$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer File: a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer (raw, json) Hash identifier: L7xfeejQt7/JgtQzASZl5U5GfSos3yF/l4D611AZBaA= Subject key identifier: 34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285841E4831599C03540E87CFE4F50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sun 07 Jul 2024 19:06:39 +0000 Subordinate resources: AS: 926 AS: 1018 IP: 23.132.184.0/23 IP: 128.254.204.0/22 IP: 192.138.210.0/23 IP: 192.209.62.0/23 IP: 216.73.156.0/22 IP: 2606:b940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 May 2023 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:15:99:c0:35:40:e8:7c:fe:4f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 15 19:06:39 2023 GMT Not After : Jul 7 19:06:39 2024 GMT Subject: CN=a01e997c-b89e-47c2-8d79-d31e58bc3ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:ab:4c:2c:27:e4:c6:63:7a:06:e5:37:1e: 9d:30:df:62:1e:49:8d:a0:36:47:d7:9f:75:07:da: 2b:11:22:9f:cf:ef:ae:0c:10:0e:93:52:4e:b6:aa: b0:db:e3:b0:6c:50:f0:70:30:95:95:97:06:b2:29: 7c:72:05:61:b1:40:e0:00:13:f0:c9:bb:6d:94:44: 5a:e2:3b:3e:a7:e4:59:15:e1:14:bd:40:5d:17:f5: f3:76:f0:b9:f4:51:70:75:97:b0:67:53:9f:08:b0: 66:95:ca:74:57:bc:d2:09:00:93:33:53:4e:58:aa: d9:0d:bc:70:7f:84:c5:05:e9:5f:59:bf:7d:2c:2a: f9:9b:a5:1e:02:6e:d7:24:d1:3a:02:6b:7c:ce:81: 99:c1:6c:e4:b3:c3:ad:2a:ca:d1:7b:b2:22:96:19: a5:bc:c0:81:86:78:e8:6c:f4:d4:a2:bb:9d:12:29: 2d:1e:76:95:10:ad:6f:09:74:ac:af:50:30:d9:c1: d8:8e:d6:86:57:75:a7:29:b4:5e:49:5a:ad:62:cf: 11:11:9f:8f:46:a7:24:16:e7:fe:f3:88:28:3f:84: e2:b4:75:43:4d:c4:1b:ee:b7:a7:2d:61:24:f1:f9: 6a:b7:55:96:8e:ce:27:f4:a2:e6:3f:d4:5c:f5:c3: ff:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:35:74:15:33:DF:E8:56:5B:FE:7F:0E:91:04:2C:50:B7:C1:A1:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.132.184.0/23 128.254.204.0/22 192.138.210.0/23 192.209.62.0/23 216.73.156.0/22 IPv6: 2606:b940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 926 1018 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:1d:11:8b:08:6f:d4:25:c2:6b:37:8d:77:d3:da:75:6d:22: 00:a3:8a:f8:a2:0c:ca:85:ba:35:33:16:47:1f:7e:b9:90:dc: 35:20:f9:dd:01:d6:7d:29:10:6b:2a:d8:8b:b7:a1:4a:ca:49: e6:52:cd:6c:63:b8:d2:33:5c:1e:78:20:54:15:8e:8f:a7:22: 41:5c:c1:a8:0b:c9:8e:91:d8:a8:e9:da:d7:25:57:c7:b5:2e: 1d:24:ac:88:48:8a:35:1e:99:7f:7c:94:4d:74:4f:09:7e:e0: 7e:d0:e7:5b:dc:d2:89:9c:c8:ba:51:10:59:99:2a:62:f2:e9: 61:d4:ff:22:62:63:f3:e5:f6:65:90:c8:cf:08:45:c3:ba:4f: db:42:e8:dd:f4:54:19:37:98:c2:fa:19:81:6e:6d:bf:0a:8a: 45:f1:a4:8c:05:75:b7:e2:44:4c:e2:3c:05:ad:96:5f:c3:23: 71:18:b4:7a:d3:03:4c:af:4f:62:9e:76:bb:67:ab:7e:ac:a7: 7d:47:36:d2:1c:11:88:f9:17:f5:c1:58:3d:8a:f1:6e:ab:87: cb:98:30:f7:08:5a:0b:f4:3d:96:dd:ab:61:42:ae:47:61:4e: 74:90:71:02:e7:32:f4:6e:ea:ce:5a:7b:7e:48:b9:61:5f:5f: 46:bd:f5:a8 -----BEGIN CERTIFICATE----- MIIHMzCCBhugAwIBAgIUAQ0Mn0MoWEHkgxWZwDVA6Hz+T1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI0MDcwNzE5MDYzOVowLzEtMCsGA1UEAxMk YTAxZTk5N2MtYjg5ZS00N2MyLThkNzktZDMxZTU4YmMzY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns+rTCwn5MZjegblNx6dMN9iHkmNoDZH1591 B9orESKfz++uDBAOk1JOtqqw2+OwbFDwcDCVlZcGsil8cgVhsUDgABPwybttlERa 4js+p+RZFeEUvUBdF/XzdvC59FFwdZewZ1OfCLBmlcp0V7zSCQCTM1NOWKrZDbxw f4TFBelfWb99LCr5m6UeAm7XJNE6Amt8zoGZwWzks8OtKsrRe7IilhmlvMCBhnjo bPTUorudEiktHnaVEK1vCXSsr1Aw2cHYjtaGV3WnKbReSVqtYs8REZ+PRqckFuf+ 84goP4TitHVDTcQb7renLWEk8flqt1WWjs4n9KLmP9Rc9cP/JQIDAQABo4IERTCC BEEwHQYDVR0OBBYEFDQ1dBUz3+hWW/5/DpEELFC3waFsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MDFlOTk3Yy1iODllLTQ3YzItOGQ3OS1kMzFlNThiYzNjYTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04 ZDc5LWQzMWU1OGJjM2NhNC9hMDFlOTk3Yy1iODllLTQ3YzItOGQ3OS1kMzFlNThi YzNjYTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAEXhLgDBAKA/swDBAHAitIDBAHA0T4DBALYSZww DQQCAAIwBwMFACYGuUAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICA54CAgP6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHodEYsIb9Qlwms3jXfT2nVtIgCjiviiDMqFujUzFkcffrmQ3DUg+d0B 1n0pEGsq2Iu3oUrKSeZSzWxjuNIzXB54IFQVjo+nIkFcwagLyY6R2Kjp2tclV8e1 Lh0krIhIijUemX98lE10Twl+4H7Q51vc0omcyLpREFmZKmLy6WHU/yJiY/Pl9mWQ yM8IRcO6T9tC6N30VBk3mML6GYFubb8KikXxpIwFdbfiREziPAWtll/DI3EYtHrT A0yvT2Kedrtnq36sp31HNtIcEYj5F/XBWD2K8W6rh8uYMPcIWgv0PZbdq2FCrkdh TnSQcQLnMvRu6s5ae35IuWFfX0a99ag= -----END CERTIFICATE-----Generated at Mon May 15 19:47:36 2023 by rpki-client on console-fra.rpki-client.org