$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer File: 1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer (raw, json) Hash identifier: foClUETgT2PmdFsSyZU/ZIavL8h5U4+pWR5mS3xvcB0= Subject key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849472C57BF154DCBB2C620F300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 23 Mar 2025 00:45:33 +0000 Certificate not after: Sat 26 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 53844 IP: 199.187.168.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:47:2c:57:bf:15:4d:cb:b2:c6:20:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 23 00:45:33 2025 GMT Not After : Jun 26 00:45:33 2027 GMT Subject: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:86:04:d8:6f:a3:f3:b2:cb:db:24:9f:ba:bd: 60:de:a2:97:fe:68:67:eb:08:c7:6c:ac:50:9c:0f: 49:80:1f:e3:a5:ef:5f:94:03:84:de:da:4e:1c:e0: ad:0d:fe:ba:d3:49:46:67:9e:c4:e0:44:de:be:52: 33:e8:77:3e:39:4b:81:75:1c:e1:e2:31:e9:6f:8b: 53:ad:ed:cc:0c:7f:cf:84:3d:4e:ff:c6:3b:5a:61: 15:d7:c4:9c:c6:33:80:81:12:5c:9e:5b:21:ab:d9: 0f:c6:74:9f:8a:62:f4:63:84:fa:3a:b1:de:3d:50: e0:1b:a6:d9:46:7d:d6:c9:85:61:85:60:07:10:d0: 72:c4:26:ed:b4:29:1d:b6:9c:ec:8c:90:e9:8d:32: 22:bf:53:4e:19:84:0b:59:43:c9:db:c9:1d:4a:39: 05:7a:8f:71:57:c8:65:87:6a:50:ca:17:70:3c:ec: 59:38:33:fc:ae:e3:5d:df:b0:35:11:34:8a:38:e4: 4a:44:fd:79:37:2f:a1:98:64:a2:75:e7:de:2d:0b: 96:e8:59:d6:e0:df:7e:34:ec:45:c2:29:5d:af:e7: 3e:e2:ae:1a:fc:5c:32:7f:aa:1a:da:b7:ef:af:dd: 29:12:12:13:22:0e:94:37:b4:5f:92:fa:ca:a2:0b: 60:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 199.187.168.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53844 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d4:97:a2:1a:2d:c8:4f:30:5e:fd:85:3f:81:4a:47:9e:08: e8:bf:da:a6:be:69:41:5d:e8:df:af:95:4c:a1:1b:10:89:83: c9:a2:cd:42:2c:8b:c8:c5:65:93:e2:22:65:13:96:6f:34:47: 05:51:c3:03:8f:e1:fc:22:7e:71:ed:a7:bf:63:54:9a:39:27: 6b:06:76:e6:7f:75:ad:d7:9c:e0:c7:39:65:3a:b2:9e:02:dc: ea:71:32:ad:b2:17:35:da:14:c7:e6:c3:b7:75:de:a5:b0:63: c2:75:36:20:c3:fe:1a:04:a1:d8:a9:9e:4f:f1:17:0c:82:7f: 3b:78:a6:c5:80:fc:83:34:2a:b5:cd:14:36:8d:a8:d0:94:96: af:56:fc:70:be:89:76:df:d1:55:fa:59:98:bd:36:31:20:6c: d1:87:fd:ee:03:e9:9e:64:8a:c5:ff:d4:af:a5:b8:eb:a4:23: b9:4c:3e:78:fe:e1:59:35:08:92:57:1d:b6:14:48:83:75:53: c2:2d:19:58:8c:ee:f2:34:07:e9:e2:51:0b:2b:aa:63:ad:ba: ea:1c:dc:49:d6:3f:39:89:f9:ee:b6:11:7f:d2:1e:46:7c:27: ad:2d:06:fc:ba:e8:82:6d:f6:cb:85:85:d3:68:db:44:28:da: 1b:a4:23:bd -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWElHLFe/FU3LssYg8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMyMzAwNDUzM1oXDTI3MDYyNjAwNDUzM1owLzEtMCsGA1UEAxMk MWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNkYTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IYE2G+j87LL2ySfur1g3qKX/mhn6wjHbKxQ nA9JgB/jpe9flAOE3tpOHOCtDf6600lGZ57E4ETevlIz6Hc+OUuBdRzh4jHpb4tT re3MDH/PhD1O/8Y7WmEV18ScxjOAgRJcnlshq9kPxnSfimL0Y4T6OrHePVDgG6bZ Rn3WyYVhhWAHENByxCbttCkdtpzsjJDpjTIiv1NOGYQLWUPJ28kdSjkFeo9xV8hl h2pQyhdwPOxZODP8ruNd37A1ETSKOORKRP15Ny+hmGSidefeLQuW6FnW4N9+NOxF wildr+c+4q4a/Fwyf6oa2rfvr90pEhITIg6UN7RfkvrKogtgIwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNU/FF9BU1rwQcLSv307UOY1Mv/UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8x Y2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzFjZjQzNWMwLTlkMjgtNDc3YS05 MGE5LTFiNGZkNzVjZGE3Ni8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1 Y2RhNzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALHu6gwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANJUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACbUl6IaLchPMF79hT+BSkeeCOi/2qa+aUFd6N+vlUyhGxCJ g8mizUIsi8jFZZPiImUTlm80RwVRwwOP4fwifnHtp79jVJo5J2sGduZ/da3XnODH OWU6sp4C3OpxMq2yFzXaFMfmw7d13qWwY8J1NiDD/hoEodipnk/xFwyCfzt4psWA /IM0KrXNFDaNqNCUlq9W/HC+iXbf0VX6WZi9NjEgbNGH/e4D6Z5kisX/1K+luOuk I7lMPnj+4Vk1CJJXHbYUSIN1U8ItGViM7vI0B+niUQsrqmOtuuoc3EnWPzmJ+e62 EX/SHkZ8J60tBvy66IJt9suFhdNo20Qo2hukI70= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:40 2025 by rpki-client