$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer File: ebd609f9-488f-4ccb-b562-f82edd8191dd.cer (raw, json) Hash identifier: F78/zYWjdxRDGm5F96BSpnwhQ/9AVqLecejqaTYXDrg= Subject key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285841E48349A94E43D01F9B319A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 May 2023 19:06:39 +0000 Certificate not after: Sat 24 May 2025 19:06:39 +0000 Subordinate resources: AS: 25623 AS: 26563 AS: 27552 AS: 30071 IP: 198.160.60.0/22 IP: 199.114.248.0/22 IP: 206.53.143.0/24 IP: 208.118.224.0/20 IP: 216.93.240.0/20 IP: 2001:504:47::/48 IP: 2001:4830::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:41:e4:83:49:a9:4e:43:d0:1f:9b:31:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: May 15 19:06:39 2023 GMT Not After : May 24 19:06:39 2025 GMT Subject: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e5:5a:29:67:55:49:c9:c2:d9:f5:eb:44:fc: 92:45:6e:43:41:8b:08:98:53:9f:bc:56:fc:b3:b0: 72:27:41:2b:38:6b:68:5c:b7:d9:3e:e4:82:c5:4e: 76:58:be:e8:09:17:b1:1d:c7:8d:c1:e2:a9:3f:09: 96:e9:d4:15:8f:4b:40:91:fb:30:9c:ed:ae:73:b9: 93:2b:2d:c1:43:35:1e:be:76:2f:96:14:6f:48:dc: 8a:07:4b:a4:2f:19:57:98:a8:06:ce:9a:4e:3c:0a: e8:05:d8:e2:37:34:d2:24:16:1c:f0:56:32:a7:4b: 46:73:2d:d3:53:06:f5:c0:74:d0:f9:bc:d2:d9:4a: 9f:82:40:ae:83:f3:6a:2c:28:4f:77:5f:ee:08:0c: 1a:bb:58:03:83:d5:09:53:a6:b3:95:6b:36:78:f6: b9:f9:8d:b5:d2:8a:54:f0:46:fc:fb:1f:65:5c:7d: 5b:af:30:d2:39:d8:04:5a:5f:3a:5a:a7:f2:22:85: 87:89:21:12:d4:88:d8:b1:42:3b:db:d9:54:02:cb: 27:4a:82:2d:6c:99:3b:0e:29:3e:de:c1:f3:9b:c8: 9d:f3:3b:4b:9b:61:81:da:1e:a5:54:71:0f:12:2a: 06:a3:33:5e:ee:f7:b7:be:75:c5:3d:02:ee:b4:52: 48:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 198.160.60.0/22 199.114.248.0/22 206.53.143.0/24 208.118.224.0/20 216.93.240.0/20 IPv6: 2001:504:47::/48 2001:4830::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25623 26563 27552 30071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5a:83:b8:8d:6c:5c:a9:2b:4e:f6:1b:70:62:04:2c:39:75: 04:9c:f5:8e:cd:0f:61:aa:de:1d:27:74:ae:31:ac:eb:09:5d: 84:46:5a:65:35:47:02:da:24:f5:ae:15:27:3f:44:f4:86:b8: 9d:21:5d:b9:76:cf:a9:76:0a:a4:08:62:95:9b:cf:6f:97:f3: ed:a2:e5:b6:c6:9e:ed:f3:00:60:75:00:28:1d:83:b5:1a:dc: a8:c5:8c:df:83:43:15:a4:2b:c9:0a:97:65:e7:58:55:e9:d0: 09:39:64:ad:3e:1e:92:1b:27:59:f0:a6:bf:72:5b:4c:80:ac: d7:32:c1:62:da:fc:ce:e5:d4:df:93:ce:1e:2f:11:ce:5d:a7: c7:d0:37:e2:0b:2a:e1:8e:42:d5:54:bc:f6:fc:3f:f3:e0:ca: d9:c0:0e:9f:fa:6c:27:0f:d8:68:6c:1f:e9:bc:06:63:ab:de: 19:02:b7:a4:9e:e7:61:79:80:e9:3b:9b:4b:0a:3f:02:21:81: 45:5a:6e:e6:fd:09:e6:1a:25:7d:10:48:59:98:7e:3f:0e:5a: 2d:10:eb:33:ee:51:34:b5:44:1e:11:16:17:18:5f:f6:6a:19: be:22:c8:19:ea:99:d0:32:ff:62:6f:e0:7e:1a:0b:36:37:42: 60:f6:17:63 -----BEGIN CERTIFICATE----- MIIHRDCCBiygAwIBAgIUAQ0Mn0MoWEHkg0mpTkPQH5sxmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDUxNTE5MDYzOVoXDTI1MDUyNDE5MDYzOVowLzEtMCsGA1UEAxMk ZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouVaKWdVScnC2fXrRPySRW5DQYsImFOfvFb8 s7ByJ0ErOGtoXLfZPuSCxU52WL7oCRexHceNweKpPwmW6dQVj0tAkfswnO2uc7mT Ky3BQzUevnYvlhRvSNyKB0ukLxlXmKgGzppOPAroBdjiNzTSJBYc8FYyp0tGcy3T Uwb1wHTQ+bzS2UqfgkCug/NqLChPd1/uCAwau1gDg9UJU6azlWs2ePa5+Y210opU 8Eb8+x9lXH1brzDSOdgEWl86WqfyIoWHiSES1IjYsUI729lUAssnSoItbJk7Dik+ 3sHzm8id8ztLm2GB2h6lVHEPEioGozNe7ve3vnXFPQLutFJIvwIDAQABo4IEVjCC BFIwHQYDVR0OBBYEFP8KG+aMRdNWKjDwQ43CF3JEwKWUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9l YmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ViZDYwOWY5LTQ4OGYtNGNjYi1i NTYyLWY4MmVkZDgxOTFkZC9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4 MTkxZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwTwYIKwYBBQUH AQcBAf8EQDA+MCQEAgABMB4DBALGoDwDBALHcvgDBADONY8DBATQduADBATYXfAw FgQCAAIwEAMHACABBQQARwMFACABSDAwJQYIKwYBBQUHAQgBAf8EFjAUoBIwEAIC ZBcCAmfDAgJroAICdXcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAllqDuI1sXKkrTvYbcGIELDl1BJz1js0P YareHSd0rjGs6wldhEZaZTVHAtok9a4VJz9E9Ia4nSFduXbPqXYKpAhilZvPb5fz 7aLltsae7fMAYHUAKB2DtRrcqMWM34NDFaQryQqXZedYVenQCTlkrT4ekhsnWfCm v3JbTICs1zLBYtr8zuXU35POHi8Rzl2nx9A34gsq4Y5C1VS89vw/8+DK2cAOn/ps Jw/YaGwf6bwGY6veGQK3pJ7nYXmA6TubSwo/AiGBRVpu5v0J5holfRBIWZh+Pw5a LRDrM+5RNLVEHhEWFxhf9moZviLIGeqZ0DL/Ym/gfhoLNjdCYPYXYw== -----END CERTIFICATE-----Generated at Sun May 5 15:39:22 2024 by rpki-client on console-fra.rpki-client.org