$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660.cer File: ac42ca24-d785-4ab8-81d3-baec3a30b660.cer (raw, json) Hash identifier: hKCTyRt6+v74dnLqgt5+vfqT2FQoSIKizlq9RJLOJUo= Subject key identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858481F5D9DAE15CF956B7854DB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Dec 2024 01:45:34 +0000 Certificate not after: Fri 12 Mar 2027 01:45:34 +0000 Subordinate resources: AS: 18786 AS: 18953 AS: 64211 AS: 393713 IP: 64.79.48.0/20 IP: 74.123.32.0/22 IP: 162.254.112.0/22 IP: 192.157.20.0/22 IP: 199.91.176.0/22 IP: 199.193.180.0/22 IP: 204.62.56.0/21 IP: 208.72.76.0/22 IP: 208.77.8.0/23 IP: 208.82.84.0/22 IP: 208.89.176.0/22 IP: 216.146.224.0/20 IP: 2605:ce80::/32 IP: 2606:c080::/32 IP: 2607:ffe8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1f:5d:9d:ae:15:cf:95:6b:78:54:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 7 01:45:34 2024 GMT Not After : Mar 12 01:45:34 2027 GMT Subject: CN=ac42ca24-d785-4ab8-81d3-baec3a30b660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:b1:6b:77:52:3d:a8:0a:1c:25:ef:38:70: 80:3f:c1:64:68:5c:2c:24:7d:e8:e9:51:3b:36:ba: ce:3a:65:ad:32:bc:19:3a:44:cd:a3:31:cb:7e:b1: b3:c0:c2:ac:74:17:37:fe:62:f9:1f:4f:bc:63:fc: 76:7b:64:27:48:74:7c:58:91:4b:ca:fd:ef:c6:e9: 6a:7b:d7:86:60:2c:54:d2:8c:65:fa:19:d7:1e:e9: 45:24:92:67:d0:65:8a:02:b0:08:ba:7f:b1:7e:42: b4:b8:f5:e1:2e:ac:f5:77:93:fe:8c:e8:85:14:7f: 3b:4a:1b:37:05:3d:52:6d:15:bf:59:ce:0f:5c:3f: b2:4e:2d:2e:fc:a2:0b:f7:0d:fc:c7:89:3d:50:42: 65:24:59:07:58:77:81:1b:35:34:a4:19:ad:ab:48: 61:be:f1:f3:0e:a4:5b:2c:7d:40:73:3c:ae:d6:20: cb:ff:5f:08:86:61:e5:17:a6:0d:71:0b:f2:4f:0b: 4f:c7:4b:fb:39:0a:73:e5:f3:f6:73:77:48:ec:cb: f4:04:9e:fa:60:cb:cd:f9:2f:b3:30:7f:91:b1:15: 95:d4:ed:86:8b:4c:4f:07:b4:5f:0f:e6:b3:c3:f1: 3f:4b:8c:92:0b:42:ca:11:0d:01:f9:21:21:40:a7: 1a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B6:F5:EF:0B:83:49:79:6B:50:62:59:F0:36:46:8D:E7:08:1F:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ac42ca24-d785-4ab8-81d3-baec3a30b660/ac42ca24-d785-4ab8-81d3-baec3a30b660.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.79.48.0/20 74.123.32.0/22 162.254.112.0/22 192.157.20.0/22 199.91.176.0/22 199.193.180.0/22 204.62.56.0/21 208.72.76.0/22 208.77.8.0/23 208.82.84.0/22 208.89.176.0/22 216.146.224.0/20 IPv6: 2605:ce80::/32 2606:c080::/32 2607:ffe8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18786 18953 64211 393713 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:eb:97:74:be:5c:ad:0a:0e:4c:39:b1:e6:61:e9:1e:5c:77: 