$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8.cer File: 719038d9-6923-4e29-8b36-f45b06ce12f8.cer (raw, json) Hash identifier: kMwavTItFF7VZdIRb2kFFnA1CFSz2Pxp7RGrX/gSk5g= Subject key identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858491729563D06CB2ED9D3EE9280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 20:00:42 +0000 Certificate not after: Tue 22 Dec 2026 01:45:26 +0000 Subordinate resources: AS: 393238 IP: 68.169.252.0/22 IP: 142.204.128.0/17 IP: 162.253.44.0/22 IP: 192.154.14.0/23 IP: 192.199.180.0/22 IP: 192.236.0.0/24 IP: 199.10.4.0/22 IP: 199.188.64.0/22 IP: 199.189.228.0/22 IP: 204.144.192.0/18 IP: 205.143.47.0/24 IP: 207.191.192.0/19 IP: 2605:3f80::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:29:56:3d:06:cb:2e:d9:d3:ee:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 5 20:00:42 2025 GMT Not After : Dec 22 01:45:26 2026 GMT Subject: CN=719038d9-6923-4e29-8b36-f45b06ce12f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:cd:1b:97:0b:0a:0e:ab:da:bd:b5:f9:32: 34:bb:2e:01:a2:62:99:e3:4b:5a:e7:9d:7f:48:9b: ad:4d:aa:2f:05:cc:70:e9:d3:6c:ab:f7:a2:7a:7b: 9b:5e:3c:1b:bf:be:40:8a:2a:c1:14:90:64:33:69: 06:9b:25:ce:48:1d:f2:dc:97:a6:23:5a:3d:0d:8e: 93:16:98:05:40:25:b7:7f:bb:71:09:78:8b:2a:e9: 60:78:7a:0e:bb:1e:c3:9a:46:c1:7b:0f:83:5c:f6: 05:14:6e:d0:3e:43:e1:37:23:28:21:b7:b5:b8:ed: 94:20:73:64:2a:84:af:25:b8:6d:a7:bd:ec:59:95: 21:8c:aa:73:77:64:88:f5:b9:e0:fa:a2:a3:f7:5e: c4:f2:71:c4:01:4e:ff:e5:62:08:5a:ed:5f:28:4a: 65:aa:9d:2e:0c:83:e9:1f:15:60:3e:21:78:8a:22: 86:72:1c:06:30:06:e2:92:a2:cb:ba:c7:94:68:8e: 85:9d:6d:c3:9f:ae:a4:19:1b:38:e2:cc:a9:9f:7f: 00:d3:50:78:25:93:68:e4:cd:ae:e1:a1:ab:61:65: 31:d8:8e:2a:d5:9e:40:7a:71:e1:17:6e:76:18:05: c4:50:78:ca:be:7c:ee:70:fb:27:97:92:0e:e1:43: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B0:ED:77:A7:4B:CF:DD:67:4A:BA:E9:67:66:F8:1D:2E:6F:6D:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/719038d9-6923-4e29-8b36-f45b06ce12f8/719038d9-6923-4e29-8b36-f45b06ce12f8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 68.169.252.0/22 142.204.128.0/17 162.253.44.0/22 192.154.14.0/23 192.199.180.0/22 192.236.0.0/24 199.10.4.0/22 199.188.64.0/22 199.189.228.0/22 204.144.192.0/18 205.143.47.0/24 207.191.192.0/19 IPv6: 2605:3f80::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:33:c8:72:b8:19:9b:a4:07:1a:d9:a0:14:44:c4:0d:20:04: a9:32:26:f0:37:8e:e9:fa:86:24:f4:bc:81:14:45:8d:7e:03: d4:ef:36:ab:c4:03:f2:53:d2:fe:45:3d:fd:39:e9:f5:b6:ad: e1:fa:fe:8e:2d:88:4d:e4:af:08:a8:9f:45:de:f9:68:ae:f3: 9f:34:c8:15:6a:5d:d5:84:91:e9:08:50:82:79:ea:a3:ee:81: 5c:7f:8d:a4:02:4f:06:df:ad:1a:df:b8:41:d4:ee:7f:77:c1: 92:8b:cc:d1:35:1b:6e:69:6c:bd:6e:49:e5:07:55:22:83:14: 33:86:84:10:74:e4:cd:51:68:b7:6f:00:f2:a1:3a:c3:ad:1c: 24:28:0e:b2:76:69:90:24:e7:95:29:5f:af:65:90:01:eb:7f: 10:92:dd:23:39:f6:26:d1:ad:c9:85:d2:78:94:8d:ac:1c:7a: e5:6c:f2:a9:e0:d7:5d:fb:51:13:b9:99:d5:b2:ef:aa:ab:b6: 2f:a7:9c:5a:18:db:1a:b1:7d:da:5c:b4:23:98:9b:2c:6e:78: a3:7f:a1:0e:14:c1:2e:19:0b:2e:7a:6f:5f:c4:ae:4a:bc:bf: fc:6a:63:54:3d:16:51:f1:db:10:94:c5:9e:1b:6a:4a:fb:96: 3a:d1:48:3a -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEkXKVY9Bssu2dPukoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMwNTIwMDA0MloXDTI2MTIyMjAxNDUyNlowLzEtMCsGA1UEAxMk NzE5MDM4ZDktNjkyMy00ZTI5LThiMzYtZjQ1YjA2Y2UxMmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1orNG5cLCg6r2r21+TI0uy4BomKZ40ta551/ SJutTaovBcxw6dNsq/eienubXjwbv75AiirBFJBkM2kGmyXOSB3y3JemI1o9DY6T FpgFQCW3f7txCXiLKulgeHoOux7DmkbBew+DXPYFFG7QPkPhNyMoIbe1uO2UIHNk KoSvJbhtp73sWZUhjKpzd2SI9bng+qKj917E8nHEAU7/5WIIWu1fKEplqp0uDIPp HxVgPiF4iiKGchwGMAbikqLLuseUaI6FnW3Dn66kGRs44sypn38A01B4JZNo5M2u 4aGrYWUx2I4q1Z5AenHhF252GAXEUHjKvnzucPsnl5IO4UOrGQIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFHew7XenS8/dZ0q66Wdm+B0ub20DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZjZTEyZjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzcxOTAzOGQ5LTY5MjMtNGUyOS04 YjM2LWY0NWIwNmNlMTJmOC83MTkwMzhkOS02OTIzLTRlMjktOGIzNi1mNDViMDZj ZTEyZjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBAJEqfwDBAeOzIADBAKi/SwDBAHAmg4DBALAx7QD BADA7AADBALHCgQDBALHvEADBALHveQDBAbMkMADBADNjy8DBAXPv8AwDQQCAAIw BwMFBCYFP4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgAWMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABMz yHK4GZukBxrZoBRExA0gBKkyJvA3jun6hiT0vIEURY1+A9TvNqvEA/JT0v5FPf05 6fW2reH6/o4tiE3krwion0Xe+Wiu8580yBVqXdWEkekIUIJ56qPugVx/jaQCTwbf rRrfuEHU7n93wZKLzNE1G25pbL1uSeUHVSKDFDOGhBB05M1RaLdvAPKhOsOtHCQo DrJ2aZAk55UpX69lkAHrfxCS3SM59ibRrcmF0niUjawceuVs8qng1137URO5mdWy 76qrti+nnFoY2xqxfdpctCOYmyxueKN/oQ4UwS4ZCy56b1/Erkq8v/xqY1Q9FlHx 2xCUxZ4bakr7ljrRSDo= -----END CERTIFICATE-----Generated at Fri Apr 4 16:22:46 2025 by rpki-client