$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer File: 98cb5058-01ad-45bf-9c15-453f410bb9d7.cer (raw, json) Hash identifier: LTfmjWwkhXpIxsGuxkji+LH4cF4GGDOigEvwLFXNrqk= Subject key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584859FDF957F35D800FBA425A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Dec 2024 01:45:33 +0000 Certificate not after: Fri 02 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 53667 IP: 23.183.80.0/22 IP: 45.61.128.0/18 IP: 104.194.128.0/19 IP: 104.244.72.0/21 IP: 107.189.0.0/19 IP: 144.172.64.0/18 IP: 162.244.92.0/22 IP: 162.245.0.0/21 IP: 167.88.160.0/20 IP: 172.86.64.0/18 IP: 198.98.48.0/20 IP: 198.251.80.0/20 IP: 199.19.224.0/22 IP: 199.195.248.0/21 IP: 205.185.112.0/20 IP: 209.141.32.0/19 IP: 2605:6400::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:59:fd:f9:57:f3:5d:80:0f:ba:42:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Dec 28 01:45:33 2024 GMT Not After : Apr 2 00:45:33 2027 GMT Subject: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:16:21:69:4a:98:62:d2:8f:b8:69:8c:7e:c5: 40:f0:38:11:ef:ee:1f:61:37:88:b3:66:23:b3:cd: a4:5f:6f:73:ab:0e:05:05:7b:bb:82:59:9b:f7:5e: 2a:0e:ed:a5:b2:28:8d:0e:86:bb:c8:ca:f2:c8:0f: d1:ea:4a:05:dc:e4:47:90:40:b0:87:84:82:d8:bc: 90:a5:10:ad:37:b3:97:87:6d:e6:c0:cc:30:c8:02: 11:1a:df:f2:a1:92:05:23:8c:b9:b2:97:84:3d:16: de:b1:2d:dd:b9:13:9c:c7:78:08:02:b0:63:b9:16: e1:b3:b9:35:40:a5:d3:bd:fb:01:bc:de:e7:b1:f0: 5c:0c:2b:de:f1:1d:b1:fc:a3:ce:d6:29:fd:91:00: 4c:03:e1:50:03:3f:86:f4:f2:7e:20:2f:8e:3e:9b: 93:78:60:f6:92:8c:2b:ad:f6:a1:26:fb:cd:0f:0e: 32:ed:fa:70:e2:f5:f0:f1:7f:e4:ef:ed:d0:bb:c6: f3:07:c6:68:68:78:38:2e:bd:d8:04:00:a2:77:36: e1:38:60:ed:a5:04:a2:6e:59:45:92:12:a0:2a:09: 5d:37:67:fe:a4:5f:ca:5e:5b:df:31:23:e6:b9:62: 45:51:1c:e9:f6:43:6e:95:5c:87:7b:5e:c6:09:e8: 0e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 23.183.80.0/22 45.61.128.0/18 104.194.128.0/19 104.244.72.0/21 107.189.0.0/19 144.172.64.0/18 162.244.92.0/22 162.245.0.0/21 167.88.160.0/20 172.86.64.0/18 198.98.48.0/20 198.251.80.0/20 199.19.224.0/22 199.195.248.0/21 205.185.112.0/20 209.141.32.0/19 IPv6: 2605:6400::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53667 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cf:72:4b:3d:98:90:b7:b8:ed:f7:76:32:8e:59:a0:ed:a0: 1a:4b:ed:be:29:04:b9:17:e9:ab:f6:6e:5d:ac:d1:9c:e9:10: 