$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a.cer File: b65380d4-1db9-4ed1-a660-7ee094b9800a.cer (raw, json) Hash identifier: /gJ9hB/THACVIV87MJjCqX7I6HfnwUHrEdRfyPRnvZg= Subject key identifier: 41:85:92:1A:28:4A:58:5E:31:D8:A5:10:23:34:62:66:20:80:49:46 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858467F47CC7431CFB00E5E44DB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Jul 2024 00:45:20 +0000 Certificate not after: Wed 14 Oct 2026 00:45:20 +0000 Subordinate resources: AS: 39987 IP: 64.49.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:7f:47:cc:74:31:cf:b0:0e:5e:44:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 11 00:45:20 2024 GMT Not After : Oct 14 00:45:20 2026 GMT Subject: CN=b65380d4-1db9-4ed1-a660-7ee094b9800a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f0:49:62:19:14:0c:b9:e0:ba:00:8d:9d:c0: 8f:f0:5f:43:19:1a:7c:f1:47:04:65:94:e2:de:ba: b0:d5:e7:39:57:dc:1b:8a:e1:a6:4e:6e:b1:db:26: ff:c4:86:7b:f9:9d:fb:d9:97:40:92:f5:d7:67:e8: 4f:40:0f:a8:92:5c:2f:64:10:32:84:17:c0:e8:05: f6:b2:3d:3f:0e:e2:ea:78:4e:2c:3b:1d:ac:96:7c: 54:af:b9:97:15:97:6a:e6:90:42:11:ca:6c:88:cd: 45:5d:a2:51:30:46:0f:c0:75:fd:56:83:32:2e:5d: 1e:64:68:b8:1d:d5:36:8c:7b:e0:b9:de:8d:d6:19: 36:51:42:e7:57:2f:92:9f:70:84:8b:4c:84:9d:70: 6c:dc:93:d9:7c:45:05:b7:33:72:25:71:42:46:5f: 12:30:cb:05:25:74:f8:50:ef:d4:66:27:2e:c3:b7: cf:31:c3:a5:5f:21:e6:67:a0:b5:01:52:22:1e:fd: bb:b5:09:b8:b4:27:f5:e2:03:c0:35:18:5a:9b:3e: 3f:ad:61:b1:9a:58:ae:36:ac:10:18:74:d4:06:57: 2d:d5:23:41:06:c9:80:01:be:cc:c8:40:23:8d:20: a6:37:01:f9:95:5e:bb:d5:5a:fb:7c:4a:50:60:e9: 02:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:85:92:1A:28:4A:58:5E:31:D8:A5:10:23:34:62:66:20:80:49:46 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b65380d4-1db9-4ed1-a660-7ee094b9800a/b65380d4-1db9-4ed1-a660-7ee094b9800a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 64.49.112.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 39987 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:fe:be:c5:94:18:05:be:18:41:7a:c5:af:42:1c:70:74:66: 3e:49:bf:83:97:c4:ca:f0:5e:9b:f2:01:41:29:8f:ab:79:8b: a9:64:b5:79:2e:0c:e2:82:1a:0a:31:09:de:47:5f:b5:cb:9a: f9:a9:23:b1:ad:94:71:bc:ab:37:e7:71:2d:2a:f2:18:df:6a: ce:1a:b8:67:a4:53:d9:02:35:4a:29:9f:3a:81:f7:ca:2d:3c: c7:2a:07:25:0f:51:72:ad:6b:a7:4c:1c:0e:4c:da:93:df:0a: c7:ce:41:21:93:b5:61:50:c5:40:52:c0:56:68:89:ee:ec:96: 46:33:7f:0e:2a:f4:ca:71:fa:b8:18:4e:cf:1d:49:1d:13:ff: 1c:e8:c3:80:12:e1:26:69:06:5d:bc:f5:d5:78:6d:24:25:aa: 4f:bb:c7:37:a4:c4:07:78:08:63:45:27:95:0a:ae:48:e9:b9: 7a:20:e5:70:47:ab:db:89:51:3f:3f:36:76:f7:dc:41:a7:2c: bd:b6:fb:49:f3:58:52:87:33:69:98:15:29:10:cd:8d:11:f4: 85:f0:34:47:c8:33:2f:28:0f:b9:9d:40:ba:9c:ac:ca:3c:fb: e3:58:2c:c1:84:76:ea:88:25:ac:33:ef:b8:03:be:c8:7c:a7: f7:5a:f1:b3 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEZ/R8x0Mc+wDl5E2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDcxMTAwNDUyMFoXDTI2MTAxNDAwNDUyMFowLzEtMCsGA1UEAxMk YjY1MzgwZDQtMWRiOS00ZWQxLWE2NjAtN2VlMDk0Yjk4MDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvBJYhkUDLngugCNncCP8F9DGRp88UcEZZTi 3rqw1ec5V9wbiuGmTm6x2yb/xIZ7+Z372ZdAkvXXZ+hPQA+oklwvZBAyhBfA6AX2 sj0/DuLqeE4sOx2slnxUr7mXFZdq5pBCEcpsiM1FXaJRMEYPwHX9VoMyLl0eZGi4 HdU2jHvgud6N1hk2UULnVy+Sn3CEi0yEnXBs3JPZfEUFtzNyJXFCRl8SMMsFJXT4 UO/UZicuw7fPMcOlXyHmZ6C1AVIiHv27tQm4tCf14gPANRhamz4/rWGxmliuNqwQ GHTUBlct1SNBBsmAAb7MyEAjjSCmNwH5lV671Vr7fEpQYOkCkwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEGFkhooSlheMdilECM0YmYggElGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i NjUzODBkNC0xZGI5LTRlZDEtYTY2MC03ZWUwOTRiOTgwMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2I2NTM4MGQ0LTFkYjktNGVkMS1h NjYwLTdlZTA5NGI5ODAwYS9iNjUzODBkNC0xZGI5LTRlZDEtYTY2MC03ZWUwOTRi OTgwMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARAMXAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AJwzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH/+vsWUGAW+GEF6xa9CHHB0Zj5Jv4OXxMrwXpvyAUEpj6t5 i6lktXkuDOKCGgoxCd5HX7XLmvmpI7GtlHG8qzfncS0q8hjfas4auGekU9kCNUop nzqB98otPMcqByUPUXKta6dMHA5M2pPfCsfOQSGTtWFQxUBSwFZoie7slkYzfw4q 9Mpx+rgYTs8dSR0T/xzow4AS4SZpBl289dV4bSQlqk+7xzekxAd4CGNFJ5UKrkjp uXog5XBHq9uJUT8/Nnb33EGnLL22+0nzWFKHM2mYFSkQzY0R9IXwNEfIMy8oD7md QLqcrMo8++NYLMGEduqIJawz77gDvsh8p/da8bM= -----END CERTIFICATE-----Generated at Thu Nov 21 16:33:57 2024 by rpki-client on console-ams.rpki-client.org