$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer File: 934f4dde-b680-46f3-8723-45f78b94fd80.cer (raw, json) Hash identifier: fisbUJ2toVlXfV6lx2WPQU5sesX4GqzBn9Pz0OILIGc= Subject key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F43285848B353DD62DAA93F4F052E8110 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 01:45:33 +0000 Certificate not after: Tue 04 May 2027 00:45:33 +0000 Subordinate resources: AS: 30058 IP: 23.237.0.0/16 IP: 50.7.0.0/16 IP: 66.90.64.0/18 IP: 67.159.0.0/18 IP: 74.63.64.0/18 IP: 192.240.96.0/19 IP: 198.16.64.0/18 IP: 198.255.0.0/17 IP: 216.227.128.0/18 IP: 2001:49f0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:53:dd:62:da:a9:3f:4f:05:2e:81:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Jan 29 01:45:33 2025 GMT Not After : May 4 00:45:33 2027 GMT Subject: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:8b:72:e8:2a:b0:70:8c:bf:da:3b:4f:bf:e4: 16:72:95:2d:6b:4a:23:47:1b:1e:f4:1a:7f:e6:8f: 74:fd:ed:13:a5:e1:49:e6:24:66:b7:e2:fe:ae:d3: be:db:d4:14:fc:9d:0d:fc:ce:93:87:43:0e:17:9d: bf:1f:7b:7a:62:e1:2e:4b:34:e0:5f:b6:fb:30:0b: 48:98:43:f0:c2:03:25:a8:e5:db:4c:67:cc:1a:04: 24:5a:e2:80:5a:a2:0f:4a:6e:99:be:9a:c9:1f:58: 39:ae:5a:1e:9c:f9:e1:94:dc:6a:7a:0a:74:ef:67: 53:93:52:a9:8e:24:9b:42:9b:67:eb:54:47:70:96: a3:9d:55:df:54:ed:bb:f4:dd:04:62:97:ec:95:d6: 26:7c:f9:99:cf:55:b1:b8:ae:f1:2b:54:77:31:32: 9d:df:dc:f5:48:d2:d4:39:1f:86:ad:f1:e4:22:2a: 97:21:a8:5a:d6:3a:f9:7a:b0:51:7f:5e:0b:40:c2: 6b:b3:68:34:25:be:bc:3f:1b:fb:5f:72:ba:68:50: 09:2e:87:10:8e:be:3b:44:63:c2:7a:43:c5:c0:8c: bb:b6:3f:f1:55:23:4f:bb:e4:15:3f:d5:39:0c:40: 89:75:61:d7:be:1b:98:7a:d5:3f:09:5a:30:d5:bb: 34:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.237.0.0/16 50.7.0.0/16 66.90.64.0/18 67.159.0.0/18 74.63.64.0/18 192.240.96.0/19 198.16.64.0/18 198.255.0.0/17 216.227.128.0/18 IPv6: 2001:49f0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30058 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0b:d0:10:fa:17:63:27:f2:2f:15:93:dd:da:c9:ac:17:10: 6c:7b:60:8a:c5:31:7e:69:67:05:be:10:f3:61:7b:62:e3:2a: f4:3f:04:9e:31:ed:f3:08:b0:5a:b6:21:31:87:0e:81:99:2c: a1:4e:ec:ba:64:51:f6:08:94:16:6f:cf:f4:9f:4b:94:29:2b: 48:2c:e4:37:74:60:1d:a8:18:bc:78:7f:5a:ee:ad:a7:57:e6: 8b:95:a7:d4:a0:52:0e:2c:fe:04:08:57:9e:6f:77:06:8f:5e: 40:26:38:b7:e6:88:9a:da:c9:f4:a3:25:65:bf:78:de:76:b7: 83:28:f4:02:9e:c0:48:58:fd:4b:46:da:29:0d:70:f8:f8:18: 97:50:cc:f7:c0:db:ff:63:d6:65:e9:33:c5:16:ec:f5:43:4a: 94:8a:43:91:32:22:f6:9f:c3:f0:a7:b2:c9:74:d6:a3:1c:c2: 44:21:f9:0f:b3:77:83:72:1e:11:9c:a5:38:0b:c2:8d:1e:4b: 02:a8:59:5e:27:fb:99:ec:67:a4:7c:b0:26:d0:57:cd:5e:07: 8c:7f:d2:62:5f:bb:d8:ca:26:84:28:45:99:cd:bc:7d:0b:93: e2:bc:98:2c:d3:7e:21:2f:58:9b:6d:68:df:4f:c3:03:b4:00: c9:b0:ff:b4 -----BEGIN CERTIFICATE----- MIIHRTCCBi2gAwIBAgIUAQ0Mn0MoWEizU91i2qk/TwUugRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDEyOTAxNDUzM1oXDTI3MDUwNDAwNDUzM1owLzEtMCsGA1UEAxMk OTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRmZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Yty6CqwcIy/2jtPv+QWcpUta0ojRxse9Bp/ 5o90/e0TpeFJ5iRmt+L+rtO+29QU/J0N/M6Th0MOF52/H3t6YuEuSzTgX7b7MAtI mEPwwgMlqOXbTGfMGgQkWuKAWqIPSm6ZvprJH1g5rloenPnhlNxqegp072dTk1Kp jiSbQptn61RHcJajnVXfVO279N0EYpfsldYmfPmZz1WxuK7xK1R3MTKd39z1SNLU OR+GrfHkIiqXIaha1jr5erBRf14LQMJrs2g0Jb68Pxv7X3K6aFAJLocQjr47RGPC ekPFwIy7tj/xVSNPu+QVP9U5DECJdWHXvhuYetU/CVow1bs0VQIDAQABo4IEVzCC BFMwHQYDVR0OBBYEFBa04nGHTDeLFXtIdkDSNhbRJxMSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5LzkzNGY0ZGRlLWI2ODAtNDZmMy04 NzIzLTQ1Zjc4Yjk0ZmQ4MC85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5 NGZkODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDAwAX7QMDADIHAwQGQlpAAwQGQ58AAwQGSj9AAwQF wPBgAwQGxhBAAwQHxv8AAwQG2OOAMA0EAgACMAcDBQAgAUnwMBkGCCsGAQUFBwEI AQH/BAowCKAGMAQCAnVqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIcL0BD6F2Mn8i8Vk93ayawXEGx7YIrF MX5pZwW+EPNhe2LjKvQ/BJ4x7fMIsFq2ITGHDoGZLKFO7LpkUfYIlBZvz/SfS5Qp K0gs5Dd0YB2oGLx4f1ruradX5ouVp9SgUg4s/gQIV55vdwaPXkAmOLfmiJrayfSj JWW/eN52t4Mo9AKewEhY/UtG2ikNcPj4GJdQzPfA2/9j1mXpM8UW7PVDSpSKQ5Ey Ivafw/Cnssl01qMcwkQh+Q+zd4NyHhGcpTgLwo0eSwKoWV4n+5nsZ6R8sCbQV81e B4x/0mJfu9jKJoQoRZnNvH0Lk+K8mCzTfiEvWJttaN9PwwO0AMmw/7Q= -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:33 2025 by rpki-client