$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer File: 51407cd8-c830-49e6-9db4-7ddac75eb03f.cer (raw, json) Hash identifier: KquDxVxL+rH3XFMc3kj1SXdjHzdgsF5DkH1FubN3LbE= Subject key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584883DE39A3FAB93FCAD9E73100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jan 2025 01:45:31 +0000 Certificate not after: Sat 17 Apr 2027 00:45:31 +0000 Subordinate resources: AS: 32780 IP: 50.115.112.0/20 IP: 67.213.208.0/20 IP: 69.4.224.0/20 IP: 98.158.176.0/20 IP: 107.182.224.0/20 IP: 173.244.192.0/19 IP: 173.255.128.0/20 IP: 174.127.64.0/18 IP: 198.105.208.0/20 IP: 199.189.104.0/21 IP: 199.195.192.0/21 IP: 206.190.128.0/19 IP: 206.217.192.0/19 IP: 209.95.32.0/19 IP: 216.119.144.0/20 IP: 2606:2e00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:de:39:a3:fa:b9:3f:ca:d9:e7:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 12 01:45:31 2025 GMT Not After : Apr 17 00:45:31 2027 GMT Subject: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:30:e2:08:06:fb:c6:36:c6:ae:ea:87:81:48: 96:e2:7c:c8:2c:fb:de:8e:9f:39:4e:7d:19:63:b0: 71:2d:84:fa:18:23:63:f4:ae:c6:2a:24:2d:37:cf: 5c:43:42:b5:ff:14:c2:ac:3f:d7:c3:70:9d:07:07: 1f:60:0b:65:da:cc:c0:d3:e5:67:3b:f2:a6:12:f3: c5:9e:2a:33:84:f1:4e:da:a5:38:9e:eb:ca:dd:cd: 7c:85:62:8f:df:e9:1d:b3:5e:62:9b:e9:e8:19:b5: 87:e5:0a:dc:e9:e7:07:1a:ba:6c:0c:f1:e3:0d:82: 2f:2f:4b:28:0b:26:25:60:68:65:d0:81:7a:f2:69: bd:c1:60:e6:6f:ba:4d:2a:18:0d:b8:c8:fd:2c:bc: 1c:c2:3f:56:67:c2:35:99:c8:56:db:44:fc:94:72: 2a:e3:a8:9e:2d:8a:90:88:59:48:83:8c:6b:3e:a5: e6:71:43:da:38:04:23:04:39:19:84:86:cb:16:c8: 5b:88:53:d9:94:8b:eb:e1:7b:bb:d3:d6:c9:91:04: d5:02:69:d8:29:e4:44:4b:3d:55:f5:11:d1:fa:75: 86:49:93:f9:c6:da:4a:53:e3:da:8f:73:ed:fb:7c: c4:0d:b5:ee:f8:33:87:fb:f1:fc:f3:a8:f6:1e:74: c9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 50.115.112.0/20 67.213.208.0/20 69.4.224.0/20 98.158.176.0/20 107.182.224.0/20 173.244.192.0/19 173.255.128.0/20 174.127.64.0/18 198.105.208.0/20 199.189.104.0/21 199.195.192.0/21 206.190.128.0/19 206.217.192.0/19 209.95.32.0/19 216.119.144.0/20 IPv6: 2606:2e00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32780 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3f:ed:16:3d:62:8a:f0:93:65:0e:5b:dc:74:7a:8c:c7:aa: c2:9b:e3:be:33:42:b9:de:ba:23:5a:7f:e5:dc:db:8e:9f:bc: