$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0.cer File: d4caa623-a8e2-41b2-b6a7-d9136f5c52e0.cer (raw, json) Hash identifier: 7xQXih7sRv/UCQanstZ/a+LVMyBTbAFypJmC3lrVF74= Subject key identifier: 6F:24:B3:CB:57:04:8B:B0:5D:81:5A:3F:CF:C0:7B:6C:EB:EB:71:D3 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328576D51CC73C042CFC16ECD4D2164 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Sep 2019 13:28:07 +0000 Certificate not after: Tue 04 Sep 2029 13:28:07 +0000 Subordinate resources: AS: 62686 IP: 162.219.8.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Jun 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6e:cd:4d:21:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Sep 4 13:28:07 2019 GMT Not After : Sep 4 13:28:07 2029 GMT Subject: CN=d4caa623-a8e2-41b2-b6a7-d9136f5c52e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:6a:07:c6:29:53:50:9a:14:5e:3f:7e:4f: 91:b4:47:39:f7:bf:54:b5:73:83:35:45:89:c9:a6: db:39:92:df:4b:83:05:d4:ac:30:3e:27:06:27:22: c4:c3:06:4c:a5:fd:41:c9:6a:c2:9d:b8:b7:15:76: fa:ec:18:c9:c6:6d:b6:42:a0:62:96:03:09:53:2e: 6b:38:eb:5d:9f:af:72:c2:8b:63:32:fb:93:4d:08: ae:bf:75:19:65:90:56:6f:0a:66:07:38:77:3b:9d: ae:a8:f5:9f:a3:c1:3a:1a:30:6a:93:fa:5e:ce:b1: c2:9f:c3:b3:c8:eb:be:6f:8d:f1:9d:8f:3b:00:84: c4:16:bd:7d:e7:24:b0:69:17:34:a4:59:7e:ed:60: cc:2b:78:27:f3:99:11:69:7d:1a:b9:5e:c4:ef:59: a7:c4:66:d7:c8:b7:37:75:30:10:74:9c:97:0c:34: 1f:32:f8:de:90:e2:4e:02:06:30:45:ac:7c:5e:09: ad:b1:78:6f:10:80:6c:29:75:33:62:91:4b:2e:16: 52:73:f1:99:d9:d6:4d:23:6a:e1:e9:89:19:bd:a7: 45:7c:28:75:3e:05:5b:13:8c:48:2d:c0:83:ea:bb: 89:dc:6f:ad:fc:44:11:7a:ce:b5:6f:5f:3d:9e:1e: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:24:B3:CB:57:04:8B:B0:5D:81:5A:3F:CF:C0:7B:6C:EB:EB:71:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0/d4caa623-a8e2-41b2-b6a7-d9136f5c52e0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 162.219.8.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:8a:1b:bb:4a:7a:c4:a7:a7:cc:df:55:4e:f3:24:50:e4:80: 33:09:48:7b:13:84:de:38:0a:60:b5:d0:44:cc:8e:23:06:cc: 8e:9e:ba:b2:13:81:7d:f6:85:9d:a4:b2:f9:04:61:1c:e5:02: 0a:f5:08:62:fb:b3:f8:bb:62:ef:10:d9:cf:d8:4d:ab:b4:49: 35:97:9c:d0:52:1d:70:5d:c7:bd:93:6a:12:16:89:52:9d:d3: 18:81:db:78:fa:72:37:8a:03:fb:31:bf:00:41:70:75:b7:ca: 8d:38:42:e0:42:3a:82:a7:b4:9c:46:df:9a:77:21:39:58:4c: 48:8f:0d:0e:64:e5:f4:bb:38:8a:a1:a4:d6:f7:c2:45:77:0a: 18:70:cb:81:c2:4a:9b:5b:8e:b8:56:4d:cc:0c:24:40:43:e1: e6:06:ea:33:f1:ca:3f:61:48:da:23:96:4b:ad:4e:62:55:20: d2:37:f1:23:26:39:ac:4d:d4:e2:30:27:76:63:79:69:64:41: 87:30:f1:58:61:46:83:32:93:9e:47:5c:eb:16:d8:01:80:f3: 