$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer File: fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer (raw, json) Hash identifier: DjS2WALFWGBz8y8hAN/MV018nVUDehJC4eF9YtXN/IA= Subject key identifier: E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584774F40836FEF471EEABA83C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Oct 2024 00:45:24 +0000 Certificate not after: Sun 10 Jan 2027 01:45:24 +0000 Subordinate resources: IP: 45.95.209.0/24 IP: 141.193.71.0/24 IP: 203.57.88.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:74:f4:08:36:fe:f4:71:ee:ab:a8:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 7 00:45:24 2024 GMT Not After : Jan 10 01:45:24 2027 GMT Subject: CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d7:e5:91:bd:4e:e1:68:3b:dc:52:66:73:6a: d9:ae:e6:77:cd:c8:17:ed:92:ae:43:f4:02:5f:a9: fd:72:03:a1:e4:a3:86:ed:21:a4:09:90:5c:78:66: 6e:1a:e5:38:c9:1a:99:cf:e3:ac:5f:9f:fe:9e:60: 28:8c:ea:1c:f9:19:aa:78:26:bc:65:a2:1e:42:d7: 24:15:b6:49:b1:71:42:4a:c4:51:19:51:e3:b1:26: ef:eb:ab:a5:a6:50:66:5c:cb:29:9d:1b:87:3a:f5: be:25:d9:ae:fe:65:ca:68:e2:96:f4:fa:e4:8b:8a: 26:7f:52:e5:93:09:24:4c:db:ac:f2:26:fa:44:d7: 4f:c2:6c:c4:ba:de:7d:4a:0f:ab:b4:14:fa:b2:ed: 43:b8:d7:19:a4:ff:b2:8a:a8:17:d8:4f:04:9f:02: c5:80:6e:27:bd:c8:b6:1b:a9:67:da:54:93:26:e3: ac:cc:1e:23:18:73:8f:41:64:89:33:40:a6:5c:bb: 27:e2:52:dd:81:5f:3e:4e:d7:fb:0e:bf:82:ab:16: 74:9f:e8:7b:54:20:49:7e:be:6c:5f:ef:29:6c:25: f9:d9:bc:f3:a2:ae:3e:95:a2:34:b2:e8:5e:f5:f3: d5:2c:3c:93:89:ab:cf:59:c1:42:b3:d1:9d:24:94: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.95.209.0/24 141.193.71.0/24 203.57.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e9:2b:3e:3d:22:9b:e4:d1:39:93:8c:d8:ac:99:82:8e:2f: 0c:2e:3d:47:16:44:32:84:50:f2:37:a4:0f:51:f0:03:1b:6d: de:c8:91:08:c9:28:61:5e:8d:75:3d:cb:e5:93:42:84:c6:1d: 38:af:c4:8f:a6:e1:ec:4b:42:be:12:a0:e5:a9:1f:38:40:b5: 7b:a0:79:be:7c:ca:f9:3f:0a:bc:3a:fb:4c:02:46:47:81:7f: 5c:ea:79:3d:bb:a2:72:d4:2f:6a:1d:49:49:f9:5f:aa:5d:b2: 51:69:31:fe:c2:72:99:60:66:78:f7:83:1e:5d:a4:d3:69:bd: 1d:80:41:2a:a2:1c:a6:e4:51:42:97:ad:13:de:ac:fb:e2:60: 02:76:fb:71:2a:cc:3e:09:02:13:1f:a5:0d:d2:90:1d:b0:6b: 29:b9:f9:7a:f1:d4:67:e0:c3:6f:95:6b:67:45:17:1e:66:a8: 4f:11:e2:3f:3c:80:3a:14:8c:e6:62:45:a0:c2:be:46:6e:8f: aa:22:c0:23:c2:8f:af:95:5b:da:d0:1b:3c:b2:37:ff:10:1d: 64:8f:cf:a6:bf:36:e3:06:e6:89:d3:39:1c:da:1e:60:03:ee: 89:41:bf:0c:b1:d3:29:25:a6:52:25:82:d7:00:0c:16:a2:7e: d8:46:ea:e3 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEd09Ag2/vRx7quoPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTAwNzAwNDUyNFoXDTI3MDExMDAxNDUyNFowLzEtMCsGA1UEAxMk ZmIzZjljYWUtYzNjYS00M2E4LWIxMDMtNGYyZTAzNzMwNjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nflkb1O4Wg73FJmc2rZruZ3zcgX7ZKuQ/QC X6n9cgOh5KOG7SGkCZBceGZuGuU4yRqZz+OsX5/+nmAojOoc+RmqeCa8ZaIeQtck FbZJsXFCSsRRGVHjsSbv66ulplBmXMspnRuHOvW+Jdmu/mXKaOKW9Prki4omf1Ll kwkkTNus8ib6RNdPwmzEut59Sg+rtBT6su1DuNcZpP+yiqgX2E8EnwLFgG4nvci2 G6ln2lSTJuOszB4jGHOPQWSJM0CmXLsn4lLdgV8+Ttf7Dr+CqxZ0n+h7VCBJfr5s X+8pbCX52bzzoq4+laI0suhe9fPVLDyTiavPWcFCs9GdJJQQyQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFOJ4q4X8rlQusa/yiwJe5+nVU/+qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9m YjNmOWNhZS1jM2NhLTQzYTgtYjEwMy00ZjJlMDM3MzA2MjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2ZiM2Y5Y2FlLWMzY2EtNDNhOC1i MTAzLTRmMmUwMzczMDYyNi9mYjNmOWNhZS1jM2NhLTQzYTgtYjEwMy00ZjJlMDM3 MzA2MjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAAtX9EDBACNwUcDBADLOVgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPekr Pj0im+TROZOM2KyZgo4vDC49RxZEMoRQ8jekD1HwAxtt3siRCMkoYV6NdT3L5ZNC hMYdOK/Ej6bh7EtCvhKg5akfOEC1e6B5vnzK+T8KvDr7TAJGR4F/XOp5PbuictQv ah1JSflfql2yUWkx/sJymWBmePeDHl2k02m9HYBBKqIcpuRRQpetE96s++JgAnb7 cSrMPgkCEx+lDdKQHbBrKbn5evHUZ+DDb5VrZ0UXHmaoTxHiPzyAOhSM5mJFoMK+ Rm6PqiLAI8KPr5Vb2tAbPLI3/xAdZI/Ppr824wbmidM5HNoeYAPuiUG/DLHTKSWm UiWC1wAMFqJ+2Ebq4w== -----END CERTIFICATE-----Generated at Thu Nov 21 16:34:08 2024 by rpki-client on console-ams.rpki-client.org