$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5.cer File: 91c894d6-b991-4966-bec4-7c58dac779b5.cer (raw, json) Hash identifier: zop0Hl+dU9v26ULFVi+ntbiZfIZeSNeLm+eM+tJf4Dc= Subject key identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285846BF7D8E13ECB6A6AB8F3F8800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 Aug 2024 00:45:23 +0000 Certificate not after: Fri 06 Nov 2026 01:45:23 +0000 Subordinate resources: AS: 27537 IP: 199.87.144.0/21 IP: 204.11.192.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:bf:7d:8e:13:ec:b6:a6:ab:8f:3f:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 3 00:45:23 2024 GMT Not After : Nov 6 01:45:23 2026 GMT Subject: CN=91c894d6-b991-4966-bec4-7c58dac779b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:42:f2:d7:fb:8d:a4:90:b2:3d:15:ea:13:68: 19:3c:47:fb:0b:4a:88:c4:d1:0f:6a:16:0c:6c:69: 52:2f:68:bb:6b:25:85:7b:62:fb:c3:39:cd:f1:49: fb:0d:47:4b:aa:fb:e1:de:55:98:81:a6:b9:e1:51: 89:d8:b4:2d:05:17:a2:d8:21:61:6b:0b:d1:7a:e7: 0f:a6:6e:b0:64:2f:3a:7e:60:4e:71:26:5e:0e:8a: 0b:01:a9:25:27:fc:41:11:7d:22:90:4e:b4:3e:20: 28:c0:53:d3:df:a2:22:cb:62:5e:4b:29:50:b7:59: 81:ce:43:63:e5:63:4b:e2:8d:8b:7e:3f:0f:fa:5c: 34:4e:f8:0d:bd:f4:5a:cb:f4:28:b8:57:b7:a7:34: 42:e4:4b:95:9e:62:7b:0f:8a:29:64:8d:c1:c8:20: bf:92:9d:ad:c9:47:6c:85:a6:cb:89:92:3e:1a:04: 17:06:26:a3:b9:66:a6:cf:f5:9f:62:c2:17:25:15: 45:a1:31:8b:4e:6f:22:68:50:64:8a:fe:70:20:91: e6:13:ba:83:94:b6:a6:62:8a:14:f5:a8:ec:59:e7: 05:6f:9c:fa:cd:16:b8:10:fa:a7:3c:56:73:ca:80: 5f:a7:24:e0:4f:b4:b6:75:c1:7e:f4:f2:f7:59:3d: c6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B2:2C:28:79:5A:A5:CA:BB:C0:79:BF:76:C3:D6:8B:67:23:7B:C2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/91c894d6-b991-4966-bec4-7c58dac779b5/91c894d6-b991-4966-bec4-7c58dac779b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 199.87.144.0/21 204.11.192.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27537 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:81:ce:ae:cb:90:4d:03:43:0c:69:a9:c7:97:dd:fb:21:0d: 81:32:1b:20:16:b0:c4:24:fe:47:5f:04:88:2d:1c:ee:a5:12: 71:d7:62:a1:81:e1:6c:2f:c6:89:bf:b3:11:08:4d:85:6b:3f: de:5d:40:6f:a7:c5:4e:26:d1:fe:74:16:7f:c5:c3:9d:32:49: 39:44:80:1d:09:6e:c1:28:a6:7b:6f:1e:52:6e:bd:17:22:a0: 31:9c:5d:ed:e9:58:7f:84:7d:1c:8f:d3:6e:9e:19:43:b8:38: d7:f0:40:80:c7:6f:33:17:32:c3:e4:fe:16:89:69:60:0d:8c: e5:b0:d5:06:59:b7:e0:47:6a:69:73:cd:00:f9:39:aa:14:d9: 3a:a8:02:3f:09:6b:90:14:51:bf:30:5b:ed:47:74:cd:fd:c2: a5:5c:3e:5d:b7:2e:db:e0:bc:3d:f9:c5:b4:d5:7b:3f:25:6e: 5e:78:09:1d:e1:9e:d1:ca:a4:76:67:2a:62:00:2e:e8:79:71: cc:4e:f2:4d:93:0d:3f:6c:62:c0:33:bf:2a:90:3a:2b:3f:57: 42:0e:25:5c:82:1f:75:87:fa:8c:d3:5b:c7:13:d9:23:e0:30: 35:be:11:ae:72:48:bc:55:24:38:d1:6f:ab:9d:62:ec:5b:23: b5:90:da:3a -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEa/fY4T7Lamq48/iAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDgwMzAwNDUyM1oXDTI2MTEwNjAxNDUyM1owLzEtMCsGA1UEAxMk OTFjODk0ZDYtYjk5MS00OTY2LWJlYzQtN2M1OGRhYzc3OWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ULy1/uNpJCyPRXqE2gZPEf7C0qIxNEPahYM bGlSL2i7ayWFe2L7wznN8Un7DUdLqvvh3lWYgaa54VGJ2LQtBRei2CFhawvReucP pm6wZC86fmBOcSZeDooLAaklJ/xBEX0ikE60PiAowFPT36Iiy2JeSylQt1mBzkNj 5WNL4o2Lfj8P+lw0TvgNvfRay/QouFe3pzRC5EuVnmJ7D4opZI3ByCC/kp2tyUds habLiZI+GgQXBiajuWamz/WfYsIXJRVFoTGLTm8iaFBkiv5wIJHmE7qDlLamYooU 9ajsWecFb5z6zRa4EPqnPFZzyoBfpyTgT7S2dcF+9PL3WT3G8wIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFBOyLCh5WqXKu8B5v3bD1otnI3vCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFjNzc5YjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzkxYzg5NGQ2LWI5OTEtNDk2Ni1i ZWM0LTdjNThkYWM3NzliNS85MWM4OTRkNi1iOTkxLTQ5NjYtYmVjNC03YzU4ZGFj Nzc5YjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAPHV5ADBALMC8AwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICa5EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAT4HOrsuQTQNDDGmpx5fd+yENgTIbIBawxCT+R18E iC0c7qUScddioYHhbC/Gib+zEQhNhWs/3l1Ab6fFTibR/nQWf8XDnTJJOUSAHQlu wSime28eUm69FyKgMZxd7elYf4R9HI/Tbp4ZQ7g41/BAgMdvMxcyw+T+FolpYA2M 5bDVBlm34EdqaXPNAPk5qhTZOqgCPwlrkBRRvzBb7Ud0zf3CpVw+Xbcu2+C8PfnF tNV7PyVuXngJHeGe0cqkdmcqYgAu6HlxzE7yTZMNP2xiwDO/KpA6Kz9XQg4lXIIf dYf6jNNbxxPZI+AwNb4RrnJIvFUkONFvq51i7FsjtZDaOg== -----END CERTIFICATE-----Generated at Thu Nov 21 15:42:57 2024 by rpki-client on console-fra.rpki-client.org