1a:08:e2:73:4e:fa:1c:9a:9f:a3:c3:dc:8b:81:ea:04:80:33: 9a:84:a6:94:f3:c4:6c:c3:8e:95:bf:eb:b9:01:5b:87:a6:12: af:96:86:e2:bc:c6:8c:fd:57:c9:d3:71:47:06:0f:f0:b3:c3: 25:49:2e:6c:d8:9a:85:0a:cc:53:73:00:1f:82:24:f9:52:c6: 67:c7:ec:88:51:be:64:9b:cd:0f:2d:8a:41:2b:4a:08:05:9a: e3:74:97:34:76:83:d5:77:49:d6:b5:f9:b8:85:11:22:59:c3: e6:36:58:2b:fd:f1:96:04:06:42:ee:fa:04:d4:3a:b6:3d:60: b2:f5:9a:54:84:ea:bf:1f:32:ce:51:23:62:40:e6:e6:e8:12: b0:22:a3:e5:42:f1:3b:b4:04:53:d7:5a:23:bd:6b:ff:b5:e3: 88:a0:46:54:84:3a:30:86:26:04:1b:3b:39:95:52:f8:72:ea: a3:a9:29:9c:16:d6:ac:7b:be:77:bc:9e:22:8e:24:4c:1f:04: 9f:10:98:0b:c1:57:17:f3:2f:0b:3e:f6:e8:83:03:bf:4f:6d: 9e:b4:87:cc:16:8a:11:e8:0a:9b:ab:48:85:66:02:91:d5:16: 10:48:37:1d -----BEGIN CERTIFICATE----- MIIHdTCCBl2gAwIBAgIUAQ0Mn0MoWEgfXZ2uFc+Va3hU24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTIwNzAxNDUzNFoXDTI3MDMxMjAxNDUzNFowLzEtMCsGA1UEAxMk YWM0MmNhMjQtZDc4NS00YWI4LTgxZDMtYmFlYzNhMzBiNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSWxa3dSPagKHCXvOHCAP8FkaFwsJH3o6VE7 NrrOOmWtMrwZOkTNozHLfrGzwMKsdBc3/mL5H0+8Y/x2e2QnSHR8WJFLyv3vxulq e9eGYCxU0oxl+hnXHulFJJJn0GWKArAIun+xfkK0uPXhLqz1d5P+jOiFFH87Shs3 BT1SbRW/Wc4PXD+yTi0u/KIL9w38x4k9UEJlJFkHWHeBGzU0pBmtq0hhvvHzDqRb LH1Aczyu1iDL/18IhmHlF6YNcQvyTwtPx0v7OQpz5fP2c3dI7Mv0BJ76YMvN+S+z MH+RsRWV1O2Gi0xPB7RfD+azw/E/S4ySC0LKEQ0B+SEhQKcaTwIDAQABo4IEhzCC BIMwHQYDVR0OBBYEFPS29e8Lg0l5a1BiWfA2Ro3nCB+vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9h YzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2EzMGI2NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2FjNDJjYTI0LWQ3ODUtNGFiOC04 MWQzLWJhZWMzYTMwYjY2MC9hYzQyY2EyNC1kNzg1LTRhYjgtODFkMy1iYWVjM2Ez MGI2NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwfgYIKwYBBQUH AQcBAf8EbzBtME4EAgABMEgDBARATzADBAJKeyADBAKi/nADBALAnRQDBALHW7AD BALHwbQDBAPMPjgDBALQSEwDBAHQTQgDBALQUlQDBALQWbADBATYkuAwGwQCAAIw FQMFACYFzoADBQAmBsCAAwUAJgf/6DAnBggrBgEFBQcBCAEB/wQYMBagFDASAgJJ YgICSgkCAwD60wIDBgHxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGLrl3S+XK0KDkw5seZh6R5cdxoI4nNO +hyan6PD3IuB6gSAM5qEppTzxGzDjpW/67kBW4emEq+WhuK8xoz9V8nTcUcGD/Cz wyVJLmzYmoUKzFNzAB+CJPlSxmfH7IhRvmSbzQ8tikErSggFmuN0lzR2g9V3Sda1 +biFESJZw+Y2WCv98ZYEBkLu+gTUOrY9YLL1mlSE6r8fMs5RI2JA5uboErAio+VC 8Tu0BFPXWiO9a/+144igRlSEOjCGJgQbOzmVUvhy6qOpKZwW1qx7vne8niKOJEwf BJ8QmAvBVxfzLws+9uiDA79PbZ60h8wWihHoCpurSIVmApHVFhBINx0= -----END CERTIFICATE-----Generated at Fri Jan 17 15:59:50 2025 by rpki-client on console-fra.rpki-client.org