$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer File: 891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer (raw, json) Hash identifier: i5mxcrlWqWkddhbvY8ga5fgPwKPon2dJK9qORqa4fUI= Subject key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285845EB518A33C6D80E6A3957C200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 19 May 2024 00:45:19 +0000 Certificate not after: Sat 22 Aug 2026 00:45:19 +0000 Subordinate resources: AS: 25605 AS: 30607 AS: 36692 IP: 67.215.64.0/19 IP: 108.171.128.0/19 IP: 162.210.80.0/21 IP: 198.41.8.0 -- 198.41.13.255 IP: 204.194.232.0/21 IP: 208.67.216.0/21 IP: 208.69.32.0/21 IP: 2620:0:cc0::/44 IP: 2620:119::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:eb:51:8a:33:c6:d8:0e:6a:39:57:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 19 00:45:19 2024 GMT Not After : Aug 22 00:45:19 2026 GMT Subject: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:8a:6a:b4:be:38:2c:26:ee:e7:2b:27:b1: 0a:7b:02:0f:6b:f6:45:53:5e:d6:55:96:b6:9e:5a: a4:c7:fb:12:c2:37:ae:6f:2e:a4:95:a6:18:48:5a: dc:58:8c:bb:c6:bf:0d:bb:28:13:06:9f:c3:e9:87: 72:00:8b:72:0e:3f:3e:4b:71:f7:d3:71:14:21:ea: 3d:e7:77:3f:84:b0:33:36:f2:d1:67:98:27:f4:72: 64:52:bb:52:63:04:c0:0f:bc:db:60:ca:b8:d6:60: 79:99:e9:76:67:ff:78:e1:fb:21:19:7d:97:f7:1e: 20:04:5e:ef:14:8a:1b:a0:af:f5:fb:d7:83:ef:c8: 3e:41:2a:d5:34:df:b6:80:a1:9d:f3:09:41:42:fc: 9d:c7:25:5c:b0:01:ad:73:77:e8:7c:d2:87:4b:f9: 85:9a:43:f7:fc:63:8b:9c:f0:dc:b4:d1:59:c3:8f: a2:50:29:34:b7:09:92:ef:58:ac:4c:57:30:69:81: 98:69:67:05:89:fd:b3:6e:04:d2:f3:92:49:2e:ab: 41:5b:11:8e:94:87:5c:71:33:1c:f8:a9:31:5b:86: 6b:15:1d:2c:b2:64:db:ad:b2:bc:7d:fe:35:c1:3a: fc:5b:76:9d:1f:7c:44:c0:df:cd:41:c6:e5:85:b0: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 67.215.64.0/19 108.171.128.0/19 162.210.80.0/21 198.41.8.0-198.41.13.255 204.194.232.0/21 208.67.216.0/21 208.69.32.0/21 IPv6: 2620:0:cc0::/44 2620:119::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25605 30607 36692 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:0b:e4:12:92:ab:92:78:a1:51:97:6c:ae:31:96:6b:1d:47: 82:14:9e:08:d4:3c:41:bf:0c:d4:4e:d1:49:29:f2:04:e2:ae: d0:60:d1:9e:42:aa:38:b4:f5:ba:f2:cd:45:10:3d:b1:5c:ee: 73:49:ac:bc:ad:1f:27:20:48:b7:ef:ea:79:6f:c3:fe:5e:ea: 32:1c:d2:94:08:3c:2e:90:f3:84:f3:8f:b6:45:76:47:23:dc: 61:a7:49:40:dc:49:3f:2c:1d:0a:6f:41:59:a1:82:61:da:a8: 07:d5:85:36:1b:bf:d6:0a:9f:fd:f0:db:34:e7:02:3b:41:52: 6e:a9:c7:02:46:e4:4b:c8:66:af:91:83:ce:7f:48:5e:dc:1d: 0d:43:ac:c2:11:2e:84:f9:18:54:f4:dc:24:d4:d9:4f:44:55: 3a:33:d1:71:c4:47:54:26:1c:4a:c9:c2:19:3a:c9:ee:a0:ec: 58:33:09:5e:3d:6e:30:e8:13:44:d6:7f:a6:d3:54:a2:20:06: 34:a7:dc:87:fe:33:61:8a:05:64:33:e3:ca:fc:16:dd:88:2b: 79:a1:9f:5b:74:bb:d8:0d:c6:9e:2c:5d:32:1b:7e:1d:fd:56: 94:5c:66:41:b9:f7:5b:78:00:7e:02:cd:01:82:05:ee:96:07: 55:0a:3b:55 -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWEXrUYozxtgOajlXwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDUxOTAwNDUxOVoXDTI2MDgyMjAwNDUxOVowLzEtMCsGA1UEAxMk ODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJkZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsSKarS+OCwm7ucrJ7EKewIPa/ZFU17WVZa2 nlqkx/sSwjeuby6klaYYSFrcWIy7xr8NuygTBp/D6YdyAItyDj8+S3H303EUIeo9 53c/hLAzNvLRZ5gn9HJkUrtSYwTAD7zbYMq41mB5mel2Z/944fshGX2X9x4gBF7v FIoboK/1+9eD78g+QSrVNN+2gKGd8wlBQvydxyVcsAGtc3fofNKHS/mFmkP3/GOL nPDctNFZw4+iUCk0twmS71isTFcwaYGYaWcFif2zbgTS85JJLqtBWxGOlIdccTMc +KkxW4ZrFR0ssmTbrbK8ff41wTr8W3adH3xEwN/NQcblhbBqmwIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFJ4x6LSmNAOwTwognzBq3QpguJJLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzg5MWNjMDFhLTM3YmQtNDFjYS04 ZjJhLTIzYzA2MmJiZGVmYy84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJi YmRlZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwZAYIKwYBBQUH AQcBAf8EVTBTMDgEAgABMDIDBAVD10ADBAVsq4ADBAOi0lAwDAMEA8YpCAMEAcYp DAMEA8zC6AMEA9BD2AMEA9BFIDAXBAIAAjARAwcEJiAAAAzAAwYAJiABGQAwIgYI KwYBBQUHAQgBAf8EEzARoA8wDQICZAUCAnePAgMAj1QwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASQvkEpKr knihUZdsrjGWax1HghSeCNQ8Qb8M1E7RSSnyBOKu0GDRnkKqOLT1uvLNRRA9sVzu c0msvK0fJyBIt+/qeW/D/l7qMhzSlAg8LpDzhPOPtkV2RyPcYadJQNxJPywdCm9B WaGCYdqoB9WFNhu/1gqf/fDbNOcCO0FSbqnHAkbkS8hmr5GDzn9IXtwdDUOswhEu hPkYVPTcJNTZT0RVOjPRccRHVCYcSsnCGTrJ7qDsWDMJXj1uMOgTRNZ/ptNUoiAG NKfch/4zYYoFZDPjyvwW3YgreaGfW3S72A3GnixdMht+Hf1WlFxmQbn3W3gAfgLN AYIF7pYHVQo7VQ== -----END CERTIFICATE-----Generated at Thu Nov 21 15:42:56 2024 by rpki-client on console-fra.rpki-client.org