$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer File: c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer (raw, json) Hash identifier: SygL73qx/bYjChTl0n7eMu93LFoJau0+M6xYov5xyHg= Subject key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285842D1B5B09C31B85219125A0780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Aug 2023 18:15:17 +0000 Certificate not after: Sat 26 Jul 2025 19:06:39 +0000 Subordinate resources: AS: 4471 AS: 4501 AS: 7949 AS: 12129 IP: 65.183.160.0/19 IP: 66.51.144.0/20 IP: 66.103.224.0/19 IP: 67.214.112.0/20 IP: 69.39.64.0/19 IP: 74.126.0.0/19 IP: 199.231.52.0/22 IP: 199.249.0.0/21 IP: 204.232.80.0/20 IP: 205.251.176.0/20 IP: 207.91.192.0/18 IP: 209.124.32.0/19 IP: 209.131.0.0/19 IP: 216.109.192.0/20 IP: 216.150.224.0/20 IP: 216.234.96.0/19 IP: 2001:504:131::/48 IP: 2607:f790::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:d1:b5:b0:9c:31:b8:52:19:12:5a:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 8 18:15:17 2023 GMT Not After : Jul 26 19:06:39 2025 GMT Subject: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:fa:c1:05:c7:f9:43:3e:2b:74:be:f1:b1: f5:0e:b1:e4:7c:07:da:01:cb:21:b9:41:9b:79:55: df:9f:23:ce:f5:08:e1:9a:47:05:dc:fc:7a:33:b8: 85:37:d7:80:7e:9c:0a:4a:87:d3:f6:b3:51:cc:ed: 45:3f:7b:86:6c:7b:10:8c:7b:94:f9:2b:60:e8:d9: 4d:51:74:e7:1e:b7:dd:76:fd:eb:df:eb:61:14:e5: 0a:ff:cd:74:11:d3:7d:87:72:27:ce:eb:c8:ea:01: 10:87:db:9c:73:56:15:00:ac:ef:54:59:3e:08:5d: c9:fe:0a:87:ab:d3:be:ea:5f:36:2e:08:5a:e4:0c: 85:1e:0e:2f:ea:b6:9f:4c:92:7a:1b:03:be:4a:59: 16:1c:b3:7f:68:ab:70:62:9a:6d:1c:22:19:ca:51: 31:0d:f6:23:81:4c:79:ee:9c:5a:b4:31:3f:c6:b0: bc:b1:d1:23:b0:6d:60:75:7a:64:7a:a3:59:47:6d: 7b:75:38:6b:2c:82:79:06:0b:64:d8:fe:e9:b9:b5: 27:d3:63:b6:88:5d:66:e7:bb:7d:cb:fc:0b:c6:86: 13:ff:2b:44:46:30:28:70:07:fe:ae:42:3a:c7:cd: 04:51:d7:f9:20:f3:7c:d3:9c:1f:9d:66:39:a0:c7: 22:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 65.183.160.0/19 66.51.144.0/20 66.103.224.0/19 67.214.112.0/20 69.39.64.0/19 74.126.0.0/19 199.231.52.0/22 199.249.0.0/21 204.232.80.0/20 205.251.176.0/20 207.91.192.0/18 209.124.32.0/19 209.131.0.0/19 216.109.192.0/20 216.150.224.0/20 216.234.96.0/19 IPv6: 2001:504:131::/48 2607:f790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4471 4501 7949 12129 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:51:36:48:fc:5f:ef:c8:56:ae:16:b5:be:cc:73:a3:c9:68: 5c:4e:08:47:ae:96:bf:bd:a7:ac:37:a4:25:ba:04:68:82:04: 