$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer File: 2f9f859b-6735-4c5f-8f00-0526da777ec4.cer (raw, json) Hash identifier: AuvqLWcs7Qu8gDvTJJeykGcq8fOSekkoVMVphbpC75s= Subject key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858438AB85FB9550CA6798B59F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Oct 2023 00:45:14 +0000 Certificate not after: Fri 16 Jan 2026 01:45:14 +0000 Subordinate resources: AS: 397966 IP: 134.195.136.0/22 IP: 165.140.164.0/22 IP: 170.205.52.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:43:8a:b8:5f:b9:55:0c:a6:79:8b:59:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Oct 14 00:45:14 2023 GMT Not After : Jan 16 01:45:14 2026 GMT Subject: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:7a:c5:5f:fb:a3:2a:50:78:a7:dd:29:40: 84:85:ea:b0:e2:9a:1b:05:52:a4:85:60:e6:f4:2f: 98:5f:08:dd:be:1f:9c:bd:ca:1f:f8:0d:ed:29:62: 13:d3:1b:a7:a2:8c:6e:37:d7:a4:b2:1e:72:5a:f1: a4:6c:5c:d5:6b:af:88:ca:25:a5:38:b2:31:0a:7f: 86:a9:cb:fc:56:08:c9:9b:f8:b6:2a:22:4f:91:af: f0:c5:68:e8:55:ea:5d:62:04:cf:9c:c4:5f:6f:44: e5:8d:e9:74:9d:a8:6e:b2:e1:fc:b3:32:a2:b3:65: 83:3a:d0:5e:45:c0:c3:12:20:b1:6b:bb:08:64:2c: e6:d1:62:68:72:0e:a4:5c:35:e9:df:3b:63:a4:91: e9:ae:9d:f2:c1:87:03:44:60:d8:30:21:12:76:83: 54:87:81:97:73:d6:c5:6b:02:f5:f2:fd:34:dd:61: e6:9c:31:a0:ff:be:ac:76:05:e6:23:f6:36:ab:7f: 8c:46:fe:46:21:b7:97:b8:0d:94:32:72:88:09:dc: da:0b:8e:90:e6:40:80:11:17:0b:a2:aa:ee:23:dc: bd:d1:74:01:6d:fa:9f:77:c9:65:87:5c:ca:d6:95: f3:ad:21:77:6e:3c:92:aa:55:62:1d:38:08:e5:5b: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 134.195.136.0/22 165.140.164.0/22 170.205.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397966 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:f3:08:b9:45:47:fd:5e:60:aa:16:15:e3:5e:e8:1e:ed:97: 1f:0a:c0:0a:2f:01:c4:b3:a5:67:b7:7b:c2:d2:18:59:b3:72: b0:b0:7d:3a:33:49:c7:3a:46:32:bd:6f:b1:d6:7a:91:22:2e: 83:31:b8:ed:5f:86:17:29:98:8c:68:95:fe:72:09:6e:09:26: b0:62:21:a9:ed:a5:84:9b:0a:9e:be:80:52:84:fe:8c:a0:98: 5b:c4:20:25:c9:24:ea:d1:f7:f7:7d:98:f9:36:9e:41:b3:76: fb:96:6b:e0:75:97:0c:2a:ca:c3:e2:b9:a6:1c:51:ae:94:15: 6b:5f:b6:8c:8d:c4:70:d3:c8:1d:cf:09:27:cd:5a:ca:6b:42: 3b:58:f2:88:92:2e:67:e0:95:7f:22:43:24:0b:b0:7d:72:c3: ee:59:11:23:18:74:64:c8:88:a6:5c:46:e8:2c:63:20:c9:2f: 40:b0:cb:13:49:a1:c3:8e:d9:5b:98:e2:71:81:0a:b7:1e:23: 91:78:d0:d4:e4:ff:a8:b7:8e:c6:c2:85:76:3b:88:50:3f:1f: bb:b3:1e:d2:99:c1:0b:7d:da:38:01:e2:87:37:b2:d5:52:64: 35:c5:82:1b:24:b0:19:06:7d:63:6d:95:15:57:74:09:28:c7: 6b:89:12:60 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEOKuF+5VQymeYtZ9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMTAxNDAwNDUxNFoXDTI2MDExNjAxNDUxNFowLzEtMCsGA1UEAxMk MmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ax6xV/7oypQeKfdKUCEheqw4pobBVKkhWDm 9C+YXwjdvh+cvcof+A3tKWIT0xunooxuN9eksh5yWvGkbFzVa6+IyiWlOLIxCn+G qcv8VgjJm/i2KiJPka/wxWjoVepdYgTPnMRfb0Tljel0nahusuH8szKis2WDOtBe RcDDEiCxa7sIZCzm0WJocg6kXDXp3ztjpJHprp3ywYcDRGDYMCESdoNUh4GXc9bF awL18v003WHmnDGg/76sdgXmI/Y2q3+MRv5GIbeXuA2UMnKICdzaC46Q5kCAERcL oqruI9y90XQBbfqfd8llh1zK1pXzrSF3bjySqlViHTgI5VtBHQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFFiPn0dLWuheS7b1D2wuvHaYlKsrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y ZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzJmOWY4NTliLTY3MzUtNGM1Zi04 ZjAwLTA1MjZkYTc3N2VjNC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3 NzdlYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKGw4gDBAKljKQDBAKqzTQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhKOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABTzCLlFR/1eYKoWFeNe6B7tlx8KwAov AcSzpWe3e8LSGFmzcrCwfTozScc6RjK9b7HWepEiLoMxuO1fhhcpmIxolf5yCW4J JrBiIantpYSbCp6+gFKE/oygmFvEICXJJOrR9/d9mPk2nkGzdvuWa+B1lwwqysPi uaYcUa6UFWtftoyNxHDTyB3PCSfNWsprQjtY8oiSLmfglX8iQyQLsH1yw+5ZESMY dGTIiKZcRugsYyDJL0CwyxNJocOO2VuY4nGBCrceI5F40NTk/6i3jsbChXY7iFA/ H7uzHtKZwQt92jgB4oc3stVSZDXFghsksBkGfWNtlRVXdAkox2uJEmA= -----END CERTIFICATE-----Generated at Fri Apr 19 07:42:26 2024 by rpki-client on console-ams.rpki-client.org