$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer File: 8f589d08-3d68-400f-a862-4c24e0bff4c9.cer (raw, json) Hash identifier: 0h543wlhfE4BeBKIL3G8TVzksVVJAGSRqBXJzsJdmZE= Subject key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848FBE9A5E039EEE8C84AAAAA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Feb 2025 01:45:33 +0000 Certificate not after: Sun 30 May 2027 00:45:33 +0000 Subordinate resources: AS: 16417 AS: 30214 -- 30215 AS: 30238 AS: 40427 IP: 23.90.96.0/19 IP: 68.232.128.0/19 IP: 139.138.24.0 -- 139.138.47.255 IP: 139.138.56.0/21 IP: 184.94.240.0/20 IP: 204.15.80.0/22 IP: 207.54.64.0/19 IP: 208.90.56.0/21 IP: 216.71.128.0/19 IP: 2620:101:2000::/43 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:e9:a5:e0:39:ee:e8:c8:4a:aa:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Feb 24 01:45:33 2025 GMT Not After : May 30 00:45:33 2027 GMT Subject: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:6e:eb:d2:30:10:35:86:56:47:18:0b:66: ba:8e:21:66:55:4f:d7:1c:16:76:5a:0e:63:a9:11: 82:bb:54:de:0c:bc:e9:2d:c4:5d:a1:43:98:43:a7: a7:83:95:dd:71:f9:36:81:e8:38:39:91:bd:b5:5c: 4b:71:da:65:87:f0:ef:38:36:3f:bc:09:0a:a4:72: 0b:7f:a8:ca:10:07:24:9e:dc:9a:ae:fd:6a:29:e2: 86:c8:24:a8:b9:45:b9:ac:12:1f:b1:0e:4d:7d:8f: bb:4d:e6:14:2f:fd:35:2b:ee:ed:6a:ab:ec:b9:d7: 13:0b:b6:a5:31:a0:24:b2:a3:b5:78:46:77:cb:9b: a9:ef:ad:a1:ae:03:a7:49:de:27:1c:47:b7:d9:bd: ff:14:0c:70:8b:f1:fb:fc:9a:01:11:b5:4d:61:0e: 58:bc:33:d1:e4:ac:37:38:01:af:98:88:cf:fb:27: 25:19:f0:6f:29:62:d8:2c:91:1a:c2:67:43:4a:7e: 86:e9:09:6e:ea:9f:68:a1:93:6e:23:34:f5:d7:af: e2:a0:96:a0:4a:c3:7b:37:4a:64:1a:5f:69:55:2c: 1d:c6:0d:c9:2d:af:9a:8b:7c:62:7c:57:af:70:c6: d2:14:d9:6f:d2:01:3e:fd:4b:a9:1f:98:ad:da:6e: d8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.90.96.0/19 68.232.128.0/19 139.138.24.0-139.138.47.255 139.138.56.0/21 184.94.240.0/20 204.15.80.0/22 207.54.64.0/19 208.90.56.0/21 216.71.128.0/19 IPv6: 2620:101:2000::/43 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16417 30214-30215 30238 40427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1f:45:01:43:b2:1b:14:7d:88:51:6a:3e:6b:16:f0:ef:32: c8:0a:d1:d5:21:5f:83:7a:c7:ba:70:ee:f5:a7:68:10:41:63: f3:cd:e9:63:97:6e:9a:96:f1:44:4d:16:a4:4f:d0:c0:79:f1: fc:85:d5:04:ca:bf:ba:51:07:9c:70:bb:a6:82:33:88:60:75: 