$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.cer File: d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.cer (raw, json) Hash identifier: 2UT4dv4yKLbm4uH0t3nMuYNUPDHpEbRKFWwU0Cyjb9o= Subject key identifier: 6D:25:58:F9:D6:2F:92:B6:BA:9C:09:F6:76:FE:55:B7:BF:37:E5:B2 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584410D6FE61A52E1557434DCEE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Dec 2023 01:45:15 +0000 Certificate not after: Thu 05 Mar 2026 01:45:15 +0000 Subordinate resources: AS: 397557 IP: 23.135.112.0/24 IP: 2602:fddf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:10:d6:fe:61:a5:2e:15:57:43:4d:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 1 01:45:15 2023 GMT Not After : Mar 5 01:45:15 2026 GMT Subject: CN=d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:87:08:56:c7:31:f9:61:b4:87:ac:a2:c3:15: f7:7a:2f:33:cf:31:76:ca:07:e5:b8:2a:24:ac:48: 6c:27:ef:b7:29:86:83:b7:50:66:75:d3:9a:55:fc: 28:cc:de:7a:83:be:ca:32:a3:bc:4f:5f:11:0f:4e: aa:85:71:a3:a7:b6:96:7b:61:23:99:af:b7:12:df: b3:c8:87:eb:82:95:3c:3f:7b:21:3a:d6:97:28:94: 26:ca:ce:ad:db:3c:0e:e3:75:da:11:67:af:81:55: 50:a6:68:4a:d0:9e:40:d6:2d:df:51:e8:bf:36:fc: fc:57:85:c6:7d:ec:06:99:6f:a9:b3:48:4d:5e:ca: db:88:76:85:17:07:8e:dd:61:ef:62:89:b6:7b:5b: 5b:30:7b:d0:d7:63:74:27:f1:f7:2d:e3:3a:3c:de: fa:0e:1b:f0:7e:d4:74:e5:37:e6:b8:ca:96:60:e6: 0c:26:dd:08:00:44:6a:68:5d:71:0c:9a:cb:00:c3: 5a:c3:3b:da:28:9a:c6:6b:92:2b:ab:eb:42:00:ff: cb:bf:48:e1:51:b5:47:5f:b4:1a:16:62:bf:84:b9: b6:02:69:bc:95:d6:e8:8e:2f:ed:86:87:7e:c4:37: 1a:bd:86:7b:64:7f:34:9f:7d:be:a2:b2:67:b8:32: 5d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:25:58:F9:D6:2F:92:B6:BA:9C:09:F6:76:FE:55:B7:BF:37:E5:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9/d5e54f1f-4712-4fc8-be8a-cf367fb1c2c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.135.112.0/24 IPv6: 2602:fddf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397557 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:52:af:e5:2c:43:5d:eb:36:bc:5e:3c:92:23:4f:44:8f:dd: 71:3b:89:96:70:0c:e0:9c:4c:81:2c:ee:54:b5:df:4e:2a:50: 9b:e0:45:fb:16:9e:06:94:23:21:6e:22:58:31:d0:38:30:b0: db:c9:23:32:1f:52:fc:8c:20:a6:17:0c:45:b3:3b:14:0c:5b: 42:35:42:fd:04:97:63:d4:6d:11:25:17:c8:0e:4e:45:70:a9: 23:2e:e8:7a:85:e7:6b:95:f0:30:60:bc:5c:26:7f:1e:1a:a6: 42:45:3e:13:5f:b0:eb:55:75:fc:d2:0d:c4:31:f9:61:cc:32: bd:bb:85:e8:7f:6a:1e:b3:8d:c9:38:55:c7:54:76:89:19:49: 3b:9b:b6:c4:4e:2c:ba:07:ad:98:ef:17:f0:66:31:35:d5:45: f0:0a:fb:58:4e:4b:ca:df:52:c5:55:19:2c:3d:27:5a:a4:c3: 8b:a4:a2:8a:4b:cf:6f:4a:ce:4c:c8:f7:f1:f1:b5:68:18:b8: 90:64:09:c5:e2:7d:21:25:76:3f:ab:10:93:b9:52:47:e3:ca: a4:8b:03:a4:7a:02:0a:45:a5:e8:82:a3:be:a8:35:37:bd:22: 19:f2:d6:75:62:a9:b0:2a:b6:5d:71:63:08:40:cd:c4:ac:08: f4:82:d1:95 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEQQ1v5hpS4VV0NNzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTIwMTAxNDUxNVoXDTI2MDMwNTAxNDUxNVowLzEtMCsGA1UEAxMk ZDVlNTRmMWYtNDcxMi00ZmM4LWJlOGEtY2YzNjdmYjFjMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IcIVscx+WG0h6yiwxX3ei8zzzF2ygfluCok rEhsJ++3KYaDt1BmddOaVfwozN56g77KMqO8T18RD06qhXGjp7aWe2Ejma+3Et+z yIfrgpU8P3shOtaXKJQmys6t2zwO43XaEWevgVVQpmhK0J5A1i3fUei/Nvz8V4XG fewGmW+ps0hNXsrbiHaFFweO3WHvYom2e1tbMHvQ12N0J/H3LeM6PN76DhvwftR0 5TfmuMqWYOYMJt0IAERqaF1xDJrLAMNawzvaKJrGa5Irq+tCAP/Lv0jhUbVHX7Qa FmK/hLm2Amm8ldboji/thod+xDcavYZ7ZH80n32+orJnuDJdNQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFG0lWPnWL5K2upwJ9nb+Vbe/N+WyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k NWU1NGYxZi00NzEyLTRmYzgtYmU4YS1jZjM2N2ZiMWMyYzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Q1ZTU0ZjFmLTQ3MTItNGZjOC1i ZThhLWNmMzY3ZmIxYzJjOS9kNWU1NGYxZi00NzEyLTRmYzgtYmU4YS1jZjM2N2Zi MWMyYzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXh3AwDgQCAAIwCAMGBCYC/d8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYQ9TBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCJUq/lLENd6za8XjySI09Ej91x O4mWcAzgnEyBLO5Utd9OKlCb4EX7Fp4GlCMhbiJYMdA4MLDbySMyH1L8jCCmFwxF szsUDFtCNUL9BJdj1G0RJRfIDk5FcKkjLuh6hedrlfAwYLxcJn8eGqZCRT4TX7Dr VXX80g3EMflhzDK9u4Xof2oes43JOFXHVHaJGUk7m7bETiy6B62Y7xfwZjE11UXw CvtYTkvK31LFVRksPSdapMOLpKKKS89vSs5MyPfx8bVoGLiQZAnF4n0hJXY/qxCT uVJH48qkiwOkegIKRaXogqO+qDU3vSIZ8tZ1YqmwKrZdcWMIQM3ErAj0gtGV -----END CERTIFICATE-----Generated at Sun Apr 28 03:28:00 2024 by rpki-client on console-ams.rpki-client.org