$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer File: d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer (raw, json) Hash identifier: T1ukQ8no+X/Dk54QFZlyZtxJrsl/dTeiUhuL2nK9KsU= Subject key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Authority key identifier: F0:2D:FE:21:72:09:B7:44:32:4F:E7:FF:44:89:4B:9E:6A:0F:8F:78 Certificate issuer: /CN=1059b52d-846a-4cbe-a7db-796f1dd8b929 Certificate serial: 010D0C9F432858493ADBF517DD1BA938B318A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/notification.xml Certificate not before: Tue 18 Mar 2025 14:53:54 +0000 Certificate not after: Mon 21 Jun 2027 14:53:54 +0000 Subordinate resources: AS: 399991 IP: 23.249.208.0/20 IP: 23.251.224.0/19 IP: 24.110.64.0/18 IP: 69.169.224.0/20 IP: 76.223.176.0/20 IP: 199.127.232.0/22 IP: 199.255.192.0/22 IP: 206.55.128.0/19 IP: 216.221.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3a:db:f5:17:dd:1b:a9:38:b3:18:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1059b52d-846a-4cbe-a7db-796f1dd8b929 Validity Not Before: Mar 18 14:53:54 2025 GMT Not After : Jun 21 14:53:54 2027 GMT Subject: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:23:7f:b8:6e:73:17:0d:ff:52:e2:28:dd:8f: 1b:7f:ae:38:1a:36:00:6e:df:b8:a5:7d:26:d6:a9: 17:39:7f:ee:df:3b:b4:b6:95:9d:66:fd:2a:c2:18: d2:fd:79:7a:47:b1:51:03:26:99:83:bd:c7:7f:6e: e0:da:5f:ca:50:05:14:c6:98:db:6f:42:47:6b:9f: a9:f0:f9:0e:80:6e:b2:a5:31:0f:9b:99:31:30:bb: e1:8f:2d:3f:1d:1d:44:09:84:38:f4:c6:2a:ca:93: 37:40:7c:dd:f0:c6:78:4c:34:6b:31:e3:c9:c2:a6: 1b:16:52:79:ab:84:95:82:4b:52:3b:2e:1d:cb:40: b8:c6:bf:a8:6f:aa:33:3b:b5:b3:6e:fb:66:0d:5a: e2:5d:a6:e3:6c:ab:58:33:bf:14:30:3c:2c:c5:5e: 97:81:d5:90:37:05:84:e2:9a:7e:f3:36:89:64:c3: fa:15:f8:6f:60:e8:5d:10:0c:f6:d7:3d:19:c6:93: 5c:bc:a4:2a:de:73:3d:5e:e8:84:1b:16:00:f7:62: 1c:bc:3e:94:47:87:42:b8:a2:79:6d:b8:3f:23:6b: 00:dc:f2:25:50:10:76:d8:f9:9a:22:c1:46:7a:91: 78:ab:4d:21:f8:a1:4f:b7:bd:a3:23:d2:25:7e:92: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D Subject Information Access: CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/ RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl X509v3 Authority Key Identifier: keyid:F0:2D:FE:21:72:09:B7:44:32:4F:E7:FF:44:89:4B:9E:6A:0F:8F:78 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer sbgp-ipAddrBlock: critical IPv4: 23.249.208.0/20 23.251.224.0/19 24.110.64.0/18 69.169.224.0/20 76.223.176.0/20 199.127.232.0/22 199.255.192.0/22 206.55.128.0/19 216.221.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399991 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1e:00:65:20:20:f3:74:41:7b:ff:d8:78:d8:0e:35:61:39: 77:d9:1c:89:c7:ef:f8:05:4c:f1:cc:48:2a:d8:2e:25:96:7b: 1e:13:52:3b:cf:87:f4:d4:07:6c:81:d7:32:68:c5:bd:94:fb: 7c:c3:d1:8d:be:97:b2:f1:fc:1e:81:99:75:2a:a6:74:d9:13: e9:15:72:53:9c:f2:9e:e0:f6:4e:c4:e1:57:a5:c8:ce:ab:4e: de:95:2f:cc:71:94:96:70:51:bc:31:ed:6b:25:f4:9c:9a:86: ff:bf:3b:66:fb:c8:93:6d:02:d7:3d:b0:bc:b3:a8:0c:5b:1a: 