$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer File: bc831f6b-71a6-46bb-9f64-2da80ccc244c.cer (raw, json) Hash identifier: UvK8aa4+VvAePen8lRmL+lCQnxvzl3XJR7FKbOXwYZY= Subject key identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285845A1877E863907C3D295F49A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Apr 2024 14:24:13 +0000 Certificate not after: Wed 03 Jun 2026 00:45:20 +0000 Subordinate resources: AS: 997 AS: 393437 IP: 23.186.64.0/24 IP: 205.210.164.0/22 IP: 2600:b400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:a1:87:7e:86:39:07:c3:d2:95:f4:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Apr 22 14:24:13 2024 GMT Not After : Jun 3 00:45:20 2026 GMT Subject: CN=bc831f6b-71a6-46bb-9f64-2da80ccc244c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5b:69:56:1d:d8:61:de:c6:a8:3d:91:c5:a7: cf:02:6a:48:46:8e:f2:bc:9c:c4:33:51:37:83:02: 77:a2:33:37:6e:e2:e5:dd:6d:2b:28:c6:16:4d:21: 0a:cb:9d:e8:47:d0:1b:02:5d:ca:80:47:22:75:52: 69:d4:47:ed:f9:e7:76:bc:ea:dc:2e:39:e5:a0:ca: b7:bd:fc:9d:29:ec:23:06:aa:37:ac:de:d2:bc:10: 3d:a7:da:40:6d:47:fa:9f:94:d7:a6:80:88:c7:39: e6:76:b5:56:25:e9:c1:c8:27:6f:63:a2:d6:bb:3d: 1a:86:ed:71:29:79:e0:7d:7d:2e:fc:d0:0e:8a:2d: 57:b7:5d:5c:5c:62:45:f3:e1:de:18:c6:5b:72:18: 62:25:0c:aa:59:22:ed:54:c5:9f:75:01:0f:3d:ef: 12:2c:d7:d3:b7:71:d1:13:15:a6:73:5c:20:7d:32: fe:a9:6e:18:9a:62:3a:c1:d2:7c:69:c1:0f:c0:47: bb:2c:17:7c:91:64:17:96:43:c3:aa:7c:88:f2:ce: fb:fa:66:d6:dd:73:7b:bc:e5:8d:2b:d6:18:51:b7: 19:67:84:df:f4:62:d3:e3:c0:af:49:6f:0c:92:a8: 1d:a3:77:7f:3a:b0:ef:8f:15:61:c6:0f:11:1f:dc: 96:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:50:46:A5:5A:7E:BB:0F:CE:06:22:BA:A4:AF:11:59:F2:3E:CD:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bc831f6b-71a6-46bb-9f64-2da80ccc244c/bc831f6b-71a6-46bb-9f64-2da80ccc244c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.186.64.0/24 205.210.164.0/22 IPv6: 2600:b400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 997 393437 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ca:f1:27:a0:ea:fe:d5:9c:1e:af:5a:58:88:b7:87:b4:fd: 4c:64:d2:f9:36:12:1e:37:08:0c:6e:65:bf:cf:1b:a5:f4:ce: 13:36:bc:d3:91:c7:23:17:e4:54:88:fa:32:c9:3c:33:58:2b: 16:21:87:d0:78:ad:6a:e6:31:36:2f:98:bb:ff:b4:85:a0:94: ef:3a:14:52:ce:7e:49:00:18:12:1a:f4:49:35:74:0b:c4:03: 55:38:ef:1f:08:f9:e4:aa:30:84:10:ae:a2:19:e9:2f:a2:83: 77:a2:4c:9e:e8:7e:59:0f:33:a8:40:4d:1a:ce:80:ab:4e:70: d2:97:fb:67:87:90:f3:f5:2f:53:da:a8:34:2e:1e:74:a1:f2: 39:ec:95:df:11:05:50:9f:a2:91:8c:11:8a:ec:49:8f:84:d0: a7:52:f3:57:58:13:27:6d:ec:24:5c:bf:e3:f9:2f:a2:c2:5e: 54:60:ec:1b:5b:8c:06:fc:db:19:66:ef:88:06:31:79:7e:18: 81:18:e8:fd:9e:3c:b0:04:05:ef:03:89:f1:c0:d6:39:a8:23: bf:3e:90:da:98:be:80:ce:bc:d5:5a:33:19:e6:9a:c2:63:0d: d4:f9:2c:77:67:7d:11:37:71:a5:a9:79:a5:44:6d:0a:a1:c0: 3e:4d:48:92 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWEWhh36GOQfD0pX0mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDQyMjE0MjQxM1oXDTI2MDYwMzAwNDUyMFowLzEtMCsGA1UEAxMk YmM4MzFmNmItNzFhNi00NmJiLTlmNjQtMmRhODBjY2MyNDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1tpVh3YYd7GqD2RxafPAmpIRo7yvJzEM1E3 gwJ3ojM3buLl3W0rKMYWTSEKy53oR9AbAl3KgEcidVJp1Eft+ed2vOrcLjnloMq3 vfydKewjBqo3rN7SvBA9p9pAbUf6n5TXpoCIxznmdrVWJenByCdvY6LWuz0ahu1x KXngfX0u/NAOii1Xt11cXGJF8+HeGMZbchhiJQyqWSLtVMWfdQEPPe8SLNfTt3HR ExWmc1wgfTL+qW4YmmI6wdJ8acEPwEe7LBd8kWQXlkPDqnyI8s77+mbW3XN7vOWN K9YYUbcZZ4Tf9GLT48CvSW8Mkqgdo3d/OrDvjxVhxg8RH9yWTwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFKlQRqVafrsPzgYiuqSvEVnyPs0kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i YzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNjYzI0NGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2JjODMxZjZiLTcxYTYtNDZiYi05 ZjY0LTJkYTgwY2NjMjQ0Yy9iYzgzMWY2Yi03MWE2LTQ2YmItOWY2NC0yZGE4MGNj YzI0NGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXukADBALN0qQwDQQCAAIwBwMFACYAtAAwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICA+UCAwYA3TBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4yvEnoOr+1Zwe r1pYiLeHtP1MZNL5NhIeNwgMbmW/zxul9M4TNrzTkccjF+RUiPoyyTwzWCsWIYfQ eK1q5jE2L5i7/7SFoJTvOhRSzn5JABgSGvRJNXQLxANVOO8fCPnkqjCEEK6iGekv ooN3okye6H5ZDzOoQE0azoCrTnDSl/tnh5Dz9S9T2qg0Lh50ofI57JXfEQVQn6KR jBGK7EmPhNCnUvNXWBMnbewkXL/j+S+iwl5UYOwbW4wG/NsZZu+IBjF5fhiBGOj9 njywBAXvA4nxwNY5qCO/PpDamL6AzrzVWjMZ5prCYw3U+Sx3Z30RN3GlqXmlRG0K ocA+TUiS -----END CERTIFICATE-----Generated at Sat May 4 22:09:54 2024 by rpki-client on console-ams.rpki-client.org