$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer File: d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer (raw, json) Hash identifier: 2JqHNVcy4L+ktQ5Pcji0zQqE7qcCCAHQFSAiqxh07QU= Subject key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority key identifier: F0:2D:FE:21:72:09:B7:44:32:4F:E7:FF:44:89:4B:9E:6A:0F:8F:78 Certificate issuer: /CN=1059b52d-846a-4cbe-a7db-796f1dd8b929 Certificate serial: 010D0C9F43285844BF6323A3B452EBABFC23A6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/notification.xml Certificate not before: Thu 01 Feb 2024 14:18:17 +0000 Certificate not after: Wed 06 May 2026 13:18:17 +0000 Subordinate resources: AS: 399991 IP: 23.249.208.0/20 IP: 23.251.224.0/19 IP: 69.169.224.0/20 IP: 76.223.176.0/20 IP: 199.127.232.0/22 IP: 199.255.192.0/22 IP: 206.55.128.0/19 IP: 216.221.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Apr 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:bf:63:23:a3:b4:52:eb:ab:fc:23:a6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1059b52d-846a-4cbe-a7db-796f1dd8b929 Validity Not Before: Feb 1 14:18:17 2024 GMT Not After : May 6 13:18:17 2026 GMT Subject: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:7f:b8:6e:73:17:0d:ff:52:e2:28:dd:8f: 1b:7f:ae:38:1a:36:00:6e:df:b8:a5:7d:26:d6:a9: 17:39:7f:ee:df:3b:b4:b6:95:9d:66:fd:2a:c2:18: d2:fd:79:7a:47:b1:51:03:26:99:83:bd:c7:7f:6e: e0:da:5f:ca:50:05:14:c6:98:db:6f:42:47:6b:9f: a9:f0:f9:0e:80:6e:b2:a5:31:0f:9b:99:31:30:bb: e1:8f:2d:3f:1d:1d:44:09:84:38:f4:c6:2a:ca:93: 37:40:7c:dd:f0:c6:78:4c:34:6b:31:e3:c9:c2:a6: 1b:16:52:79:ab:84:95:82:4b:52:3b:2e:1d:cb:40: b8:c6:bf:a8:6f:aa:33:3b:b5:b3:6e:fb:66:0d:5a: e2:5d:a6:e3:6c:ab:58:33:bf:14:30:3c:2c:c5:5e: 97:81:d5:90:37:05:84:e2:9a:7e:f3:36:89:64:c3: fa:15:f8:6f:60:e8:5d:10:0c:f6:d7:3d:19:c6:93: 5c:bc:a4:2a:de:73:3d:5e:e8:84:1b:16:00:f7:62: 1c:bc:3e:94:47:87:42:b8:a2:79:6d:b8:3f:23:6b: 00:dc:f2:25:50:10:76:d8:f9:9a:22:c1:46:7a:91: 78:ab:4d:21:f8:a1:4f:b7:bd:a3:23:d2:25:7e:92: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl X509v3 Authority Key Identifier: keyid:F0:2D:FE:21:72:09:B7:44:32:4F:E7:FF:44:89:4B:9E:6A:0F:8F:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/20 23.251.224.0/19 69.169.224.0/20 76.223.176.0/20 199.127.232.0/22 199.255.192.0/22 206.55.128.0/19 216.221.