$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer File: 30d422dc-98d1-4304-9f8a-097127e15d5e.cer (raw, json) Hash identifier: UCbIHRxrGncwEBAtzQ9M5JuIYmccwIZgNT8s4/edkq8= Subject key identifier: D7:27:1A:B8:11:31:9C:15:97:44:55:D0:79:13:E2:34:B5:E0:86:31 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584769C94FF292180FE2B56E5680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Oct 2024 00:45:26 +0000 Certificate not after: Wed 06 Jan 2027 01:45:26 +0000 Subordinate resources: AS: 3722 AS: 13647 AS: 27267 AS: 33119 AS: 36217 AS: 36236 AS: 54170 AS: 63420 AS: 394344 IP: 45.54.0.0/17 IP: 66.85.248.0/22 IP: 104.225.0.0/17 IP: 148.163.192.0/18 IP: 157.53.0.0/16 IP: 162.217.112.0/22 IP: 162.223.8.0/21 IP: 162.248.220.0/22 IP: 192.73.240.0/20 IP: 199.38.180.0/22 IP: 199.48.128.0/21 IP: 199.102.76.0/22 IP: 199.233.228.0/22 IP: 204.9.136.0/21 IP: 204.109.56.0/21 IP: 204.139.56.0/21 IP: 208.79.80.0/22 IP: 208.86.224.0/22 IP: 208.111.32.0/20 IP: 209.170.128.0/19 IP: 209.177.144.0/20 IP: 2606:80::/32 IP: 2607:3a00::/32 IP: 2607:f660::/32 IP: 2607:f740::/32 IP: 2607:fc50::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:69:c9:4f:f2:92:18:0f:e2:b5:6e:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Oct 3 00:45:26 2024 GMT Not After : Jan 6 01:45:26 2027 GMT Subject: CN=30d422dc-98d1-4304-9f8a-097127e15d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:05:04:fd:f6:21:5c:fc:27:c8:34:76:bd:73: 90:f3:37:38:d0:f9:7b:34:d8:e6:d2:43:81:47:51: 8b:f9:56:27:9c:c7:e4:a4:0c:4b:a2:d5:a8:bf:c9: 2a:f6:67:ac:72:0c:18:26:8f:c5:d7:78:63:4d:6d: d2:77:ca:c4:d5:30:44:31:7d:c8:56:d1:ad:33:04: 84:59:24:13:3d:60:4f:60:c1:75:4e:99:8d:85:fa: cb:63:00:2b:bc:49:54:6c:e8:85:c1:08:53:b7:de: d8:14:3c:9d:40:ab:e3:eb:30:56:b2:26:05:9b:52: bf:42:2e:0f:43:b3:07:00:6b:38:fa:6f:4b:32:11: 48:b1:4a:c0:00:e8:16:d4:ce:bf:05:52:0a:5e:da: 0e:1d:cc:a3:7f:05:e4:e5:10:40:d9:57:37:0a:0e: a8:a5:a8:d9:19:8b:2f:c9:82:39:45:9d:c2:88:fa: 5b:df:32:c0:0b:f9:81:a3:3a:27:41:77:2e:e5:ef: 20:71:db:c5:50:01:77:e1:01:f4:9b:c6:eb:81:6e: 1b:f6:e5:f2:63:76:33:a6:ee:6f:83:93:38:2e:90: b8:c2:4e:77:9c:84:2b:3b:5a:b5:24:f6:bb:9a:cc: fe:b0:1d:8d:bb:93:2b:24:c6:cb:ae:59:cc:c9:7c: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:1A:B8:11:31:9C:15:97:44:55:D0:79:13:E2:34:B5:E0:86:31 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 45.54.0.0/17 66.85.248.0/22 104.225.0.0/17 148.163.192.0/18 157.53.0.0/16 162.217.112.0/22 162.223.8.0/21 162.248.220.0/22 192.73.240.0/20 199.38.180.0/22 199.48.128.0/21 199.102.76.0/22 199.233.228.0/22 204.9.136.0/21 204.109.56.0/21 204.139.56.0/21 208.79.80.0/22 208.86.224.0/22 208.111.32.0/20 209.170.128.0/19 209.177.144.0/20 IPv6: 2606:80::/32 2607:3a00::/32 2607:f660::/32 2607:f740::/32 