$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer File: d2442e49-fb31-4bf7-aee6-2a7033a57cfa.cer (raw, json) Hash identifier: f0vladhw+orWAQxHM4GVVLUBfFi9oLIgIXcGLhjiIwE= Subject key identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285844B2C2B6005E7335B4015534E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 28 Jan 2024 01:45:20 +0000 Certificate not after: Sat 02 May 2026 00:45:20 +0000 Subordinate resources: AS: 397701 IP: 192.64.12.0/24 IP: 199.193.137.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:b2:c2:b6:00:5e:73:35:b4:01:55:34:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 28 01:45:20 2024 GMT Not After : May 2 00:45:20 2026 GMT Subject: CN=d2442e49-fb31-4bf7-aee6-2a7033a57cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:00:3b:b1:f2:04:81:0f:99:4e:f5:17:06:98: c9:3a:a9:e1:59:61:44:ad:b7:d0:bc:9d:b2:21:90: ef:2c:33:db:b6:2f:19:b9:f7:8e:48:54:c9:e1:d2: 24:ff:7a:a6:8c:06:ce:3c:2b:09:5f:a8:fd:3a:d0: d1:9a:17:0c:18:37:ca:b6:69:ce:db:bd:13:86:ed: 3f:ee:97:ba:3e:c8:86:22:f8:3d:d3:0e:0d:36:eb: 20:4d:92:bd:4a:a7:da:eb:f4:d2:75:c3:95:1f:88: 98:ed:62:8e:04:00:a0:ec:15:f4:d8:63:5e:ea:15: f9:49:a8:ea:25:be:49:41:16:f8:ad:45:4e:14:ae: a7:f0:20:8a:b5:4a:1d:6a:a8:f8:0f:db:38:be:a6: 97:e6:76:b9:e3:3e:53:80:ae:02:14:d2:cf:f5:11: 62:d7:7b:5a:fd:22:f6:9b:14:26:8a:de:a1:de:ff: 4c:3e:17:e9:e0:00:c4:0c:88:5e:eb:77:d0:a7:d0: 0c:07:31:c3:e3:2c:0a:4e:40:56:eb:8e:81:46:57: ff:9d:36:47:2a:a4:cc:8e:15:d5:f4:03:5a:88:0e: 4e:22:7f:7f:1c:3a:03:03:71:e4:48:29:55:8e:1f: a7:b5:8f:f3:55:19:7a:5d:24:a9:35:ba:9a:0c:f8: dd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A2:03:56:95:92:2C:35:BD:99:C2:5A:9B:82:20:77:73:14:1E:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d2442e49-fb31-4bf7-aee6-2a7033a57cfa/d2442e49-fb31-4bf7-aee6-2a7033a57cfa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 192.64.12.0/24 199.193.137.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397701 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5a:47:47:bc:1a:1c:5a:69:2e:42:c7:31:04:70:0c:93:68: 42:29:b4:07:28:d4:4f:81:ca:03:e2:af:d4:1f:2b:34:9c:0d: 2a:0c:50:6a:53:13:b0:f4:b6:8e:8f:f3:a8:ec:23:03:0d:b7: 60:ca:7f:37:4c:c7:f1:1e:62:65:29:2f:93:f9:23:ab:26:5d: 28:c0:49:93:f2:6e:5c:cd:de:72:0d:03:23:7b:13:ba:d5:f6: bb:27:0b:76:85:33:a1:b2:06:69:d5:3e:52:e1:57:59:b0:1d: 65:4e:ed:8b:8a:44:71:e9:73:23:8e:52:29:1d:2d:51:7c:c8: 06:a0:be:66:a2:1d:70:7a:94:12:3c:0c:6c:35:f0:cc:5a:df: bd:3b:17:46:8d:4e:66:30:84:d2:fd:63:bf:eb:ca:93:b3:e5: ce:4f:5c:8f:32:96:03:d8:b3:ef:d0:db:33:52:0a:58:90:86: ba:c9:1f:dc:8b:32:61:b5:fd:ed:db:9e:2f:4e:2c:58:bf:80: 64:8d:b8:11:e6:f5:9c:f0:8b:bc:e5:12:00:8d:3b:13:a7:1f: 84:f7:cd:84:3c:15:5f:7d:49:81:86:99:7e:16:8d:a5:7b:8e: 27:1c:49:62:a3:12:52:c2:2e:18:01:5d:fd:ba:ec:19:f1:a7: f8:57:6f:79 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWESywrYAXnM1tAFVNOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDEyODAxNDUyMFoXDTI2MDUwMjAwNDUyMFowLzEtMCsGA1UEAxMk ZDI0NDJlNDktZmIzMS00YmY3LWFlZTYtMmE3MDMzYTU3Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgA7sfIEgQ+ZTvUXBpjJOqnhWWFErbfQvJ2y IZDvLDPbti8ZufeOSFTJ4dIk/3qmjAbOPCsJX6j9OtDRmhcMGDfKtmnO270Thu0/ 7pe6PsiGIvg90w4NNusgTZK9Sqfa6/TSdcOVH4iY7WKOBACg7BX02GNe6hX5Sajq Jb5JQRb4rUVOFK6n8CCKtUodaqj4D9s4vqaX5na54z5TgK4CFNLP9RFi13ta/SL2 mxQmit6h3v9MPhfp4ADEDIhe63fQp9AMBzHD4ywKTkBW646BRlf/nTZHKqTMjhXV 9ANaiA5OIn9/HDoDA3HkSClVjh+ntY/zVRl6XSSpNbqaDPjdPwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFDeiA1aVkiw1vZnCWpuCIHdzFB59MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k MjQ0MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcwMzNhNTdjZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2QyNDQyZTQ5LWZiMzEtNGJmNy1h ZWU2LTJhNzAzM2E1N2NmYS9kMjQ0MmU0OS1mYjMxLTRiZjctYWVlNi0yYTcwMzNh NTdjZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAQAwDBADHwYkwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhGFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACdaR0e8GhxaaS5CxzEEcAyTaEIptAco1E+BygPi r9QfKzScDSoMUGpTE7D0to6P86jsIwMNt2DKfzdMx/EeYmUpL5P5I6smXSjASZPy blzN3nINAyN7E7rV9rsnC3aFM6GyBmnVPlLhV1mwHWVO7YuKRHHpcyOOUikdLVF8 yAagvmaiHXB6lBI8DGw18Mxa3707F0aNTmYwhNL9Y7/rypOz5c5PXI8ylgPYs+/Q 2zNSCliQhrrJH9yLMmG1/e3bni9OLFi/gGSNuBHm9Zzwi7zlEgCNOxOnH4T3zYQ8 FV99SYGGmX4WjaV7jiccSWKjElLCLhgBXf267Bnxp/hXb3k= -----END CERTIFICATE-----Generated at Sun May 5 22:07:49 2024 by rpki-client on console-fra.rpki-client.org