$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer File: bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.cer (raw, json) Hash identifier: 1Eov27Iqg7eOXe7kSQgdtjUPmH8cPdF2OPqD404Gj8w= Subject key identifier: 23:9E:55:A1:BA:B3:DE:8D:4C:12:D6:86:B8:04:B5:B5:08:1B:49:62 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584819C83D27D0E40D5D74EE7600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Dec 2024 01:45:33 +0000 Certificate not after: Wed 10 Mar 2027 01:45:33 +0000 Subordinate resources: AS: 62899 IP: 162.248.176.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:19:c8:3d:27:d0:e4:0d:5d:74:ee:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Dec 5 01:45:33 2024 GMT Not After : Mar 10 01:45:33 2027 GMT Subject: CN=bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9c:10:f8:ca:50:16:90:f3:e3:d9:94:dd:3a: 1e:0d:55:25:c2:c3:22:14:bd:72:5e:52:51:08:77: c9:b7:4d:05:c7:8a:fe:e7:d9:1f:88:1e:60:d4:ec: 8c:36:c7:c7:0e:59:f1:99:72:22:99:6e:97:b2:97: 68:a4:31:bb:4b:ce:fa:d1:fd:6e:ee:e9:c2:e5:cc: 14:46:e6:85:33:06:26:dd:cb:56:5c:23:43:14:1d: 0e:c0:92:a7:5d:8d:01:0e:a1:98:e9:33:d4:ab:9e: 35:6f:4d:92:ee:2c:74:16:fa:b5:4d:43:56:89:76: 52:f3:08:1d:05:a2:96:2c:61:5f:c9:97:b8:69:37: 0f:c6:11:a9:ae:f8:be:8c:16:fc:f0:7b:e8:a5:fa: 20:d4:47:7d:a1:90:c4:23:06:e3:d8:d2:27:11:70: d3:e3:43:49:cf:80:47:e5:b4:55:ce:9e:c8:4c:88: 19:7d:61:f7:06:b8:43:90:dc:54:71:e4:40:60:10: 15:a5:3d:f1:a7:f6:5c:2b:9e:81:d0:e0:3b:5e:e2: 2d:42:a0:40:af:07:44:11:5a:10:cd:44:d6:9d:a3: 54:5f:27:8e:6f:11:f1:07:f5:e0:43:f4:5b:7e:5f: d1:8e:eb:52:78:a7:c3:6c:0c:ee:45:c7:7d:f9:7b: 11:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:9E:55:A1:BA:B3:DE:8D:4C:12:D6:86:B8:04:B5:B5:08:1B:49:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77/bc1d61f1-735b-4f4d-a1ef-c70b74bd3f77.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 162.248.176.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62899 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:18:e0:29:40:c3:31:e9:1b:1c:af:71:d7:0f:77:64:6e:8d: 16:1f:62:bd:9f:a7:1e:96:c4:7f:37:d4:28:b4:0d:ee:99:70: 92:55:f2:20:be:25:fb:e6:c1:de:40:87:93:26:84:9a:3e:c4: 0b:d1:be:e7:d2:10:6f:ab:67:72:37:f6:90:aa:22:55:83:20: 46:e6:77:09:f0:d5:b2:04:d8:f4:be:b3:40:63:81:08:e0:9e: 3a:80:e5:6d:85:ec:f6:ed:2e:e1:6b:81:aa:1e:70:82:fb:3c: 4a:c8:33:76:6b:95:95:76:fc:e4:01:8b:ad:76:46:98:af:d1: 98:3e:08:5c:0d:9b:98:75:6a:11:dc:ed:cf:d6:58:5f:f0:9f: df:24:43:28:d8:e2:40:46:b5:8c:07:28:81:08:1c:bc:2b:00: 44:dd:81:b8:c5:a0:8b:6a:2a:0e:6f:70:5f:3f:6d:de:e6:45: 2d:b8:1e:a5:66:89:ff:bf:6e:d1:93:94:3d:87:d5:37:70:7d: 26:7e:a8:0d:dc:1b:50:59:f6:37:c4:13:38:fb:21:b0:df:26: 0a:86:d1:39:90:94:ca:9f:a6:48:dc:1a:40:fc:d1:83:bc:72: 5a:b7:78:40:95:65:0b:42:ae:a0:e6:fb:88:67:14:1c:da:76: 7a:f8:90:bf -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEgZyD0n0OQNXXTudgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MTIwNTAxNDUzM1oXDTI3MDMxMDAxNDUzM1owLzEtMCsGA1UEAxMk YmMxZDYxZjEtNzM1Yi00ZjRkLWExZWYtYzcwYjc0YmQzZjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpwQ+MpQFpDz49mU3ToeDVUlwsMiFL1yXlJR CHfJt00Fx4r+59kfiB5g1OyMNsfHDlnxmXIimW6XspdopDG7S8760f1u7unC5cwU RuaFMwYm3ctWXCNDFB0OwJKnXY0BDqGY6TPUq541b02S7ix0Fvq1TUNWiXZS8wgd BaKWLGFfyZe4aTcPxhGprvi+jBb88Hvopfog1Ed9oZDEIwbj2NInEXDT40NJz4BH 5bRVzp7ITIgZfWH3BrhDkNxUceRAYBAVpT3xp/ZcK56B0OA7XuItQqBArwdEEVoQ zUTWnaNUXyeObxHxB/XgQ/Rbfl/RjutSeKfDbAzuRcd9+XsRawIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCOeVaG6s96NTBLWhrgEtbUIG0liMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i YzFkNjFmMS03MzViLTRmNGQtYTFlZi1jNzBiNzRiZDNmNzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2JjMWQ2MWYxLTczNWItNGY0ZC1h MWVmLWM3MGI3NGJkM2Y3Ny9iYzFkNjFmMS03MzViLTRmNGQtYTFlZi1jNzBiNzRi ZDNmNzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOi+LAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID APWzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG4Y4ClAwzHpGxyvcdcPd2RujRYfYr2fpx6WxH831Ci0De6Z cJJV8iC+Jfvmwd5Ah5MmhJo+xAvRvufSEG+rZ3I39pCqIlWDIEbmdwnw1bIE2PS+ s0BjgQjgnjqA5W2F7PbtLuFrgaoecIL7PErIM3ZrlZV2/OQBi612Rpiv0Zg+CFwN m5h1ahHc7c/WWF/wn98kQyjY4kBGtYwHKIEIHLwrAETdgbjFoItqKg5vcF8/bd7m RS24HqVmif+/btGTlD2H1TdwfSZ+qA3cG1BZ9jfEEzj7IbDfJgqG0TmQlMqfpkjc GkD80YO8clq3eECVZQtCrqDm+4hnFBzadnr4kL8= -----END CERTIFICATE-----Generated at Sat Feb 8 13:02:23 2025 by rpki-client