$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.cer File: 9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.cer (raw, json) Hash identifier: jg4ib67JbsIYOxEYy+FuKswvyyFk1kOI4BB9eL2X7/E= Subject key identifier: 8D:D4:37:3B:88:29:65:6B:C0:50:0B:AA:B0:8E:D8:67:0B:E4:F3:F9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858484C088D2015036179F513EE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Dec 2024 01:45:33 +0000 Certificate not after: Sun 28 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 63251 IP: 64.237.96.0/22 IP: 104.245.52.0/22 IP: 137.83.28.0/23 IP: 148.59.42.0/24 IP: 161.38.255.0/24 IP: 192.139.135.0/24 IP: 204.152.129.0/24 IP: 216.250.244.0/23 IP: 2605:c680::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4c:08:8d:20:15:03:61:79:f5:13:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 23 01:45:33 2024 GMT Not After : Mar 28 00:45:33 2027 GMT Subject: CN=9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:32:88:27:68:64:bb:13:91:c1:41:f4:2f:d9: b3:93:87:73:87:5f:b6:32:9d:64:57:7d:a5:4d:4c: 03:16:c4:1f:d8:78:93:87:fd:1b:98:6c:fa:08:3d: bf:48:84:be:5d:69:96:a3:43:86:76:cf:d1:1d:da: 73:af:f1:fd:fe:b9:36:c3:57:24:db:7f:31:20:9b: 4f:8b:67:33:b6:d4:42:71:55:b2:c7:f3:32:06:70: 88:6a:9a:94:5d:45:b5:e8:46:43:5f:42:c3:54:f3: 49:84:75:5b:69:fc:b5:3e:12:5c:e4:8d:cc:02:78: 13:1c:18:2c:e1:ee:d6:aa:53:9c:77:5a:db:01:cd: bf:58:af:3a:11:0c:dd:de:41:98:56:f1:2a:cc:da: 7f:c6:77:6b:2b:cb:3c:63:b2:e1:66:36:24:df:e7: 8d:08:66:fe:31:99:0a:91:e7:8d:f6:e8:ce:27:19: c9:3e:c0:ca:9a:4e:43:3b:23:fc:b7:c8:15:ec:c3: af:25:04:76:60:4f:dd:bd:30:eb:94:40:4d:82:dc: 4b:77:f3:03:7e:30:d1:be:60:8c:e1:91:80:fc:41: d4:15:01:6d:e4:81:f0:86:66:62:1a:f8:13:d4:ef: b8:f6:78:a6:59:b6:a0:7b:e4:3b:87:e4:4d:da:e6: 25:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:37:3B:88:29:65:6B:C0:50:0B:AA:B0:8E:D8:67:0B:E4:F3:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3/9a62b9ec-20ea-43fc-8f7e-db2c82e41eb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.237.96.0/22 104.245.52.0/22 137.83.28.0/23 148.59.42.0/24 161.38.255.0/24 192.139.135.0/24 204.152.129.0/24 216.250.244.0/23 IPv6: 2605:c680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63251 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:a2:26:33:ae:aa:00:ea:d0:a0:a5:e7:2e:5f:c8:87:6d:2a: a5:ce:08:cd:d8:03:71:9c:8f:f9:69:11:f8:73:f9:b9:c5:6f: