$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer File: 8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.cer (raw, json) Hash identifier: c82fWWGRHgCLMR3GNYaOvOZcjnAdusMiXX+nNxODQN8= Subject key identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584829C58DFD78886B760F7B1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Dec 2024 19:13:05 +0000 Certificate not after: Mon 15 Mar 2027 18:13:05 +0000 Subordinate resources: AS: 3704 AS: 27501 IP: 64.72.96.0/20 IP: 64.250.224.0/19 IP: 69.38.208.0/20 IP: 74.113.216.0/21 IP: 74.212.128.0/21 IP: 74.212.140.0/22 IP: 103.25.144.0/22 IP: 103.78.160.0/22 IP: 103.85.232.0/22 IP: 148.170.64.0/19 IP: 199.88.32.0 -- 199.88.51.255 IP: 199.127.116.0/22 IP: 208.95.72.0/21 IP: 208.95.108.0/22 IP: 209.51.40.0/21 IP: 216.127.116.0/22 IP: 2604:d280::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:29:c5:8d:fd:78:88:6b:76:0f:7b:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Dec 10 19:13:05 2024 GMT Not After : Mar 15 18:13:05 2027 GMT Subject: CN=8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:80:a6:4a:7e:f7:6a:25:2c:3b:20:7a:35:17: 37:5f:43:11:6b:48:f2:35:05:30:36:f2:4d:a8:ee: df:27:9e:0c:1d:18:66:75:c5:e3:48:35:4d:16:95: fd:85:50:70:0d:0b:03:dc:5f:bf:ff:d4:fb:81:66: 1b:be:46:5c:0e:ef:7f:ec:bb:de:9c:5a:e8:74:8b: c8:31:06:ff:28:c3:4e:be:65:f3:49:19:ef:4d:2b: 4f:76:38:62:30:fe:2c:13:68:bd:95:f3:85:05:d6: 51:ab:d9:6a:76:41:48:5f:61:89:df:ad:1a:0e:08: c8:33:7f:95:70:26:5c:1a:6b:83:55:32:bf:6b:52: 21:5b:84:d9:8e:40:21:b8:38:fe:0a:f9:4f:d1:32: 1d:4c:fa:50:00:c4:ca:98:07:00:6c:7e:de:5b:dd: ef:ac:f5:9a:31:28:00:68:24:60:04:6f:bd:8c:2d: b3:4a:38:95:92:1d:7b:1d:43:3c:8a:4e:ce:93:6e: e9:0a:e2:f4:0f:5e:3f:61:18:4b:94:4f:76:28:88: 98:e7:ca:4b:1c:c9:23:74:09:b1:f7:07:e3:57:a1: 06:39:8d:5e:32:48:1a:de:67:fc:71:3c:73:34:b4: 3a:e4:c7:fa:e7:e3:e4:c9:62:95:36:d7:b8:d0:6d: eb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:26:45:BA:58:F1:44:50:0E:AF:13:81:D7:CD:59:CF:12:F5:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa/8e0aabd8-d219-47cb-9a1c-f715a4a3d3aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 64.72.96.0/20 64.250.224.0/19 69.38.208.0/20 74.113.216.0/21 74.212.128.0/21 74.212.140.0/22 103.25.144.0/22 103.78.160.0/22 103.85.232.0/22 148.170.64.0/19 199.88.32.0-199.88.51.255 199.127.116.0/22 208.95.72.0/21 208.95.108.0/22 209.51.40.0/21 216.127.116.0/22 IPv6: 2604:d280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3704 27501 