$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer File: 332d4c1c-68fd-46ba-9450-84697fbe4bcb.cer (raw, json) Hash identifier: Tbw43v/oCjvjoShilr6E/i2baWXI0H1Hfg/rGDHkHrw= Subject key identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F43285848D79EC30F7B88D0E4B6718500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 01:45:34 +0000 Certificate not after: Mon 17 May 2027 00:45:34 +0000 Subordinate resources: AS: 15233 AS: 15330 AS: 36476 AS: 53433 IP: 64.69.208.0/22 IP: 64.69.213.0 -- 64.69.218.255 IP: 64.69.220.0 -- 64.69.222.255 IP: 209.17.112.0 -- 209.17.117.255 IP: 209.17.119.0 -- 209.17.127.255 IP: 209.237.134.0/23 IP: 209.237.142.0/24 IP: 209.237.150.0 -- 209.237.152.255 IP: 209.237.155.0/24 IP: 209.237.160.0 -- 209.237.171.255 IP: 209.237.176.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:9e:c3:0f:7b:88:d0:e4:b6:71:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 11 01:45:34 2025 GMT Not After : May 17 00:45:34 2027 GMT Subject: CN=332d4c1c-68fd-46ba-9450-84697fbe4bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:e1:0c:fa:16:14:4b:3e:1f:4a:0e:bc:ff: c1:77:d3:d9:77:3a:55:ee:f2:fa:c8:1d:3a:0e:75: 0a:9b:18:bc:bd:eb:9b:63:db:e1:ed:92:41:0e:ff: 0d:a5:51:12:ac:ef:50:ff:df:b0:ee:e3:bc:b9:e7: 56:21:e7:c4:ae:54:5c:ce:93:92:a1:9f:e9:20:75: d7:0d:93:d6:3a:c0:85:64:06:f1:ad:7a:9b:cd:fd: a8:f9:ba:3f:92:ff:b9:92:4e:65:c8:80:80:1a:33: c2:ad:cd:87:77:2f:e4:2c:fa:61:27:55:f0:df:cb: 33:7d:e0:fe:72:c4:2b:88:d3:42:1f:63:9a:3c:9c: 3a:a2:33:ae:c1:46:0b:f2:3b:28:3b:5e:7c:2e:4b: aa:f1:df:9a:39:b2:fc:d4:f6:1b:e0:a2:9c:41:97: 5d:75:77:44:c1:85:ba:92:25:81:d9:49:4a:3f:de: d4:a0:2c:75:e0:2d:66:27:ee:ca:bd:74:e3:ca:25: a8:a3:7d:e2:99:52:b0:e5:ce:00:f1:f0:f7:f4:3a: 1d:4b:fb:8a:42:66:9f:af:bc:49:26:bc:d2:7b:d3: 5f:52:4d:65:78:5a:19:6c:90:ae:1c:f9:ba:8c:d3: 33:6d:39:35:53:82:36:d0:e0:4b:f4:96:26:ee:f6: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:D2:50:7C:E0:55:F4:5A:1A:02:70:D2:84:82:43:CC:30:79:71:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/332d4c1c-68fd-46ba-9450-84697fbe4bcb/332d4c1c-68fd-46ba-9450-84697fbe4bcb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 64.69.208.0/22 64.69.213.0-64.69.218.255 64.69.220.0-64.69.222.255 209.17.112.0-209.17.117.255 209.17.119.0-209.17.127.255 209.237.134.0/23 209.237.142.0/24 209.237.150.0-209.237.152.255 209.237.155.0/24 209.237.160.0-209.237.171.255 209.237.176.