$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer File: 2f9f859b-6735-4c5f-8f00-0526da777ec4.cer (raw, json) Hash identifier: RyJJcda5Lhx618KY8gYBZD/D11M/ErVT7h/rspYPKeE= Subject key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858488F08F8796CFB6F9F63DA5460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Jan 2025 01:45:33 +0000 Certificate not after: Wed 21 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 397966 IP: 134.195.136.0/22 IP: 165.140.164.0/22 IP: 170.205.52.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8f:08:f8:79:6c:fb:6f:9f:63:da:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 16 01:45:33 2025 GMT Not After : Apr 21 00:45:33 2027 GMT Subject: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:7a:c5:5f:fb:a3:2a:50:78:a7:dd:29:40: 84:85:ea:b0:e2:9a:1b:05:52:a4:85:60:e6:f4:2f: 98:5f:08:dd:be:1f:9c:bd:ca:1f:f8:0d:ed:29:62: 13:d3:1b:a7:a2:8c:6e:37:d7:a4:b2:1e:72:5a:f1: a4:6c:5c:d5:6b:af:88:ca:25:a5:38:b2:31:0a:7f: 86:a9:cb:fc:56:08:c9:9b:f8:b6:2a:22:4f:91:af: f0:c5:68:e8:55:ea:5d:62:04:cf:9c:c4:5f:6f:44: e5:8d:e9:74:9d:a8:6e:b2:e1:fc:b3:32:a2:b3:65: 83:3a:d0:5e:45:c0:c3:12:20:b1:6b:bb:08:64:2c: e6:d1:62:68:72:0e:a4:5c:35:e9:df:3b:63:a4:91: e9:ae:9d:f2:c1:87:03:44:60:d8:30:21:12:76:83: 54:87:81:97:73:d6:c5:6b:02:f5:f2:fd:34:dd:61: e6:9c:31:a0:ff:be:ac:76:05:e6:23:f6:36:ab:7f: 8c:46:fe:46:21:b7:97:b8:0d:94:32:72:88:09:dc: da:0b:8e:90:e6:40:80:11:17:0b:a2:aa:ee:23:dc: bd:d1:74:01:6d:fa:9f:77:c9:65:87:5c:ca:d6:95: f3:ad:21:77:6e:3c:92:aa:55:62:1d:38:08:e5:5b: 41:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 134.195.136.0/22 165.140.164.0/22 170.205.52.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397966 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a3:2d:2b:3f:ba:e0:13:7e:9a:42:ae:8f:64:cc:19:6c:d1: 5e:5d:59:3a:2d:b3:31:ba:d9:37:44:a9:ce:a2:c7:44:69:05: d2:10:08:3d:35:50:5d:6d:e4:bd:b6:0b:f9:35:d6:ec:3e:95: 89:35:37:66:0a:25:2e:68:8d:b5:79:9a:5f:64:1d:dc:4d:9c: fa:9e:6e:81:4c:b2:7d:df:98:72:07:24:74:e0:8c:ca:2b:4d: b5:0d:ca:24:92:70:20:4b:2d:c7:ec:85:2c:b3:3c:d5:a4:b1: ab:e5:d7:57:92:98:e4:63:c1:6c:cf:e2:b7:a7:8f:ee:68:0a: be:94:02:c9:f7:48:ac:34:a7:62:83:76:a8:ad:78:8f:78:2a: 71:95:78:e8:b6:ff:56:78:29:22:44:18:9d:3e:05:81:c6:0b: 12:38:3b:e4:88:eb:35:a6:e0:53:1f:d7:09:84:43:17:fe:2c: ce:39:51:90:ef:e6:7b:c0:a6:df:d3:1d:0a:83:cc:0e:f2:1d: 1a:40:c0:d7:db:0c:0b:5c:6d:64:5a:51:9e:6f:09:0a:8d:e0: f0:4a:15:20:fd:80:42:e9:64:bd:e4:d9:82:c0:1e:b5:f2:59: c3:f6:af:e6:82:6a:ab:e0:a3:62:fd:a8:db:ff:74:10:af:93: af:ce:fc:7e -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEiPCPh5bPtvn2PaVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDExNjAxNDUzM1oXDTI3MDQyMTAwNDUzM1owLzEtMCsGA1UEAxMk MmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3ZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ax6xV/7oypQeKfdKUCEheqw4pobBVKkhWDm 9C+YXwjdvh+cvcof+A3tKWIT0xunooxuN9eksh5yWvGkbFzVa6+IyiWlOLIxCn+G qcv8VgjJm/i2KiJPka/wxWjoVepdYgTPnMRfb0Tljel0nahusuH8szKis2WDOtBe RcDDEiCxa7sIZCzm0WJocg6kXDXp3ztjpJHprp3ywYcDRGDYMCESdoNUh4GXc9bF awL18v003WHmnDGg/76sdgXmI/Y2q3+MRv5GIbeXuA2UMnKICdzaC46Q5kCAERcL oqruI9y90XQBbfqfd8llh1zK1pXzrSF3bjySqlViHTgI5VtBHQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFFiPn0dLWuheS7b1D2wuvHaYlKsrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8y ZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzJmOWY4NTliLTY3MzUtNGM1Zi04 ZjAwLTA1MjZkYTc3N2VjNC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3 NzdlYzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKGw4gDBAKljKQDBAKqzTQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBhKOMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEmjLSs/uuATfppCro9kzBls0V5dWTot szG62TdEqc6ix0RpBdIQCD01UF1t5L22C/k11uw+lYk1N2YKJS5ojbV5ml9kHdxN nPqeboFMsn3fmHIHJHTgjMorTbUNyiSScCBLLcfshSyzPNWksavl11eSmORjwWzP 4renj+5oCr6UAsn3SKw0p2KDdqiteI94KnGVeOi2/1Z4KSJEGJ0+BYHGCxI4O+SI 6zWm4FMf1wmEQxf+LM45UZDv5nvApt/THQqDzA7yHRpAwNfbDAtcbWRaUZ5vCQqN 4PBKFSD9gELpZL3k2YLAHrXyWcP2r+aCaqvgo2L9qNv/dBCvk6/O/H4= -----END CERTIFICATE-----Generated at Sat Feb 8 12:25:48 2025 by rpki-client