$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf.cer File: a0681e00-1b53-485f-876c-41a972c98adf.cer (raw, json) Hash identifier: BCvaoyOK5HF5jww4mMsvm6YW/VmMAN7EvptfGnkpBRs= Subject key identifier: E1:4B:16:75:3A:5F:74:51:A8:9D:9E:D2:D0:F2:6E:C8:91:D3:E3:F4 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858474849185E80B07ED08EF58220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf/a0681e00-1b53-485f-876c-41a972c98adf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Sep 2024 00:45:26 +0000 Certificate not after: Fri 25 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 53942 IP: 64.38.108.0/23 IP: 199.189.128.0/22 IP: 207.229.106.0/23 IP: 2607:7fc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:48:49:18:5e:80:b0:7e:d0:8e:f5:82:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 21 00:45:26 2024 GMT Not After : Dec 25 01:45:26 2026 GMT Subject: CN=a0681e00-1b53-485f-876c-41a972c98adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:09:0a:0d:13:3b:84:04:6a:93:c4:d5:0c:b2: 72:07:1e:4e:de:8c:ad:fe:0f:2b:28:d5:e0:bd:32: 73:ba:7b:38:b5:f7:71:dc:1e:2e:31:01:15:1f:7b: fa:ff:f9:ad:b2:cd:f5:9e:a9:65:b3:26:1f:34:14: b4:6a:89:e9:1b:30:ec:03:46:08:49:50:f9:31:84: 45:5c:5d:d1:f8:b0:90:0c:ca:07:4b:2a:07:34:f5: 38:97:66:56:a8:d2:c9:12:08:0f:5e:ef:0d:81:3a: 99:b7:1b:ef:ca:d1:2f:7e:8c:4d:c1:12:17:ba:5a: 45:66:50:3d:91:0b:ba:45:2e:bd:c2:8e:ca:62:50: 94:d6:dd:a3:41:ad:14:93:a7:d6:4b:62:b4:40:5a: 60:e5:9f:f4:a6:71:f5:43:7c:a5:b8:5b:c3:7b:a3: 6e:20:77:26:0c:3b:c6:3b:1d:ff:77:ec:59:8e:26: af:61:91:cf:e6:da:7a:9c:49:76:8b:f9:5a:be:c7: 81:e9:96:ab:f7:4a:61:ac:20:d8:01:8b:14:c6:12: a3:35:89:60:12:f8:df:9e:f8:fd:38:62:83:96:85: 46:2f:b5:75:c4:40:2f:8c:24:ab:f6:6d:ac:3f:35: 7b:d8:73:2d:eb:ec:2c:32:5d:7c:48:78:7d:3c:02: a8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4B:16:75:3A:5F:74:51:A8:9D:9E:D2:D0:F2:6E:C8:91:D3:E3:F4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a0681e00-1b53-485f-876c-41a972c98adf/a0681e00-1b53-485f-876c-41a972c98adf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.38.108.0/23 199.189.128.0/22 207.229.106.0/23 IPv6: 2607:7fc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53942 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:23:a9:ee:08:3d:ec:d5:84:b8:65:ac:23:e4:b3:c8:d7:85: be:eb:27:1a:3a:87:cb:a7:03:88:40:92:ed:26:14:76:aa:97: 41:bf:c2:1d:83:e7:b1:db:4f:b0:27:a5:33:11:2a:db:b4:90: c3:4d:92:2b:c9:1d:f4:a5:90:f1:05:c1:02:09:1f:8f:97:db: 3c:cc:6d:47:ff:0f:c9:a5:2a:c7:75:17:58:8f:16:f4:cf:a8: bd:70:67:57:f5:45:a7:27:4f:a2:68:94:13:ff:ae:6b:46:65: d9:d3:db:67:37:ae:70:44:3c:f9:d8:0d:9d:2f:ae:3e:a8:d1: b1:1e:13:06:1a:1b:16:1b:3a:86:85:c2:1b:fd:71:b4:6a:f6: 7d:ea:66:8b:bd:a0:4b:3d:96:fe:b7:b2:31:0e:d9:65:8f:80: 71:5f:cc:7e:7e:b4:3a:c9:c1:d4:6e:0f:93:9f:85:a8:72:0a: 95:7b:1f:10:be:8e:d7:e2:2a:22:0a:a8:d0:1a:dd:04:ca:8f: 0d:11:b6:4e:20:39:7f:7f:55:d4:7d:2e:8e:a5:71:33:5b:bf: 4e:bd:31:95:a4:aa:58:83:66:04:6b:4b:2f:d2:f3:fb:3a:0c: aa:4d:5d:aa:63:49:b7:8c:c1:3d:86:56:be:b3:b9:40:24:9e: fc:fc:5e:7c -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEdISRhegLB+0I71giAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDkyMTAwNDUyNloXDTI2MTIyNTAxNDUyNlowLzEtMCsGA1UEAxMk YTA2ODFlMDAtMWI1My00ODVmLTg3NmMtNDFhOTcyYzk4YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgkKDRM7hARqk8TVDLJyBx5O3oyt/g8rKNXg vTJzuns4tfdx3B4uMQEVH3v6//mtss31nqllsyYfNBS0aonpGzDsA0YISVD5MYRF XF3R+LCQDMoHSyoHNPU4l2ZWqNLJEggPXu8NgTqZtxvvytEvfoxNwRIXulpFZlA9 kQu6RS69wo7KYlCU1t2jQa0Uk6fWS2K0QFpg5Z/0pnH1Q3yluFvDe6NuIHcmDDvG Ox3/d+xZjiavYZHP5tp6nEl2i/lavseB6Zar90phrCDYAYsUxhKjNYlgEvjfnvj9 OGKDloVGL7V1xEAvjCSr9m2sPzV72HMt6+wsMl18SHh9PAKoAwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFOFLFnU6X3RRqJ2e0tDybsiR0+P0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MDY4MWUwMC0xYjUzLTQ4NWYtODc2Yy00MWE5NzJjOThhZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EwNjgxZTAwLTFiNTMtNDg1Zi04 NzZjLTQxYTk3MmM5OGFkZi9hMDY4MWUwMC0xYjUzLTQ4NWYtODc2Yy00MWE5NzJj OThhZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAFAJmwDBALHvYADBAHP5WowDQQCAAIwBwMFACYH f8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANK2MFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABEjqe4IPezV hLhlrCPks8jXhb7rJxo6h8unA4hAku0mFHaql0G/wh2D57HbT7AnpTMRKtu0kMNN kivJHfSlkPEFwQIJH4+X2zzMbUf/D8mlKsd1F1iPFvTPqL1wZ1f1RacnT6JolBP/ rmtGZdnT22c3rnBEPPnYDZ0vrj6o0bEeEwYaGxYbOoaFwhv9cbRq9n3qZou9oEs9 lv63sjEO2WWPgHFfzH5+tDrJwdRuD5OfhahyCpV7HxC+jtfiKiIKqNAa3QTKjw0R tk4gOX9/VdR9Lo6lcTNbv069MZWkqliDZgRrSy/S8/s6DKpNXapjSbeMwT2GVr6z uUAknvz8Xnw= -----END CERTIFICATE-----Generated at Thu Nov 21 15:43:00 2024 by rpki-client on console-fra.rpki-client.org