31:9d:08:a6:bd:d1:96:bd:40:f9:25:3a:9f:cd:78:e5:7e:27: 30:21:a4:b8:21:fc:09:cb:d8:4a:d3:86:4e:0a:75:6b:85:34: e7:66:ca:b3:e1:32:b7:d7:80:e5:c9:20:0a:a6:d7:7b:52:61: ee:0f:70:f5:6f:0f:87:df:a3:e3:a9:f4:a4:5c:ed:6b:80:59: 72:d3:4a:a5:ad:54:9a:f6:43:34:39:50:f5:64:d2:67:d6:ab: b1:44:f3:fd:93:95:5a:62:13:89:6b:d1:d7:5f:54:06:3f:d6: 1c:cc:0c:65:89:af:e6:7a:a6:04:6f:7d:a3:3b:9e:ab:74:b1: e0:4c:b7:ac:30:65:67:6c:cb:5a:42:e3:24:31:c6:e9:1b:a3: 40:01:16:a4:00:46:3f:b7:2c:e1:ed:db:42:92:55:52:c3:76: af:73:c0:99:89:36:a2:80:5d:08:14:9c:cb:22:39:d0:d0:c7: ad:28:e8:73:5c:93:d9:0d:0d:32:cc:69:76:a3:f5:15:b6:38: 29:d0:9d:ab:c2:04:27:d7:49:1a:42:f5:15:5a:da:2c:e6:6f: 22:0d:6d:eb -----BEGIN CERTIFICATE----- MIIHczCCBlugAwIBAgIUAQ0Mn0MoWEhZ/flX812AD7pCWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI0MTIyODAxNDUzM1oXDTI3MDQwMjAwNDUzM1owLzEtMCsGA1UEAxMk OThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJiOWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthYhaUqYYtKPuGmMfsVA8DgR7+4fYTeIs2Yj s82kX29zqw4FBXu7glmb914qDu2lsiiNDoa7yMryyA/R6koF3ORHkECwh4SC2LyQ pRCtN7OXh23mwMwwyAIRGt/yoZIFI4y5speEPRbesS3duROcx3gIArBjuRbhs7k1 QKXTvfsBvN7nsfBcDCve8R2x/KPO1in9kQBMA+FQAz+G9PJ+IC+OPpuTeGD2kowr rfahJvvNDw4y7fpw4vXw8X/k7+3Qu8bzB8ZoaHg4Lr3YBACidzbhOGDtpQSibllF khKgKgldN2f+pF/KXlvfMSPmuWJFURzp9kNulVyHe17GCegONQIDAQABo4IEhTCC BIEwHQYDVR0OBBYEFILOhDaYAWxKwgZSP8DFPVfhCAA5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85 OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5Lzk4Y2I1MDU4LTAxYWQtNDViZi05 YzE1LTQ1M2Y0MTBiYjlkNy85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEw YmI5ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwgYgGCCsGAQUF BwEHAQH/BHkwdzBmBAIAATBgAwQCF7dQAwQGLT2AAwQFaMKAAwQDaPRIAwQFa70A AwQGkKxAAwQCovRcAwQDovUAAwQEp1igAwQGrFZAAwQExmIwAwQExvtQAwQCxxPg AwQDx8P4AwQEzblwAwQF0Y0gMA0EAgACMAcDBQQmBWQAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwDRozBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlz3JLPZiQt7jt93Yyjlmg7aAaS+2+KQS5 F+mr9m5drNGc6RAxnQimvdGWvUD5JTqfzXjlficwIaS4IfwJy9hK04ZOCnVrhTTn Zsqz4TK314DlySAKptd7UmHuD3D1bw+H36PjqfSkXO1rgFly00qlrVSa9kM0OVD1 ZNJn1quxRPP9k5VaYhOJa9HXX1QGP9YczAxlia/meqYEb32jO56rdLHgTLesMGVn bMtaQuMkMcbpG6NAARakAEY/tyzh7dtCklVSw3avc8CZiTaigF0IFJzLIjnQ0Met KOhzXJPZDQ0yzGl2o/UVtjgp0J2rwgQn10kaQvUVWtos5m8iDW3r -----END CERTIFICATE-----Generated at Fri Apr 4 16:15:45 2025 by rpki-client