2607:fc50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3722 13647 27267 33119 36217 36236 54170 63420 394344 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:eb:47:96:1a:6b:1b:7c:ba:83:4d:1a:72:62:aa:33:59:72: af:3d:55:3e:ce:1c:d5:9e:34:e6:03:04:bc:ff:65:b0:9a:40: 28:f0:93:9c:2d:d5:1f:67:a5:97:1e:72:10:ca:d2:e1:3a:79: 5c:b7:35:0d:2f:65:f1:3b:70:f9:a1:c3:b5:5d:5d:63:56:00: b4:d9:50:e0:65:9b:4a:0a:11:c7:79:9d:47:d9:f1:35:7f:b4: 41:3a:d2:c8:87:02:26:b1:c1:38:99:a4:ed:78:dc:ad:8d:00: e7:a1:a3:4e:38:cc:4f:0a:44:7c:c6:93:29:b3:9e:e5:9b:3e: b6:14:26:34:3a:ea:a5:85:ae:f7:dc:e5:07:eb:f2:64:7c:e9: cc:45:56:a5:5f:d6:6c:00:e3:7d:10:d6:46:31:51:5c:3a:6c: b8:ab:d5:53:d0:5d:35:dd:da:8f:2e:f5:04:f8:08:d8:5d:58: 11:bb:5a:a3:35:37:c8:8b:6e:d0:a9:04:97:b2:a1:c8:40:cd: 43:30:54:a6:a9:fd:8b:39:ca:db:67:9e:ac:ce:56:7b:dc:66: 63:10:92:b1:b6:e3:04:de:68:aa:cf:af:60:7f:fe:c0:3b:59: 73:07:84:63:de:7f:70:fe:05:e3:49:fc:88:ff:00:97:ab:66: 65:d7:a1:0c -----BEGIN CERTIFICATE----- MIIH1DCCBrygAwIBAgIUAQ0Mn0MoWEdpyU/ykhgP4rVuVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTAwMzAwNDUyNloXDTI3MDEwNjAxNDUyNlowLzEtMCsGA1UEAxMk MzBkNDIyZGMtOThkMS00MzA0LTlmOGEtMDk3MTI3ZTE1ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngUE/fYhXPwnyDR2vXOQ8zc40Pl7NNjm0kOB R1GL+VYnnMfkpAxLotWov8kq9mescgwYJo/F13hjTW3Sd8rE1TBEMX3IVtGtMwSE WSQTPWBPYMF1TpmNhfrLYwArvElUbOiFwQhTt97YFDydQKvj6zBWsiYFm1K/Qi4P Q7MHAGs4+m9LMhFIsUrAAOgW1M6/BVIKXtoOHcyjfwXk5RBA2Vc3Cg6opajZGYsv yYI5RZ3CiPpb3zLAC/mBozonQXcu5e8gcdvFUAF34QH0m8brgW4b9uXyY3Yzpu5v g5M4LpC4wk53nIQrO1q1JPa7msz+sB2Nu5MrJMbLrlnMyXwxMwIDAQABo4IE5jCC BOIwHQYDVR0OBBYEFNcnGrgRMZwVl0RV0HkT4jS14IYxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8z MGQ0MjJkYy05OGQxLTQzMDQtOWY4YS0wOTcxMjdlMTVkNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05 ZjhhLTA5NzEyN2UxNWQ1ZS8zMGQ0MjJkYy05OGQxLTQzMDQtOWY4YS0wOTcxMjdl MTVkNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgcQGCCsGAQUF BwEHAQH/BIG0MIGxMIGDBAIAATB9AwQHLTYAAwQCQlX4AwQHaOEAAwQGlKPAAwMA nTUDBAKi2XADBAOi3wgDBAKi+NwDBATASfADBALHJrQDBAPHMIADBALHZkwDBALH 6eQDBAPMCYgDBAPMbTgDBAPMizgDBALQT1ADBALQVuADBATQbyADBAXRqoADBATR sZAwKQQCAAIwIwMFACYGAIADBQAmBzoAAwUAJgf2YAMFACYH90ADBQAmB/xQMD8G CCsGAQUFBwEIAQH/BDAwLqAsMCoCAg6KAgI1TwICaoMCAwCBXwIDAI15AgMAjYwC AwDTmgIDAPe8AgMGBGgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKutHlhprG3y6g00acmKqM1lyrz1VPs4c 1Z405gMEvP9lsJpAKPCTnC3VH2ellx5yEMrS4Tp5XLc1DS9l8Ttw+aHDtV1dY1YA tNlQ4GWbSgoRx3mdR9nxNX+0QTrSyIcCJrHBOJmk7XjcrY0A56GjTjjMTwpEfMaT KbOe5Zs+thQmNDrqpYWu99zlB+vyZHzpzEVWpV/WbADjfRDWRjFRXDpsuKvVU9Bd Nd3ajy71BPgI2F1YEbtaozU3yItu0KkEl7KhyEDNQzBUpqn9iznK22eerM5We9xm YxCSsbbjBN5oqs+vYH/+wDtZcweEY95/cP4F40n8iP8Al6tmZdehDA== -----END CERTIFICATE-----Generated at Thu Nov 21 16:28:32 2024 by rpki-client on console-ams.rpki-client.org