$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer File: 30d422dc-98d1-4304-9f8a-097127e15d5e.cer (raw, json) Hash identifier: m7tUazedvK9ZDthQZ+FFcoROOKG0lIldPu4K6XnHFs8= Subject key identifier: D7:27:1A:B8:11:31:9C:15:97:44:55:D0:79:13:E2:34:B5:E0:86:31 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285842659690BB7B47513B06433300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 01 Jul 2023 00:45:16 +0000 Certificate not after: Fri 03 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 3722 AS: 13647 AS: 27267 AS: 33119 AS: 36217 AS: 36236 AS: 54170 AS: 63420 AS: 394344 IP: 45.54.0.0/17 IP: 66.85.248.0/22 IP: 104.225.0.0/17 IP: 148.163.192.0/18 IP: 157.53.0.0/16 IP: 162.217.112.0/22 IP: 162.223.8.0/21 IP: 162.248.220.0/22 IP: 192.73.240.0/20 IP: 199.38.180.0/22 IP: 199.48.128.0/21 IP: 199.102.76.0/22 IP: 199.233.228.0/22 IP: 204.9.136.0/21 IP: 204.109.56.0/21 IP: 204.139.56.0/21 IP: 208.79.80.0/22 IP: 208.86.224.0/22 IP: 208.111.32.0/20 IP: 209.170.128.0/19 IP: 209.177.144.0/20 IP: 2606:80::/32 IP: 2607:3a00::/32 IP: 2607:f660::/32 IP: 2607:f740::/32 IP: 2607:fc50::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:65:96:90:bb:7b:47:51:3b:06:43:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jul 1 00:45:16 2023 GMT Not After : Oct 3 00:45:16 2025 GMT Subject: CN=30d422dc-98d1-4304-9f8a-097127e15d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:04:fd:f6:21:5c:fc:27:c8:34:76:bd:73: 90:f3:37:38:d0:f9:7b:34:d8:e6:d2:43:81:47:51: 8b:f9:56:27:9c:c7:e4:a4:0c:4b:a2:d5:a8:bf:c9: 2a:f6:67:ac:72:0c:18:26:8f:c5:d7:78:63:4d:6d: d2:77:ca:c4:d5:30:44:31:7d:c8:56:d1:ad:33:04: 84:59:24:13:3d:60:4f:60:c1:75:4e:99:8d:85:fa: cb:63:00:2b:bc:49:54:6c:e8:85:c1:08:53:b7:de: d8:14:3c:9d:40:ab:e3:eb:30:56:b2:26:05:9b:52: bf:42:2e:0f:43:b3:07:00:6b:38:fa:6f:4b:32:11: 48:b1:4a:c0:00:e8:16:d4:ce:bf:05:52:0a:5e:da: 0e:1d:cc:a3:7f:05:e4:e5:10:40:d9:57:37:0a:0e: a8:a5:a8:d9:19:8b:2f:c9:82:39:45:9d:c2:88:fa: 5b:df:32:c0:0b:f9:81:a3:3a:27:41:77:2e:e5:ef: 20:71:db:c5:50:01:77:e1:01:f4:9b:c6:eb:81:6e: 1b:f6:e5:f2:63:76:33:a6:ee:6f:83:93:38:2e:90: b8:c2:4e:77:9c:84:2b:3b:5a:b5:24:f6:bb:9a:cc: fe:b0:1d:8d:bb:93:2b:24:c6:cb:ae:59:cc:c9:7c: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:1A:B8:11:31:9C:15:97:44:55:D0:79:13:E2:34:B5:E0:86:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.54.0.0/17 66.85.248.0/22 104.225.0.0/17 148.163.192.0/18 157.53.0.0/16 162.217.112.0/22 162.223.8.0/21 162.248.220.0/22 192.73.240.0/20 199.38.180.0/22 199.48.128.0/21 199.102.76.0/22 199.233.228.0/22 204.9.136.0/21 204.109.56.0/21 204.139.56.0/21 208.79.80.0/22 208.86.224.0/22 208.111.32.0/20 209.170.128.0/19 209.177.144.0/20 IPv6: 2606:80::/32 2607:3a00::/32 2607:f660::/32 2607:f740::/32 