$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer File: cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer (raw, json) Hash identifier: 9eK7DyLe9J1EXKtn4p73kKtPc9F2J1RJocoTGSTXVc8= Subject key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844BDED71E93E0C569EC2652600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 01 Feb 2024 01:45:20 +0000 Certificate not after: Wed 06 May 2026 00:45:20 +0000 Subordinate resources: AS: 26279 IP: 208.71.16.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:bd:ed:71:e9:3e:0c:56:9e:c2:65:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 1 01:45:20 2024 GMT Not After : May 6 00:45:20 2026 GMT Subject: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:76:88:b0:62:d4:ee:76:73:9e:05:cb:d7: ab:f5:c1:f0:dd:04:1f:82:7d:16:2e:83:02:5a:3e: ea:2e:2f:d7:18:55:82:2e:61:5b:f5:ce:48:4a:4f: 32:fb:02:26:b1:73:98:d1:ea:12:a3:23:73:9f:98: e2:20:62:3e:d8:bd:01:34:f2:53:2b:1e:08:c6:a5: b4:4b:5e:f8:6f:a2:4a:59:3c:3a:27:e6:0a:18:62: fc:82:15:92:5e:33:72:40:ea:22:a2:9a:5f:02:ff: e6:7e:4a:b4:3f:f6:f9:68:df:d7:8d:c3:fc:9e:75: 81:e9:38:46:93:cb:f9:a6:e4:94:ac:c8:73:90:38: f1:c9:da:48:11:24:0f:32:0b:5d:0b:f8:6d:d2:ab: 1f:48:1d:1e:77:fa:d7:87:c7:5a:54:11:9b:b9:74: ee:eb:b6:1d:dc:30:ea:55:fe:26:d4:7c:e1:9e:0a: 4c:18:8e:b9:ab:e8:63:58:b7:f8:00:d6:42:f1:56: ab:5b:de:30:60:6b:d3:d1:63:a1:5d:0a:5f:6b:0c: 4d:89:e4:a1:ec:a8:82:02:a3:f5:c4:88:15:fa:3a: f1:f0:ad:85:c3:fc:42:8c:46:98:f1:b2:69:e6:6d: 53:cb:7d:62:0a:8e:a8:d6:af:15:5d:37:2c:6b:73: 88:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 208.71.16.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26279 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:76:0b:84:9c:d6:d8:6b:0a:6e:7c:32:c5:1f:2b:bc:df:9b: 67:be:69:e0:e2:04:6c:27:23:eb:a6:8e:cf:6c:8a:8d:3e:43: 2b:ee:bc:f8:e5:b2:16:a8:be:83:2b:1a:17:52:dd:a7:0b:7d: d4:d7:95:06:63:5d:e0:71:e6:a9:69:64:84:fa:8e:59:3a:18: 29:f9:85:50:78:f5:b1:00:56:99:9e:f6:dd:3f:0a:b0:e5:63: 3a:d3:c6:c1:a3:1a:0b:11:cf:bb:8a:4c:59:bd:4e:87:d4:bb: 55:77:43:4d:3c:74:c5:25:17:cb:6e:07:76:19:df:62:98:78: f4:a3:65:c4:03:07:1b:69:cf:19:2b:9a:e1:17:ef:47:44:4a: 1a:f5:60:9c:96:a1:c7:89:66:55:55:10:44:c2:db:7f:b1:63: e0:37:3d:1c:ee:67:4d:01:1d:24:17:7b:8a:0e:f9:d2:f6:73: ba:31:75:16:6f:ab:7d:83:4d:7a:7a:5d:3e:da:72:95:0a:f4: 92:f6:37:8c:e6:16:d1:52:96:43:b9:d1:d3:45:e3:36:0f:f6: 63:58:e3:27:5f:5f:45:36:28:af:72:c8:a9:e4:63:b4:f9:61: 52:0f:80:2c:ba:f4:eb:38:c3:bd:f2:af:91:f6:1f:36:bb:c6: 5a:13:4a:2b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWES97XHpPgxWnsJlJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDIwMTAxNDUyMFoXDTI2MDUwNjAwNDUyMFowLzEtMCsGA1UEAxMk Y2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYwNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nJ2iLBi1O52c54Fy9er9cHw3QQfgn0WLoMC Wj7qLi/XGFWCLmFb9c5ISk8y+wImsXOY0eoSoyNzn5jiIGI+2L0BNPJTKx4IxqW0 S174b6JKWTw6J+YKGGL8ghWSXjNyQOoioppfAv/mfkq0P/b5aN/XjcP8nnWB6ThG k8v5puSUrMhzkDjxydpIESQPMgtdC/ht0qsfSB0ed/rXh8daVBGbuXTu67Yd3DDq Vf4m1HzhngpMGI65q+hjWLf4ANZC8VarW94wYGvT0WOhXQpfawxNieSh7KiCAqP1 xIgV+jrx8K2Fw/xCjEaY8bJp5m1Ty31iCo6o1q8VXTcsa3OIGQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAY/+o+zYL8OggsyF6fL029aRBOqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j YmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NiZmUzM2E4LTYxYjgtNGUzZC1h Yzc1LTZhM2NkZTJmMDU3YS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUy ZjA1N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQRxAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ZqcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAPnYLhJzW2GsKbnwyxR8rvN+bZ75p4OIEbCcj66aOz2yKjT5D K+68+OWyFqi+gysaF1Ldpwt91NeVBmNd4HHmqWlkhPqOWToYKfmFUHj1sQBWmZ72 3T8KsOVjOtPGwaMaCxHPu4pMWb1Oh9S7VXdDTTx0xSUXy24HdhnfYph49KNlxAMH G2nPGSua4RfvR0RKGvVgnJahx4lmVVUQRMLbf7Fj4Dc9HO5nTQEdJBd7ig750vZz ujF1Fm+rfYNNenpdPtpylQr0kvY3jOYW0VKWQ7nR00XjNg/2Y1jjJ19fRTYor3LI qeRjtPlhUg+ALLr06zjDvfKvkfYfNrvGWhNKKw== -----END CERTIFICATE-----Generated at Sat May 4 21:35:28 2024 by rpki-client on console-fra.rpki-client.org