$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer File: a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer (raw, json) Hash identifier: Kd3qxON6+4nHv0n3EdA00nkACB+YaLYjBfHoEQ43OXw= Subject key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858492B417F058A0414E227FF3C88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Mar 2025 00:45:33 +0000 Certificate not after: Wed 16 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 54919 IP: 23.153.64.0/24 IP: 23.182.128.0/23 IP: 163.123.200.0/22 IP: 192.64.205.0/24 IP: 204.9.59.0 -- 204.9.60.255 IP: 208.72.208.0/22 IP: 2620:130:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2b:41:7f:05:8a:04:14:e2:27:ff:3c:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 13 00:45:33 2025 GMT Not After : Jun 16 00:45:33 2027 GMT Subject: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:ad:49:9c:95:63:b0:f8:00:7c:0b:02:52: 9b:55:b4:6c:8d:a9:e8:c0:44:f3:48:b0:22:85:88: 2f:73:d1:92:16:ee:a7:2e:be:ac:c9:6b:73:7a:39: 50:98:8c:3c:da:b3:69:8b:04:0a:b7:a4:d4:0d:39: 18:49:de:c7:7f:ec:e3:73:11:d0:e6:73:e3:12:e5: 64:e9:a4:16:3f:5b:28:48:95:95:5c:72:af:ad:3e: 6d:62:db:b1:41:90:12:6e:ac:38:72:9e:73:1a:c3: 8f:0c:e9:33:64:11:49:9f:f0:f2:95:c7:28:c8:f1: 6b:c8:04:c2:24:11:f1:bd:1d:fa:11:63:63:7a:c8: 63:aa:7a:09:50:fd:10:fa:dc:53:49:d6:ba:e3:cc: 8a:3c:2d:6a:9c:dc:1d:92:b5:55:06:bc:07:e2:75: d6:74:4e:91:b8:a4:55:f2:0f:45:1e:8d:dd:36:d8: 03:4c:53:a4:7a:00:97:d9:3d:e3:cf:b6:7c:39:1f: e2:3f:76:0c:83:01:d2:99:72:3c:75:07:94:cb:99: 0a:2e:a4:8c:ef:c8:cf:9d:62:05:f6:99:27:46:e8: a8:84:ac:7e:bc:87:e9:2d:0c:17:de:55:4a:4d:70: a3:7a:74:05:c7:3b:1b:4f:98:9a:f4:17:9c:71:dc: fd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.153.64.0/24 23.182.128.0/23 163.123.200.0/22 192.64.205.0/24 204.9.59.0-204.9.60.255 208.72.208.0/22 IPv6: 2620:130:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54919 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:fa:10:a2:26:93:db:8b:ed:1f:c2:32:49:fb:31:bd:b5:07: 27:63:3e:f6:cc:31:f4:cd:cd:66:d2:31:e4:1a:15:2e:24:12: 94:02:a7:f9:94:f6:de:c2:45:98:d1:96:14:c2:03:76:04:c8: 2e:96:ae:2b:f4:88:7e:c7:18:a1:79:7a:f1:90:fa:e6:35:0a: a6:a0:2f:ab:15:73:24:70:48:c8:9a:9e:04:05:bf:70:a9:21: 6a:49:f1:29:ad:9b:c5:48:4f:30:5f:58:f8:04:53:12:18:2c: 57:7f:44:a8:9c:76:e9:7e:d3:32:2e:ac:26:34:30:b0:45:4d: 90:04:42:67:ac:5a:53:9e:95:e1:78:90:0f:fa:3d:af:db:ce: d3:cb:35:91:1f:b5:f7:ac:7b:23:77:61:2a:18:45:cb:3b:4f: 49:e9:91:e9:e9:f9:c4:a7:03:a7:3c:47:44:0c:18:39:7c:ca: 74:e0:cb:1b:61:ac:33:a8:70:db:a4:17:93:d6:83:f8:2f:67: 5a:e6:2e:9b:99:3f:75:e6:06:2d:16:d7:7c:fb:a6:9d:e4:48: 2e:e4:78:51:3a:01:fb:ee:e3:6c:e6:0b:12:33:5d:65:f1:bc: f1:08:b7:ef:25:e2:65:ff:49:67:d7:28:2f:9b:21:11:cf:46: 7b:8f:88:28 -----BEGIN CERTIFICATE----- MIIHQDCCBiigAwIBAgIUAQ0Mn0MoWEkrQX8FigQU4if/PIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMxMzAwNDUzM1oXDTI3MDYxNjAwNDUzM1owLzEtMCsGA1UEAxMk YTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIwYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZKtSZyVY7D4AHwLAlKbVbRsjanowETzSLAi hYgvc9GSFu6nLr6syWtzejlQmIw82rNpiwQKt6TUDTkYSd7Hf+zjcxHQ5nPjEuVk 6aQWP1soSJWVXHKvrT5tYtuxQZASbqw4cp5zGsOPDOkzZBFJn/DylccoyPFryATC JBHxvR36EWNjeshjqnoJUP0Q+txTSda648yKPC1qnNwdkrVVBrwH4nXWdE6RuKRV 8g9FHo3dNtgDTFOkegCX2T3jz7Z8OR/iP3YMgwHSmXI8dQeUy5kKLqSM78jPnWIF 9pknRuiohKx+vIfpLQwX3lVKTXCjenQFxzsbT5ia9Beccdz9OwIDAQABo4IEUjCC BE4wHQYDVR0OBBYEFN+mqODDcubHD4SFxrEYoMtcPr3DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h NGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2E0ZTNlNzJlLTMyY2ItNGU4My04 ZDQ0LTg2MjQ2NmJiMGM4Yi9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZi YjBjOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwVgYIKwYBBQUH AQcBAf8ERzBFMDIEAgABMCwDBAAXmUADBAEXtoADBAKje8gDBADAQM0wDAMEAMwJ OwMEAMwJPAMEAtBI0DAPBAIAAjAJAwcEJiABMKAAMBoGCCsGAQUFBwEIAQH/BAsw CaAHMAUCAwDWhzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQBE+hCiJpPbi+0fwjJJ+zG9tQcnYz72zDH0zc1m 0jHkGhUuJBKUAqf5lPbewkWY0ZYUwgN2BMgulq4r9Ih+xxiheXrxkPrmNQqmoC+r FXMkcEjImp4EBb9wqSFqSfEprZvFSE8wX1j4BFMSGCxXf0SonHbpftMyLqwmNDCw RU2QBEJnrFpTnpXheJAP+j2v287TyzWRH7X3rHsjd2EqGEXLO09J6ZHp6fnEpwOn PEdEDBg5fMp04MsbYawzqHDbpBeT1oP4L2da5i6bmT915gYtFtd8+6ad5Egu5HhR OgH77uNs5gsSM11l8bzxCLfvJeJl/0ln1ygvmyERz0Z7j4go -----END CERTIFICATE-----Generated at Fri Apr 4 20:16:46 2025 by rpki-client