$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer File: a062a219-9ee8-48a3-897a-8410b6da94a1.cer (raw, json) Hash identifier: iSUk9kBmrR7+UEdQxHoZAQPDLS5MX7K3ofrGsQ7VzkA= Subject key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285842A5CC4DB0ED22B5C37795FE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Jul 2023 00:45:17 +0000 Certificate not after: Sun 26 Oct 2025 00:45:17 +0000 Subordinate resources: AS: 803 AS: 26501 AS: 399844 IP: 64.110.192.0/18 IP: 64.201.192.0/19 IP: 67.225.0.0/17 IP: 68.69.192.0/19 IP: 69.11.0.0/17 IP: 71.17.0.0/16 IP: 74.113.12.0/22 IP: 96.125.240.0/20 IP: 104.152.28.0/22 IP: 104.219.8.0/22 IP: 104.255.48.0/22 IP: 108.60.160.0/19 IP: 108.160.16.0/20 IP: 108.174.160.0/20 IP: 142.164.0.0/16 IP: 162.253.8.0/22 IP: 192.34.224.0/21 IP: 198.245.112.0/20 IP: 199.26.190.0/23 IP: 199.189.88.0/21 IP: 206.163.224.0/19 IP: 207.47.128.0/17 IP: 216.126.200.0/22 IP: 216.174.128.0/19 IP: 216.197.128.0/17 IP: 2604:1e80::/32 IP: 2607:f4a8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:a5:cc:4d:b0:ed:22:b5:c3:77:95:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 24 00:45:17 2023 GMT Not After : Oct 26 00:45:17 2025 GMT Subject: CN=a062a219-9ee8-48a3-897a-8410b6da94a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c2:8b:ad:81:8d:6b:79:98:f6:db:03:6e:6f: b1:64:8a:1d:d7:f9:cb:56:75:2d:e1:9a:e4:12:d2: 70:02:bb:98:1a:93:61:74:f7:3d:73:21:f8:17:d1: 66:9b:0c:7b:16:79:06:ea:dc:8d:99:d9:f8:8e:e9: 2b:a4:1b:ad:07:ba:53:c0:c3:cd:e2:4b:39:38:fc: d6:bd:1e:b4:19:52:de:c3:ee:58:bd:f6:5d:78:61: f7:e3:86:bf:84:d3:8a:9c:09:88:8f:dd:5c:60:77: 53:ca:31:67:ef:11:68:0a:a3:50:7b:80:4d:39:77: 96:da:d8:b3:f8:1c:1d:a5:e1:6d:5f:52:7a:6c:9f: 18:11:19:8b:4d:0d:3a:7c:64:cc:b2:ce:43:f1:b3: 0a:21:13:ca:97:e6:c1:c1:01:45:6b:e2:04:0c:7a: 49:dd:d7:66:ce:73:42:19:40:0c:d7:1f:6e:36:38: cf:d0:c8:fd:2b:21:a9:98:8c:33:b6:5f:92:58:1c: b2:b0:5a:f8:44:6c:55:aa:d0:1a:fa:f4:75:e2:7f: 73:10:23:e4:00:92:f2:fe:22:ca:34:a0:82:6c:2d: 4e:0f:14:b8:c3:eb:82:7c:80:51:52:c6:88:4d:81: 7c:dd:19:d5:a6:a9:fa:9e:ec:49:6a:9d:92:89:6a: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.110.192.0/18 64.201.192.0/19 67.225.0.0/17 68.69.192.0/19 69.11.0.0/17 71.17.0.0/16 74.113.12.0/22 96.125.240.0/20 104.152.28.0/22 104.219.8.0/22 104.255.48.0/22 108.60.160.0/19 108.160.16.0/20 108.174.160.0/20 142.164.0.0/16 162.253.8.0/22 192.34.224.0/21 198.245.112.0/20 199.26.190.0/23 199.189.88.0/21 206.163.224.0/19 207.47.128.0/17 216.126.200.0/22 216.174.128.0/19 216.197.128.0/17 IPv6: 2604:1e80::/32 2607:f4a8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 803 26501 399844 