$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714.cer File: 95cc1176-f33c-4294-a79a-4ace8f16f714.cer (raw, json) Hash identifier: 42dcB0fI3caBh/bCFLgVvfDy5dvvQx4P4ORZIfJiAbo= Subject key identifier: 5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848731E203B86983E659027FE20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jan 2025 01:45:33 +0000 Certificate not after: Sun 11 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 396321 IP: 52.119.32.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:1e:20:3b:86:98:3e:65:90:27:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 6 01:45:33 2025 GMT Not After : Apr 11 00:45:33 2027 GMT Subject: CN=95cc1176-f33c-4294-a79a-4ace8f16f714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cf:44:ce:e2:5c:44:77:92:e3:b1:9a:91:bb: e5:04:62:7c:e7:3d:9f:1b:af:ff:e8:2a:ad:4c:af: db:03:9c:e7:0c:87:d6:96:08:9d:16:c1:93:c6:c4: ad:8d:fa:4e:23:1b:4a:a9:a0:23:55:ca:f2:10:d5: 7f:8e:69:f7:04:85:b5:4b:53:82:be:8f:37:cc:35: 1b:46:a2:86:be:bd:6a:dc:02:d4:39:3f:15:d1:bb: 65:3f:d4:93:3b:5a:ea:7d:1a:33:38:82:50:f5:30: be:e8:7d:d6:6c:93:3c:3e:84:f8:af:f3:5d:ae:f6: 12:58:0d:1d:f5:af:ad:57:5a:5c:e1:e1:16:b0:e0: 2c:f0:b4:34:c2:15:7a:7b:7a:52:a2:72:5b:09:d5: 73:96:f2:3a:94:81:df:2e:d5:5d:fe:2e:bf:f9:75: c0:d7:34:d6:fd:8a:9a:de:99:36:c5:30:e5:48:19: a7:2d:9e:cf:06:1f:3c:a3:ba:0a:57:1d:b5:ca:6d: 0b:32:91:85:5e:58:b6:32:7e:9a:f4:8f:59:81:b4: 00:77:d1:0c:5f:88:e7:d0:f4:41:66:20:f4:2e:9c: 0a:3a:ab:73:9d:95:07:bc:45:b9:96:58:21:64:f9: 7b:20:fe:75:0f:fb:db:b9:56:1d:53:30:d2:ad:2b: 44:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B3:37:F9:8C:81:9E:22:2A:21:69:38:E3:3A:BF:DF:83:A2:C2:72 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/95cc1176-f33c-4294-a79a-4ace8f16f714/95cc1176-f33c-4294-a79a-4ace8f16f714.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 52.119.32.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396321 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:05:d9:9c:63:f5:72:5a:f2:c1:77:e8:11:e0:27:f7:d7:3e: 80:8f:e9:81:8c:ee:b8:78:75:bc:d8:94:73:ee:54:3a:4e:1a: 2f:62:43:2f:6a:5b:81:cd:56:c8:2a:2a:c5:4d:59:ef:e3:25: e6:aa:3d:dd:44:09:b7:80:cf:1a:25:be:55:ba:c9:48:5b:ea: 7e:f5:98:fe:d5:f9:c9:e8:62:1a:2d:1c:4e:a5:ac:d3:8e:ee: 19:3f:96:ca:2d:64:5e:de:f3:c2:5b:fe:ab:bb:5d:65:53:a6: eb:93:78:e0:58:4c:e4:e6:25:08:bb:aa:92:ba:e8:50:8b:82: 6a:43:80:d8:60:9e:72:da:40:6b:08:bc:cc:f4:73:7a:b0:78: de:29:ce:f8:9c:45:67:fa:c2:86:ff:e9:01:f3:43:07:e9:22: 08:8a:a1:73:15:ab:43:55:9c:c3:32:cf:aa:a8:9b:a9:1e:cd: 11:4a:c7:d2:c0:cf:6e:a4:d4:10:d3:6d:02:df:ab:fa:82:a7: 6c:78:29:fb:73:5c:31:00:2b:b4:77:4e:3b:d8:19:83:97:14: c0:f5:ac:16:2c:8a:2b:83:5e:96:c4:c6:d3:0e:fe:e3:05:15: fc:13:9f:e8:df:69:8d:2c:19:5f:48:58:b2:59:6e:fb:d2:95: 7f:83:7f:aa -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEhzHiA7hpg+ZZAn/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDEwNjAxNDUzM1oXDTI3MDQxMTAwNDUzM1owLzEtMCsGA1UEAxMk OTVjYzExNzYtZjMzYy00Mjk0LWE3OWEtNGFjZThmMTZmNzE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs9EzuJcRHeS47GakbvlBGJ85z2fG6//6Cqt TK/bA5znDIfWlgidFsGTxsStjfpOIxtKqaAjVcryENV/jmn3BIW1S1OCvo83zDUb RqKGvr1q3ALUOT8V0btlP9STO1rqfRozOIJQ9TC+6H3WbJM8PoT4r/NdrvYSWA0d 9a+tV1pc4eEWsOAs8LQ0whV6e3pSonJbCdVzlvI6lIHfLtVd/i6/+XXA1zTW/Yqa 3pk2xTDlSBmnLZ7PBh88o7oKVx21ym0LMpGFXli2Mn6a9I9ZgbQAd9EMX4jn0PRB ZiD0LpwKOqtznZUHvEW5llghZPl7IP51D/vbuVYdUzDSrStE+QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFF6zN/mMgZ4iKiFpOOM6v9+DosJyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85 NWNjMTE3Ni1mMzNjLTQyOTQtYTc5YS00YWNlOGYxNmY3MTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4Lzk1Y2MxMTc2LWYzM2MtNDI5NC1h NzlhLTRhY2U4ZjE2ZjcxNC85NWNjMTE3Ni1mMzNjLTQyOTQtYTc5YS00YWNlOGYx NmY3MTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAI0dyAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgwhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIAF2Zxj9XJa8sF36BHgJ/fXPoCP6YGM7rh4dbzYlHPuVDpO Gi9iQy9qW4HNVsgqKsVNWe/jJeaqPd1ECbeAzxolvlW6yUhb6n71mP7V+cnoYhot HE6lrNOO7hk/lsotZF7e88Jb/qu7XWVTpuuTeOBYTOTmJQi7qpK66FCLgmpDgNhg nnLaQGsIvMz0c3qweN4pzvicRWf6wob/6QHzQwfpIgiKoXMVq0NVnMMyz6qom6ke zRFKx9LAz26k1BDTbQLfq/qCp2x4KftzXDEAK7R3TjvYGYOXFMD1rBYsiiuDXpbE xtMO/uMFFfwTn+jfaY0sGV9IWLJZbvvSlX+Df6o= -----END CERTIFICATE-----Generated at Thu Feb 6 19:46:21 2025 by rpki-client