$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb.cer File: cd24b3f3-8c24-4212-b596-7495552f2bbb.cer (raw, json) Hash identifier: atac7UVVGdo1wRc840aGhM2O70Jer18TLNmhY0zFWCo= Subject key identifier: 07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05 Authority key identifier: 95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 Certificate issuer: /CN=871da40f-793a-4a45-a0a9-978148321a07 Certificate serial: 010D0C9F43285848B0892EDAA967107332987E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 01:45:33 +0000 Certificate not after: Mon 03 May 2027 00:45:33 +0000 Subordinate resources: AS: 4314 AS: 11943 AS: 13693 AS: 14765 AS: 14791 AS: 19734 AS: 25798 AS: 32898 AS: 33507 AS: 35924 AS: 54340 AS: 62911 AS: 63001 AS: 393526 AS: 393814 AS: 397772 AS: 398149 AS: 400569 AS: 401284 IP: 64.130.64.0/19 IP: 64.185.0.0/18 IP: 65.182.64.0/19 IP: 145.224.0.0/19 IP: 172.110.0.0/19 IP: 199.254.157.0/24 IP: 205.209.224.0/19 IP: 206.251.160.0/19 IP: 209.16.64.0/19 IP: 209.205.128.0/18 IP: 216.97.240.0/20 IP: 216.131.24.0/21 IP: 216.167.128.0/18 IP: 2606:1600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:89:2e:da:a9:67:10:73:32:98:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=871da40f-793a-4a45-a0a9-978148321a07 Validity Not Before: Jan 28 01:45:33 2025 GMT Not After : May 3 00:45:33 2027 GMT Subject: CN=cd24b3f3-8c24-4212-b596-7495552f2bbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fc:6a:9a:4e:56:16:33:7c:c6:27:67:ba:55: 7f:e4:6c:83:79:e7:df:6d:7d:f2:f7:e9:71:e0:50: 71:e4:88:c9:0b:7d:77:f9:b7:01:40:d2:56:7c:1b: 6f:48:53:2a:25:00:ca:1d:a6:4f:d5:a1:51:bb:dd: 09:3f:86:6a:63:58:0e:43:5a:bd:46:d9:a8:ae:9b: aa:b0:2c:95:3c:b2:ab:12:ff:a1:d6:a8:ef:9c:46: 12:5f:9c:d2:69:89:95:48:cf:df:2c:ea:91:59:6b: a4:be:04:7c:79:76:be:2e:df:e4:73:c6:d8:2b:23: c7:85:84:f1:ff:c0:0e:39:a8:bf:cf:52:99:9f:60: 5e:78:46:7b:32:b3:08:0b:22:bb:b1:b5:04:d2:d4: 1c:e7:68:f5:9e:a8:49:5a:63:ca:b3:67:99:e0:83: 1f:8c:d8:33:f1:7b:e4:63:a7:a5:48:e0:01:70:d5: 8d:97:0e:17:82:97:df:6f:8b:5e:1b:0c:1b:fd:65: 11:19:a2:e7:ca:9d:44:4e:d8:4a:b9:ae:aa:fe:75: 5e:12:52:fd:fe:fa:1f:15:fa:50:69:44:0e:22:63: e0:47:e8:b4:d6:c0:2b:8e:8f:0c:27:47:e5:b2:bb: c3:78:6a:ab:b5:83:b6:b0:39:24:c7:68:f7:11:72: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F8:9A:92:1B:62:E4:53:E0:29:CF:79:48:17:90:09:35:51:53:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cd24b3f3-8c24-4212-b596-7495552f2bbb/cd24b3f3-8c24-4212-b596-7495552f2bbb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl X509v3 Authority Key Identifier: keyid:95:84:1C:EB:EB:09:4A:4E:59:7A:09:03:58:D0:60:E7:4F:39:89:77 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer sbgp-ipAddrBlock: critical IPv4: 64.130.64.0/19 64.185.0.0/18 65.182.64.0/19 145.224.0.0/19 172.110.0.0/19 199.254.157.0/24 205.209.224.0/19 206.251.160.0/19 209.16.64.0/19 209.205.128.0/18 216.97.240.0/20 216.131.24.0/21 216.167.128.0/18 IPv6: 2606:1600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4314 11943 13693 14765 14791 19734 25798 32898 33507 