d:35:5a:2f:5b:9f:2d:90:db:fc:4c:5e:94: dc:39:c1:8d:4d:4e:31:b0:84:72:a1:e8:97:57:22:9f:cb:4a: 92:50:28:f4:3c:42:7e:7a:bd:ff:b3:b7:d3:c3:0b:d8:83:6a: 92:dd:43:cd:12:62:3a:9b:3e:f4:23:54:8f:9c:56:17:86:4e: dc:05:4a:e2:03:02:b8:74:5b:2d:2f:4f:3a:e7:0f:f4:1d:22: 2f:22:51:99:2d:a8:72:12:6c:89:09:03:3d:c5:4d:c8:8f:a2: f2:6b:5d:04:fb:9e:0b:f9:88:66:0b:1a:71:6d:4d:85:3a:79: ad:8c:ff:12 -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWEU4pcaD3hH9xH3+XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDMxNjAwNDUyMVoXDTI2MDYxOTAwNDUyMVowLzEtMCsGA1UEAxMk NjVkYWUyYTAtMGNiNy00NmU4LWFlMTctYWJlYjA2MDA3ZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxooOe1iz6hBD8wyWfwnnhug3yFYfcqMrSfcD IcV69z6+5Sb286GcKahEmaZWXwBdxqrg3q67WLj1oFGRKPlZzow7iCQlUv/qPbe+ m2fuRCRGNQENAlBqxuhI9gbfPuV86jnsPD+N+pV8rcaRaQqX/UvLo+6ZyKgaXUEV c3YHghZyYOBHflY+2XZ/Smunu3I1WDoUDyP47PcK5xCNEjX08BM4MmwTgrB9AcJL J1VII0eOhvUx15hV2JhHqjXgPYK+e4fROc8HnssCLji7eg5csbdOH8S0msbfJODQ zvT3L5orRM70uTxLq/mmb8/K10cQEsiH6VGOa4rnUcPW3DhkbQIDAQABo4IERjCC BEIwHQYDVR0OBBYEFBpJnYt3ozrfH81OulHMGqP6o/YlMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYwMDdlMWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzY1ZGFlMmEwLTBjYjctNDZlOC1h ZTE3LWFiZWIwNjAwN2UxYS82NWRhZTJhMC0wY2I3LTQ2ZTgtYWUxNy1hYmViMDYw MDdlMWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwZgYIKwYBBQUH AQcBAf8EVzBVMEQEAgABMD4wDAMEBi04wAMEAi04yAMEAT+NIAMEBD+NMAMEAkMW PAMEA2B+QAMEA2jz0AMEAGj3XAMEAsc6/AMEAtF+WDANBAIAAjAHAwUAJgdrgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCCcvTfcu8EYQVKOrxjm/xTMCsuuqGuiGhw2u75sOxrlmJi8UIV0Z00 Xc/fTndkLWUDh8qJlh1p1HqjQ/rdEK3GzDjPzhV7+/YhAqFovS4/Ikv4OniqidI4 IT5fUAKNOSlKtvn2gYw8P61G6LPHsCwYYtswz1kcZyPQB/X+aEEG+u7/lS01Wi9b ny2Q2/xMXpTcOcGNTU4xsIRyoeiXVyKfy0qSUCj0PEJ+er3/s7fTwwvYg2qS3UPN EmI6mz70I1SPnFYXhk7cBUriAwK4dFstL0865w/0HSIvIlGZLahyEmyJCQM9xU3I j6Lya10E+54L+YhmCxpxbU2FOnmtjP8S -----END CERTIFICATE-----Generated at Sat Apr 20 14:31:55 2024 by rpki-client on console-fra.rpki-client.org