$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer File: d07e8c75-75e4-464c-88c0-0f8c6d8757a3.cer (raw, json) Hash identifier: d9ZchiuuUIO2ZIOYeAfdPwm3oUt+qr5L+tI5mGltsJQ= Subject key identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584832E865C0572BFF6FFDADD700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Dec 2024 01:45:33 +0000 Certificate not after: Fri 19 Mar 2027 00:45:33 +0000 Subordinate resources: AS: 11708 IP: 72.22.208.0/20 IP: 75.98.112.0/20 IP: 2605:b080::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Jan 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:e8:65:c0:57:2b:ff:6f:fd:ad:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 14 01:45:33 2024 GMT Not After : Mar 19 00:45:33 2027 GMT Subject: CN=d07e8c75-75e4-464c-88c0-0f8c6d8757a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:29:69:9c:ed:3b:38:ed:c4:0b:72:de:52: ef:e1:a8:f1:14:5b:67:55:5b:20:48:39:07:f3:2f: 11:26:dd:f3:9b:c7:26:b4:78:ab:be:35:68:c6:d5: 1b:a4:6c:d0:c9:ef:2b:a5:04:e8:50:49:6e:a8:98: b4:3c:3c:66:a8:dd:e0:e4:73:47:1f:c5:ed:51:ea: 12:c3:22:f7:1f:5d:6e:81:26:25:8b:15:c3:96:e8: a8:02:8f:04:26:45:7e:25:32:6c:c6:cb:31:e1:09: a4:dc:5b:16:df:c4:a6:f8:29:a6:b8:bc:36:a2:d9: 0c:7f:43:69:0a:a6:5f:c3:69:dd:61:e8:35:61:78: fe:3a:61:f2:8b:39:fa:e8:4d:5f:38:7e:33:da:01: 25:05:23:27:73:9d:73:e0:97:38:82:62:ca:2e:5d: af:c7:ee:7d:89:87:89:14:a8:33:ae:dc:6a:88:1d: 9a:40:08:d7:a6:6f:80:d2:26:a9:f9:7b:db:ec:6e: 51:39:b5:c7:16:dc:b0:06:7f:07:03:2e:d8:a4:6e: 73:9a:72:6a:36:13:1b:46:e5:5c:41:60:83:04:12: 68:dd:e0:6c:dc:19:31:52:30:43:e9:a0:b4:c6:ca: 35:2d:c1:02:df:fd:6f:ea:d6:97:89:ff:9f:cf:d5: 6d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:3C:07:48:66:03:0F:40:20:F6:04:78:A6:7F:59:28:14:C8:F4:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d07e8c75-75e4-464c-88c0-0f8c6d8757a3/d07e8c75-75e4-464c-88c0-0f8c6d8757a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 72.22.208.0/20 75.98.112.0/20 IPv6: 2605:b080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11708 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5b:78:7f:cf:03:9d:e3:48:e9:bd:6e:0d:f5:ae:7a:6e:4e: 41:1e:43:5c:45:c2:e2:c7:d8:e8:4c:6d:c9:db:1e:54:47:46: 0a:0c:41:28:f2:91:c1:19:1c:02:74:73:7a:a5:3e:f4:43:c9: e9:4b:de:d6:7d:1c:c1:e5:4b:8f:20:f1:2d:89:56:15:ae:68: 01:fb:2d:fb:b6:7e:64:b1:df:d3:17:b0:16:0f:b0:ee:ce:a6: 4a:31:10:ef:27:97:a8:fa:19:e8:4d:dd:fa:ec:73:1a:9d:65: 57:88:d8:63:1d:de:73:60:ab:5a:94:7d:0e:69:6d:31:b5:74: 82:b8:c5:9f:04:34:d3:63:15:cb:37:54:be:d7:47:f3:d1:52: 78:d4:2a:a9:90:dc:6f:b8:60:b7:5e:eb:6b:86:d5:d9:cd:8e: 66:37:ee:19:d6:3c:a8:7b:39:8b:c6:ac:29:91:7d:37:17:00: 9e:7b:2e:a8:30:aa:a5:f1:f7:11:84:07:f1:9e:ac:b9:7c:81: 6c:ca:80:ba:7b:e0:9e:25:a1:26:6e:1d:c8:5e:cb:fe:48:a7: 57:14:fb:69:4e:ed:35:fe:63:bb:f2:a0:bf:e3:f1:82:d7:58: 40:99:6f:7a:d1:77:98:d9:2c:94:b7:2d:b7:31:6c:57:ce:a5: c0:72:82:a1 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEgy6GXAVyv/b/2t1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTIxNDAxNDUzM1oXDTI3MDMxOTAwNDUzM1owLzEtMCsGA1UEAxMk ZDA3ZThjNzUtNzVlNC00NjRjLTg4YzAtMGY4YzZkODc1N2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSEpaZztOzjtxAty3lLv4ajxFFtnVVsgSDkH 8y8RJt3zm8cmtHirvjVoxtUbpGzQye8rpQToUEluqJi0PDxmqN3g5HNHH8XtUeoS wyL3H11ugSYlixXDluioAo8EJkV+JTJsxssx4Qmk3FsW38Sm+CmmuLw2otkMf0Np CqZfw2ndYeg1YXj+OmHyizn66E1fOH4z2gElBSMnc51z4Jc4gmLKLl2vx+59iYeJ FKgzrtxqiB2aQAjXpm+A0iap+Xvb7G5RObXHFtywBn8HAy7YpG5zmnJqNhMbRuVc QWCDBBJo3eBs3BkxUjBD6aC0xso1LcEC3/1v6taXif+fz9VtBQIDAQABo4IELzCC BCswHQYDVR0OBBYEFAI8B0hmAw9AIPYEeKZ/WSgUyPToMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MDdlOGM3NS03NWU0LTQ2NGMtODhjMC0wZjhjNmQ4NzU3YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QwN2U4Yzc1LTc1ZTQtNDY0Yy04 OGMwLTBmOGM2ZDg3NTdhMy9kMDdlOGM3NS03NWU0LTQ2NGMtODhjMC0wZjhjNmQ4 NzU3YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARIFtADBARLYnAwDQQCAAIwBwMFACYFsIAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICLbwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAB1t4f88DneNI6b1uDfWu em5OQR5DXEXC4sfY6ExtydseVEdGCgxBKPKRwRkcAnRzeqU+9EPJ6Uve1n0cweVL jyDxLYlWFa5oAfst+7Z+ZLHf0xewFg+w7s6mSjEQ7yeXqPoZ6E3d+uxzGp1lV4jY Yx3ec2CrWpR9DmltMbV0grjFnwQ002MVyzdUvtdH89FSeNQqqZDcb7hgt17ra4bV 2c2OZjfuGdY8qHs5i8asKZF9NxcAnnsuqDCqpfH3EYQH8Z6suXyBbMqAunvgniWh Jm4dyF7L/kinVxT7aU7tNf5ju/Kgv+PxgtdYQJlvetF3mNkslLcttzFsV86lwHKC oQ== -----END CERTIFICATE-----Generated at Tue Jan 14 17:34:43 2025 by rpki-client on console-fra.rpki-client.org