df:5c:65:c0:e5:cd:39:60:98:a1:87:b2:86:91:8b:ca:a2:5e: 91:a7:33:5b:f2:38:06:2d:f0:9c:c1:bc:f0:19:11:e7:30:37: cf:37:eb:e5:50:3e:5e:f0:bf:77:a0:5e:d4:86:83:45:29:4d: 5e:2b:98:f5:0b:fa:69:54:e2:dc:e5:fc:20:70:5f:9f:5c:83: 34:2f:b9:05:77:bf:17:34:2f:ed:d5:32:60:02:f9:48:03:69: fb:6a:8a:28:7a:ba:3c:c9:37:05:bd:df:2e:cf:5f:81:ed:14: 15:93:43:1b:24:a7:87:b7:70:54:51:9b:af:98:78:ce:3f:49: 89:89:6e:0f:1a:ca:26:69:c4:e3:ee:f5:b4:fa:ac:5a:c2:f6: f6:9a:49:68:6d:e8:77:1f:e4:9c:20:b9:9b:fa:bc:5d:2f:d6: 1a:2b:6e:be:5e:59:aa:6b:21:8e:dd:d8:56:6e:e0:f9:22:18: 56:a6:92:f4:23:19:f6:05:4d:1f:9c:3a:4f:89:96:90:82:7c: b8:8b:2b:89:ea:4a:c7:03:85:aa:09:15:65:23:35:ce:6d:b0: 1a:2e:bb:9e -----BEGIN CERTIFICATE----- MIIHQjCCBiqgAwIBAgIUAQ0Mn0MoWEhMCI0gFQNhefUT7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTIyMzAxNDUzM1oXDTI3MDMyODAwNDUzM1owLzEtMCsGA1UEAxMk OWE2MmI5ZWMtMjBlYS00M2ZjLThmN2UtZGIyYzgyZTQxZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTKIJ2hkuxORwUH0L9mzk4dzh1+2Mp1kV32l TUwDFsQf2HiTh/0bmGz6CD2/SIS+XWmWo0OGds/RHdpzr/H9/rk2w1ck238xIJtP i2czttRCcVWyx/MyBnCIapqUXUW16EZDX0LDVPNJhHVbafy1PhJc5I3MAngTHBgs 4e7WqlOcd1rbAc2/WK86EQzd3kGYVvEqzNp/xndrK8s8Y7LhZjYk3+eNCGb+MZkK keeN9ujOJxnJPsDKmk5DOyP8t8gV7MOvJQR2YE/dvTDrlEBNgtxLd/MDfjDRvmCM 4ZGA/EHUFQFt5IHwhmZiGvgT1O+49nimWbage+Q7h+RN2uYlXwIDAQABo4IEVDCC BFAwHQYDVR0OBBYEFI3UNzuIKWVrwFALqrCO2GcL5PP5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 YTYyYjllYy0yMGVhLTQzZmMtOGY3ZS1kYjJjODJlNDFlYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzlhNjJiOWVjLTIwZWEtNDNmYy04 ZjdlLWRiMmM4MmU0MWViMy85YTYyYjllYy0yMGVhLTQzZmMtOGY3ZS1kYjJjODJl NDFlYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwWAYIKwYBBQUH AQcBAf8ESTBHMDYEAgABMDADBAJA7WADBAJo9TQDBAGJUxwDBACUOyoDBAChJv8D BADAi4cDBADMmIEDBAHY+vQwDQQCAAIwBwMFACYFxoAwGgYIKwYBBQUHAQgBAf8E CzAJoAcwBQIDAPcTMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACKiJjOuqgDq0KCl5y5fyIdtKqXOCM3YA3Gc j/lpEfhz+bnFb99cZcDlzTlgmKGHsoaRi8qiXpGnM1vyOAYt8JzBvPAZEecwN883 6+VQPl7wv3egXtSGg0UpTV4rmPUL+mlU4tzl/CBwX59cgzQvuQV3vxc0L+3VMmAC +UgDaftqiih6ujzJNwW93y7PX4HtFBWTQxskp4e3cFRRm6+YeM4/SYmJbg8ayiZp xOPu9bT6rFrC9vaaSWht6Hcf5JwguZv6vF0v1horbr5eWaprIY7d2FZu4PkiGFam kvQjGfYFTR+cOk+JlpCCfLiLK4nqSscDhaoJFWUjNc5tsBouu54= -----END CERTIFICATE-----Generated at Sun Jan 12 17:03:18 2025 by rpki-client on console-ams.rpki-client.org