6c:5b:83:f8:e9:38:f1:e4:29:ed:64:10:5b:01:39:dc:be:49: 0d:a3:97:35:7c:20:69:6a:26:28:d3:6a:b9:46:2f:65:25:09: e3:db:02:d9 -----BEGIN CERTIFICATE----- MIIHBTCCBe+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bbs1NIWQwCwYJKoZIhvcNAQEL MC8xLTArBgNVBAMTJGY2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUy OTAeFw0xOTA5MDQxMzI4MDdaFw0yOTA5MDQxMzI4MDdaMC8xLTArBgNVBAMTJGQ0 Y2FhNjIzLWE4ZTItNDFiMi1iNmE3LWQ5MTM2ZjVjNTJlMDCCASIwDQYJKoZIhvcN AQEBBQADggEPADCCAQoCggEBAKisagfGKVNQmhReP35PkbRHOfe/VLVzgzVFicmm 2zmS30uDBdSsMD4nBicixMMGTKX9Qclqwp24txV2+uwYycZttkKgYpYDCVMuazjr XZ+vcsKLYzL7k00Irr91GWWQVm8KZgc4dzudrqj1n6PBOhowapP6Xs6xwp/Ds8jr vm+N8Z2POwCExBa9fecksGkXNKRZfu1gzCt4J/OZEWl9GrlexO9Zp8Rm18i3N3Uw EHSclww0HzL43pDiTgIGMEWsfF4JrbF4bxCAbCl1M2KRSy4WUnPxmdnWTSNq4emJ Gb2nRXwodT4FWxOMSC3Ag+q7idxvrfxEEXrOtW9fPZ4ekBkCAwEAAaOCBBswggQX MB0GA1UdDgQWBBRvJLPLVwSLsF2BWj/PwHts6+tx0zCCAcgGCCsGAQUFBwELBIIB ujCCAbYwgaoGCCsGAQUFBzAFhoGdcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDRj YWE2MjMtYThlMi00MWIyLWI2YTctZDkxMzZmNWM1MmUwLzCB0gYIKwYBBQUHMAqG gcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEv NWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4 N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kNGNhYTYyMy1hOGUyLTQxYjItYjZh Ny1kOTEzNmY1YzUyZTAvZDRjYWE2MjMtYThlMi00MWIyLWI2YTctZDkxMzZmNWM1 MmUwLm1mdDAyBggrBgEFBQcwDYYmaHR0cHM6Ly9ycmRwLmFyaW4ubmV0L25vdGlm aWNhdGlvbi54bWwwDwYDVR0TAQH/BAUwAwEB/zCBtwYDVR0fBIGvMIGsMIGpoIGm oIGjhoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtp LXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYz Mi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjYwYzlmMzItYTg3Yy00MzM5 LWEyZjMtNjI5OWEzYjAyZTI5LmNybDAfBgNVHSMEGDAWgBQ8DX1cutaiXvydDtVX 8MokY1SOyjAOBgNVHQ8BAf8EBAMCAQYwgZoGCCsGAQUFBwEBBIGNMIGKMIGHBggr BgEFBQcwAoZ7cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1y cGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBj OWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkuY2VyMB8GCCsGAQUFBwEH AQH/BBAwDjAMBAIAATAGAwQDotsIMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwD0 3jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3 DQEBCwOCAQEAMYobu0p6xKenzN9VTvMkUOSAMwlIexOE3jgKYLXQRMyOIwbMjp66 shOBffaFnaSy+QRhHOUCCvUIYvuz+Lti7xDZz9hNq7RJNZec0FIdcF3HvZNqEhaJ Up3TGIHbePpyN4oD+zG/AEFwdbfKjThC4EI6gqe0nEbfmnchOVhMSI8NDmTl9Ls4 iqGk1vfCRXcKGHDLgcJKm1uOuFZNzAwkQEPh5gbqM/HKP2FI2iOWS61OYlUg0jfx IyY5rE3U4jAndmN5aWRBhzDxWGFGgzKTnkdc6xbYAYDzbFuD+Ok48eQp7WQQWwE5 3L5JDaOXNXwgaWomKNNquUYvZSUJ49sC2Q== -----END CERTIFICATE-----Generated at Thu Jun 6 17:14:57 2024 by rpki-client on console-fra.rpki-client.org