17:4e:6b:9c:0d:72:f4:b0:b4:7b:af:f6:01:d1:99:0c:c8:ec: fb:22:95:af:4f:37:4b:16:4c:c6:4f:64:ad:2a:63:47:1a:fe: c6:c8:64:9b:bb:83:14:e4:68:cc:74:d3:4d:e5:0f:69:c0:b7: 9a:42:d2:2e:c4:fa:77:cb:0b:a6:49:69:d7:3d:57:ef:f9:e5: f1:a3:ca:f9:1f:bb:19:22:b9:6f:ab:97:33:db:40:fb:88:72: 4f:83:4c:36:ef:1b:39:5f:93:33:ea:0f:e4:29:09:12:d3:1a: 55:96:ca:9f:27:16:3d:8e:c1:09:30:af:fc:aa:8a:eb:ef:ef: a0:96:d2:45 -----BEGIN CERTIFICATE----- MIIHODCCBiCgAwIBAgIUAQ0Mn0MoWEk62/UX3RupOLMYqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTA1OWI1MmQtODQ2YS00Y2JlLWE3ZGItNzk2ZjFkZDhi OTI5MB4XDTI1MDMxODE0NTM1NFoXDTI3MDYyMTE0NTM1NFowPTE7MDkGA1UEAxMy ZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJh ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXI3+4bnMXDf9S4ijd jxt/rjgaNgBu37ilfSbWqRc5f+7fO7S2lZ1m/SrCGNL9eXpHsVEDJpmDvcd/buDa X8pQBRTGmNtvQkdrn6nw+Q6AbrKlMQ+bmTEwu+GPLT8dHUQJhDj0xirKkzdAfN3w xnhMNGsx48nCphsWUnmrhJWCS1I7Lh3LQLjGv6hvqjM7tbNu+2YNWuJdpuNsq1gz vxQwPCzFXpeB1ZA3BYTimn7zNolkw/oV+G9g6F0QDPbXPRnGk1y8pCrecz1e6IQb FgD3Yhy8PpRHh0K4onltuD8jawDc8iVQEHbY+ZoiwUZ6kXirTSH4oU+3vaMj0iV+ knA/AgMBAAGjggQ8MIIEODAdBgNVHQ4EFgQUvJOucQ+vFCI2CC+O2WtWy6nVAo0w ggFuBggrBgEFBQcBCwSCAWAwggFcMGMGCCsGAQUFBzAFhldyc3luYzovL3Jwa2kt cnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMz MTMtNGYyNS1hYzIxLWJmNTU1MTRkOWM3ZC8wgYIGCCsGAQUFBzAKhnZyc3luYzov L3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFk ZDI1LWMzMTMtNGYyNS1hYzIxLWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5 MGRNSjM3MmRLdlUubWZ0MHAGCCsGAQUFBzANhmRodHRwczovL3Jwa2ktcnJkcC51 cy1lYXN0LTIuYW1hem9uYXdzLmNvbS9ycmRwL2I4YTFkZDI1LWMzMTMtNGYyNS1h YzIxLWJmNTU1MTRkOWM3ZC9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQFMAMB Af8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmluLm5l dC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4 Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyLzEwNTliNTJkLTg0NmEtNGNiZS1hN2RiLTc5NmYxZGQ4YjkyOS8xMDU5YjUy ZC04NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkuY3JsMB8GA1UdIwQYMBaAFPAt /iFyCbdEMk/n/0SJS55qD494MA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUHAQEE gbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9z aXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFk YTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTA1 OWI1MmQtODQ2YS00Y2JlLWE3ZGItNzk2ZjFkZDhiOTI5LmNlcjBPBggrBgEFBQcB BwEB/wRAMD4wPAQCAAEwNgMEBBf50AMEBRf74AMEBhhuQAMEBEWp4AMEBEzfsAME Asd/6AMEAsf/wAMEBc43gAMEBdjdoDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMG GncwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAZR4AZSAg83RBe//YeNgONWE5d9kcicfv+AVM8cxIKtguJZZ7 HhNSO8+H9NQHbIHXMmjFvZT7fMPRjb6XsvH8HoGZdSqmdNkT6RVyU5zynuD2TsTh V6XIzqtO3pUvzHGUlnBRvDHtayX0nJqG/787ZvvIk20C1z2wvLOoDFsaF05rnA1y 9LC0e6/2AdGZDMjs+yKVr083SxZMxk9krSpjRxr+xshkm7uDFORozHTTTeUPacC3 mkLSLsT6d8sLpklp1z1X7/nl8aPK+R+7GSK5b6uXM9tA+4hyT4NMNu8bOV+TM+oP 5CkJEtMaVZbKnycWPY7BCTCv/KqK6+/voJbSRQ== -----END CERTIFICATE-----Generated at Sat Apr 5 03:41:51 2025 by rpki-client