$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c470379-869d-4154-bfbf-3e7fd9a95f29.cer File: 6c470379-869d-4154-bfbf-3e7fd9a95f29.cer (raw, json) Hash identifier: eJi/s0ejG+9+JLTqi7weVrk+AgfFj8HwzGCLQZMrKZ0= Subject key identifier: 35:ED:C4:0B:BE:E2:B5:3F:3B:FC:7F:AE:6C:AC:05:E6:09:AE:ED:5E Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848B0892EFBB8186740D43BD6C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c470379-869d-4154-bfbf-3e7fd9a95f29/6c470379-869d-4154-bfbf-3e7fd9a95f29.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c470379-869d-4154-bfbf-3e7fd9a95f29/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 01:45:33 +0000 Certificate not after: Mon 03 May 2027 00:45:33 +0000 Subordinate resources: AS: 398866 IP: 141.193.143.0/24 IP: 198.206.193.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:89:2e:fb:b8:18:67:40:d4:3b:d6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 28 01:45:33 2025 GMT Not After : May 3 00:45:33 2027 GMT Subject: CN=6c470379-869d-4154-bfbf-3e7fd9a95f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a3:00:0d:99:ae:d2:34:0e:1d:e3:5f:7e:ab: fa:35:bc:2a:c7:ba:52:a6:b6:02:ae:94:a2:a3:39: 71:20:2b:19:cf:51:75:b9:f4:ba:00:dc:fe:09:c9: 01:f0:88:13:72:d3:bd:b4:51:33:cd:f6:7c:28:45: ed:2b:03:aa:f7:25:8d:5e:17:ba:72:35:e5:b6:b2: b6:0f:5d:56:6e:d4:f0:d0:f7:4e:99:1b:66:08:b8: 13:3f:0c:27:e7:98:70:ca:4c:d1:23:dc:16:9c:85: 84:9a:78:0d:4d:d0:18:f0:13:60:cf:20:ba:03:b7: ad:17:96:d8:6b:32:02:ec:a7:bc:ba:21:09:9b:9e: 80:b0:18:89:24:33:2a:b7:d6:d6:a4:d3:4a:4d:07: 0c:45:3e:97:29:e3:22:cc:f7:0d:2a:34:9d:d4:51: 68:ff:47:cf:94:b9:e7:11:b9:2d:1e:7d:c9:84:4d: 17:c4:32:92:a6:66:54:1a:90:26:66:73:f1:df:ce: a8:82:3e:6c:08:d4:a8:4b:a7:3f:b5:4a:b4:6d:7e: 91:cf:13:86:59:bf:0f:12:44:ca:74:ef:b5:dd:34: 94:53:6e:8f:63:4a:d5:d1:72:bb:29:5f:7f:5a:83: 85:1e:ea:80:fa:ae:1b:19:ae:b0:af:52:86:9c:86: 50:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:ED:C4:0B:BE:E2:B5:3F:3B:FC:7F:AE:6C:AC:05:E6:09:AE:ED:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c470379-869d-4154-bfbf-3e7fd9a95f29/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6c470379-869d-4154-bfbf-3e7fd9a95f29/6c470379-869d-4154-bfbf-3e7fd9a95f29.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 141.193.143.0/24 198.206.193.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398866 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c6:ee:d9:8e:31:34:3e:7a:66:17:38:32:e7:90:a8:82:ff: 26:94:7e:61:33:03:85:c7:0f:41:85:31:4c:90:7b:28:be:25: 6b:81:21:c1:12:39:24:9f:c8:21:c6:b5:83:da:0a:3f:da:e5: a4:41:c5:39:90:08:04:9a:01:1a:5b:5b:31:c7:28:90:b7:fa: c2:bb:3e:ae:08:53:2e:b9:22:1d:be:6b:22:1b:3f:f1:b4:b1: 22:8d:2d:40:76:64:b4:33:bb:2b:b6:3d:28:79:ee:91:6f:38: bd:9f:ef:00:ef:d6:64:78:93:a2:ac:5c:7f:5b:a1:9a:51:34: d9:4b:c8:00:08:c4:cc:55:85:29:e2:fb:9f:5d:14:52:ee:f4: 3f:5c:72:0c:06:2f:8a:25:b3:e6:f9:33:25:1f:3f:db:23:d9: 38:ec:32:5e:9c:f1:1e:32:ee:8f:cc:7d:f6:db:a2:0a:c1:93: d7:af:7a:db:82:25:04:1b:9f:7d:64:e2:91:fb:5c:79:5a:53: ae:7c:36:3b:ba:61:46:c4:f6:28:5b:67:a7:5f:a3:f5:aa:69: 0e:54:64:e9:de:99:0f:a7:7e:89:d6:ab:c1:9a:bd:96:d4:02: 99:7f:bf:b8:61:7a:f6:c4:be:c5:69:9d:ea:58:d1:92:29:b0: f8:e5:08:41 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEiwiS77uBhnQNQ71sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDEyODAxNDUzM1oXDTI3MDUwMzAwNDUzM1owLzEtMCsGA1UEAxMk NmM0NzAzNzktODY5ZC00MTU0LWJmYmYtM2U3ZmQ5YTk1ZjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aMADZmu0jQOHeNffqv6Nbwqx7pSprYCrpSi ozlxICsZz1F1ufS6ANz+CckB8IgTctO9tFEzzfZ8KEXtKwOq9yWNXhe6cjXltrK2 D11WbtTw0PdOmRtmCLgTPwwn55hwykzRI9wWnIWEmngNTdAY8BNgzyC6A7etF5bY azIC7Ke8uiEJm56AsBiJJDMqt9bWpNNKTQcMRT6XKeMizPcNKjSd1FFo/0fPlLnn EbktHn3JhE0XxDKSpmZUGpAmZnPx386ogj5sCNSoS6c/tUq0bX6RzxOGWb8PEkTK dO+13TSUU26PY0rV0XK7KV9/WoOFHuqA+q4bGa6wr1KGnIZQbQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFDXtxAu+4rU/O/x/rmysBeYJru1eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82 YzQ3MDM3OS04NjlkLTQxNTQtYmZiZi0zZTdmZDlhOTVmMjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzZjNDcwMzc5LTg2OWQtNDE1NC1i ZmJmLTNlN2ZkOWE5NWYyOS82YzQ3MDM3OS04NjlkLTQxNTQtYmZiZi0zZTdmZDlh OTVmMjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACNwY8DBADGzsEwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhYSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAD3G7tmOMTQ+emYXODLnkKiC/yaUfmEzA4XHD0GF MUyQeyi+JWuBIcESOSSfyCHGtYPaCj/a5aRBxTmQCASaARpbWzHHKJC3+sK7Pq4I Uy65Ih2+ayIbP/G0sSKNLUB2ZLQzuyu2PSh57pFvOL2f7wDv1mR4k6KsXH9boZpR NNlLyAAIxMxVhSni+59dFFLu9D9ccgwGL4ols+b5MyUfP9sj2TjsMl6c8R4y7o/M ffbbogrBk9evetuCJQQbn31k4pH7XHlaU658Nju6YUbE9ihbZ6dfo/WqaQ5UZOne mQ+nfonWq8GavZbUApl/v7hhevbEvsVpnepY0ZIpsPjlCEE= -----END CERTIFICATE-----Generated at Sat Feb 15 07:36:37 2025 by rpki-client