$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer File: b0ca02e7-7a12-4d90-8feb-8f130aaea380.cer (raw, json) Hash identifier: 2j15WDDHb/hkGQE0EtFt7INMAnGCBwHFZ23Tqf3mZEs= Subject key identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584511ADF9113C7C128915D81600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 02 Mar 2024 01:45:21 +0000 Certificate not after: Fri 05 Jun 2026 00:45:21 +0000 Subordinate resources: IP: 164.55.224.0/19 IP: 192.234.235.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:11:ad:f9:11:3c:7c:12:89:15:d8:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Mar 2 01:45:21 2024 GMT Not After : Jun 5 00:45:21 2026 GMT Subject: CN=b0ca02e7-7a12-4d90-8feb-8f130aaea380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ec:12:a9:3c:6e:a3:9c:e7:ed:46:c2:df:ac: 18:ef:ed:7f:14:e3:fd:58:dc:82:e8:fb:3c:36:e6: 20:94:0d:7c:4e:8f:47:2e:f8:18:2a:c1:70:2c:4d: 24:4c:7d:5d:d5:9f:2b:9c:24:c8:cb:60:5b:17:9f: 08:30:ef:9b:ae:4d:1b:69:6d:f0:9d:b5:a9:de:4d: 0f:9f:3a:f8:f2:3c:ed:0f:8e:05:b9:e6:a9:46:b8: 09:19:f2:26:57:31:07:c3:1d:8f:f1:1a:b0:17:5a: df:e1:4c:31:ae:c9:fe:5e:d0:ed:09:46:e9:61:49: a9:03:4f:9b:14:f0:86:6c:bd:e9:cf:c7:1f:ca:ed: 3d:9f:2d:62:71:4c:39:bf:3e:87:21:6d:39:ab:60: e9:7b:80:5d:3d:80:27:2d:e7:70:86:5c:b3:01:4f: e2:d3:76:78:e0:cb:4f:0a:e5:30:b1:70:6e:ed:09: 4b:9a:ec:24:06:48:9e:43:2c:95:df:e9:d9:b6:ec: 1c:82:03:04:c3:e2:ff:97:6d:8b:b0:e8:bc:98:9b: d3:31:5c:ef:64:64:17:a6:16:cf:a3:ff:19:19:51: 90:7a:cd:13:ee:2e:69:44:d3:d9:55:8f:88:f9:44: 63:61:29:33:b6:f3:29:f1:46:a2:ec:73:0c:90:96: 17:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E8:C5:96:3E:3D:66:15:2E:A7:51:BE:9C:66:0C:95:32:89:A4:5B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b0ca02e7-7a12-4d90-8feb-8f130aaea380/b0ca02e7-7a12-4d90-8feb-8f130aaea380.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 164.55.224.0/19 192.234.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:1a:13:66:06:a0:9f:00:54:5e:3e:1c:39:f0:87:02:ce:47: e4:a3:b5:f6:f9:05:b1:17:9e:7b:13:96:39:19:83:39:8f:a8: 23:c8:6b:66:87:3d:38:1e:c8:ca:10:c0:c2:aa:b2:38:cb:be: 34:27:89:97:af:36:30:02:ce:f5:51:a6:43:a4:15:d3:8b:94: ee:ed:e6:1f:6b:d7:16:af:11:ae:c2:dc:22:7a:f9:4b:56:81: c4:22:e6:87:dd:af:c9:dc:1c:cb:24:8d:c0:66:fa:2c:fb:67: d2:6b:74:37:43:23:5c:07:4c:78:3e:af:1c:38:c4:cb:5f:0b: 52:ad:e0:b6:93:64:79:30:a3:2f:38:95:a7:50:78:08:29:81: 4c:27:7e:3d:5f:ef:0e:15:62:d2:30:45:7b:f3:52:d5:f3:f3: 06:7f:d9:86:84:96:f3:2c:5b:43:4f:b6:75:7c:ac:ae:b2:fa: 3c:75:b1:2e:00:8b:e1:91:06:70:bd:7f:ff:4f:48:2e:fa:b4: 58:04:34:fd:5e:62:d6:f4:bd:e7:19:5e:ce:e6:4d:59:30:f7: 04:c5:3a:45:50:d0:ec:bd:83:c6:9f:a7:95:ad:0c:1c:f4:b7: 8d:d8:55:ad:bc:0e:2a:d3:36:e0:ae:11:f2:01:a2:d0:ad:ca: 4e:9a:0a:5c -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEURrfkRPHwSiRXYFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDMwMjAxNDUyMVoXDTI2MDYwNTAwNDUyMVowLzEtMCsGA1UEAxMk YjBjYTAyZTctN2ExMi00ZDkwLThmZWItOGYxMzBhYWVhMzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+wSqTxuo5zn7UbC36wY7+1/FOP9WNyC6Ps8 NuYglA18To9HLvgYKsFwLE0kTH1d1Z8rnCTIy2BbF58IMO+brk0baW3wnbWp3k0P nzr48jztD44FueapRrgJGfImVzEHwx2P8RqwF1rf4Uwxrsn+XtDtCUbpYUmpA0+b FPCGbL3pz8cfyu09ny1icUw5vz6HIW05q2Dpe4BdPYAnLedwhlyzAU/i03Z44MtP CuUwsXBu7QlLmuwkBkieQyyV3+nZtuwcggMEw+L/l22LsOi8mJvTMVzvZGQXphbP o/8ZGVGQes0T7i5pRNPZVY+I+URjYSkztvMp8Uai7HMMkJYXwQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFO/oxZY+PWYVLqdRvpxmDJUyiaRbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFhZWEzODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IwY2EwMmU3LTdhMTItNGQ5MC04 ZmViLThmMTMwYWFlYTM4MC9iMGNhMDJlNy03YTEyLTRkOTAtOGZlYi04ZjEzMGFh ZWEzODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAWkN+ADBADA6uswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeBoTZgagnwBU Xj4cOfCHAs5H5KO19vkFsReeexOWORmDOY+oI8hrZoc9OB7IyhDAwqqyOMu+NCeJ l682MALO9VGmQ6QV04uU7u3mH2vXFq8RrsLcInr5S1aBxCLmh92vydwcyySNwGb6 LPtn0mt0N0MjXAdMeD6vHDjEy18LUq3gtpNkeTCjLziVp1B4CCmBTCd+PV/vDhVi 0jBFe/NS1fPzBn/ZhoSW8yxbQ0+2dXysrrL6PHWxLgCL4ZEGcL1//09ILvq0WAQ0 /V5i1vS95xlezuZNWTD3BMU6RVDQ7L2Dxp+nla0MHPS3jdhVrbwOKtM24K4R8gGi 0K3KTpoKXA== -----END CERTIFICATE-----Generated at Tue Apr 30 16:18:00 2024 by rpki-client on console-fra.rpki-client.org