$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592.cer File: da61168f-5649-4fda-acc2-e65f377d2592.cer (raw, json) Hash identifier: ETGnbIzJTtRKC1Qq9Gz5C8+LX1z8I2By+UuTc5huvRc= Subject key identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285842CE874575B6B5913F3C873600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Aug 2023 14:54:20 +0000 Certificate not after: Fri 27 Jun 2025 19:06:39 +0000 Subordinate resources: AS: 1787 AS: 13619 AS: 17168 AS: 20186 AS: 21931 AS: 23109 AS: 40319 AS: 398928 AS: 398934 AS: 399616 IP: 155.46.96.0 -- 155.46.255.255 IP: 159.42.128.0/17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:ce:87:45:75:b6:b5:91:3f:3c:87:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 7 14:54:20 2023 GMT Not After : Jun 27 19:06:39 2025 GMT Subject: CN=da61168f-5649-4fda-acc2-e65f377d2592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fd:6b:6f:9c:73:c0:82:1d:95:5d:9a:11:93: 4a:1d:21:86:1c:03:04:d6:06:f0:97:ee:0f:bd:f0: 64:00:96:61:3d:b0:b8:82:e9:93:11:6b:da:7b:39: df:9a:b0:d0:ee:af:45:b8:c2:a9:ce:23:c3:65:37: 17:6e:bb:fd:48:50:05:9b:28:36:5f:3f:6a:1b:7f: 9a:31:bd:44:8f:19:09:c5:e6:1b:8f:93:8b:8d:3f: 67:79:55:b9:ea:d6:c9:87:78:a2:54:88:dc:91:d9: db:d6:ef:a9:2e:21:e7:5b:89:0d:a1:a7:90:29:51: 36:8f:eb:ff:a0:37:b3:f3:ab:49:35:0c:7a:98:f6: a0:89:31:f6:e1:18:57:02:50:36:0f:1e:19:14:1f: d0:c2:2a:a0:be:b6:b8:a6:93:6b:98:02:4e:fa:2b: 50:89:a2:07:11:a9:a2:19:bd:23:3e:ec:dc:29:52: c5:89:4a:5c:b0:73:19:38:4c:76:36:3f:d0:d6:f3: 0e:5f:83:cc:f8:1c:24:eb:34:f8:88:d6:77:d8:e2: 40:c4:28:ae:fc:5d:0b:d0:74:48:0b:a5:75:2b:fa: 89:53:75:f4:93:81:18:0f:d9:ad:80:9c:2f:ac:ea: c9:26:12:d8:ba:e7:6e:11:2e:1b:16:b6:8f:56:bf: b4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:63:B3:0C:53:26:3A:D5:6A:03:5A:74:8C:93:14:15:CF:00:0C:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/da61168f-5649-4fda-acc2-e65f377d2592/da61168f-5649-4fda-acc2-e65f377d2592.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 155.46.96.0-155.46.255.255 159.42.128.0/17 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1787 13619 17168 20186 21931 23109 40319 398928 398934 399616 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5d:04:5d:72:d9:fd:ff:35:52:90:4f:f4:27:55:49:07:1a: 6b:2e:15:85:ac:9a:6d:e3:1c:cc:a4:04:e9:a2:e5:22:00:7f: 6c:fc:84:5d:7f:54:03:89:16:5a:08:0d:a1:ac:b4:28:aa:7e: 8f:45:24:e2:93:d6:4d:ae:32:11:f8:37:a4:31:d7:90:b7:f4: 65:38:0b:03:67:cb:61:a2:4e:14:fb:aa:dd:17:01:10:4e:03: 09:6b:fe:3d:ee:59:ba:a1:8c:d1:82:f0:cb:45:de:d7:46:2d: a8:8b:a1:e4:b2:04:98:42:3a:78:69:53:44:c9:92:87:1b:84: e3:a0:1a:f5:b8:b9:b3:dd:dc:20:78:b0:42:3e:88:a1:3c:d0: b0:50:54:ca:65:3d:e6:8d:70:a3:14:2e:51:00:cd:0e:15:20: 1f:a5:25:d4:6b:16:e2:de:53:53:2a:79:b4:d9:44:62:89:07: 89:1f:53:47:ae:c1:f3:df:06:12:b3:69:0a:b2:ad:4c:f3:e1: b3:7a:f8:79:0a:ac:35:8f:3d:10:8b:ae:b5:4d:2d:24:98:ab: 73:b2:6f:f5:33:3e:74:ac:06:51:3c:53:97:6a:66:31:ee:f7: 64:44:c0:f9:41:51:7b:4b:e1:cb:18:39:7d:f3:3c:a7:47:0a: 87:57:a1:fd -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWELOh0V1trWRPzyHNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDgwNzE0NTQyMFoXDTI1MDYyNzE5MDYzOVowLzEtMCsGA1UEAxMk ZGE2MTE2OGYtNTY0OS00ZmRhLWFjYzItZTY1ZjM3N2QyNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P1rb5xzwIIdlV2aEZNKHSGGHAME1gbwl+4P vfBkAJZhPbC4gumTEWvaeznfmrDQ7q9FuMKpziPDZTcXbrv9SFAFmyg2Xz9qG3+a Mb1EjxkJxeYbj5OLjT9neVW56tbJh3iiVIjckdnb1u+pLiHnW4kNoaeQKVE2j+v/ oDez86tJNQx6mPagiTH24RhXAlA2Dx4ZFB/Qwiqgvra4ppNrmAJO+itQiaIHEami Gb0jPuzcKVLFiUpcsHMZOEx2Nj/Q1vMOX4PM+Bwk6zT4iNZ32OJAxCiu/F0L0HRI C6V1K/qJU3X0k4EYD9mtgJwvrOrJJhLYuuduES4bFraPVr+0sQIDAQABo4IETzCC BEswHQYDVR0OBBYEFOBjswxTJjrVagNadIyTFBXPAAxYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k YTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3ZDI1OTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2RhNjExNjhmLTU2NDktNGZkYS1h Y2MyLWU2NWYzNzdkMjU5Mi9kYTYxMTY4Zi01NjQ5LTRmZGEtYWNjMi1lNjVmMzc3 ZDI1OTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwLAYIKwYBBQUH AQcBAf8EHTAbMBkEAgABMBMwCwMEBZsuYAMDAJsuAwQHnyqAMEEGCCsGAQUFBwEI AQH/BDIwMKAuMCwCAgb7AgI1MwICQxACAk7aAgJVqwICWkUCAwCdfwIDBhZQAgMG FlYCAwYZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQASXQRdctn9/zVSkE/0J1VJBxprLhWFrJpt4xzMpATp ouUiAH9s/IRdf1QDiRZaCA2hrLQoqn6PRSTik9ZNrjIR+DekMdeQt/RlOAsDZ8th ok4U+6rdFwEQTgMJa/497lm6oYzRgvDLRd7XRi2oi6HksgSYQjp4aVNEyZKHG4Tj oBr1uLmz3dwgeLBCPoihPNCwUFTKZT3mjXCjFC5RAM0OFSAfpSXUaxbi3lNTKnm0 2URiiQeJH1NHrsHz3wYSs2kKsq1M8+Gzevh5Cqw1jz0Qi661TS0kmKtzsm/1Mz50 rAZRPFOXamYx7vdkRMD5QVF7S+HLGDl98zynRwqHV6H9 -----END CERTIFICATE-----Generated at Thu May 2 22:32:09 2024 by rpki-client on console-ams.rpki-client.org