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399991 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:00:ac:ee:5e:d0:a7:eb:e3:25:22:98:f4:cc:24:5c:0e:27: 3e:3d:33:c0:f7:39:41:28:36:13:50:64:83:fd:e4:75:78:65: 13:a9:01:d7:dd:c8:42:4a:f1:16:b5:e6:ef:68:91:98:71:cd: d2:ad:83:74:0a:97:06:2f:da:e4:5e:c3:25:d5:1b:35:74:80: 62:20:e0:42:a3:b1:77:07:d4:eb:17:6a:bb:2f:08:8a:ff:53: 85:ab:f2:66:db:8c:7d:7f:ad:16:0a:7c:13:1f:43:c2:68:86: fc:b6:0a:70:f6:f6:b3:fb:04:86:76:f3:e9:ab:10:87:11:f8: 91:b5:7a:e3:ff:53:13:08:06:a0:35:e5:ea:e6:52:6b:51:bc: b8:b0:1a:02:87:05:e1:eb:bf:a4:52:5a:d0:10:15:30:fb:7c: 5b:a3:15:ad:15:13:00:98:2b:56:a7:e4:fe:71:9d:a3:30:13: 08:32:6b:e5:b3:c4:2c:71:55:53:85:d4:e2:df:30:49:43:39: 4d:e8:38:04:5b:47:f6:6a:43:d3:af:06:74:51:73:c5:fe:74: 13:07:cd:53:1a:05:6d:46:19:07:4d:a9:b9:f8:5b:92:2a:fa: 1a:50:60:f9:e9:f9:5d:74:ce:d7:98:12:c0:9c:b3:fa:fa:5d: ad:5b:4a:25 -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWES/YyOjtFLrq/wjpsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA1OWI1MmQtODQ2YS00Y2JlLWE3ZGItNzk2ZjFkZDhi OTI5MB4XDTI0MDIwMTE0MTgxN1oXDTI2MDUwNjEzMTgxN1owPTE7MDkGA1UEAxMy ZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJh ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXI3+4bnMXDf9S4ijd jxt/rjgaNgBu37ilfSbWqRc5f+7fO7S2lZ1m/SrCGNL9eXpHsVEDJpmDvcd/buDa X8pQBRTGmNtvQkdrn6nw+Q6AbrKlMQ+bmTEwu+GPLT8dHUQJhDj0xirKkzdAfN3w xnhMNGsx48nCphsWUnmrhJWCS1I7Lh3LQLjGv6hvqjM7tbNu+2YNWuJdpuNsq1gz vxQwPCzFXpeB1ZA3BYTimn7zNolkw/oV+G9g6F0QDPbXPRnGk1y8pCrecz1e6IQb FgD3Yhy8PpRHh0K4onltuD8jawDc8iVQEHbY+ZoiwUZ6kXirTSH4oU+3vaMj0iV+ knA/AgMBAAGjggQ2MIIEMjAdBgNVHQ4EFgQUvJOucQ+vFCI2CC+O2WtWy6nVAo0w ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMz MTMtNGYyNS1hYzIxLWJmNTU1MTRkOWM3ZC8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFk ZDI1LWMzMTMtNGYyNS1hYzIxLWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5 MGRNSjM3MmRLdlUubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2I4YTFkZDI1LWMzMTMtNGYyNS1h YzIxLWJmNTU1MTRkOWM3ZC9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyLzEwNTliNTJkLTg0NmEtNGNiZS1hN2RiLTc5NmYxZGQ4YjkyOS8xMDU5YjUy ZC04NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkuY3JsMB8GA1UdIwQYMBaAFPAt /iFyCbdEMk/n/0SJS55qD494MA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTA1 OWI1MmQtODQ2YS00Y2JlLWE3ZGItNzk2ZjFkZDhiOTI5LmNlcjBJBggrBgEFBQcB BwEB/wQ6MDgwNgQCAAEwMAMEBBf50AMEBRf74AMEBEWp4AMEBEzfsAMEAsd/6AME Asf/wAMEBc43gAMEBdjdoDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGGncwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAHQCs7l7Qp+vjJSKY9MwkXA4nPj0zwPc5QSg2E1Bkg/3kdXhlE6kB193I QkrxFrXm72iRmHHN0q2DdAqXBi/a5F7DJdUbNXSAYiDgQqOxdwfU6xdquy8Iiv9T havyZtuMfX+tFgp8Ex9DwmiG/LYKcPb2s/sEhnbz6asQhxH4kbV64/9TEwgGoDXl 6uZSa1G8uLAaAocF4eu/pFJa0BAVMPt8W6MVrRUTAJgrVqfk/nGdozATCDJr5bPE LHFVU4XU4t8wSUM5Teg4BFtH9mpD068GdFFzxf50EwfNUxoFbUYZB02pufhbkir6 GlBg+en5XXTO15gSwJyz+vpdrVtKJQ== -----END CERTIFICATE-----Generated at Sun Apr 28 03:11:28 2024 by rpki-client on console-ams.rpki-client.org