$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer File: 7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer (raw, json) Hash identifier: flLTb1Xpa1N3eE21oFP2rvQp6uG4GM6aUZB68Z3FO1o= Subject key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285845DA916F9DEF477B52F63E4100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 May 2024 00:45:20 +0000 Certificate not after: Sun 16 Aug 2026 00:45:20 +0000 Subordinate resources: AS: 4250 AS: 13960 AS: 25745 IP: 64.40.144.0/20 IP: 204.19.238.0/23 IP: 208.123.209.0/24 IP: 208.123.220.0/22 IP: 216.177.128.0/20 IP: 216.185.32.0/19 IP: 2604:1880::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:da:91:6f:9d:ef:47:7b:52:f6:3e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: May 13 00:45:20 2024 GMT Not After : Aug 16 00:45:20 2026 GMT Subject: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d2:38:f9:26:df:84:aa:c8:df:f6:3a:5d:d2: 9e:97:b9:11:7e:bd:55:5c:4a:5a:62:0f:c8:53:46: f9:63:fb:20:7b:51:a4:e7:91:30:80:c0:53:88:ef: 4f:6f:e7:9d:71:af:04:8e:1e:a5:9f:ec:32:f8:68: 02:76:49:81:14:3d:6b:3d:88:98:f9:57:97:60:94: 1d:95:c1:77:a2:dc:06:1a:34:91:b3:fc:a6:d8:08: 4b:3b:b3:62:72:fd:cc:2e:27:12:a3:b2:4c:cd:3d: bc:25:3c:f8:b1:1c:7f:ef:cc:35:7b:1a:f6:ec:5e: 35:76:c3:94:6f:ff:3a:5b:85:63:60:b8:10:58:57: bc:93:00:31:96:01:67:89:0a:f1:57:95:98:bd:db: 9a:6d:0b:68:0e:c4:53:59:7d:d3:d2:05:98:ba:56: 2a:52:63:df:4b:76:7a:13:e7:71:ae:c7:ce:c4:b1: 94:44:cc:44:6b:cd:b2:c0:6f:62:33:2f:33:af:e8: 93:65:ac:9d:66:49:f4:53:a1:44:5c:03:00:4d:a6: f0:7b:14:9e:43:f7:72:1a:47:7b:9a:1f:b1:27:9f: 04:dd:f0:22:07:c5:06:bc:83:a3:51:42:55:8a:eb: 68:4a:1d:1b:fd:e0:8e:ba:02:e9:e1:0a:52:b1:9d: 82:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.40.144.0/20 204.19.238.0/23 208.123.209.0/24 208.123.220.0/22 216.177.128.0/20 216.185.32.0/19 IPv6: 2604:1880::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4250 13960 25745 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:b7:f2:0e:94:c6:d0:93:12:04:6d:83:98:f2:20:a0:6f:8e: 54:d7:ba:c0:a3:62:84:9d:20:e8:2c:1f:46:92:a0:24:c5:b2: 6d:b3:91:cf:b6:b2:0d:b0:9f:30:d1:b5:5f:ea:ac:fa:d7:c9: 20:40:9e:92:83:cc:3f:34:0b:4f:54:8e:66:c5:62:32:3f:90: d7:5c:e5:f7:b0:a1:93:95:da:e5:17:66:5b:d4:53:ad:ff:a5: b2:dd:9a:ab:84:4c:42:3c:93:01:f8:38:9c:34:cf:3a:d8:c3: 5f:a2:86:ee:81:ee:ae:f8:be:39:e8:b7:22:f3:e3:3b:bf:f2: 65:18:6c:9e:f8:4c:e3:4f:d7:68:c8:b5:21:bf:ac:1c:7f:cf: cb:7c:cb:85:22:c9:15:34:50:d5:d1:21:f0:ff:fa:b7:00:64: 9a:e8:0f:26:d9:9c:a7:c6:60:6c:31:57:0c:09:1d:00:9d:48: c6:bc:5a:5a:5d:8c:76:b5:6a:23:f3:e9:6c:99:bc:a8:cb:d3: 09:90:3d:2c:f6:4c:b1:46:fb:fd:49:95:a3:44:11:2a:5c:93: 64:59:e8:35:d9:1d:4e:fc:2c:ab:77:36:7a:bb:82:1c:a8:48: d8:37:98:a4:66:cf:6f:27:af:81:4e:d7:ef:9d:5b:ff:53:f5: 7d:ff:6c:6b -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEXakW+d70d7UvY+QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MDUxMzAwNDUyMFoXDTI2MDgxNjAwNDUyMFowLzEtMCsGA1UEAxMk N2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZkNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtI4+SbfhKrI3/Y6XdKel7kRfr1VXEpaYg/I U0b5Y/sge1Gk55EwgMBTiO9Pb+edca8Ejh6ln+wy+GgCdkmBFD1rPYiY+VeXYJQd lcF3otwGGjSRs/ym2AhLO7Nicv3MLicSo7JMzT28JTz4sRx/78w1exr27F41dsOU b/86W4VjYLgQWFe8kwAxlgFniQrxV5WYvduabQtoDsRTWX3T0gWYulYqUmPfS3Z6 E+dxrsfOxLGURMxEa82ywG9iMy8zr+iTZaydZkn0U6FEXAMATabwexSeQ/dyGkd7 mh+xJ58E3fAiB8UGvIOjUUJViutoSh0b/eCOugLp4QpSsZ2CPwIDAQABo4IETzCC BEswHQYDVR0OBBYEFOxWo8A2+NY6+aycD5ybe9+yN4KgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzdiMzkwYTBlLTdkNTctNDEyZC1i OGNkLWQwNDViY2FmZDVlZS83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNh ZmQ1ZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBARAKJADBAHME+4DBADQe9EDBALQe9wDBATYsYAD BAXYuSAwDQQCAAIwBwMFACYEGIAwIQYIKwYBBQUHAQgBAf8EEjAQoA4wDAICEJoC AjaIAgJkkTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQA7t/IOlMbQkxIEbYOY8iCgb45U17rAo2KEnSDoLB9G kqAkxbJts5HPtrINsJ8w0bVf6qz618kgQJ6Sg8w/NAtPVI5mxWIyP5DXXOX3sKGT ldrlF2Zb1FOt/6Wy3ZqrhExCPJMB+DicNM862MNfoobuge6u+L456Lci8+M7v/Jl GGye+EzjT9doyLUhv6wcf8/LfMuFIskVNFDV0SHw//q3AGSa6A8m2ZynxmBsMVcM CR0AnUjGvFpaXYx2tWoj8+lsmbyoy9MJkD0s9kyxRvv9SZWjRBEqXJNkWeg12R1O /CyrdzZ6u4IcqEjYN5ikZs9vJ6+BTtfvnVv/U/V9/2xr -----END CERTIFICATE-----Generated at Fri Jul 11 02:03:03 2025 by rpki-client