$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer File: 7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.cer (raw, json) Hash identifier: QWCUEO848dBA6NiVrenM7FHYEF2GBHF1nFB3HmkcrMw= Subject key identifier: 3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285846F1BDE53247EF91CE16D1AF20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Aug 2024 00:45:26 +0000 Certificate not after: Tue 24 Nov 2026 01:45:26 +0000 Subordinate resources: AS: 10297 IP: 64.79.64.0/19 IP: 173.45.64.0/18 IP: 173.244.160.0/19 IP: 207.182.128.0/19 IP: 209.190.0.0/17 IP: 2001:1828::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:f1:bd:e5:32:47:ef:91:ce:16:d1:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 21 00:45:26 2024 GMT Not After : Nov 24 01:45:26 2026 GMT Subject: CN=7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b5:ea:5d:3a:36:0d:23:55:f5:7c:d7:a2:51: 39:7f:c8:c9:40:64:43:d6:51:79:30:fe:26:5b:16: 87:a5:4e:25:64:f2:bf:5c:06:c2:57:c2:2f:8c:5a: f2:87:0e:bb:02:53:5e:27:99:4c:78:f8:c7:f3:d4: 4d:35:5e:8f:70:c6:22:88:98:b1:a1:69:49:fa:fb: d9:ee:88:3c:f6:05:5c:65:33:99:f9:d0:0e:1a:2d: 0d:9f:f1:2b:fa:e9:87:59:4e:2f:1a:d8:d0:5a:d5: b1:78:05:0a:e1:57:5b:70:ee:68:4f:54:52:bf:12: fa:b9:53:63:77:85:ed:33:b4:d8:35:0c:5e:42:b1: 07:0f:9a:12:42:8f:98:78:2b:c3:49:53:7d:c7:e9: a3:f9:7e:0a:33:7d:8b:38:f6:91:4d:70:d1:2b:e4: 01:c4:3e:e7:bc:1c:94:ae:dd:be:4f:fc:e6:80:ed: bd:a6:57:9a:d3:3d:0d:6f:86:c7:10:ec:fe:52:6e: 0f:d6:1f:fe:c7:b7:20:14:71:d5:5e:17:bf:55:8d: 2d:37:f7:52:fe:88:7e:ce:31:f5:d2:f1:6f:98:25: 17:79:99:36:a7:d8:ea:99:3f:3d:2f:8d:1a:63:96: fe:98:18:16:5b:df:13:9a:b0:bb:cf:70:d4:11:fe: a2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F8:45:F1:26:71:A6:9C:56:6C:DE:41:7A:35:28:C5:81:AF:52:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6/7f5e4caa-2ea7-4602-a3b0-5c9fcd2e54e6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.79.64.0/19 173.45.64.0/18 173.244.160.0/19 207.182.128.0/19 209.190.0.0/17 IPv6: 2001:1828::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10297 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:42:72:86:fc:3d:13:3c:95:19:e1:cc:7d:db:43:88:55:84: dd:4b:97:b7:5c:78:a7:a8:c1:b6:d7:b3:d2:0b:8a:9b:19:96: 9e:1a:e4:7a:50:fe:11:47:88:34:27:8b:d9:9a:96:4e:63:dc: 03:fc:83:54:9f:5e:8f:46:8b:12:ab:0b:04:db:5b:e2:03:ec: 16:86:43:52:09:63:38:f7:52:be:ed:35:d1:51:6e:ef:c6:d9: df:04:14:00:54:20:6b:2d:45:c8:69:40:a8:2c:00:1a:7e:67: 59:b8:42:74:3c:8e:63:10:8c:19:7e:c5:e9:fe:66:7b:2e:a8: b6:c1:a3:ae:ec:a1:a6:6f:f0:44:8f:74:18:f5:33:36:b8:95: 3b:65:d2:bc:fd:18:e6:ed:6c:2c:d6:0e:6a:a7:7f:c8:34:e6: d3:74:be:d4:15:f0:5e:fc:36:cd:0d:25:96:50:7e:8c:f4:94: 6a:43:ee:95:e0:53:cd:cd:eb:d1:91:63:fe:9d:85:37:84:9c: 95:a8:b2:a5:81:d7:36:14:bd:4f:6e:c8:f3:c2:17:cf:ab:81: dd:a1:62:a3:f9:90:0a:5d:b5:1b:05:0e:9c:18:c4:f0:63:fb: 85:5f:11:36:f1:ed:38:d3:a7:bc:e8:f3:95:d4:ad:ac:fd:70: c8:37:99:db -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEbxveUyR++RzhbRryAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDgyMTAwNDUyNloXDTI2MTEyNDAxNDUyNlowLzEtMCsGA1UEAxMk N2Y1ZTRjYWEtMmVhNy00NjAyLWEzYjAtNWM5ZmNkMmU1NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rXqXTo2DSNV9XzXolE5f8jJQGRD1lF5MP4m WxaHpU4lZPK/XAbCV8IvjFryhw67AlNeJ5lMePjH89RNNV6PcMYiiJixoWlJ+vvZ 7og89gVcZTOZ+dAOGi0Nn/Er+umHWU4vGtjQWtWxeAUK4VdbcO5oT1RSvxL6uVNj d4XtM7TYNQxeQrEHD5oSQo+YeCvDSVN9x+mj+X4KM32LOPaRTXDRK+QBxD7nvByU rt2+T/zmgO29plea0z0Nb4bHEOz+Um4P1h/+x7cgFHHVXhe/VY0tN/dS/oh+zjH1 0vFvmCUXeZk2p9jqmT89L40aY5b+mBgWW98TmrC7z3DUEf6iRwIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFD34RfEmcaacVmzeQXo1KMWBr1JgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83 ZjVlNGNhYS0yZWE3LTQ2MDItYTNiMC01YzlmY2QyZTU0ZTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzdmNWU0Y2FhLTJlYTctNDYwMi1h M2IwLTVjOWZjZDJlNTRlNi83ZjVlNGNhYS0yZWE3LTQ2MDItYTNiMC01YzlmY2Qy ZTU0ZTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAVAT0ADBAatLUADBAWt9KADBAXPtoADBAfRvgAw DQQCAAIwBwMFACABGCgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICKDkwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAi0Jyhvw9EzyVGeHMfdtDiFWE3UuXt1x4p6jBttez0guKmxmWnhrkelD+EUeI NCeL2ZqWTmPcA/yDVJ9ej0aLEqsLBNtb4gPsFoZDUgljOPdSvu010VFu78bZ3wQU AFQgay1FyGlAqCwAGn5nWbhCdDyOYxCMGX7F6f5mey6otsGjruyhpm/wRI90GPUz NriVO2XSvP0Y5u1sLNYOaqd/yDTm03S+1BXwXvw2zQ0lllB+jPSUakPuleBTzc3r 0ZFj/p2FN4SclaiypYHXNhS9T27I88IXz6uB3aFio/mQCl21GwUOnBjE8GP7hV8R NvHtONOnvOjzldStrP1wyDeZ2w== -----END CERTIFICATE-----Generated at Thu Nov 21 15:42:55 2024 by rpki-client on console-fra.rpki-client.org