$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960.cer File: cfb7a881-7ab4-481b-a9b2-22789676f960.cer (raw, json) Hash identifier: SJwHw2fuLii53g3wtqcqcQlmdgJg5erlVGID7zywGnw= Subject key identifier: B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858486528B6A241D56A92ADD63200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jan 2025 01:45:33 +0000 Certificate not after: Tue 06 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 62788 IP: 67.219.136.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:65:28:b6:a2:41:d5:6a:92:ad:d6:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 1 01:45:33 2025 GMT Not After : Apr 6 00:45:33 2027 GMT Subject: CN=cfb7a881-7ab4-481b-a9b2-22789676f960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:29:b8:b1:70:04:14:7c:a3:d8:b3:88:9c:13: 09:e8:60:ae:c0:d8:0c:fc:55:0a:40:84:fb:aa:6e: db:a9:1f:23:19:8c:aa:c8:f0:d0:d8:f8:08:3f:65: 2c:1f:1a:3f:a0:eb:5a:2c:a3:10:c4:4f:39:d7:53: c5:94:ea:7b:8a:6c:9e:05:a3:4c:b3:4b:81:eb:e3: 9e:bd:cf:8c:47:75:f2:53:1f:03:ed:2b:04:b8:44: b1:05:6d:25:e4:b3:ce:bb:c5:d4:4e:f2:0d:58:c3: 6c:19:ac:48:4f:4b:74:59:cf:74:53:ad:a2:b5:dd: 77:fe:2d:e0:90:e0:b8:3c:59:bc:d0:7a:1e:6d:dd: e1:d7:29:bd:26:dd:ad:7b:dd:08:23:e4:83:98:8f: 04:3c:9c:79:0d:69:33:2a:f5:08:db:ca:b5:1c:dd: 1a:d7:a8:9d:42:90:81:19:92:0a:b6:a9:30:fe:a8: 16:24:6d:a2:b6:e9:5b:df:7d:d8:b4:a2:88:80:8c: 51:9f:40:56:68:6d:9d:26:08:a6:8a:b2:2b:17:be: a4:e5:95:04:b2:6e:95:21:dd:30:e1:f6:cf:78:1f: 5d:af:95:4f:31:ab:d6:d0:1a:2f:8c:bf:71:27:06: 2c:56:b7:f7:15:cc:91:7b:6e:63:9a:42:f5:23:de: ba:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:21:90:FE:DB:D8:52:17:6E:25:F9:54:EA:E3:92:79:33:1A:95:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cfb7a881-7ab4-481b-a9b2-22789676f960/cfb7a881-7ab4-481b-a9b2-22789676f960.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 67.219.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62788 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:e0:ea:de:45:ce:c7:6a:9b:b1:73:8c:c5:19:c7:f6:47:7b: 36:34:23:68:d9:0d:d0:48:4c:04:95:e8:19:1e:de:fe:f5:94: 1c:5c:dc:2d:e7:db:c5:e6:4a:79:1a:03:be:a6:ae:2d:be:46: f4:de:90:23:24:16:db:6f:12:67:54:54:ef:e5:a5:66:e4:50: 44:13:d5:28:e5:d3:3d:aa:0d:2d:6c:6d:57:8e:ce:f9:d0:75: 40:a7:32:db:11:37:8d:e7:54:61:33:f6:27:68:35:dd:78:23: 78:db:f4:fc:1a:fb:fc:05:ff:d4:79:22:dc:a3:bb:dc:6b:ed: 1e:a6:2c:6e:2a:c4:a7:2f:00:82:38:31:06:75:c8:3d:8a:96: 0c:b8:91:b7:85:19:7a:e1:d7:72:33:22:64:b7:af:3e:39:b3: 7a:2b:0d:e4:fc:b0:35:c3:1d:87:ca:a0:6e:41:ee:68:68:b2: 41:ca:cc:64:a0:a9:f8:9b:64:d1:35:20:6d:77:d4:49:f1:fa: ad:55:2e:42:2e:3c:47:ee:67:f0:5f:33:4a:68:d5:8d:02:da: 07:74:83:73:48:f9:9a:c3:08:16:15:fc:45:f9:66:ea:cd:00: 50:b9:bf:76:fe:49:db:db:3b:43:69:c7:98:32:9e:07:1c:5c: 2d:28:52:f3 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEhlKLaiQdVqkq3WMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDEwMTAxNDUzM1oXDTI3MDQwNjAwNDUzM1owLzEtMCsGA1UEAxMk Y2ZiN2E4ODEtN2FiNC00ODFiLWE5YjItMjI3ODk2NzZmOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwim4sXAEFHyj2LOInBMJ6GCuwNgM/FUKQIT7 qm7bqR8jGYyqyPDQ2PgIP2UsHxo/oOtaLKMQxE8511PFlOp7imyeBaNMs0uB6+Oe vc+MR3XyUx8D7SsEuESxBW0l5LPOu8XUTvINWMNsGaxIT0t0Wc90U62itd13/i3g kOC4PFm80Hoebd3h1ym9Jt2te90II+SDmI8EPJx5DWkzKvUI28q1HN0a16idQpCB GZIKtqkw/qgWJG2itulb333YtKKIgIxRn0BWaG2dJgimirIrF76k5ZUEsm6VId0w 4fbPeB9dr5VPMavW0BovjL9xJwYsVrf3FcyRe25jmkL1I966OQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLchkP7b2FIXbiX5VOrjknkzGpVaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9j ZmI3YTg4MS03YWI0LTQ4MWItYTliMi0yMjc4OTY3NmY5NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2NmYjdhODgxLTdhYjQtNDgxYi1h OWIyLTIyNzg5Njc2Zjk2MC9jZmI3YTg4MS03YWI0LTQ4MWItYTliMi0yMjc4OTY3 NmY5NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJD24gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID APVEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAC/g6t5Fzsdqm7FzjMUZx/ZHezY0I2jZDdBITASV6Bke3v71 lBxc3C3n28XmSnkaA76mri2+RvTekCMkFttvEmdUVO/lpWbkUEQT1Sjl0z2qDS1s bVeOzvnQdUCnMtsRN43nVGEz9idoNd14I3jb9Pwa+/wF/9R5Ityju9xr7R6mLG4q xKcvAII4MQZ1yD2Klgy4kbeFGXrh13IzImS3rz45s3orDeT8sDXDHYfKoG5B7mho skHKzGSgqfibZNE1IG131Enx+q1VLkIuPEfuZ/BfM0po1Y0C2gd0g3NI+ZrDCBYV /EX5ZurNAFC5v3b+SdvbO0Npx5gyngccXC0oUvM= -----END CERTIFICATE-----Generated at Mon Jan 20 04:38:34 2025 by rpki-client on console-fra.rpki-client.org