$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81.cer File: dc81e524-050d-4a15-9043-39314922cc81.cer (raw, json) Hash identifier: VR4zTpfneCNvGytMV/rhrrwvoYVAccghG6zZevKhrB8= Subject key identifier: 12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843FA8183B8844B9F492C63F000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Nov 2023 01:45:15 +0000 Certificate not after: Wed 25 Feb 2026 01:45:15 +0000 Subordinate resources: AS: 400146 IP: 23.136.136.0/24 IP: 66.33.24.0/21 IP: 66.33.80.0/21 IP: 2606:d240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:fa:81:83:b8:84:4b:9f:49:2c:63:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 23 01:45:15 2023 GMT Not After : Feb 25 01:45:15 2026 GMT Subject: CN=dc81e524-050d-4a15-9043-39314922cc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:7a:4c:79:f4:38:0d:df:44:28:37:fc:e5: 6e:7c:81:8a:85:7a:a5:d7:f1:57:47:e1:21:b3:bc: 4a:5e:b2:d7:84:1b:ff:ba:af:30:44:9b:07:6b:ae: a6:bd:b9:0b:60:f4:2d:16:28:f1:8f:1a:03:6f:a9: b9:8f:b4:19:0c:55:e5:f8:97:1c:1c:aa:e7:84:10: 67:a6:00:be:22:a3:4c:3b:e3:72:b0:8d:13:44:1e: 88:95:72:21:63:ff:50:72:92:25:c3:97:8c:4e:d7: ee:d8:1f:ba:0f:96:df:ba:9c:e0:90:96:e1:4b:40: 30:27:77:36:64:bf:00:a0:30:d6:ef:3a:87:be:63: 4f:29:39:b8:36:e8:c8:48:8c:5c:fe:0b:a0:20:5c: 4d:a0:04:93:bd:5d:87:c2:38:53:17:9a:9c:f9:0c: 98:d9:16:f5:ec:69:f2:8b:71:03:28:71:5a:75:c9: 1a:07:f0:f4:fb:69:eb:7c:a3:c7:74:4a:48:86:d5: 41:72:90:50:00:91:a3:f1:2e:ed:a6:9a:ae:b6:8c: 8c:af:e7:09:e8:c0:de:27:70:1c:24:bc:fa:9f:13: 7d:1e:db:12:9b:87:61:24:6b:67:58:20:37:fb:42: 35:9a:f5:a5:1d:e8:81:29:fd:65:75:f0:21:a2:8b: 00:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:C3:3E:9D:1C:2C:9B:21:56:7F:E9:B3:E8:03:87:FD:C6:56:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc81e524-050d-4a15-9043-39314922cc81/dc81e524-050d-4a15-9043-39314922cc81.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.136.136.0/24 66.33.24.0/21 66.33.80.0/21 IPv6: 2606:d240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400146 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6c:3b:5e:69:c3:5d:8b:f7:7d:13:b4:e4:41:32:87:17:26: 4b:3f:68:a3:59:de:7e:2c:96:56:c1:8f:34:d1:21:65:e0:f1: d8:0b:55:52:b2:f7:ef:f0:c6:49:29:6a:5e:47:aa:c1:9d:37: 88:71:2c:45:8d:a2:b0:fc:f8:78:c1:60:c2:d2:3f:da:95:97: fb:2d:29:19:e7:11:b6:a0:ca:15:6b:6f:a8:79:6b:b8:8c:b8: 9c:26:e6:d0:7b:d3:2b:49:4d:95:f0:19:4f:52:e4:c1:b9:3e: d2:6b:2f:91:f7:e6:72:ec:9e:a3:11:c7:66:e5:33:d0:62:e5: b8:fa:da:75:d0:7d:dc:7e:76:45:53:a9:82:36:af:03:97:d0: 72:97:f3:e0:00:4e:ea:b6:f9:c5:e1:01:fa:b5:da:f3:46:9c: 36:6d:49:9b:77:2b:e5:a5:b2:be:d6:91:8c:51:35:de:8c:12: 33:d2:85:6e:56:f4:7d:c6:66:c8:68:1a:f7:5e:71:24:c5:b2: ef:c3:4e:05:5b:fa:b5:63:ae:d0:fb:9e:cc:f7:db:3a:87:a3: 88:9b:f8:3c:b4:98:74:c6:f1:c6:cf:d7:3e:7b:d3:ea:36:1a: 78:24:62:83:4b:49:a1:0a:36:69:79:ba:26:f3:d6:f0:9d:1d: 05:d0:c7:88 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEP6gYO4hEufSSxj8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTEyMzAxNDUxNVoXDTI2MDIyNTAxNDUxNVowLzEtMCsGA1UEAxMk ZGM4MWU1MjQtMDUwZC00YTE1LTkwNDMtMzkzMTQ5MjJjYzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ56THn0OA3fRCg3/OVufIGKhXql1/FXR+Eh s7xKXrLXhBv/uq8wRJsHa66mvbkLYPQtFijxjxoDb6m5j7QZDFXl+JccHKrnhBBn pgC+IqNMO+NysI0TRB6IlXIhY/9QcpIlw5eMTtfu2B+6D5bfupzgkJbhS0AwJ3c2 ZL8AoDDW7zqHvmNPKTm4NujISIxc/gugIFxNoASTvV2HwjhTF5qc+QyY2Rb17Gny i3EDKHFadckaB/D0+2nrfKPHdEpIhtVBcpBQAJGj8S7tppqutoyMr+cJ6MDeJ3Ac JLz6nxN9HtsSm4dhJGtnWCA3+0I1mvWlHeiBKf1ldfAhoosADwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFBIqwz6dHCybIVZ/6bPoA4f9xlZYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9k YzgxZTUyNC0wNTBkLTRhMTUtOTA0My0zOTMxNDkyMmNjODEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2RjODFlNTI0LTA1MGQtNGExNS05 MDQzLTM5MzE0OTIyY2M4MS9kYzgxZTUyNC0wNTBkLTRhMTUtOTA0My0zOTMxNDky MmNjODEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXiIgDBANCIRgDBANCIVAwDQQCAAIwBwMFACYG 0kAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhsSMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAERsO15pw12L 930TtORBMocXJks/aKNZ3n4sllbBjzTRIWXg8dgLVVKy9+/wxkkpal5HqsGdN4hx LEWNorD8+HjBYMLSP9qVl/stKRnnEbagyhVrb6h5a7iMuJwm5tB70ytJTZXwGU9S 5MG5PtJrL5H35nLsnqMRx2blM9Bi5bj62nXQfdx+dkVTqYI2rwOX0HKX8+AATuq2 +cXhAfq12vNGnDZtSZt3K+Wlsr7WkYxRNd6MEjPShW5W9H3GZshoGvdecSTFsu/D TgVb+rVjrtD7nsz32zqHo4ib+Dy0mHTG8cbP1z570+o2GngkYoNLSaEKNml5uibz 1vCdHQXQx4g= -----END CERTIFICATE-----Generated at Thu Nov 21 16:34:01 2024 by rpki-client on console-ams.rpki-client.org