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15233 15330 36476 53433 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:97:ea:56:2b:87:d4:cb:2b:35:38:19:56:41:fc:3b:d1:5b: c1:5f:c9:08:7e:d5:c0:97:97:77:51:41:c7:68:5d:43:82:f4: ce:8d:ba:93:a9:d3:18:28:6d:32:4a:30:fe:45:a8:a2:4b:d2: 86:a7:12:76:4a:49:ad:86:02:8d:a7:b0:9d:2f:f1:b6:1a:d6: 65:b8:0f:10:55:94:00:a5:bb:98:4d:d7:a5:95:07:b6:10:5a: 2a:7b:46:3e:09:84:ea:66:39:cb:84:ad:c5:1a:53:ad:fc:8e: 44:b7:3a:c2:55:f3:04:63:b9:93:d0:02:da:64:85:11:8b:1f: f4:b0:57:95:96:09:6d:39:a7:c9:65:21:29:70:64:11:23:31: 12:e2:46:e3:25:ff:14:c7:f3:bd:44:66:55:f4:f8:27:90:8b: f6:db:c8:55:4b:d6:69:5e:b1:79:8c:0e:2e:f8:4f:71:ad:78: 1a:e3:e6:15:a4:1d:75:49:18:8d:32:62:c5:d3:5f:a0:b6:56: 1b:cb:2c:5d:08:01:32:9e:20:54:b1:86:6f:c0:f9:36:33:c3: 83:41:4a:4d:cb:66:9c:1b:1d:ed:6c:06:5c:bc:14:fe:cc:54: eb:0d:54:07:4c:07:8a:db:02:a4:bc:16:3e:84:04:d3:90:3f: e8:b3:7d:48 -----BEGIN CERTIFICATE----- MIIHgzCCBmugAwIBAgIUAQ0Mn0MoWEjXnsMPe4jQ5LZxhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI1MDIxMTAxNDUzNFoXDTI3MDUxNzAwNDUzNFowLzEtMCsGA1UEAxMk MzMyZDRjMWMtNjhmZC00NmJhLTk0NTAtODQ2OTdmYmU0YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzS/hDPoWFEs+H0oOvP/Bd9PZdzpV7vL6yB06 DnUKmxi8veubY9vh7ZJBDv8NpVESrO9Q/9+w7uO8uedWIefErlRczpOSoZ/pIHXX DZPWOsCFZAbxrXqbzf2o+bo/kv+5kk5lyICAGjPCrc2Hdy/kLPphJ1Xw38szfeD+ csQriNNCH2OaPJw6ojOuwUYL8jsoO158Lkuq8d+aObL81PYb4KKcQZdddXdEwYW6 kiWB2UlKP97UoCx14C1mJ+7KvXTjyiWoo33imVKw5c4A8fD39DodS/uKQmafr7xJ JrzSe9NfUk1leFoZbJCuHPm6jNMzbTk1U4I20OBL9JYm7vbX9wIDAQABo4IElTCC BJEwHQYDVR0OBBYEFATSUHzgVfRaGgJw0oSCQ8wweXHGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z MzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2ZiZTRiY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzMzMmQ0YzFjLTY4ZmQtNDZiYS05 NDUwLTg0Njk3ZmJlNGJjYi8zMzJkNGMxYy02OGZkLTQ2YmEtOTQ1MC04NDY5N2Zi ZTRiY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwgYsGCCsGAQUF BwEHAQH/BHwwejB4BAIAATByAwQCQEXQMAwDBABARdUDBABARdowDAMEAkBF3AME AEBF3jAMAwQE0RFwAwQB0RF0MAwDBADREXcDBAfREQADBAHR7YYDBADR7Y4wDAME AdHtlgMEANHtmAMEANHtmzAMAwQF0e2gAwQC0e2oAwQE0e2wMCcGCCsGAQUFBwEI AQH/BBgwFqAUMBICAjuBAgI74gIDAI58AgMA0LkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN5fqViuH1Msr NTgZVkH8O9FbwV/JCH7VwJeXd1FBx2hdQ4L0zo26k6nTGChtMkow/kWookvShqcS dkpJrYYCjaewnS/xthrWZbgPEFWUAKW7mE3XpZUHthBaKntGPgmE6mY5y4StxRpT rfyORLc6wlXzBGO5k9AC2mSFEYsf9LBXlZYJbTmnyWUhKXBkESMxEuJG4yX/FMfz vURmVfT4J5CL9tvIVUvWaV6xeYwOLvhPca14GuPmFaQddUkYjTJixdNfoLZWG8ss XQgBMp4gVLGGb8D5NjPDg0FKTctmnBsd7WwGXLwU/sxU6w1UB0wHitsCpLwWPoQE 05A/6LN9SA== -----END CERTIFICATE-----Generated at Sat Apr 26 23:03:43 2025 by rpki-client