$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e.cer File: c01f194a-0755-4fc9-a962-43638b10731e.cer (raw, json) Hash identifier: DAVBOpLbg3IFZP0CV5rBe/CC2U4z4yDS3QjhELaRFM0= Subject key identifier: 28:3A:6E:A2:1F:D4:4D:8D:1B:BF:A9:96:E1:83:14:1F:DB:BE:DE:59 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858423620EEE69FF92CD06BBC8D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e/c01f194a-0755-4fc9-a962-43638b10731e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 Jun 2023 00:45:16 +0000 Certificate not after: Tue 16 Sep 2025 00:45:16 +0000 Subordinate resources: AS: 5752 IP: 207.135.192.0/20 IP: 207.228.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:36:20:ee:e6:9f:f9:2c:d0:6b:bc:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 14 00:45:16 2023 GMT Not After : Sep 16 00:45:16 2025 GMT Subject: CN=c01f194a-0755-4fc9-a962-43638b10731e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ab:c0:0e:de:de:3c:2b:ef:59:ce:80:39:62: d8:96:51:a3:35:c0:dc:43:96:dd:f6:35:b7:bb:ea: 46:60:9b:db:ba:87:16:18:73:f5:19:ab:d8:12:8b: de:33:db:09:f0:66:31:a3:80:3f:77:0a:1e:f4:f2: fa:b8:9c:4e:60:81:7a:d1:42:a8:2a:44:7e:c6:fe: c6:7c:f5:42:30:03:8e:25:38:cc:7b:45:a5:b9:16: 56:80:db:ca:3a:81:fe:3b:b6:b1:d7:ff:d1:39:e5: 9d:30:08:e5:53:6b:83:e6:2d:a2:ef:27:57:78:cd: 91:99:e0:6d:cc:6f:8d:28:61:8f:9e:d9:94:67:56: 60:76:8b:ec:8a:2b:42:d4:78:56:31:39:3e:c4:9f: 7a:eb:44:58:78:17:94:07:32:15:b9:c0:46:c3:51: fb:da:22:ca:d8:98:48:4f:a7:10:08:50:6b:5e:2f: d1:93:ed:e9:da:06:87:15:cf:37:b5:7e:32:99:c2: 15:9f:48:09:c0:bb:ed:50:ac:ec:37:de:27:79:e1: 36:cd:fa:c3:12:a6:eb:61:89:f7:05:5b:7e:08:8a: 7d:c8:dd:19:97:7c:92:70:89:97:45:72:93:df:cd: 19:ae:81:0d:e3:e9:fb:40:8b:5d:8e:23:fa:8c:a1: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3A:6E:A2:1F:D4:4D:8D:1B:BF:A9:96:E1:83:14:1F:DB:BE:DE:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c01f194a-0755-4fc9-a962-43638b10731e/c01f194a-0755-4fc9-a962-43638b10731e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 207.135.192.0/20 207.228.0.0/18 sbgp-autonomousSysNum: critical Autonomous System Numbers: 5752 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3c:ef:24:3a:40:29:1d:a5:45:66:d2:90:ae:40:e6:3b:27: 1c:9f:31:f2:83:14:a1:c5:1e:6b:85:47:74:45:03:98:af:e1: e4:fe:6f:06:e3:70:cb:dd:82:e7:c3:26:ce:69:60:5e:c5:ed: a4:e9:07:f0:36:00:55:7e:c0:be:12:b0:7e:db:43:df:2a:a8: f4:56:d4:2c:e3:6a:9f:01:0f:5f:12:47:dd:69:24:16:35:fc: 29:c7:1f:6d:b0:ab:7b:1d:bd:06:3a:bf:54:81:07:35:5c:9c: be:f8:7c:7c:6e:95:af:73:9e:47:1f:50:82:e8:2d:84:59:c6: 10:4f:2d:20:b4:58:aa:e6:b9:32:79:aa:44:0a:b3:ba:32:52: df:b6:bb:e6:2e:0d:8c:ab:cb:6c:67:5d:a1:3e:4d:02:86:88: b7:5a:af:2c:9c:16:9e:c6:1e:39:f6:51:79:8c:9b:57:37:37: 44:a0:36:46:5a:ce:c0:b6:75:b1:82:2e:24:9f:6c:b8:e3:3c: e0:e6:4e:d9:4c:af:fa:a0:27:b7:a3:d2:dd:a1:f3:b5:13:2d: 4a:3e:bd:81:42:b2:35:af:e2:65:0c:b8:49:51:a0:db:47:c0: 50:76:d5:91:c2:d2:84:15:c7:d8:10:e9:cf:47:59:87:d7:db: 03:bc:9e:a5 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEI2IO7mn/ks0Gu8jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDYxNDAwNDUxNloXDTI1MDkxNjAwNDUxNlowLzEtMCsGA1UEAxMk YzAxZjE5NGEtMDc1NS00ZmM5LWE5NjItNDM2MzhiMTA3MzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KvADt7ePCvvWc6AOWLYllGjNcDcQ5bd9jW3 u+pGYJvbuocWGHP1GavYEoveM9sJ8GYxo4A/dwoe9PL6uJxOYIF60UKoKkR+xv7G fPVCMAOOJTjMe0WluRZWgNvKOoH+O7ax1//ROeWdMAjlU2uD5i2i7ydXeM2RmeBt zG+NKGGPntmUZ1ZgdovsiitC1HhWMTk+xJ9660RYeBeUBzIVucBGw1H72iLK2JhI T6cQCFBrXi/Rk+3p2gaHFc83tX4ymcIVn0gJwLvtUKzsN94neeE2zfrDEqbrYYn3 BVt+CIp9yN0Zl3yScImXRXKT380ZroEN4+n7QItdjiP6jKF/fQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFCg6bqIf1E2NG7+pluGDFB/bvt5ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j MDFmMTk0YS0wNzU1LTRmYzktYTk2Mi00MzYzOGIxMDczMWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2MwMWYxOTRhLTA3NTUtNGZjOS1h OTYyLTQzNjM4YjEwNzMxZS9jMDFmMTk0YS0wNzU1LTRmYzktYTk2Mi00MzYzOGIx MDczMWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBATPh8ADBAbP5AAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICFngwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEARzzvJDpAKR2lRWbSkK5A5jsnHJ8x8oMUocUea4VH dEUDmK/h5P5vBuNwy92C58MmzmlgXsXtpOkH8DYAVX7AvhKwfttD3yqo9FbULONq nwEPXxJH3WkkFjX8KccfbbCrex29Bjq/VIEHNVycvvh8fG6Vr3OeRx9QgugthFnG EE8tILRYqua5MnmqRAqzujJS37a75i4NjKvLbGddoT5NAoaIt1qvLJwWnsYeOfZR eYybVzc3RKA2RlrOwLZ1sYIuJJ9suOM84OZO2Uyv+qAnt6PS3aHztRMtSj69gUKy Na/iZQy4SVGg20fAUHbVkcLShBXH2BDpz0dZh9fbA7yepQ== -----END CERTIFICATE-----Generated at Sat May 4 02:11:41 2024 by rpki-client on console-ams.rpki-client.org