8e:bd:c4:a7:3e:98:8b:b0:c6:f9:66:a3:d3:22:e5:09:6c:be: f4:c0:20:ee:af:cd:bc:7f:42:a7:a8:6a:dc:16:02:13:b1:98: a1:08:e8:d6:9d:2a:fc:b7:da:8c:40:f4:ca:31:1d:fe:1d:9b: a5:97:3c:36:69:ec:df:7a:8b:1b:92:e3:2e:ab:df:10:e9:31: 0a:ae:be:da:1a:c7:11:23:15:78:f2:3a:82:22:80:0b:f1:36: d9:58:e7:92:9f:92:f1:9c:44:86:29:b0:7a:6c:cf:ed:3e:1b: c6:a3:d7:f6:66:3e:5c:35:01:cc:56:a8:9a:8b:32:5e:dc:65: 33:19:23:8d:a5:8d:04:8d:97:61:63:a1:fb:50:31:48:ee:2c: 70:40:17:52:60:31:11:50:eb:fa:f5:d7:0c:85:b3:98:79:db: 84:72:52:e5:d4:54:d4:24:42:2f:c3:26:47:65:44:59:6f:dc: 0a:d0:ff:94 -----BEGIN CERTIFICATE----- MIIHZDCCBkygAwIBAgIUAQ0Mn0MoWEj76aXgOe7oyEqqqkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDIyNDAxNDUzM1oXDTI3MDUzMDAwNDUzM1owLzEtMCsGA1UEAxMk OGY1ODlkMDgtM2Q2OC00MDBmLWE4NjItNGMyNGUwYmZmNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKVu69IwEDWGVkcYC2a6jiFmVU/XHBZ2Wg5j qRGCu1TeDLzpLcRdoUOYQ6eng5Xdcfk2geg4OZG9tVxLcdplh/DvODY/vAkKpHIL f6jKEAckntyarv1qKeKGyCSouUW5rBIfsQ5NfY+7TeYUL/01K+7taqvsudcTC7al MaAksqO1eEZ3y5up762hrgOnSd4nHEe32b3/FAxwi/H7/JoBEbVNYQ5YvDPR5Kw3 OAGvmIjP+yclGfBvKWLYLJEawmdDSn6G6Qlu6p9ooZNuIzT116/ioJagSsN7N0pk Gl9pVSwdxg3JLa+ai3xifFevcMbSFNlv0gE+/UupH5it2m7YawIDAQABo4IEdjCC BHIwHQYDVR0OBBYEFAs3IE33TgvsvBeB0F79Jq8VpMuFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84 ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBiZmY0YzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzhmNTg5ZDA4LTNkNjgtNDAwZi1h ODYyLTRjMjRlMGJmZjRjOS84ZjU4OWQwOC0zZDY4LTQwMGYtYTg2Mi00YzI0ZTBi ZmY0YzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwaAYIKwYBBQUH AQcBAf8EWTBXMEQEAgABMD4DBAUXWmADBAVE6IAwDAMEA4uKGAMEBIuKIAMEA4uK OAMEBLhe8AMEAswPUAMEBc82QAMEA9BaOAMEBdhHgDAPBAIAAjAJAwcFJiABASAA MCwGCCsGAQUFBwEIAQH/BB0wG6AZMBcCAkAhMAgCAnYGAgJ2BwICdh4CAwCd6zBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAfH0UBQ7IbFH2IUWo+axbw7zLICtHVIV+Dese6cO71p2gQQWPzzelj l26alvFETRakT9DAefH8hdUEyr+6UQeccLumgjOIYHWOvcSnPpiLsMb5ZqPTIuUJ bL70wCDur828f0KnqGrcFgITsZihCOjWnSr8t9qMQPTKMR3+HZullzw2aezfeosb kuMuq98Q6TEKrr7aGscRIxV48jqCIoAL8TbZWOeSn5LxnESGKbB6bM/tPhvGo9f2 Zj5cNQHMVqiaizJe3GUzGSONpY0EjZdhY6H7UDFI7ixwQBdSYDERUOv69dcMhbOY eduEclLl1FTUJEIvwyZHZURZb9wK0P+U -----END CERTIFICATE-----Generated at Fri Apr 4 19:03:25 2025 by rpki-client