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:0f:65:2f:c2:47:72:4f:53:0e:44:4e:ea:38:5a:ac:27:01: 40:18:b4:e7:4a:76:2b:9a:49:07:d9:e5:57:d7:f7:f3:e1:db: 6b:26:8a:4f:eb:82:d3:68:91:0d:81:7a:97:88:12:dd:72:8d: 38:ad:69:06:c1:94:c0:33:fe:29:d6:b9:92:17:a8:25:6c:14: 51:40:88:c9:b3:17:96:99:26:44:b2:70:b3:a4:4d:a1:9b:4d: c7:ab:f5:4c:25:83:b8:fd:f4:0e:b5:e5:e2:e7:7a:0f:a8:8b: e7:50:92:44:b9:64:8d:b8:39:b8:cb:9a:84:f9:88:ab:0a:59: 1b:f7:a4:ad:7d:24:f3:08:2b:f0:6e:a4:f0:1c:5d:3e:b2:6c: af:1d:da:16:99:0b:02:00:6a:d5:97:5b:7f:2e:8b:bf:f8:cc: 12:db:25:11:18:23:cd:d3:7b:64:60:a9:4f:71:ac:46:91:a3: 62:4c:14:53:89:bd:63:85:bb:31:1c:80:a6:1a:2d:2b:47:23: 15:12:b3:59:96:11:59:21:e0:f6:0b:ce:6a:d6:0b:f9:fd:8a: 0a:ba:02:45:52:ac:85:68:dc:ae:1a:a3:eb:e4:65:66:04:e0: a3:99:e2:b8:a6:89:02:07:6f:b5:91:df:59:bb:4b:a6:16:ff: 3d:4c:3c:ca -----BEGIN CERTIFICATE----- MIIHfzCCBmegAwIBAgIUAQ0Mn0MoWEgpxY39eIhrdg97E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MTIxMDE5MTMwNVoXDTI3MDMxNTE4MTMwNVowLzEtMCsGA1UEAxMk OGUwYWFiZDgtZDIxOS00N2NiLTlhMWMtZjcxNWE0YTNkM2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ICmSn73aiUsOyB6NRc3X0MRa0jyNQUwNvJN qO7fJ54MHRhmdcXjSDVNFpX9hVBwDQsD3F+//9T7gWYbvkZcDu9/7LvenFrodIvI MQb/KMNOvmXzSRnvTStPdjhiMP4sE2i9lfOFBdZRq9lqdkFIX2GJ360aDgjIM3+V cCZcGmuDVTK/a1IhW4TZjkAhuDj+CvlP0TIdTPpQAMTKmAcAbH7eW93vrPWaMSgA aCRgBG+9jC2zSjiVkh17HUM8ik7Ok27pCuL0D14/YRhLlE92KIiY58pLHMkjdAmx 9wfjV6EGOY1eMkga3mf8cTxzNLQ65Mf65+PkyWKVNte40G3r/QIDAQABo4IEkTCC BI0wHQYDVR0OBBYEFPbPJkW6WPFEUA6vE4HXzVnPEvXPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84 ZTBhYWJkOC1kMjE5LTQ3Y2ItOWExYy1mNzE1YTRhM2QzYWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzhlMGFhYmQ4LWQyMTktNDdjYi05 YTFjLWY3MTVhNGEzZDNhYS84ZTBhYWJkOC1kMjE5LTQ3Y2ItOWExYy1mNzE1YTRh M2QzYWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwgZEGCCsGAQUF BwEHAQH/BIGBMH8wbgQCAAEwaAMEBEBIYAMEBUD64AMEBEUm0AMEA0px2AMEA0rU gAMEAkrUjAMEAmcZkAMEAmdOoAMEAmdV6AMEBZSqQDAMAwQFx1ggAwQCx1gwAwQC x390AwQD0F9IAwQC0F9sAwQD0TMoAwQC2H90MA0EAgACMAcDBQAmBNKAMB0GCCsG AQUFBwEIAQH/BA4wDKAKMAgCAg54AgJrbTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAqD2UvwkdyT1MORE7q OFqsJwFAGLTnSnYrmkkH2eVX1/fz4dtrJopP64LTaJENgXqXiBLdco04rWkGwZTA M/4p1rmSF6glbBRRQIjJsxeWmSZEsnCzpE2hm03Hq/VMJYO4/fQOteXi53oPqIvn UJJEuWSNuDm4y5qE+YirClkb96StfSTzCCvwbqTwHF0+smyvHdoWmQsCAGrVl1t/ Lou/+MwS2yURGCPN03tkYKlPcaxGkaNiTBRTib1jhbsxHICmGi0rRyMVErNZlhFZ IeD2C85q1gv5/YoKugJFUqyFaNyuGqPr5GVmBOCjmeK4pokCB2+1kd9Zu0umFv89 TDzK -----END CERTIFICATE-----Generated at Wed Feb 5 19:11:10 2025 by rpki-client