$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer File: 6c86d366-9f08-4852-b060-53c54ef6dda0.cer (raw, json) Hash identifier: QSOKKW1HRPmzRvu0rAd3pAoWuz8x1pBsfPFJ/G7DG90= Subject key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285845A1FD1F6D2C5CA7F88C394100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Apr 2024 18:21:14 +0000 Certificate not after: Tue 18 Nov 2025 01:45:21 +0000 Subordinate resources: IP: 164.153.128.0/22 IP: 164.153.142.0 -- 164.153.255.255 IP: 204.138.40.0 -- 204.138.59.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:fd:1f:6d:2c:5c:a7:f8:8c:39:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 22 18:21:14 2024 GMT Not After : Nov 18 01:45:21 2025 GMT Subject: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e2:e6:0d:c0:fc:6c:bf:36:64:27:6e:97:25: dc:68:4e:7f:bc:2c:5f:e1:6f:8f:98:06:88:60:ba: 37:17:ec:60:5f:cf:64:57:b0:07:cf:d5:c9:2d:12: f5:8a:5f:51:9a:50:99:fa:59:ce:81:5d:28:5e:6f: 3e:0c:e4:07:68:47:53:e9:14:8f:07:cc:9c:48:2d: eb:18:f4:b8:ea:88:13:bc:12:1d:e1:a8:c7:c6:72: 13:2f:65:80:8d:60:30:4c:24:70:68:fd:2d:75:cf: c7:e3:a2:7a:66:f0:35:e4:29:c3:44:95:11:31:80: dd:45:fc:e6:02:ee:24:31:24:e1:45:e4:19:91:4f: 5d:fd:e7:93:00:98:96:6d:06:74:ee:35:0c:d9:61: 17:78:9a:71:0b:40:28:2b:69:72:9d:82:9f:d7:d3: d2:de:a8:33:73:ec:15:c1:c1:1d:4f:15:64:d8:b1: 7b:b0:8b:51:18:32:e2:11:e4:23:e7:3b:9e:29:55: dc:0d:39:73:51:d7:a0:2b:e8:e5:d4:88:77:a3:6a: 1e:bb:ba:03:97:a0:07:4c:9f:e7:ed:25:bc:7e:84: 9c:7c:88:d3:57:d8:da:15:2a:02:d8:20:34:5b:29: 1f:06:d8:bb:48:1b:c0:8a:26:3c:ab:d8:d3:9a:c0: aa:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 164.153.128.0/22 164.153.142.0-164.153.255.255 204.138.40.0-204.138.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:9e:d3:c9:da:3f:b0:04:78:52:22:b0:96:63:45:e9:c2:ce: 02:fa:95:62:15:f0:96:ad:38:26:c0:f2:b1:f3:e5:14:d9:c2: 34:29:b2:b8:4d:a7:cc:35:6a:7b:b4:9b:2e:35:b1:1d:e0:e2: 47:c8:41:d0:27:b1:18:3f:96:e9:4e:76:6d:6a:be:72:09:28: 9d:e1:4c:d6:ed:a1:ba:d4:b1:03:ea:fc:d3:df:49:89:1e:b1: bb:af:23:64:5e:3e:2c:63:50:18:21:f3:c6:5a:44:dd:38:47: 76:22:d6:c2:f8:de:a1:e6:ca:bf:5b:68:84:11:c7:5b:75:c7: 06:c7:71:b8:a7:aa:0e:6b:6b:20:4f:84:95:71:cd:09:f9:8c: 61:4e:a4:d6:3c:07:30:01:a6:bf:a4:35:80:16:91:4c:6c:5c: f8:ce:5f:1b:55:42:12:c7:d7:60:db:e7:b2:23:75:81:bf:e0: 64:75:a4:cd:47:50:21:9d:47:3d:bb:34:47:80:1b:d6:1d:5a: d2:d5:5a:19:e5:66:b3:d2:14:98:f7:52:f7:80:48:6a:70:f1: 5a:a7:ef:1d:b7:99:c1:9c:ef:a1:52:97:65:2d:46:59:8c:41: 1a:fc:04:7f:3f:57:a5:a8:07:ea:19:ea:d0:63:76:a2:80:56: 57:75:15:1a -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEWh/R9tLFyn+Iw5QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDQyMjE4MjExNFoXDTI1MTExODAxNDUyMVowLzEtMCsGA1UEAxMk NmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZkZGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeLmDcD8bL82ZCdulyXcaE5/vCxf4W+PmAaI YLo3F+xgX89kV7AHz9XJLRL1il9RmlCZ+lnOgV0oXm8+DOQHaEdT6RSPB8ycSC3r GPS46ogTvBId4ajHxnITL2WAjWAwTCRwaP0tdc/H46J6ZvA15CnDRJURMYDdRfzm Au4kMSThReQZkU9d/eeTAJiWbQZ07jUM2WEXeJpxC0AoK2lynYKf19PS3qgzc+wV wcEdTxVk2LF7sItRGDLiEeQj5zueKVXcDTlzUdegK+jl1Ih3o2oeu7oDl6AHTJ/n 7SW8foScfIjTV9jaFSoC2CA0WykfBti7SBvAiiY8q9jTmsCqrQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKyLqW5PWdzrEVmlF6arn54UOPF/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82 Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzZjODZkMzY2LTlmMDgtNDg1Mi1i MDYwLTUzYzU0ZWY2ZGRhMC82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVm NmRkYTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMCcEAgABMCEDBAKkmYAwCwMEAaSZjgMDAaSYMAwDBAPMiigDBALM ijgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEASp7Tydo/sAR4UiKwlmNF6cLOAvqVYhXwlq04JsDysfPlFNnC NCmyuE2nzDVqe7SbLjWxHeDiR8hB0CexGD+W6U52bWq+cgkoneFM1u2hutSxA+r8 099JiR6xu68jZF4+LGNQGCHzxlpE3ThHdiLWwvjeoebKv1tohBHHW3XHBsdxuKeq DmtrIE+ElXHNCfmMYU6k1jwHMAGmv6Q1gBaRTGxc+M5fG1VCEsfXYNvnsiN1gb/g ZHWkzUdQIZ1HPbs0R4Ab1h1a0tVaGeVms9IUmPdS94BIanDxWqfvHbeZwZzvoVKX ZS1GWYxBGvwEfz9XpagH6hnq0GN2ooBWV3UVGg== -----END CERTIFICATE-----Generated at Mon May 6 14:55:18 2024 by rpki-client on console-fra.rpki-client.org