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:61:8f:65:a0:78:43:a5:0b:78:bb:38:e5:85:a5:63:80:eb: 07:63:29:63:97:82:9a:18:5d:d8:4f:85:9a:da:bd:7f:2d:85: 6b:13:b8:57:70:f6:2a:ec:12:fe:74:ac:fe:a8:95:0f:84:bb: 7b:fd:f8:ee:2b:db:cc:12:cc:8d:33:fe:c4:95:3f:3b:d3:e8: 38:8d:9b:d9:52:10:14:59:85:00:a8:f2:c2:78:41:d2:a0:8d: 8e:56:9c:8a:f8:62:7c:5f:91:dd:36:ac:58:26:8d:f8:bf:1e: d1:61:9d:0c:de:e5:b8:5e:08:72:3b:70:b9:32:fe:4d:d0:93: c8:f3:ab:71:19:fa:e7:8d:9c:b6:ac:65:96:8a:cc:73:be:97: 70:db:a0:5d:2a:88:05:b3:0b:e1:73:69:e0:4d:9a:a4:73:64: 27:de:48:15:5b:79:8d:39:bd:c9:72:bb:0f:21:a4:dd:8a:b8: f8:05:b9:28:83:ec:9e:6c:74:fd:39:8f:2a:ef:bd:96:fc:d6: ec:4e:c8:a2:53:98:e5:73:d6:00:60:4f:eb:69:a2:d7:32:1e: 44:54:99:a8:9e:2c:82:c1:2e:e8:b1:f5:43:c8:01:00:71:37: 88:f4:ea:f4:2b:f2:9c:f8:06:26:d4:fe:9c:b2:fa:37:66:57: 97:06:bb:cf -----BEGIN CERTIFICATE----- MIIHujCCBqKgAwIBAgIUAQ0Mn0MoWEKlzE2w7SK1w3eV/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDcyNDAwNDUxN1oXDTI1MTAyNjAwNDUxN1owLzEtMCsGA1UEAxMk YTA2MmEyMTktOWVlOC00OGEzLTg5N2EtODQxMGI2ZGE5NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssKLrYGNa3mY9tsDbm+xZIod1/nLVnUt4Zrk EtJwAruYGpNhdPc9cyH4F9Fmmwx7FnkG6tyNmdn4jukrpButB7pTwMPN4ks5OPzW vR60GVLew+5YvfZdeGH344a/hNOKnAmIj91cYHdTyjFn7xFoCqNQe4BNOXeW2tiz +BwdpeFtX1J6bJ8YERmLTQ06fGTMss5D8bMKIRPKl+bBwQFFa+IEDHpJ3ddmznNC GUAM1x9uNjjP0Mj9KyGpmIwztl+SWByysFr4RGxVqtAa+vR14n9zECPkAJLy/iLK NKCCbC1ODxS4w+uCfIBRUsaITYF83RnVpqn6nuxJap2SiWovaQIDAQABo4IEzDCC BMgwHQYDVR0OBBYEFBQoJ2YFnSSgtPKID++p7ODpboYYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZkYTk0YTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwNjJhMjE5LTllZTgtNDhhMy04 OTdhLTg0MTBiNmRhOTRhMS9hMDYyYTIxOS05ZWU4LTQ4YTMtODk3YS04NDEwYjZk YTk0YTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgccGCCsGAQUF BwEHAQH/BIG3MIG0MIGbBAIAATCBlAMEBkBuwAMEBUDJwAMEB0PhAAMEBURFwAME B0ULAAMDAEcRAwQCSnEMAwQEYH3wAwQCaJgcAwQCaNsIAwQCaP8wAwQFbDygAwQE bKAQAwQEbK6gAwMAjqQDBAKi/QgDBAPAIuADBATG9XADBAHHGr4DBAPHvVgDBAXO o+ADBAfPL4ADBALYfsgDBAXYroADBAfYxYAwFAQCAAIwDgMFACYEHoADBQAmB/So MCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAgMjAgJnhQIDBhnkMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADph j2WgeEOlC3i7OOWFpWOA6wdjKWOXgpoYXdhPhZravX8thWsTuFdw9irsEv50rP6o lQ+Eu3v9+O4r28wSzI0z/sSVPzvT6DiNm9lSEBRZhQCo8sJ4QdKgjY5WnIr4Ynxf kd02rFgmjfi/HtFhnQze5bheCHI7cLky/k3Qk8jzq3EZ+ueNnLasZZaKzHO+l3Db oF0qiAWzC+FzaeBNmqRzZCfeSBVbeY05vclyuw8hpN2KuPgFuSiD7J5sdP05jyrv vZb81uxOyKJTmOVz1gBgT+tpotcyHkRUmaieLILBLuix9UPIAQBxN4j06vQr8pz4 BibU/pyy+jdmV5cGu88= -----END CERTIFICATE-----Generated at Fri Apr 19 19:33:12 2024 by rpki-client on console-ams.rpki-client.org