$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer File: 74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer (raw, json) Hash identifier: djsY0j7L2wTFIQHO/rFVkkL8A+PviZQ5IvG9SLMQ8+E= Subject key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285841E48353B59DBF763AF7CF1080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Fri 01 Aug 2025 19:06:39 +0000 Subordinate resources: AS: 40703 IP: 157.166.0.0/16 IP: 2620:100:e000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:53:b5:9d:bf:76:3a:f7:cf:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Aug 1 19:06:39 2025 GMT Subject: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:16:93:78:83:5b:6e:f5:ce:09:1a:7f:2e: 81:17:01:16:70:86:cd:78:c2:84:17:71:66:f7:f4: de:ca:a7:62:8e:ae:8f:2c:f7:c9:8e:52:9b:73:6c: 47:a7:ff:9f:af:e8:a5:76:5b:cc:aa:95:42:f9:cf: e1:93:72:80:82:24:84:b6:a3:04:e8:a3:83:3c:31: 86:a2:d0:12:d2:d7:08:95:ab:c1:28:89:4c:bc:d0: b7:20:87:f6:de:69:a8:67:48:3b:56:7a:fe:fb:99: a9:2a:ec:12:4a:60:9f:fb:a2:13:c2:51:51:2e:32: d4:2c:ca:2e:a9:0a:de:c0:03:54:a1:21:d0:b9:c0: 99:22:df:70:d2:fa:79:0b:ee:52:fa:25:a6:69:c9: ed:89:19:4e:74:16:ed:36:f2:cd:c8:91:34:c1:a2: d4:f4:a9:cc:4e:af:92:e4:50:fa:1f:38:9a:8e:ec: d8:c2:3f:8e:c9:e3:7c:da:a5:fb:5b:e7:79:de:8e: 3c:b2:dc:85:32:5c:15:92:6d:38:ce:43:89:e5:a3: b7:e5:0c:27:fd:a7:87:1b:0b:2d:fa:ca:40:f7:f4: 48:33:e0:b6:fb:93:0c:16:c8:1c:f7:9d:d7:ae:ab: 5b:a2:6e:28:bb:70:f6:8d:76:aa:31:df:ed:c9:b1: a0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 157.166.0.0/16 IPv6: 2620:100:e000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40703 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b0:18:c9:ce:73:04:06:0a:cc:57:7f:2b:48:e0:a1:92:fe: 8c:e3:2d:20:58:43:ac:5b:74:00:dd:8d:b3:77:9b:77:84:c1: d0:09:67:2a:09:0a:53:44:1c:b4:b6:ea:b3:3e:dc:ec:96:fa: 2e:9c:63:94:73:80:32:dd:8d:0d:18:49:85:00:cb:e5:9a:e7: b8:a2:7d:2f:50:2f:35:f9:24:c9:82:5a:2b:db:57:11:07:72: a1:92:4b:3a:bd:81:4b:b0:e2:4d:4b:d7:5a:86:cc:b2:c3:88: 3f:84:b8:54:0d:ad:d3:c1:a7:6c:db:48:2f:92:89:20:ae:64: af:e3:aa:a6:72:37:1e:0d:ee:f9:54:1c:61:0d:ba:c1:68:34: de:ae:fb:67:0a:7f:85:a7:d9:43:bc:9a:39:ef:79:d0:49:6f: b5:fa:fc:26:b7:3f:bd:28:70:7e:49:28:b5:21:60:ae:8c:b3: 2d:e4:6f:ec:6b:3a:ee:c7:4e:be:2b:26:eb:c3:d2:53:1e:db: dd:61:85:bb:3c:52:ee:79:8d:b1:72:5c:24:fb:cd:7c:26:96: 79:1a:55:00:64:bd:2e:10:8f:7a:61:29:ca:a3:f6:e7:9c:2a: e1:6d:e1:25:d4:fd:e5:e6:a3:5f:9b:8b:a3:4c:3a:e9:0b:16: 68:04:2b:88 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEHkg1O1nb92OvfPEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDgwMTE5MDYzOVowLzEtMCsGA1UEAxMk NzQzMzVmYTAtNmMzZi00ODc4LTlmM2YtOTVjNWNlMGZiOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspUWk3iDW271zgkafy6BFwEWcIbNeMKEF3Fm 9/Teyqdijq6PLPfJjlKbc2xHp/+fr+ildlvMqpVC+c/hk3KAgiSEtqME6KODPDGG otAS0tcIlavBKIlMvNC3IIf23mmoZ0g7Vnr++5mpKuwSSmCf+6ITwlFRLjLULMou qQrewANUoSHQucCZIt9w0vp5C+5S+iWmacntiRlOdBbtNvLNyJE0waLU9KnMTq+S 5FD6HziajuzYwj+OyeN82qX7W+d53o48styFMlwVkm04zkOJ5aO35Qwn/aeHGwst +spA9/RIM+C2+5MMFsgc953Xrqtbom4ou3D2jXaqMd/tybGgWwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFHPHI2eKHlEf3GTm9IgYtgjRHuUxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2UwZmI5NTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzc0MzM1ZmEwLTZjM2YtNDg3OC05 ZjNmLTk1YzVjZTBmYjk1NS83NDMzNWZhMC02YzNmLTQ4NzgtOWYzZi05NWM1Y2Uw ZmI5NTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAsEAgABMAUDAwCdpjAPBAIAAjAJAwcEJiABAOAAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCe/zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA6sBjJznMEBgrMV38rSOChkv6M 4y0gWEOsW3QA3Y2zd5t3hMHQCWcqCQpTRBy0tuqzPtzslvounGOUc4Ay3Y0NGEmF AMvlmue4on0vUC81+STJglor21cRB3Khkks6vYFLsOJNS9dahsyyw4g/hLhUDa3T wads20gvkokgrmSv46qmcjceDe75VBxhDbrBaDTervtnCn+Fp9lDvJo573nQSW+1 +vwmtz+9KHB+SSi1IWCujLMt5G/sazrux06+Kybrw9JTHtvdYYW7PFLueY2xclwk +818JpZ5GlUAZL0uEI96YSnKo/bnnCrhbeEl1P3l5qNfm4ujTDrpCxZoBCuI -----END CERTIFICATE-----Generated at Thu May 2 04:29:22 2024 by rpki-client on console-fra.rpki-client.org