$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer File: 934f4dde-b680-46f3-8723-45f78b94fd80.cer (raw, json) Hash identifier: fSN1U5wm1rvDf95JMFXsvs4w9N+ePhrhA8kC95jo1G4= Subject key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285843AF0344AD9F495389FE27EA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Oct 2023 00:45:15 +0000 Certificate not after: Thu 29 Jan 2026 01:45:15 +0000 Subordinate resources: AS: 30058 IP: 23.237.0.0/16 IP: 50.7.0.0/16 IP: 66.90.64.0/18 IP: 67.159.0.0/18 IP: 74.63.64.0/18 IP: 192.240.96.0/19 IP: 198.16.64.0/18 IP: 198.255.0.0/17 IP: 216.227.128.0/18 IP: 2001:49f0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:af:03:44:ad:9f:49:53:89:fe:27:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 27 00:45:15 2023 GMT Not After : Jan 29 01:45:15 2026 GMT Subject: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8b:72:e8:2a:b0:70:8c:bf:da:3b:4f:bf:e4: 16:72:95:2d:6b:4a:23:47:1b:1e:f4:1a:7f:e6:8f: 74:fd:ed:13:a5:e1:49:e6:24:66:b7:e2:fe:ae:d3: be:db:d4:14:fc:9d:0d:fc:ce:93:87:43:0e:17:9d: bf:1f:7b:7a:62:e1:2e:4b:34:e0:5f:b6:fb:30:0b: 48:98:43:f0:c2:03:25:a8:e5:db:4c:67:cc:1a:04: 24:5a:e2:80:5a:a2:0f:4a:6e:99:be:9a:c9:1f:58: 39:ae:5a:1e:9c:f9:e1:94:dc:6a:7a:0a:74:ef:67: 53:93:52:a9:8e:24:9b:42:9b:67:eb:54:47:70:96: a3:9d:55:df:54:ed:bb:f4:dd:04:62:97:ec:95:d6: 26:7c:f9:99:cf:55:b1:b8:ae:f1:2b:54:77:31:32: 9d:df:dc:f5:48:d2:d4:39:1f:86:ad:f1:e4:22:2a: 97:21:a8:5a:d6:3a:f9:7a:b0:51:7f:5e:0b:40:c2: 6b:b3:68:34:25:be:bc:3f:1b:fb:5f:72:ba:68:50: 09:2e:87:10:8e:be:3b:44:63:c2:7a:43:c5:c0:8c: bb:b6:3f:f1:55:23:4f:bb:e4:15:3f:d5:39:0c:40: 89:75:61:d7:be:1b:98:7a:d5:3f:09:5a:30:d5:bb: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.237.0.0/16 50.7.0.0/16 66.90.64.0/18 67.159.0.0/18 74.63.64.0/18 192.240.96.0/19 198.16.64.0/18 198.255.0.0/17 216.227.128.0/18 IPv6: 2001:49f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30058 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f9:01:42:87:1b:46:e1:91:55:a0:15:45:a2:10:d7:79:ff: 68:08:68:67:90:67:95:4f:be:84:24:77:ad:cc:60:f3:a3:f5: f4:cd:11:dd:90:03:d8:6b:dd:d2:35:0b:48:02:9f:ee:bb:0e: 79:3b:bd:af:4a:5b:6b:d8:91:4c:8d:46:83:b2:b5:7e:0a:42: 82:fc:8a:27:7a:3c:f4:2b:b6:7d:80:b2:34:b6:10:9d:a2:3c: 9b:d0:36:e5:d1:4f:2e:2a:de:07:b1:6e:62:f9:ea:91:d8:a1: b1:62:7e:f3:35:02:8d:73:ca:ba:a7:0b:fc:2d:75:6b:36:cc: f7:99:e5:1a:e9:92:f3:bf:fc:b9:11:b1:33:b2:e6:b8:cc:41: d3:6d:69:81:4c:18:b5:3b:a2:32:a7:7e:6b:60:99:38:48:66: ed:ad:b0:75:0c:d3:9b:02:77:eb:f6:ff:88:b7:62:02:30:69: 12:37:97:23:8b:f3:f2:f6:0f:25:08:18:60:fc:3e:c9:d4:18: 31:47:4d:fa:4f:17:48:a6:ea:90:3f:01:6b:91:a7:34:dd:6f: ff:b1:3e:29:81:03:1a:16:8c:9a:60:5e:d0:09:e6:01:5b:e8: d7:77:8f:8e:c0:a4:b6:74:6e:05:58:33:ee:fa:7d:fe:16:98: 3e:2d:ff:72 -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUAQ0Mn0MoWEOvA0Stn0lTif4n6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMTAyNzAwNDUxNVoXDTI2MDEyOTAxNDUxNVowLzEtMCsGA1UEAxMk OTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRmZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Yty6CqwcIy/2jtPv+QWcpUta0ojRxse9Bp/ 5o90/e0TpeFJ5iRmt+L+rtO+29QU/J0N/M6Th0MOF52/H3t6YuEuSzTgX7b7MAtI mEPwwgMlqOXbTGfMGgQkWuKAWqIPSm6ZvprJH1g5rloenPnhlNxqegp072dTk1Kp jiSbQptn61RHcJajnVXfVO279N0EYpfsldYmfPmZz1WxuK7xK1R3MTKd39z1SNLU OR+GrfHkIiqXIaha1jr5erBRf14LQMJrs2g0Jb68Pxv7X3K6aFAJLocQjr47RGPC ekPFwIy7tj/xVSNPu+QVP9U5DECJdWHXvhuYetU/CVow1bs0VQIDAQABo4IEVzCC BFMwHQYDVR0OBBYEFBa04nGHTDeLFXtIdkDSNhbRJxMSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzkzNGY0ZGRlLWI2ODAtNDZmMy04 NzIzLTQ1Zjc4Yjk0ZmQ4MC85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5 NGZkODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDAwAX7QMDADIHAwQGQlpAAwQGQ58AAwQGSj9AAwQF wPBgAwQGxhBAAwQHxv8AAwQG2OOAMA0EAgACMAcDBQAgAUnwMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAnVqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFn5AUKHG0bhkVWgFUWiENd5/2gIaGeQ Z5VPvoQkd63MYPOj9fTNEd2QA9hr3dI1C0gCn+67Dnk7va9KW2vYkUyNRoOytX4K QoL8iid6PPQrtn2AsjS2EJ2iPJvQNuXRTy4q3gexbmL56pHYobFifvM1Ao1zyrqn C/wtdWs2zPeZ5RrpkvO//LkRsTOy5rjMQdNtaYFMGLU7ojKnfmtgmThIZu2tsHUM 05sCd+v2/4i3YgIwaRI3lyOL8/L2DyUIGGD8PsnUGDFHTfpPF0im6pA/AWuRpzTd b/+xPimBAxoWjJpgXtAJ5gFb6Nd3j47ApLZ0bgVYM+76ff4WmD4t/3I= -----END CERTIFICATE-----Generated at Sun May 12 02:18:00 2024 by rpki-client on console-ams.rpki-client.org