$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer File: 891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer (raw, json) Hash identifier: GsNY0/jYPRDmdoUMvL09oFMTO81nGGYJYjh/v1RHSpY= Subject key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858424EF996026024CC93A38E0100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 Jun 2023 22:21:12 +0000 Certificate not after: Sun 18 May 2025 19:06:39 +0000 Subordinate resources: AS: 25605 AS: 30607 AS: 36692 IP: 67.215.64.0/19 IP: 108.171.128.0/19 IP: 162.210.80.0/21 IP: 198.41.8.0 -- 198.41.13.255 IP: 204.194.232.0/21 IP: 208.67.216.0/21 IP: 208.69.32.0/21 IP: 2620:0:cc0::/44 IP: 2620:119::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:4e:f9:96:02:60:24:cc:93:a3:8e:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 22 22:21:12 2023 GMT Not After : May 18 19:06:39 2025 GMT Subject: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:8a:6a:b4:be:38:2c:26:ee:e7:2b:27:b1: 0a:7b:02:0f:6b:f6:45:53:5e:d6:55:96:b6:9e:5a: a4:c7:fb:12:c2:37:ae:6f:2e:a4:95:a6:18:48:5a: dc:58:8c:bb:c6:bf:0d:bb:28:13:06:9f:c3:e9:87: 72:00:8b:72:0e:3f:3e:4b:71:f7:d3:71:14:21:ea: 3d:e7:77:3f:84:b0:33:36:f2:d1:67:98:27:f4:72: 64:52:bb:52:63:04:c0:0f:bc:db:60:ca:b8:d6:60: 79:99:e9:76:67:ff:78:e1:fb:21:19:7d:97:f7:1e: 20:04:5e:ef:14:8a:1b:a0:af:f5:fb:d7:83:ef:c8: 3e:41:2a:d5:34:df:b6:80:a1:9d:f3:09:41:42:fc: 9d:c7:25:5c:b0:01:ad:73:77:e8:7c:d2:87:4b:f9: 85:9a:43:f7:fc:63:8b:9c:f0:dc:b4:d1:59:c3:8f: a2:50:29:34:b7:09:92:ef:58:ac:4c:57:30:69:81: 98:69:67:05:89:fd:b3:6e:04:d2:f3:92:49:2e:ab: 41:5b:11:8e:94:87:5c:71:33:1c:f8:a9:31:5b:86: 6b:15:1d:2c:b2:64:db:ad:b2:bc:7d:fe:35:c1:3a: fc:5b:76:9d:1f:7c:44:c0:df:cd:41:c6:e5:85:b0: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 67.215.64.0/19 108.171.128.0/19 162.210.80.0/21 198.41.8.0-198.41.13.255 204.194.232.0/21 208.67.216.0/21 208.69.32.0/21 IPv6: 2620:0:cc0::/44 2620:119::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25605 30607 36692 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:aa:f0:3e:fe:94:c1:f8:3c:61:da:31:5d:6a:3d:23:2f:13: a1:34:18:42:5b:f0:60:38:08:c7:06:4a:c3:0a:5f:da:95:30: 14:19:a8:ba:77:de:9e:69:43:f4:03:b1:a3:4a:48:f9:db:22: b9:87:97:09:9d:b8:3c:d7:79:a4:65:19:7d:26:fe:37:76:38: 32:58:e1:df:2d:04:19:33:5e:67:3a:e2:85:a4:ff:8b:59:51: 41:a1:fe:c4:ae:60:39:4b:63:c8:29:c4:4f:5c:53:d0:eb:ca: f7:e0:8c:28:58:7d:93:ef:60:3d:59:ee:c2:59:f3:45:b5:67: c8:4c:4e:e8:62:37:83:43:1d:c8:12:98:c6:4e:44:18:87:c2: 2d:95:cc:50:c9:34:cc:fa:d6:3c:97:ad:f3:ef:44:1d:e7:03: fe:87:06:40:85:7f:2a:c0:9f:bb:5b:32:10:a8:b7:ba:22:78: f2:3f:ff:66:5e:1c:3b:e6:6d:d9:ce:66:8a:b9:b3:30:56:db: 48:34:09:8e:26:92:7c:5c:bb:f3:66:f7:c7:25:56:41:af:ed: 24:9c:ec:e8:39:6d:bd:de:06:59:d8:88:cf:96:52:f0:6e:f4: 29:80:a0:97:17:9d:9d:33:3d:91:ea:b3:36:ee:00:a2:4a:7f: 4c:67:47:81 -----BEGIN CERTIFICATE----- MIIHVjCCBj6gAwIBAgIUAQ0Mn0MoWEJO+ZYCYCTMk6OOAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDYyMjIyMjExMloXDTI1MDUxODE5MDYzOVowLzEtMCsGA1UEAxMk ODkxY2MwMWEtMzdiZC00MWNhLThmMmEtMjNjMDYyYmJkZWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsSKarS+OCwm7ucrJ7EKewIPa/ZFU17WVZa2 nlqkx/sSwjeuby6klaYYSFrcWIy7xr8NuygTBp/D6YdyAItyDj8+S3H303EUIeo9 53c/hLAzNvLRZ5gn9HJkUrtSYwTAD7zbYMq41mB5mel2Z/944fshGX2X9x4gBF7v FIoboK/1+9eD78g+QSrVNN+2gKGd8wlBQvydxyVcsAGtc3fofNKHS/mFmkP3/GOL nPDctNFZw4+iUCk0twmS71isTFcwaYGYaWcFif2zbgTS85JJLqtBWxGOlIdccTMc +KkxW4ZrFR0ssmTbrbK8ff41wTr8W3adH3xEwN/NQcblhbBqmwIDAQABo4IEaDCC BGQwHQYDVR0OBBYEFJ4x6LSmNAOwTwognzBq3QpguJJLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJiYmRlZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzg5MWNjMDFhLTM3YmQtNDFjYS04 ZjJhLTIzYzA2MmJiZGVmYy84OTFjYzAxYS0zN2JkLTQxY2EtOGYyYS0yM2MwNjJi YmRlZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwZAYIKwYBBQUH AQcBAf8EVTBTMDgEAgABMDIDBAVD10ADBAVsq4ADBAOi0lAwDAMEA8YpCAMEAcYp DAMEA8zC6AMEA9BD2AMEA9BFIDAXBAIAAjARAwcEJiAAAAzAAwYAJiABGQAwIgYI KwYBBQUHAQgBAf8EEzARoA8wDQICZAUCAnePAgMAj1QwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcqrwPv6U wfg8YdoxXWo9Iy8ToTQYQlvwYDgIxwZKwwpf2pUwFBmounfenmlD9AOxo0pI+dsi uYeXCZ24PNd5pGUZfSb+N3Y4Mljh3y0EGTNeZzrihaT/i1lRQaH+xK5gOUtjyCnE T1xT0OvK9+CMKFh9k+9gPVnuwlnzRbVnyExO6GI3g0MdyBKYxk5EGIfCLZXMUMk0 zPrWPJet8+9EHecD/ocGQIV/KsCfu1syEKi3uiJ48j//Zl4cO+Zt2c5mirmzMFbb SDQJjiaSfFy782b3xyVWQa/tJJzs6Dltvd4GWdiIz5ZS8G70KYCglxednTM9keqz Nu4Aokp/TGdHgQ== -----END CERTIFICATE-----Generated at Sun May 5 01:29:32 2024 by rpki-client on console-ams.rpki-client.org