35924 54340 62911 63001 393526 393814 397772 398149 400569 401284 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f8:82:49:45:f7:25:7b:c2:a0:2a:22:fc:b9:3c:db:e6:85: 04:e6:36:41:2d:55:0a:23:e3:4e:f1:2b:3e:5b:ef:ce:8d:de: ad:99:53:4c:ea:2a:4f:9c:94:ce:91:65:82:8b:22:47:65:9f: 64:53:62:4f:e2:c3:03:3a:ff:3c:1f:ea:1c:cb:e6:af:f2:66: 28:9f:b3:f8:76:f9:92:a9:ae:86:0f:9a:43:1a:ce:b2:d9:fb: 89:a6:ed:9d:27:27:89:c2:1f:2b:87:88:c0:fa:c0:a3:88:90: 35:a9:2d:66:3b:fe:76:42:e1:11:84:83:bd:e7:f0:f6:cb:b5: 91:df:7e:8d:f3:25:14:e5:01:b4:3a:b2:27:33:89:a7:f0:7f: d9:43:93:f3:a1:81:59:31:7c:ea:00:f0:4a:1c:24:4e:ef:76: 32:f6:fb:1c:e6:69:ca:78:eb:73:84:be:30:35:82:a9:d4:77: 10:19:5e:9f:a1:69:df:a1:cb:f7:46:f1:48:2b:9e:b4:d0:2d: 0a:7b:c6:3d:bd:d6:54:33:ef:b3:db:a5:91:2e:dc:7a:be:12: a8:59:80:8c:a8:7b:3c:1c:e3:d2:99:98:cc:3c:7c:5f:d8:61: 79:89:9c:e1:20:7b:0c:24:52:00:d5:1c:83:43:64:17:62:a3: e9:69:5f:2e -----BEGIN CERTIFICATE----- MIIHszCCBpugAwIBAgIUAQ0Mn0MoWEiwiS7aqWcQczKYfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIx YTA3MB4XDTI1MDEyODAxNDUzM1oXDTI3MDUwMzAwNDUzM1owLzEtMCsGA1UEAxMk Y2QyNGIzZjMtOGMyNC00MjEyLWI1OTYtNzQ5NTU1MmYyYmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvxqmk5WFjN8xidnulV/5GyDeeffbX3y9+lx 4FBx5IjJC313+bcBQNJWfBtvSFMqJQDKHaZP1aFRu90JP4ZqY1gOQ1q9Rtmorpuq sCyVPLKrEv+h1qjvnEYSX5zSaYmVSM/fLOqRWWukvgR8eXa+Lt/kc8bYKyPHhYTx /8AOOai/z1KZn2BeeEZ7MrMICyK7sbUE0tQc52j1nqhJWmPKs2eZ4IMfjNgz8Xvk Y6elSOABcNWNlw4Xgpffb4teGwwb/WURGaLnyp1ETthKua6q/nVeElL9/vofFfpQ aUQOImPgR+i01sArjo8MJ0flsrvDeGqrtYO2sDkkx2j3EXKAWwIDAQABo4IExTCC BMEwHQYDVR0OBBYEFAf4mpIbYuRT4CnPeUgXkAk1UVMFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9j ZDI0YjNmMy04YzI0LTQyMTItYjU5Ni03NDk1NTUyZjJiYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYt NzkzYS00YTQ1LWEwYTktOTc4MTQ4MzIxYTA3L2NkMjRiM2YzLThjMjQtNDIxMi1i NTk2LTc0OTU1NTJmMmJiYi9jZDI0YjNmMy04YzI0LTQyMTItYjU5Ni03NDk1NTUy ZjJiYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRh NDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NzFkYTQwZi03OTNhLTRh NDUtYTBhOS05NzgxNDgzMjFhMDcuY3JsMB8GA1UdIwQYMBaAFJWEHOvrCUpOWXoJ A1jQYOdPOYl3MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3 MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy5jZXIwdgYIKwYBBQUH AQcBAf8EZzBlMFQEAgABME4DBAVAgkADBAZAuQADBAVBtkADBAWR4AADBAWsbgAD BADH/p0DBAXN0eADBAXO+6ADBAXREEADBAbRzYADBATYYfADBAPYgxgDBAbYp4Aw DQQCAAIwBwMFACYGFgAwbQYIKwYBBQUHAQgBAf8EXjBcoFowWAICENoCAi6nAgI1 fQICOa0CAjnHAgJNFgICZMYCAwCAggIDAILjAgMAjFQCAwDURAIDAPW/AgMA9hkC AwYBNgIDBgJWAgMGEcwCAwYTRQIDBhy5AgMGH4QwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWPiCSUX3JXvC oCoi/Lk82+aFBOY2QS1VCiPjTvErPlvvzo3erZlTTOoqT5yUzpFlgosiR2WfZFNi T+LDAzr/PB/qHMvmr/JmKJ+z+Hb5kqmuhg+aQxrOstn7iabtnScnicIfK4eIwPrA o4iQNaktZjv+dkLhEYSDvefw9su1kd9+jfMlFOUBtDqyJzOJp/B/2UOT86GBWTF8 6gDwShwkTu92Mvb7HOZpynjrc4S+MDWCqdR3EBlen6Fp36HL90bxSCuetNAtCnvG Pb3WVDPvs9ulkS7cer4SqFmAjKh7PBzj0pmYzDx8X9hheYmc4SB7DCRSANUcg0Nk F2Kj6WlfLg== -----END CERTIFICATE-----Generated at Thu Apr 3 02:47:22 2025 by rpki-client