$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9.cer File: 3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9.cer (raw, json) Hash identifier: T5UILkbUUMLTRvWZ3ov6GaPk3yPFxvnIz/KiDJE9LUs= Subject key identifier: A1:3F:DE:60:74:A7:47:16:B5:9A:0E:AD:43:FB:14:5F:D6:68:D1:57 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848D79EC2C1657CF0AB7345D440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9/3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 01:45:34 +0000 Certificate not after: Mon 17 May 2027 00:45:34 +0000 Subordinate resources: AS: 15276 IP: 148.59.32.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:9e:c2:c1:65:7c:f0:ab:73:45:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 11 01:45:34 2025 GMT Not After : May 17 00:45:34 2027 GMT Subject: CN=3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:47:8f:2a:fa:dc:67:19:ad:9f:27:4c:40:28: a2:2c:87:9d:9c:c4:ca:49:3d:04:04:b2:4f:f1:a2: 49:d5:13:c0:cc:17:ba:a4:c0:fb:7d:b8:ad:a0:92: a9:8a:b3:8f:06:fb:6e:98:ff:d5:80:d6:10:4e:36: 31:bf:8c:59:df:83:96:c7:1a:72:ff:ac:90:78:bf: 27:7c:9a:35:6a:40:f5:fb:ef:f3:20:f0:b5:0f:93: 61:ef:c0:ad:de:c7:a3:70:ea:fc:1f:41:88:eb:e1: 69:6b:18:d5:81:1c:bd:16:ec:58:e0:d2:a7:75:4e: c6:aa:87:2d:bb:bd:2b:30:4e:ee:59:6c:b6:77:00: e1:bd:01:e6:ed:60:41:0a:65:7f:86:a0:c5:af:fe: 9d:81:52:7f:22:52:20:02:77:92:6b:86:e1:63:47: 72:1f:fe:ce:1c:dc:a9:80:51:f4:6c:cc:e4:ea:46: 7d:dc:ee:86:29:6b:a1:8b:c4:39:57:c6:52:22:25: 47:6c:bd:f3:48:c7:48:77:c7:3b:23:6d:22:fb:f4: 38:db:d8:cb:e2:c8:d6:e6:fc:d0:39:47:30:f6:46: 76:1d:05:53:45:38:a6:0d:da:89:6c:72:55:c2:28: a1:2a:3d:a7:e1:f6:5c:6a:35:69:0f:5d:3e:c6:78: dc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:DE:60:74:A7:47:16:B5:9A:0E:AD:43:FB:14:5F:D6:68:D1:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9/3bea4e5b-3aa4-43fe-9ada-2cf24fb0bce9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 148.59.32.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15276 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:9c:9d:68:7d:2e:69:f6:8f:d7:46:42:f4:7d:8a:63:bd:e2: 1d:2a:57:b3:de:c9:ca:31:e0:b2:ad:34:bd:bd:37:cf:a9:5f: 08:fe:21:7c:72:90:c8:db:8f:a9:8d:0f:7a:23:23:f0:f1:a9: 64:ef:ce:4a:10:01:4f:c6:4d:81:90:45:b3:5d:da:71:73:c8: 39:ba:63:5f:b3:3a:bf:a4:f6:fa:ba:32:69:ad:d5:8b:6f:83: d9:a7:a7:c1:30:38:9a:c5:ec:85:f0:49:bd:ce:8d:38:eb:18: 3e:2a:7e:38:39:be:f0:94:70:49:a9:d4:90:94:83:ea:38:8e: a2:84:7e:da:38:38:f8:8a:b7:61:b5:08:95:8e:3f:60:df:18: e5:ae:df:1c:fe:2c:39:9c:ec:f2:3d:f7:b1:cc:33:53:ff:b3: 62:cd:93:27:a0:fc:f3:3b:24:24:8b:92:a6:7a:5b:79:79:76: 23:b1:64:76:8f:dc:f1:b1:68:dd:8c:f2:0f:65:31:2f:25:6f: 91:fe:3d:13:f7:43:83:87:dc:97:c2:a5:89:ed:09:b9:43:83: 59:68:9f:0f:8b:c4:b6:15:a0:93:ee:ff:8d:b0:c9:76:e1:44: 46:c2:13:55:57:af:52:c6:db:63:ee:24:29:b8:61:15:e2:de: 8c:0d:0e:7e -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEjXnsLBZXzwq3NF1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDIxMTAxNDUzNFoXDTI3MDUxNzAwNDUzNFowLzEtMCsGA1UEAxMk M2JlYTRlNWItM2FhNC00M2ZlLTlhZGEtMmNmMjRmYjBiY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUePKvrcZxmtnydMQCiiLIednMTKST0EBLJP 8aJJ1RPAzBe6pMD7fbitoJKpirOPBvtumP/VgNYQTjYxv4xZ34OWxxpy/6yQeL8n fJo1akD1++/zIPC1D5Nh78Ct3sejcOr8H0GI6+FpaxjVgRy9FuxY4NKndU7Gqoct u70rME7uWWy2dwDhvQHm7WBBCmV/hqDFr/6dgVJ/IlIgAneSa4bhY0dyH/7OHNyp gFH0bMzk6kZ93O6GKWuhi8Q5V8ZSIiVHbL3zSMdId8c7I20i+/Q429jL4sjW5vzQ OUcw9kZ2HQVTRTimDdqJbHJVwiihKj2n4fZcajVpD10+xnjciwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFKE/3mB0p0cWtZoOrUP7FF/WaNFXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8z YmVhNGU1Yi0zYWE0LTQzZmUtOWFkYS0yY2YyNGZiMGJjZTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzNiZWE0ZTViLTNhYTQtNDNmZS05 YWRhLTJjZjI0ZmIwYmNlOS8zYmVhNGU1Yi0zYWE0LTQzZmUtOWFkYS0yY2YyNGZi MGJjZTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGUOyAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC O6wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAe5ydaH0uafaP10ZC9H2KY73iHSpXs97JyjHgsq00vb03z6lf CP4hfHKQyNuPqY0PeiMj8PGpZO/OShABT8ZNgZBFs13acXPIObpjX7M6v6T2+roy aa3Vi2+D2aenwTA4msXshfBJvc6NOOsYPip+ODm+8JRwSanUkJSD6jiOooR+2jg4 +Iq3YbUIlY4/YN8Y5a7fHP4sOZzs8j33scwzU/+zYs2TJ6D88zskJIuSpnpbeXl2 I7Fkdo/c8bFo3YzyD2UxLyVvkf49E/dDg4fcl8Klie0JuUODWWifD4vEthWgk+7/ jbDJduFERsITVVevUsbbY+4kKbhhFeLejA0Ofg== -----END CERTIFICATE-----Generated at Fri Apr 4 19:21:05 2025 by rpki-client