2607:fc50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3722 13647 27267 33119 36217 36236 54170 63420 394344 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:29:d5:6c:ae:08:7d:e2:e5:20:a3:4b:9c:f8:35:be:69:a5: 78:c2:70:c9:9a:7f:89:9e:f9:37:c4:8c:a3:10:da:74:10:cb: 7d:43:26:03:35:a0:94:2e:a2:0d:98:77:ea:5f:c7:f1:e9:89: fa:3d:e9:d8:30:37:24:ac:83:9a:27:c3:52:71:e0:e8:28:a6: 7a:85:c8:a9:6b:82:8f:27:b2:ab:07:87:e7:42:cb:25:6e:75: a7:69:81:91:6e:71:35:cd:fa:7f:70:a0:17:ff:ed:1a:55:2a: 62:bb:76:55:f0:e8:00:c1:02:e5:b1:63:f4:f7:70:60:cb:48: a3:f2:ac:16:fb:e0:47:c5:a3:6c:8b:4b:d8:79:c5:0b:c7:85: c6:80:92:2d:b1:da:2e:98:60:e3:4c:54:98:45:06:1b:10:f4: 3d:f9:b7:87:c7:af:9b:47:79:7a:42:13:07:bc:f8:2a:03:f7: d3:55:e7:28:76:58:2d:2e:fd:83:35:1e:7c:2f:17:88:f3:e9: 4a:d2:5c:d2:59:e0:c6:f6:aa:bd:98:ae:f4:54:fc:45:22:86: 64:67:04:2d:90:a8:43:db:f3:4e:29:2c:9a:20:58:70:0b:ae: fb:4f:52:7a:90:4d:3d:f6:c3:c7:a5:2d:9f:c7:6c:95:bb:25: 60:72:e3:6f -----BEGIN CERTIFICATE----- MIIH1DCCBrygAwIBAgIUAQ0Mn0MoWEJllpC7e0dROwZDMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTIzMDcwMTAwNDUxNloXDTI1MTAwMzAwNDUxNlowLzEtMCsGA1UEAxMk MzBkNDIyZGMtOThkMS00MzA0LTlmOGEtMDk3MTI3ZTE1ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngUE/fYhXPwnyDR2vXOQ8zc40Pl7NNjm0kOB R1GL+VYnnMfkpAxLotWov8kq9mescgwYJo/F13hjTW3Sd8rE1TBEMX3IVtGtMwSE WSQTPWBPYMF1TpmNhfrLYwArvElUbOiFwQhTt97YFDydQKvj6zBWsiYFm1K/Qi4P Q7MHAGs4+m9LMhFIsUrAAOgW1M6/BVIKXtoOHcyjfwXk5RBA2Vc3Cg6opajZGYsv yYI5RZ3CiPpb3zLAC/mBozonQXcu5e8gcdvFUAF34QH0m8brgW4b9uXyY3Yzpu5v g5M4LpC4wk53nIQrO1q1JPa7msz+sB2Nu5MrJMbLrlnMyXwxMwIDAQABo4IE5jCC BOIwHQYDVR0OBBYEFNcnGrgRMZwVl0RV0HkT4jS14IYxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z MGQ0MjJkYy05OGQxLTQzMDQtOWY4YS0wOTcxMjdlMTVkNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05 ZjhhLTA5NzEyN2UxNWQ1ZS8zMGQ0MjJkYy05OGQxLTQzMDQtOWY4YS0wOTcxMjdl MTVkNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgcQGCCsGAQUF BwEHAQH/BIG0MIGxMIGDBAIAATB9AwQHLTYAAwQCQlX4AwQHaOEAAwQGlKPAAwMA nTUDBAKi2XADBAOi3wgDBAKi+NwDBATASfADBALHJrQDBAPHMIADBALHZkwDBALH 6eQDBAPMCYgDBAPMbTgDBAPMizgDBALQT1ADBALQVuADBATQbyADBAXRqoADBATR sZAwKQQCAAIwIwMFACYGAIADBQAmBzoAAwUAJgf2YAMFACYH90ADBQAmB/xQMD8G CCsGAQUFBwEIAQH/BDAwLqAsMCoCAg6KAgI1TwICaoMCAwCBXwIDAI15AgMAjYwC AwDTmgIDAPe8AgMGBGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYCnVbK4IfeLlIKNLnPg1vmmleMJwyZp/ iZ75N8SMoxDadBDLfUMmAzWglC6iDZh36l/H8emJ+j3p2DA3JKyDmifDUnHg6Cim eoXIqWuCjyeyqweH50LLJW51p2mBkW5xNc36f3CgF//tGlUqYrt2VfDoAMEC5bFj 9PdwYMtIo/KsFvvgR8WjbItL2HnFC8eFxoCSLbHaLphg40xUmEUGGxD0Pfm3h8ev m0d5ekITB7z4KgP301XnKHZYLS79gzUefC8XiPPpStJc0lngxvaqvZiu9FT8RSKG ZGcELZCoQ9vzTiksmiBYcAuu+09SepBNPfbDx6Utn8dslbslYHLjbw== -----END CERTIFICATE-----Generated at Sat Apr 27 15:35:04 2024 by rpki-client on console-ams.rpki-client.org