$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64.cer File: b566ce9f-e3cc-460b-b121-95e5f4415e64.cer (raw, json) Hash identifier: KunE9w/RWlbc5P3VHrjh3NBP0f5dPjP5Yh9lWhuLMGo= Subject key identifier: F9:57:AF:7C:0E:B3:5E:48:B7:3C:D0:C8:A6:66:21:B7:21:FD:9C:CB Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848E2C97E17DF39C19F91FA40C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/b566ce9f-e3cc-460b-b121-95e5f4415e64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Feb 2025 01:45:33 +0000 Certificate not after: Fri 21 May 2027 00:45:33 +0000 Subordinate resources: AS: 400682 IP: 23.135.248.0/24 IP: 206.168.192.0/24 IP: 2602:fb7b::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:c9:7e:17:df:39:c1:9f:91:fa:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 15 01:45:33 2025 GMT Not After : May 21 00:45:33 2027 GMT Subject: CN=b566ce9f-e3cc-460b-b121-95e5f4415e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:58:1b:d6:bf:97:79:54:52:aa:78:e3:a0:24: eb:97:4e:f9:0e:0b:68:9d:e7:8c:a5:f6:c3:c8:58: 27:06:ca:69:09:66:29:21:30:1b:1d:b9:e6:73:0a: da:85:2b:85:9f:a7:58:15:2c:86:9c:2e:3e:bb:58: 38:e4:5c:11:8c:f4:6b:0b:60:38:b8:94:e5:79:c8: a8:b1:16:7f:92:94:93:6e:88:9e:d5:e1:5a:b6:0c: 7b:e4:98:ae:d4:c4:52:7e:7c:fb:a3:e9:ae:0d:31: 1a:13:88:0d:ed:2d:e8:65:c4:e1:18:50:49:9b:49: 0f:22:e1:66:08:14:23:fb:2a:63:12:ba:f4:ac:cf: 27:27:a9:82:28:8c:08:11:d5:7a:bb:25:5f:dc:f0: 9e:cb:6e:c2:82:ef:5b:11:f9:bb:6f:a1:07:29:dd: e0:3e:c3:f8:74:e6:d5:e4:9f:66:d9:24:d9:c0:81: 79:09:01:3e:b7:a2:54:d4:09:9b:bb:9b:bd:74:f0: 85:b7:df:86:01:cd:29:6e:bf:38:c0:0f:90:5b:1e: d4:1d:38:e1:3c:c4:fd:7c:bd:6c:1c:5a:d7:85:4f: 8f:a0:13:23:59:81:72:6a:10:9f:9d:7f:fc:e8:73: 0f:53:4e:d3:61:09:64:46:7d:7f:30:80:b3:e4:81: da:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:57:AF:7C:0E:B3:5E:48:B7:3C:D0:C8:A6:66:21:B7:21:FD:9C:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b566ce9f-e3cc-460b-b121-95e5f4415e64/b566ce9f-e3cc-460b-b121-95e5f4415e64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.135.248.0/24 206.168.192.0/24 IPv6: 2602:fb7b::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400682 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0e:a0:93:12:48:01:0e:10:33:85:3b:5f:76:61:00:3a:24: 01:d7:41:8e:59:35:eb:84:cd:00:77:94:05:53:a6:e7:dc:6b: 94:89:2e:3f:5a:76:a2:a9:18:75:06:3b:51:03:1e:23:7c:b1: 33:42:d4:02:26:42:16:52:e1:75:92:9d:15:0a:ec:14:e8:1f: a9:3d:97:b6:f3:5b:37:62:14:d5:68:ee:4d:a5:19:54:9f:95: e0:88:d9:63:d6:dc:9f:bf:58:30:a4:08:7b:a3:39:55:52:9f: f7:ba:07:a7:78:af:d2:c2:f7:6a:d0:1d:13:67:c1:7c:87:45: 34:3f:cf:96:e4:c2:15:0a:86:f6:31:05:d8:3c:a3:64:3e:93: 63:8b:2a:71:b0:0c:78:a4:c5:85:94:74:84:29:ff:ef:97:fe: fb:40:4a:4b:be:c2:87:8b:61:9b:42:4c:86:89:24:79:6b:72: 31:dd:e1:e6:39:47:2a:a5:3b:fc:28:26:be:84:09:dc:b2:7f: 11:db:36:49:b8:67:42:9c:39:c4:27:1a:a3:88:bb:db:61:b5: 9e:4f:41:65:47:06:f4:5b:95:23:1c:0b:38:62:10:99:3b:dc: fb:fe:ab:79:59:b1:37:a6:22:cf:5a:f3:c4:db:50:86:65:fa: 9e:5e:90:82 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEjiyX4X3znBn5H6QMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDIxNTAxNDUzM1oXDTI3MDUyMTAwNDUzM1owLzEtMCsGA1UEAxMk YjU2NmNlOWYtZTNjYy00NjBiLWIxMjEtOTVlNWY0NDE1ZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVgb1r+XeVRSqnjjoCTrl075DgtoneeMpfbD yFgnBsppCWYpITAbHbnmcwrahSuFn6dYFSyGnC4+u1g45FwRjPRrC2A4uJTlecio sRZ/kpSTboie1eFatgx75Jiu1MRSfnz7o+muDTEaE4gN7S3oZcThGFBJm0kPIuFm CBQj+ypjErr0rM8nJ6mCKIwIEdV6uyVf3PCey27Cgu9bEfm7b6EHKd3gPsP4dObV 5J9m2STZwIF5CQE+t6JU1Ambu5u9dPCFt9+GAc0pbr84wA+QWx7UHTjhPMT9fL1s HFrXhU+PoBMjWYFyahCfnX/86HMPU07TYQlkRn1/MICz5IHajQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPlXr3wOs15ItzzQyKZmIbch/ZzLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i NTY2Y2U5Zi1lM2NjLTQ2MGItYjEyMS05NWU1ZjQ0MTVlNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2I1NjZjZTlmLWUzY2MtNDYwYi1i MTIxLTk1ZTVmNDQxNWU2NC9iNTY2Y2U5Zi1lM2NjLTQ2MGItYjEyMS05NWU1ZjQ0 MTVlNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXh/gDBADOqMAwDgQCAAIwCAMGBCYC+3sAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYdKjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnDqCTEkgBDhAzhTtf dmEAOiQB10GOWTXrhM0Ad5QFU6bn3GuUiS4/WnaiqRh1BjtRAx4jfLEzQtQCJkIW UuF1kp0VCuwU6B+pPZe281s3YhTVaO5NpRlUn5XgiNlj1tyfv1gwpAh7ozlVUp/3 ugeneK/Swvdq0B0TZ8F8h0U0P8+W5MIVCob2MQXYPKNkPpNjiypxsAx4pMWFlHSE Kf/vl/77QEpLvsKHi2GbQkyGiSR5a3Ix3eHmOUcqpTv8KCa+hAncsn8R2zZJuGdC nDnEJxqjiLvbYbWeT0FlRwb0W5UjHAs4YhCZO9z7/qt5WbE3piLPWvPE21CGZfqe XpCC -----END CERTIFICATE-----Generated at Sat Feb 15 06:15:06 2025 by rpki-client