$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer File: 8f589d08-3d68-400f-a862-4c24e0bff4c9.cer (raw, json) Hash identifier: pEa+uKT/CW37RmHiQrMfVSh4CFG7o4HJbudNB4oQexk= Subject key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843F7B6D7B3353202EDDE120900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Nov 2023 01:45:16 +0000 Certificate not after: Tue 24 Feb 2026 01:45:16 +0000 Subordinate resources: AS: 16417 AS: 30214 -- 30215 AS: 30238 AS: 40427 IP: 23.90.96.0/19 IP: 68.232.128.0/19 IP: 139.138.24.0 -- 139.138.47.255 IP: 139.138.56.0/21 IP: 184.94.240.0/20 IP: 204.15.80.0/22 IP: 207.54.64.0/19 IP: 208.90.56.0/21 IP: 216.71.128.0/19 IP: 2620:101:2000::/43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:f7:b6:d7:b3:35:32:02:ed:de:12:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Nov 22 01:45:16 2023 GMT Not After : Feb 24 01:45:16 2026 GMT Subject: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:6e:eb:d2:30:10:35:86:56:47:18:0b:66: ba:8e:21:66:55:4f:d7:1c:16:76:5a:0e:63:a9:11: 82:bb:54:de:0c:bc:e9:2d:c4:5d:a1:43:98:43:a7: a7:83:95:dd:71:f9:36:81:e8:38:39:91:bd:b5:5c: 4b:71:da:65:87:f0:ef:38:36:3f:bc:09:0a:a4:72: 0b:7f:a8:ca:10:07:24:9e:dc:9a:ae:fd:6a:29:e2: 86:c8:24:a8:b9:45:b9:ac:12:1f:b1:0e:4d:7d:8f: bb:4d:e6:14:2f:fd:35:2b:ee:ed:6a:ab:ec:b9:d7: 13:0b:b6:a5:31:a0:24:b2:a3:b5:78:46:77:cb:9b: a9:ef:ad:a1:ae:03:a7:49:de:27:1c:47:b7:d9:bd: ff:14:0c:70:8b:f1:fb:fc:9a:01:11:b5:4d:61:0e: 58:bc:33:d1:e4:ac:37:38:01:af:98:88:cf:fb:27: 25:19:f0:6f:29:62:d8:2c:91:1a:c2:67:43:4a:7e: 86:e9:09:6e:ea:9f:68:a1:93:6e:23:34:f5:d7:af: e2:a0:96:a0:4a:c3:7b:37:4a:64:1a:5f:69:55:2c: 1d:c6:0d:c9:2d:af:9a:8b:7c:62:7c:57:af:70:c6: d2:14:d9:6f:d2:01:3e:fd:4b:a9:1f:98:ad:da:6e: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.90.96.0/19 68.232.128.0/19 139.138.24.0-139.138.47.255 139.138.56.0/21 184.94.240.0/20 204.15.80.0/22 207.54.64.0/19 208.90.56.0/21 216.71.128.0/19 IPv6: 2620:101:2000::/43 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16417 30214-30215 30238 40427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:c0:c4:64:b9:87:a0:a1:fe:2f:40:f1:91:ef:18:44:92:a6: 83:8f:49:56:a3:50:3f:23:be:2f:e0:ec:77:a1:8e:74:23:45: 83:e2:30:ec:87:5e:e1:90:6a:d5:44:7c:b5:bb:5a:0e:90:ca: 7c:2c:03:0f:4d:f0:ec:03:11:e7:60:74:7b:de:56:a4:89:66: bd:05:cb:ba:bc:c0:fc:1b:97:c7:f4:bc:14:3d:3a:23:64:3a: 37:71:50:ca:5d:0b:06:06:92:cd:55:62:2a:e1:8d:bd:75:65: 89:59:6f:83:cd:f0:f6:91:90:7b:ae:87:77:83:9d:3f:22:d0: e5:59:20:fb:eb:db:0d:fe:4d:f2:b0:66:e4:5d:08:da:58:2c: b4:dd:ef:d4:cd:e2:47:fc:98:c2:99:04:63:d9:ff:fc:38:b0: e6:8c:08:42:84:97:f3:41:4c:c7:e7:c4:06:08:58:0c:1f:8b: f9:04:b3:9b:b3:ed:29:78:72:cc:72:69:ec:aa:a9:51:c3:bb: 51:20:15:6e:8d:0e:91:22:23:73:a7:1f:b2:5e:0b:5e:a3:de: 0b:95:ee:29:bc:dc:ba:86:8c:00:84:f9:0d:3c:85:b8:06:8d: b2:d4:dc:3c:ab:01:a4:30:fe:b6:f1:85:1f:42:13:9a:02:b2: aa:70:e7:ce -----BEGIN CERTIFICATE----- MIIHZDCCBkygAwIBAgIUAQ0Mn0MoWEP3ttezNTIC7d4SCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTEyMjAxNDUxNloXDTI2MDIyNDAxNDUxNlowLzEtMCsGA1UEAxMk OGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZmNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKVu69IwEDWGVkcYC2a6jiFmVU/XHBZ2Wg5j qRGCu1TeDLzpLcRdoUOYQ6eng5Xdcfk2geg4OZG9tVxLcdplh/DvODY/vAkKpHIL f6jKEAckntyarv1qKeKGyCSouUW5rBIfsQ5NfY+7TeYUL/01K+7taqvsudcTC7al MaAksqO1eEZ3y5up762hrgOnSd4nHEe32b3/FAxwi/H7/JoBEbVNYQ5YvDPR5Kw3 OAGvmIjP+yclGfBvKWLYLJEawmdDSn6G6Qlu6p9ooZNuIzT116/ioJagSsN7N0pk Gl9pVSwdxg3JLa+ai3xifFevcMbSFNlv0gE+/UupH5it2m7YawIDAQABo4IEdjCC BHIwHQYDVR0OBBYEFAs3IE33TgvsvBeB0F79Jq8VpMuFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzhmNTg5ZDA4LTNkNjgtNDAwZi1h ODYyLTRjMjRlMGJmZjRjOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBi ZmY0YzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwaAYIKwYBBQUH AQcBAf8EWTBXMEQEAgABMD4DBAUXWmADBAVE6IAwDAMEA4uKGAMEBIuKIAMEA4uK OAMEBLhe8AMEAswPUAMEBc82QAMEA9BaOAMEBdhHgDAPBAIAAjAJAwcFJiABASAA MCwGCCsGAQUFBwEIAQH/BB0wG6AZMBcCAkAhMAgCAnYGAgJ2BwICdh4CAwCd6zBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQApwMRkuYegof4vQPGR7xhEkqaDj0lWo1A/I74v4Ox3oY50I0WD4jDs h17hkGrVRHy1u1oOkMp8LAMPTfDsAxHnYHR73lakiWa9Bcu6vMD8G5fH9LwUPToj ZDo3cVDKXQsGBpLNVWIq4Y29dWWJWW+DzfD2kZB7rod3g50/ItDlWSD769sN/k3y sGbkXQjaWCy03e/UzeJH/JjCmQRj2f/8OLDmjAhChJfzQUzH58QGCFgMH4v5BLOb s+0peHLMcmnsqqlRw7tRIBVujQ6RIiNzpx+yXgteo94Lle4pvNy6howAhPkNPIW4 Bo2y1Nw8qwGkMP628YUfQhOaArKqcOfO -----END CERTIFICATE-----Generated at Mon May 13 02:04:18 2024 by rpki-client on console-fra.rpki-client.org