8b:ba:9e:d9:f0:54:56:3c:bd:f1:ff:2f:fe:88:4b:2f:74:f7: cc:d2:51:13:94:73:85:75:c9:f2:4d:ba:d7:4b:94:84:fe:c6: 7a:ee:b4:e5:4d:14:49:6a:9e:3b:ca:74:97:22:1c:24:65:6f: 37:4a:cc:16:bd:50:28:c2:c9:63:c0:65:57:e9:65:1b:bd:8c: 45:b3:cc:69:2a:d5:b9:b9:24:ea:ce:62:12:64:af:06:18:57: a5:42:44:68:64:b7:38:8f:5f:0d:0a:dd:86:7a:7b:9f:ec:c0: 15:9a:e8:ea:6d:f1:44:25:e0:9d:9d:f6:cc:1c:85:e8:a5:71: 99:5d:9f:52:87:0f:74:95:81:70:f2:b1:09:91:9d:39:f0:9f: 2b:54:68:db:df:4a:19:26:fe:4a:59:cf:3c:77:24:e0:84:29: 5f:90:c4:8c:8d:12:4b:7d:61:0c:4c:3e:29:3a:ef:9d:35:6e: 9e:a1:db:59:88:a8:f3:90:c8:10:ec:29:b1:60:53:63:65:10: 24:b2:8b:bb:11:6f:5d:f6:31:46:44:c7:dc:51:1c:f7:3a:a0: 6b:10:7e:3b -----BEGIN CERTIFICATE----- MIIHiTCCBnGgAwIBAgIUAQ0Mn0MoWELRtbCcMbhSGRJaB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDgwODE4MTUxN1oXDTI1MDcyNjE5MDYzOVowLzEtMCsGA1UEAxMk YzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3MWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHr6wQXH+UM+K3S+8bH1DrHkfAfaAcshuUGb eVXfnyPO9QjhmkcF3Px6M7iFN9eAfpwKSofT9rNRzO1FP3uGbHsQjHuU+Stg6NlN UXTnHrfddv3r3+thFOUK/810EdN9h3InzuvI6gEQh9ucc1YVAKzvVFk+CF3J/gqH q9O+6l82Lgha5AyFHg4v6rafTJJ6GwO+SlkWHLN/aKtwYpptHCIZylExDfYjgUx5 7pxatDE/xrC8sdEjsG1gdXpkeqNZR217dThrLIJ5Bgtk2P7pubUn02O2iF1m57t9 y/wLxoYT/ytERjAocAf+rkI6x80EUdf5IPN805wfnWY5oMciAQIDAQABo4IEmzCC BJcwHQYDVR0OBBYEFFAwrhgU1KLAZXAf9XQgdtSGDWRvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j NDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2M0MjY5NzZlLWZiZmItNGFkOC1h MjhhLWEyNWY1YjA2NzFkZS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIw NjcxZGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgZMGCCsGAQUF BwEHAQH/BIGDMIGAMGYEAgABMGADBAVBt6ADBARCM5ADBAVCZ+ADBARD1nADBAVF J0ADBAVKfgADBALH5zQDBAPH+QADBATM6FADBATN+7ADBAbPW8ADBAXRfCADBAXR gwADBATYbcADBATYluADBAXY6mAwFgQCAAIwEAMHACABBQQBMQMFACYH95AwJQYI KwYBBQUHAQgBAf8EFjAUoBIwEAICEXcCAhGVAgIfDQICL2EwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHlE2 SPxf78hWrha1vsxzo8loXE4IR66Wv72nrDekJboEaIIEi7qe2fBUVjy98f8v/ohL L3T3zNJRE5RzhXXJ8k2610uUhP7Geu605U0USWqeO8p0lyIcJGVvN0rMFr1QKMLJ Y8BlV+llG72MRbPMaSrVubkk6s5iEmSvBhhXpUJEaGS3OI9fDQrdhnp7n+zAFZro 6m3xRCXgnZ32zByF6KVxmV2fUocPdJWBcPKxCZGdOfCfK1Ro299KGSb+SlnPPHck 4IQpX5DEjI0SS31hDEw+KTrvnTVunqHbWYio85DIEOwpsWBTY2UQJLKLuxFvXfYx RkTH3FEc9zqgaxB+Ow== -----END CERTIFICATE-----Generated at Wed May 1 16:01:42 2024 by rpki-client on console-ams.rpki-client.org