d1:63:01:99:25:5d:0f:f9:e6:8c:23:a8:6e:a4:f7:bd:7d:11: 4c:30:34:75:d7:ef:3f:85:5a:ce:d3:77:be:85:bc:71:81:20: 32:9b:ad:3e:db:ff:1a:ba:dd:f5:8a:fe:a8:53:1d:39:fd:c1: 59:4b:d8:f1:94:de:48:4e:18:c1:b6:aa:a6:ad:e6:c1:e7:7a: b8:ea:ed:e6:af:24:09:35:27:62:93:8e:20:8e:e6:cf:21:72: c0:94:c8:58:62:4d:0d:a6:bb:60:a3:50:35:92:73:a4:4a:82: 97:3c:fb:d2:04:2e:02:da:49:1f:81:94:ef:92:51:88:ef:c9: ea:f0:3d:bc:74:f5:95:d4:24:aa:bb:5d:fb:ee:e9:c8:73:3f: 31:ef:4e:a5:62:5a:2f:ab:c1:5a:25:37:0a:15:33:53:83:1b: e9:5f:3c:1c:20:d1:e6:d4:aa:1a:4e:8b:e6:ab:19:3d:25:af: 42:73:6d:c9:cb:ac:07:82:ac:f7:2f:b2:b7:bd:58:50:26:36: 1f:d1:db:48:9a:62:85:1c:64:63:18:29:6d:38:0b:96:d7:82: da:5f:0a:ea -----BEGIN CERTIFICATE----- MIIHbTCCBlWgAwIBAgIUAQ0Mn0MoWEiD3jmj+rk/ytnnMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDExMjAxNDUzMVoXDTI3MDQxNzAwNDUzMVowLzEtMCsGA1UEAxMk NTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWViMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozDiCAb7xjbGruqHgUiW4nzILPvejp85Tn0Z Y7BxLYT6GCNj9K7GKiQtN89cQ0K1/xTCrD/Xw3CdBwcfYAtl2szA0+VnO/KmEvPF niozhPFO2qU4nuvK3c18hWKP3+kds15im+noGbWH5Qrc6ecHGrpsDPHjDYIvL0so CyYlYGhl0IF68mm9wWDmb7pNKhgNuMj9LLwcwj9WZ8I1mchW20T8lHIq46ieLYqQ iFlIg4xrPqXmcUPaOAQjBDkZhIbLFshbiFPZlIvr4Xu709bJkQTVAmnYKeRESz1V 9RHR+nWGSZP5xtpKU+Paj3Pt+3zEDbXu+DOH+/H886j2HnTJpQIDAQABo4IEfzCC BHswHQYDVR0OBBYEFMu11YJIqk3Y1oqFQgPEqbuJxlauMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81 MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzUxNDA3Y2Q4LWM4MzAtNDllNi05 ZGI0LTdkZGFjNzVlYjAzZi81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1 ZWIwM2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgYIGCCsGAQUF BwEHAQH/BHMwcTBgBAIAATBaAwQEMnNwAwQEQ9XQAwQERQTgAwQEYp6wAwQEa7bg AwQFrfTAAwQErf+AAwQGrn9AAwQExmnQAwQDx71oAwQDx8PAAwQFzr6AAwQFztnA AwQF0V8gAwQE2HeQMA0EAgACMAcDBQAmBi4AMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwCADDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBfP+0WPWKK8JNlDlvcdHqMx6rCm+O+M0K53rojWn/l 3NuOn7zRYwGZJV0P+eaMI6hupPe9fRFMMDR11+8/hVrO03e+hbxxgSAym60+2/8a ut31iv6oUx05/cFZS9jxlN5IThjBtqqmrebB53q46u3mryQJNSdik44gjubPIXLA lMhYYk0Nprtgo1A1knOkSoKXPPvSBC4C2kkfgZTvklGI78nq8D28dPWV1CSqu137 7unIcz8x706lYlovq8FaJTcKFTNTgxvpXzwcINHm1KoaTovmqxk9Ja9Cc23Jy6wH gqz3L7K3vVhQJjYf0dtImmKFHGRjGCltOAuW14LaXwrq -----END CERTIFICATE-----Generated at Sat Feb 15 17:35:58 2025 by rpki-client