$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958.cer File: 9696ca72-0d62-4fc3-b383-c596c4f11958.cer (raw, json) Hash identifier: x3cm2TABnNa0SkM04JdM3RvIgA546qCLU1AUldekBjA= Subject key identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858486ABE159DD1A7A0BCFFCA8CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Jan 2025 01:45:34 +0000 Certificate not after: Thu 08 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 3562 IP: 134.252.0.0/16 IP: 146.246.0.0/16 IP: 192.73.208.0/24 IP: 192.160.228.0/24 IP: 198.206.219.0/24 IP: 198.206.221.0/24 IP: 204.238.65.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6a:be:15:9d:d1:a7:a0:bc:ff:ca:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 3 01:45:34 2025 GMT Not After : Apr 8 00:45:34 2027 GMT Subject: CN=9696ca72-0d62-4fc3-b383-c596c4f11958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:52:60:f0:15:27:53:58:66:8f:be:36:f9: 3c:0a:2a:45:c4:df:26:b2:45:6f:e4:5c:d4:44:30: ea:47:25:14:5d:df:a8:00:88:9c:ad:f6:c0:0f:fb: 69:74:73:e9:de:81:ae:ec:fe:c2:b9:72:43:f2:df: ef:b3:8a:9b:56:a7:fc:54:f3:d2:45:53:40:6d:b2: 2c:0b:fa:de:af:4e:df:e1:da:9f:97:30:51:3c:3d: 1c:70:eb:b9:3f:ac:d9:23:fe:5d:d3:81:4c:d6:e9: a7:23:96:7a:8c:f9:db:c5:3c:4b:40:18:c8:72:a2: f6:0a:15:86:6d:37:35:38:ad:d9:85:d3:b3:f0:a5: ae:95:07:02:38:39:95:78:da:ee:34:5f:17:70:d0: f9:df:86:37:a4:6b:06:97:28:47:55:9f:68:2a:97: fb:8a:42:bf:d5:2e:b8:1d:ce:57:23:e7:fb:e7:a3: e4:f6:f4:12:38:ee:f4:bf:27:a6:7f:12:65:14:97: e5:02:c1:ab:df:fa:a1:64:89:7b:29:05:4a:85:33: 78:61:76:c4:27:85:4f:78:21:06:67:3b:a0:03:f9: cd:d7:c0:8c:9a:6a:b0:65:a4:1b:e4:c4:ce:38:07: 0b:d9:15:8f:f5:33:1a:7f:05:53:96:7c:f6:1b:30: 52:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:FC:91:1D:44:AE:0E:73:86:AC:69:79:14:3C:D7:CD:4A:C4:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9696ca72-0d62-4fc3-b383-c596c4f11958/9696ca72-0d62-4fc3-b383-c596c4f11958.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 134.252.0.0/16 146.246.0.0/16 192.73.208.0/24 192.160.228.0/24 198.206.219.0/24 198.206.221.0/24 204.238.65.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3562 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:54:a5:80:34:4a:b5:55:5e:9b:76:c4:17:4d:9e:09:e6:b0: ad:ed:2f:69:bd:9a:dc:75:4a:e8:59:79:80:65:51:39:44:7c: fc:15:e6:81:a9:88:4c:d1:ab:7c:62:20:c2:2c:4d:7a:18:c4: 72:ae:82:35:04:45:c3:2b:38:0e:6b:db:71:50:aa:45:0b:4d: 5e:8d:b3:2a:e8:f4:df:66:a0:2f:f0:27:12:85:36:46:f3:b2: 3f:5b:7d:71:34:5b:05:01:12:bc:f7:5c:c2:64:c2:00:28:7a: 78:00:cb:a4:af:79:01:9c:14:e9:68:38:11:ef:ce:f4:8f:1a: 56:b2:9d:5c:c8:f5:72:c5:85:2f:84:ab:0d:96:c2:21:d4:f8: 32:a5:20:16:6a:12:78:1a:8f:3e:ec:1b:f2:2d:3c:a6:60:b7: 19:f3:68:24:86:97:d7:70:47:c8:42:52:39:8c:a4:2e:c2:2b: d0:12:7e:1f:b5:d4:ca:52:54:41:d7:cc:90:79:b8:f1:3c:97: 08:5d:f0:55:c2:56:5b:ab:bf:2b:92:81:29:e3:82:cb:f9:cb: d0:b0:61:ae:76:35:24:c5:24:a2:de:d8:64:1c:63:09:1c:41: a6:a6:5a:4a:f1:24:05:8c:9e:b8:91:23:11:84:2c:a7:88:f1: 70:cd:c8:dc -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEhqvhWd0aegvP/KjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDEwMzAxNDUzNFoXDTI3MDQwODAwNDUzNFowLzEtMCsGA1UEAxMk OTY5NmNhNzItMGQ2Mi00ZmMzLWIzODMtYzU5NmM0ZjExOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K1SYPAVJ1NYZo++Nvk8CipFxN8mskVv5FzU RDDqRyUUXd+oAIicrfbAD/tpdHPp3oGu7P7CuXJD8t/vs4qbVqf8VPPSRVNAbbIs C/rer07f4dqflzBRPD0ccOu5P6zZI/5d04FM1umnI5Z6jPnbxTxLQBjIcqL2ChWG bTc1OK3ZhdOz8KWulQcCODmVeNruNF8XcND534Y3pGsGlyhHVZ9oKpf7ikK/1S64 Hc5XI+f756Pk9vQSOO70vyemfxJlFJflAsGr3/qhZIl7KQVKhTN4YXbEJ4VPeCEG ZzugA/nN18CMmmqwZaQb5MTOOAcL2RWP9TMafwVTlnz2GzBSYQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFC5V/JEdRK4Oc4asaXkUPNfNSsQDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 Njk2Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2YzRmMTE5NTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk2OTZjYTcyLTBkNjItNGZjMy1i MzgzLWM1OTZjNGYxMTk1OC85Njk2Y2E3Mi0wZDYyLTRmYzMtYjM4My1jNTk2YzRm MTE5NTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMC4EAgABMCgDAwCG/AMDAJL2AwQAwEnQAwQAwKDkAwQAxs7bAwQA xs7dAwQAzO5BMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAg3qMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACpU pYA0SrVVXpt2xBdNngnmsK3tL2m9mtx1SuhZeYBlUTlEfPwV5oGpiEzRq3xiIMIs TXoYxHKugjUERcMrOA5r23FQqkULTV6Nsyro9N9moC/wJxKFNkbzsj9bfXE0WwUB Erz3XMJkwgAoengAy6SveQGcFOloOBHvzvSPGlaynVzI9XLFhS+Eqw2WwiHU+DKl IBZqEngajz7sG/ItPKZgtxnzaCSGl9dwR8hCUjmMpC7CK9ASfh+11MpSVEHXzJB5 uPE8lwhd8FXCVlurvyuSgSnjgsv5y9CwYa52NSTFJKLe2GQcYwkcQaamWkrxJAWM nriRIxGELKeI8XDNyNw= -----END CERTIFICATE-----Generated at Mon Jan 20 02:26:13 2025 by rpki-client on console-fra.rpki-client.org