$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0.cer File: d9c16922-7f72-4551-905c-fa3b40d9efd0.cer (raw, json) Hash identifier: x979i2jqu7rBj9XUPJCKGxZjFvQpA1cQqJMc/UgoXa4= Subject key identifier: 96:BB:FD:D5:17:36:B1:D5:15:C2:5C:F3:43:C7:F2:3B:F0:94:A8:4A Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F432858462B8745C62E5B0C1A452F4800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Jun 2024 00:45:20 +0000 Certificate not after: Mon 14 Sep 2026 00:45:20 +0000 Subordinate resources: AS: 394887 IP: 23.182.192.0/24 IP: 172.110.172.0/22 IP: 2620:134:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:2b:87:45:c6:2e:5b:0c:1a:45:2f:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jun 11 00:45:20 2024 GMT Not After : Sep 14 00:45:20 2026 GMT Subject: CN=d9c16922-7f72-4551-905c-fa3b40d9efd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:13:21:26:30:0c:45:03:37:6c:40:af:2e: 65:36:a5:65:11:5e:2d:c3:45:79:dd:aa:6d:6a:bb: 53:f3:ba:eb:12:5f:a0:07:a1:b5:eb:0d:d5:b9:76: ac:4a:ee:92:82:cc:a6:86:49:14:4e:f1:2c:14:79: 70:3f:50:36:d1:f1:ab:7a:22:b7:70:52:1a:69:ee: 09:4b:37:1b:77:0c:d1:15:76:f3:98:33:7f:37:29: b7:21:0f:27:3e:eb:55:08:04:db:cd:ad:0a:65:80: e1:51:3f:d2:e1:ed:b9:60:9f:ca:0f:bd:66:6b:1d: 62:7b:ba:38:8d:1d:4a:eb:44:59:c3:3e:c6:f4:b4: ad:6f:f1:0a:36:c0:c9:aa:99:77:da:46:de:b4:9e: a6:a7:8e:6f:1c:01:56:21:73:53:cc:26:dc:d6:74: df:a7:08:6e:b4:68:06:43:9b:c1:81:9b:a9:dc:e3: 3e:02:40:0d:d6:d1:f5:3d:d5:72:fb:4a:57:ae:d5: a3:72:5e:f2:57:e8:37:5d:ef:2a:12:79:e7:5c:a2: 9d:0c:45:ed:15:44:28:65:31:49:6f:69:e8:03:71: b2:d9:69:70:ad:c3:a6:6b:e6:24:d9:a2:e4:fd:f0: 70:91:d4:87:fa:92:13:66:88:b2:55:a8:4a:e0:79: af:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:BB:FD:D5:17:36:B1:D5:15:C2:5C:F3:43:C7:F2:3B:F0:94:A8:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.182.192.0/24 172.110.172.0/22 IPv6: 2620:134:c000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394887 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:5f:89:c4:0d:b4:8f:c5:61:e1:b4:b7:c3:0c:ec:8c:7b:cb: 03:f8:32:71:f3:ca:c2:82:2f:09:4a:bc:d9:a9:6b:c8:3c:a1: ae:5b:d8:cc:a8:3e:62:7d:1a:4f:f9:0e:d8:90:b6:e7:8f:ae: 07:35:a9:4b:e3:00:15:87:47:a8:68:80:45:b1:4d:df:ea:c8: 99:cb:5e:fc:9c:27:86:00:32:c3:ef:51:c6:33:5d:f6:33:1a: 5d:23:4f:88:8c:ab:d9:d1:43:3f:e6:07:21:09:f4:28:20:45: a6:27:72:ce:c2:d4:f2:93:19:c6:94:34:b2:66:5b:ea:f0:9b: 21:02:35:e2:fb:e0:87:ba:79:f0:99:04:6c:b3:c0:80:dc:1d: b9:16:96:a9:2b:4a:eb:f0:80:3a:61:72:14:74:d3:7d:36:2f: b8:4a:0f:4b:07:05:64:de:64:46:2a:8b:57:62:d2:f4:1d:08: 95:db:e1:2d:5f:c1:05:ee:3e:d2:ee:7d:ed:76:d4:e5:59:5b: 61:a9:8c:58:67:42:f3:13:65:96:23:ba:1d:4a:35:0f:7f:df: a0:a6:bc:f6:bf:98:82:8c:12:89:a8:a4:bd:eb:89:ac:fa:b0: 34:a5:02:38:3c:8c:8e:ef:e5:23:ae:f0:7e:ad:a3:71:22:25: 8d:76:63:e4 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEYrh0XGLlsMGkUvSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MDYxMTAwNDUyMFoXDTI2MDkxNDAwNDUyMFowLzEtMCsGA1UEAxMk ZDljMTY5MjItN2Y3Mi00NTUxLTkwNWMtZmEzYjQwZDllZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUQTISYwDEUDN2xAry5lNqVlEV4tw0V53apt artT87rrEl+gB6G16w3VuXasSu6SgsymhkkUTvEsFHlwP1A20fGreiK3cFIaae4J SzcbdwzRFXbzmDN/Nym3IQ8nPutVCATbza0KZYDhUT/S4e25YJ/KD71max1ie7o4 jR1K60RZwz7G9LStb/EKNsDJqpl32kbetJ6mp45vHAFWIXNTzCbc1nTfpwhutGgG Q5vBgZup3OM+AkAN1tH1PdVy+0pXrtWjcl7yV+g3Xe8qEnnnXKKdDEXtFUQoZTFJ b2noA3Gy2WlwrcOma+Yk2aLk/fBwkdSH+pITZoiyVahK4HmvBwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFJa7/dUXNrHVFcJc80PH8jvwlKhKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k OWMxNjkyMi03ZjcyLTQ1NTEtOTA1Yy1mYTNiNDBkOWVmZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2Q5YzE2OTIyLTdmNzItNDU1MS05 MDVjLWZhM2I0MGQ5ZWZkMC9kOWMxNjkyMi03ZjcyLTQ1NTEtOTA1Yy1mYTNiNDBk OWVmZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXtsADBAKsbqwwDwQCAAIwCQMHBCYgATTAADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGBocwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjF+JxA20j8Vh4bS3 wwzsjHvLA/gycfPKwoIvCUq82alryDyhrlvYzKg+Yn0aT/kO2JC254+uBzWpS+MA FYdHqGiARbFN3+rImcte/JwnhgAyw+9RxjNd9jMaXSNPiIyr2dFDP+YHIQn0KCBF pidyzsLU8pMZxpQ0smZb6vCbIQI14vvgh7p58JkEbLPAgNwduRaWqStK6/CAOmFy FHTTfTYvuEoPSwcFZN5kRiqLV2LS9B0IldvhLV/BBe4+0u597XbU5VlbYamMWGdC 8xNlliO6HUo1D3/foKa89r+YgowSiaikveuJrPqwNKUCODyMju/lI67wfq2jcSIl jXZj5A== -----END CERTIFICATE-----Generated at Thu Nov 21 15:43:12 2024 by rpki-client on console-fra.rpki-client.org