$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer File: a3049800-ff17-49a6-b029-ec908e1c7cb3.cer (raw, json) Hash identifier: 5uMWdv9zzz7oDzNQChULlMXGznbj+mzCMmX0VqTAs3M= Subject key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843BFC361B138E27EECD04E1B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Nov 2023 00:45:16 +0000 Certificate not after: Wed 04 Feb 2026 01:45:16 +0000 Subordinate resources: AS: 20150 IP: 45.59.112.0/20 IP: 66.23.192.0/21 IP: 104.36.80.0/21 IP: 130.51.40.0/22 IP: 216.126.224.0/20 IP: 2604:4ac0::/32 IP: 2604:4cc0::/32 IP: 2604:4d40::/32 IP: 2604:4fc0::/32 IP: 2604:5040::/32 IP: 2604:50c0::/32 IP: 2604:6a40::/32 IP: 2605:7980::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:bf:c3:61:b1:38:e2:7e:ec:d0:4e:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 2 00:45:16 2023 GMT Not After : Feb 4 01:45:16 2026 GMT Subject: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e1:44:0e:b5:8d:9c:c7:1e:cb:7a:27:9d:31: 73:2b:bf:8e:98:26:dd:23:ca:ce:98:00:12:07:c9: 67:7e:88:a2:76:96:c6:66:a9:8e:09:e3:91:69:4e: 76:88:74:01:0f:3b:49:a4:f4:e4:87:5a:6a:52:da: fd:79:04:89:67:1c:19:30:81:ac:20:da:88:64:9c: 0c:86:d5:2f:d7:d2:d0:0d:24:02:03:35:55:08:b3: 57:d5:51:d7:26:ea:eb:12:72:00:23:af:26:99:9a: b0:7a:26:3e:ab:e6:c0:1b:26:b8:b8:76:00:68:40: 47:0f:e1:5b:ae:28:9f:0e:e4:fe:04:38:62:af:1e: d2:a9:02:f5:32:9e:99:51:21:34:e6:73:cb:52:13: fe:ea:61:7f:80:ac:6c:cf:c5:30:7a:ea:27:e4:cd: 13:e0:58:3d:80:5c:26:c2:65:6b:e2:6b:2d:71:05: b3:00:d3:d8:c3:09:90:79:2e:e5:a3:77:c8:f1:14: 45:79:dc:7d:ce:52:69:c0:a9:2a:e0:d6:56:13:6e: f2:be:02:93:f5:97:f0:5b:74:32:d7:ae:54:77:2d: 47:e2:ca:f5:ba:14:71:df:8c:8e:6d:50:bd:11:17: 41:dc:a8:7f:71:eb:9a:e4:f4:23:25:a5:c5:f0:d7: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.59.112.0/20 66.23.192.0/21 104.36.80.0/21 130.51.40.0/22 216.126.224.0/20 IPv6: 2604:4ac0::/32 2604:4cc0::/32 2604:4d40::/32 2604:4fc0::/32 2604:5040::/32 2604:50c0::/32 2604:6a40::/32 2605:7980::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20150 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:87:08:96:e4:95:63:2b:d0:72:02:94:ad:a2:7a:03:1a:98: 16:cc:2c:1d:4b:5a:e0:6f:fb:a1:bd:01:b8:ae:f4:89:49:9f: 2f:03:05:a0:52:03:a0:ec:ad:38:26:cd:a4:3e:c6:f0:f3:7d: 73:a1:02:78:a4:71:39:d8:3c:20:29:32:41:2b:05:d7:94:fe: d4:84:91:0e:92:80:df:88:62:1c:e5:2d:92:42:e1:ea:d7:c4: 84:97:f6:ea:a5:9d:4b:d1:b6:95:70:10:70:42:aa:a9:12:c9: 92:42:c7:fa:9e:6b:dd:c1:bc:e5:bc:67:20:e7:3e:d2:09:b8: cf:b2:77:05:a8:10:6f:19:38:9b:dc:2e:d0:73:6b:eb:17:73: 92:a4:cd:9f:d1:20:86:ce:ac:55:7b:9f:96:99:0c:6e:c8:c9: c4:99:eb:94:e8:d5:86:ac:be:da:87:44:20:d0:87:2f:83:18: 34:7b:3c:0f:67:ef:3a:3e:cd:25:62:82:e6:a9:05:5e:b8:0c: 12:e5:94:b7:fe:c7:9c:c4:a3:7b:49:99:06:69:a3:31:9f:c4: f2:94:71:8b:30:da:2f:99:2f:39:8d:84:ae:16:e6:05:24:9f: 0e:b0:2b:0e:f8:b3:80:e1:28:60:dd:ea:93:8b:65:41:7a:71: 95:c1:2d:78 -----BEGIN CERTIFICATE----- MIIHYDCCBkigAwIBAgIUAQ0Mn0MoWEO/w2GxOOJ+7NBOGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTEwMjAwNDUxNloXDTI2MDIwNDAxNDUxNlowLzEtMCsGA1UEAxMk YTMwNDk4MDAtZmYxNy00OWE2LWIwMjktZWM5MDhlMWM3Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eFEDrWNnMcey3onnTFzK7+OmCbdI8rOmAAS B8lnfoiidpbGZqmOCeORaU52iHQBDztJpPTkh1pqUtr9eQSJZxwZMIGsINqIZJwM htUv19LQDSQCAzVVCLNX1VHXJurrEnIAI68mmZqweiY+q+bAGya4uHYAaEBHD+Fb riifDuT+BDhirx7SqQL1Mp6ZUSE05nPLUhP+6mF/gKxsz8Uweuon5M0T4Fg9gFwm wmVr4mstcQWzANPYwwmQeS7lo3fI8RRFedx9zlJpwKkq4NZWE27yvgKT9ZfwW3Qy 165Udy1H4sr1uhRx34yObVC9ERdB3Kh/ceua5PQjJaXF8NffRwIDAQABo4IEcjCC BG4wHQYDVR0OBBYEFGgjyim9kaFJzpXmWrEPZrOFZ2zwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h MzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUxYzdjYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2EzMDQ5ODAwLWZmMTctNDlhNi1i MDI5LWVjOTA4ZTFjN2NiMy9hMzA0OTgwMC1mZjE3LTQ5YTYtYjAyOS1lYzkwOGUx YzdjYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwdwYIKwYBBQUH AQcBAf8EaDBmMCQEAgABMB4DBAQtO3ADBANCF8ADBANoJFADBAKCMygDBATYfuAw PgQCAAIwOAMFACYESsADBQAmBEzAAwUAJgRNQAMFACYET8ADBQAmBFBAAwUAJgRQ wAMFACYEakADBQAmBXmAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAk62MFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAC+HCJbklWMr0HIClK2iegMamBbMLB1LWuBv+6G9Abiu9IlJny8DBaBSA6Ds rTgmzaQ+xvDzfXOhAnikcTnYPCApMkErBdeU/tSEkQ6SgN+IYhzlLZJC4erXxISX 9uqlnUvRtpVwEHBCqqkSyZJCx/qea93BvOW8ZyDnPtIJuM+ydwWoEG8ZOJvcLtBz a+sXc5KkzZ/RIIbOrFV7n5aZDG7IycSZ65To1YasvtqHRCDQhy+DGDR7PA9n7zo+ zSViguapBV64DBLllLf+x5zEo3tJmQZpozGfxPKUcYsw2i+ZLzmNhK4W5gUknw6w Kw74s4DhKGDd6pOLZUF6cZXBLXg= -----END CERTIFICATE-----Generated at Fri Apr 19 16:29:17 2024 by rpki-client on console-ams.rpki-client.org