$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca.cer File: 53cc15fa-4aac-4896-89f6-ee84e1915dca.cer (raw, json) Hash identifier: eR6FzYkUTMpKd+85FRocwLisjyq2rrEvhMq5JJB+LYk= Subject key identifier: 4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848EB298D161939BA1C31D4D3C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 01:45:34 +0000 Certificate not after: Mon 24 May 2027 00:45:34 +0000 Subordinate resources: AS: 14224 IP: 199.16.208.0/22 IP: 2600:7d00::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:eb:29:8d:16:19:39:ba:1c:31:d4:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 18 01:45:34 2025 GMT Not After : May 24 00:45:34 2027 GMT Subject: CN=53cc15fa-4aac-4896-89f6-ee84e1915dca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:42:3c:f8:e1:db:90:cd:48:b0:11:f2:88:d6: a2:65:9e:d4:23:f6:c8:e8:60:72:09:0a:b5:c5:4a: 5f:9a:86:92:1d:46:0f:53:61:1d:3b:4f:11:ec:01: fd:46:57:ff:c0:ec:ef:5f:31:9c:da:8f:d0:e4:11: 8d:5b:6e:91:57:2c:16:f4:17:85:be:8b:a3:73:46: 17:07:bf:e8:d2:76:0b:0f:c8:cf:73:e0:11:da:81: 52:a8:2c:59:87:de:b3:e6:f6:f5:2a:27:d1:81:e8: 80:0e:1c:b9:e1:2e:73:57:ad:fa:13:9b:7a:0e:f8: 52:a9:68:62:f1:84:86:28:1c:8a:0a:fd:97:53:41: bf:dd:35:6e:15:d8:1f:83:22:a4:49:1f:6a:46:58: e8:78:33:e2:a6:fb:3c:d9:ec:ce:35:2a:3c:d2:3c: f2:da:f1:0c:79:12:53:d7:fe:58:a3:fe:ce:59:07: a5:5b:c1:0b:b0:fa:20:3c:07:8f:c8:e4:97:c5:37: 9a:af:6a:b4:d2:96:f6:d2:bb:23:53:d4:bf:ef:c1: 7a:8b:1d:4c:4a:f3:f2:13:03:f5:22:46:d6:96:66: ba:c2:82:b3:c3:a8:88:70:3e:a3:55:fb:89:57:1d: d1:ea:57:29:28:c6:9a:a6:65:4d:32:78:bd:bc:68: 90:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:19:B9:FB:72:6B:F1:39:59:C4:08:9E:51:5F:5B:58:B8:D9:D6:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/53cc15fa-4aac-4896-89f6-ee84e1915dca/53cc15fa-4aac-4896-89f6-ee84e1915dca.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 199.16.208.0/22 IPv6: 2600:7d00::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14224 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:25:bf:bc:fb:19:31:98:2d:a5:16:3b:b5:8a:59:eb:64:ca: 28:b7:bf:a8:ec:19:98:7b:84:60:3f:3d:0f:a4:19:df:d8:e1: c2:27:0d:ba:48:de:a2:38:fd:7e:38:f8:49:b6:02:83:73:61: 87:b1:bd:a7:d8:97:d0:46:df:ad:59:8c:4c:d3:55:54:8a:40: d8:a3:95:7a:26:dc:e4:5c:a0:3c:1a:af:82:b1:a8:83:8c:92: 6e:9d:44:84:50:81:1e:d6:cf:17:26:30:7c:09:23:00:92:ad: 2d:e4:65:4f:9e:90:f7:e7:a5:11:53:56:51:08:4f:8f:27:62: 95:9f:68:0f:91:13:d7:b4:4f:84:0d:84:65:47:49:12:b7:b6: 0d:e8:6e:3e:89:a6:66:24:e8:cd:dd:f7:e7:fa:0e:b7:c0:f6: 98:3b:30:04:20:56:bf:e1:29:6f:fb:7e:76:f4:a3:ed:9e:67: 9f:52:c6:38:8f:1e:4e:f6:4d:25:ef:23:6c:61:cc:21:b0:d3: 2e:5c:50:5b:a6:b7:18:d7:34:e8:bd:d6:ca:80:dd:d8:b4:56: 49:7e:61:3d:8e:b6:c6:2a:e3:d8:9a:d0:48:50:2f:96:d5:f3: 15:c6:8f:c7:6c:09:71:24:ee:ee:3a:a6:39:6b:7b:1c:97:f2: 76:25:7e:ff -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEjrKY0WGTm6HDHU08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDIxODAxNDUzNFoXDTI3MDUyNDAwNDUzNFowLzEtMCsGA1UEAxMk NTNjYzE1ZmEtNGFhYy00ODk2LTg5ZjYtZWU4NGUxOTE1ZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kI8+OHbkM1IsBHyiNaiZZ7UI/bI6GByCQq1 xUpfmoaSHUYPU2EdO08R7AH9Rlf/wOzvXzGc2o/Q5BGNW26RVywW9BeFvoujc0YX B7/o0nYLD8jPc+AR2oFSqCxZh96z5vb1KifRgeiADhy54S5zV636E5t6DvhSqWhi 8YSGKByKCv2XU0G/3TVuFdgfgyKkSR9qRljoeDPipvs82ezONSo80jzy2vEMeRJT 1/5Yo/7OWQelW8ELsPogPAePyOSXxTear2q00pb20rsjU9S/78F6ix1MSvPyEwP1 IkbWlma6woKzw6iIcD6jVfuJVx3R6lcpKMaapmVNMni9vGiQxwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFE4Zuftya/E5WcQInlFfW1i42dYEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81 M2NjMTVmYS00YWFjLTQ4OTYtODlmNi1lZTg0ZTE5MTVkY2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzUzY2MxNWZhLTRhYWMtNDg5Ni04 OWY2LWVlODRlMTkxNWRjYS81M2NjMTVmYS00YWFjLTQ4OTYtODlmNi1lZTg0ZTE5 MTVkY2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALHENAwDQQCAAIwBwMFBCYAfQAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICN5AwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZiW/vPsZMZgtpRY7tYpZ62TKKLe/ qOwZmHuEYD89D6QZ39jhwicNukjeojj9fjj4SbYCg3Nhh7G9p9iX0EbfrVmMTNNV VIpA2KOVeibc5FygPBqvgrGog4ySbp1EhFCBHtbPFyYwfAkjAJKtLeRlT56Q9+el EVNWUQhPjydilZ9oD5ET17RPhA2EZUdJEre2DehuPommZiTozd335/oOt8D2mDsw BCBWv+Epb/t+dvSj7Z5nn1LGOI8eTvZNJe8jbGHMIbDTLlxQW6a3GNc06L3WyoDd 2LRWSX5hPY62xirj2JrQSFAvltXzFcaPx2wJcSTu7jqmOWt7HJfydiV+/w== -----END CERTIFICATE-----Generated at Fri Apr 4 20:20:42 2025 by rpki-client