$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer File: b2f0a061-78dd-4d61-988a-266b192d9caa.cer (raw, json) Hash identifier: HgS5fKsRXkrhJSGAIuHHPDnCwjTqhxJMEJhm54+JbqE= Subject key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844AFF807804849BC15B208EE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 27 Jan 2024 01:45:20 +0000 Certificate not after: Fri 01 May 2026 00:45:20 +0000 Subordinate resources: AS: 6427 AS: 6939 AS: 393338 IP: 64.62.128.0/17 IP: 64.71.128.0/18 IP: 65.19.128.0/18 IP: 65.49.0.0/17 IP: 66.160.128.0 -- 66.160.207.255 IP: 66.220.0.0/19 IP: 72.52.64.0/18 IP: 74.82.0.0/18 IP: 184.104.0.0/15 IP: 209.51.160.0/19 IP: 216.66.0.0 -- 216.66.95.255 IP: 216.218.128.0/17 IP: 2001:470::/32 IP: 2600:7000::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:af:f8:07:80:48:49:bc:15:b2:08:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 27 01:45:20 2024 GMT Not After : May 1 00:45:20 2026 GMT Subject: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:2d:4b:15:ce:ad:1b:61:4e:39:0e:4e:b1: 5b:13:ab:ad:a6:cc:48:9b:b7:73:bb:d8:d8:26:62: 5b:11:fe:ae:cd:d5:27:b3:90:c5:b5:1e:ae:7b:3b: 94:4e:89:05:f1:2a:68:fd:47:20:83:20:e0:78:02: ef:a7:ae:f0:83:62:a9:47:ec:a5:62:a3:f4:9e:7b: 8c:d8:61:97:bf:fa:9e:d0:bb:1e:6d:a5:56:ed:54: 4d:7f:46:0d:66:37:93:c5:a2:3f:0d:b2:3f:be:57: 26:90:02:ca:d9:2c:7a:30:84:35:cf:6c:75:12:44: eb:1e:77:81:33:6c:f0:72:3a:c9:93:79:8f:97:52: 9d:04:67:c4:16:b7:dc:88:7e:13:31:0e:ec:63:73: 04:e7:eb:a3:2e:fe:de:f6:c3:f2:9a:c7:cd:85:ba: f9:c5:cb:11:7a:0b:2c:5e:a7:f7:7a:53:fd:29:26: 22:68:45:45:92:16:bc:00:7e:2f:b8:41:00:8f:21: bd:4f:84:f6:82:e4:1c:b7:35:4f:0c:c9:09:f6:83: 01:c9:e1:46:51:68:bf:c3:89:cf:95:4c:36:5f:c9: 8a:de:f3:90:28:c9:e9:d8:70:a6:f1:fd:ed:d5:d1: 85:da:66:37:76:ed:2c:6f:ce:0d:af:36:33:61:c9: 98:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.62.128.0/17 64.71.128.0/18 65.19.128.0/18 65.49.0.0/17 66.160.128.0-66.160.207.255 66.220.0.0/19 72.52.64.0/18 74.82.0.0/18 184.104.0.0/15 209.51.160.0/19 216.66.0.0-216.66.95.255 216.218.128.0/17 IPv6: 2001:470::/32 2600:7000::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6427 6939 393338 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:cf:a0:83:d4:a4:72:0c:a5:6a:a0:90:17:e1:d7:28:7c:2a: 2d:05:01:5d:45:68:a2:ce:fb:ad:fa:09:bb:c1:09:eb:f5:10: bf:1e:a4:a6:21:ec:1f:4e:99:29:46:7a:29:33:e4:71:b2:f0: de:d3:a9:3a:53:a6:b1:52:20:ec:10:22:c3:a9:54:23:a6:f7: cc:1a:58:81:75:3a:50:fc:de:6d:b1:14:5f:24:18:81:1c:63: 75:77:45:a5:9e:39:c4:24:4d:cd:fa:68:b3:9d:c3:86:bd:fd: 8c:c5:67:e2:cc:63:e4:64:e4:41:05:c8:9a:17:d3:b5:68:0f: 1c:a5:f1:81:1e:eb:35:9e:2d:be:c0:a4:44:ba:b3:c5:3b:9a: fd:bb:e3:f6:c2:be:f7:ea:56:8e:aa:f0:31:02:fd:42:cc:a7: c0:b0:0e:38:6c:5d:08:f9:05:69:fd:b9:ea:68:18:0b:d1:c7: d9:de:27:44:1f:9a:a2:7e:11:e2:cc:c9:8e:54:0d:52:0e:be: 81:46:54:85:34:6b:78:6b:a4:e3:aa:bf:20:04:b9:bb:7f:2e: bb:5d:6b:08:18:87:c4:c1:c1:b9:54:af:68:69:6a:3a:b8:fe: b8:ba:8a:78:b5:15:0f:99:a4:05:98:e9:8f:f6:fa:13:e9:52: 3b:6a:29:0b -----BEGIN CERTIFICATE----- MIIHdzCCBl+gAwIBAgIUAQ0Mn0MoWESv+AeASEm8FbII7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDEyNzAxNDUyMFoXDTI2MDUwMTAwNDUyMFowLzEtMCsGA1UEAxMk YjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0QtSxXOrRthTjkOTrFbE6utpsxIm7dzu9jY JmJbEf6uzdUns5DFtR6uezuUTokF8Spo/UcggyDgeALvp67wg2KpR+ylYqP0nnuM 2GGXv/qe0LsebaVW7VRNf0YNZjeTxaI/DbI/vlcmkALK2Sx6MIQ1z2x1EkTrHneB M2zwcjrJk3mPl1KdBGfEFrfciH4TMQ7sY3ME5+ujLv7e9sPymsfNhbr5xcsRegss Xqf3elP9KSYiaEVFkha8AH4vuEEAjyG9T4T2guQctzVPDMkJ9oMByeFGUWi/w4nP lUw2X8mK3vOQKMnp2HCm8f3t1dGF2mY3du0sb84NrzYzYcmYTQIDAQABo4IEiTCC BIUwHQYDVR0OBBYEFGWnQoaur+LJ4+m5BivGRgWcmG/PMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IyZjBhMDYxLTc4ZGQtNGQ2MS05 ODhhLTI2NmIxOTJkOWNhYS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTky ZDljYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgYQGCCsGAQUF BwEHAQH/BHUwczBcBAIAATBWAwQHQD6AAwQGQEeAAwQGQROAAwQHQTEAMAwDBAdC oIADBARCoMADBAVC3AADBAZINEADBAZKUgADAwG4aAMEBdEzoDALAwMB2EIDBAXY QkADBAfY2oAwEwQCAAIwDQMFACABBHADBAAmAHAwIgYIKwYBBQUHAQgBAf8EEzAR oA8wDQICGRsCAhsbAgMGAHowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKM+gg9SkcgylaqCQF+HXKHwqLQUB XUVoos77rfoJu8EJ6/UQvx6kpiHsH06ZKUZ6KTPkcbLw3tOpOlOmsVIg7BAiw6lU I6b3zBpYgXU6UPzebbEUXyQYgRxjdXdFpZ45xCRNzfpos53Dhr39jMVn4sxj5GTk QQXImhfTtWgPHKXxgR7rNZ4tvsCkRLqzxTua/bvj9sK+9+pWjqrwMQL9QsynwLAO OGxdCPkFaf256mgYC9HH2d4nRB+aon4R4szJjlQNUg6+gUZUhTRreGuk46q/IAS5 u38uu11rCBiHxMHBuVSvaGlqOrj+uLqKeLUVD5mkBZjpj/b6E+lSO2opCw== -----END CERTIFICATE-----Generated at Thu Apr 25 02:17:58 2024 by rpki-client on console-ams.rpki-client.org