$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer File: bf5f7742-98f7-41ca-9c57-5b902bc4b186.cer (raw, json) Hash identifier: uD0cevq5AF5f35wF4CJSziYD/t17CxSS027EiDqK/jc= Subject key identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858428716C64EA85D3409F7E21040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Jul 2023 00:45:16 +0000 Certificate not after: Wed 15 Oct 2025 00:45:16 +0000 Subordinate resources: AS: 400633 IP: 23.226.160.0/20 IP: 64.190.44.0/22 IP: 168.100.48.0/20 IP: 216.246.204.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Apr 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:42:87:16:c6:4e:a8:5d:34:09:f7:e2:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jul 13 00:45:16 2023 GMT Not After : Oct 15 00:45:16 2025 GMT Subject: CN=bf5f7742-98f7-41ca-9c57-5b902bc4b186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:83:cf:f9:02:87:3f:ec:1a:ac:15:56:31:62: 9f:58:e1:9f:ff:33:d1:95:dd:29:74:5d:fb:02:ef: bb:dd:4c:b4:1e:94:a6:db:7a:11:b8:ac:45:26:77: b2:b9:e9:d5:87:0b:12:a0:b8:6a:38:fa:dc:e7:9b: be:01:e9:d1:45:45:24:ca:92:e1:46:39:56:4f:db: 29:c9:13:81:6f:0d:b2:df:28:af:49:c1:c6:68:c0: b6:c4:ee:e6:e5:1b:91:70:21:0a:96:e4:a1:67:c2: ca:a6:d0:af:56:fa:be:75:09:15:b3:65:93:21:7d: 2a:26:2b:89:ae:89:d8:19:d2:c4:4b:e7:34:7b:3e: 47:e3:c1:82:db:64:de:05:24:33:92:9a:97:ad:d6: 33:a1:18:e7:cd:e0:36:65:65:dc:d3:e8:c0:f6:db: 36:fc:bc:25:f3:4f:dd:f4:14:fa:64:c7:33:cd:b2: e2:f6:69:f4:ca:87:06:65:28:ad:9e:3a:0b:d5:e6: 49:ff:7c:cb:07:f1:66:46:38:61:02:d3:2e:ff:c5: e8:b2:ac:47:78:30:ee:d3:ad:8e:15:fb:4e:29:cb: 3d:bd:3d:5a:db:89:c3:44:61:d2:7d:b5:ed:e6:59: 6d:00:1b:d1:31:61:77:e7:00:c1:5f:eb:fd:c4:85: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7A:69:5B:92:56:C0:61:E1:91:03:52:70:A3:50:61:90:36:77:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/bf5f7742-98f7-41ca-9c57-5b902bc4b186/bf5f7742-98f7-41ca-9c57-5b902bc4b186.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.226.160.0/20 64.190.44.0/22 168.100.48.0/20 216.246.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400633 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fe:a9:0e:fc:00:dc:bf:bc:33:bc:3c:c3:68:fb:93:a0:2b: 4c:8b:4e:e8:34:c9:ce:43:80:64:f8:7f:fa:55:64:de:97:14: b8:20:36:f8:95:fd:b3:aa:04:15:7d:3a:2c:56:e8:4a:be:7d: 84:d0:45:b5:06:42:f9:3f:fe:ca:da:45:44:7d:c8:15:90:24: f7:6c:5d:e2:80:49:22:d1:40:de:eb:68:46:04:a4:3b:4d:3e: 52:1d:f7:2e:06:96:41:70:9f:bf:8b:2d:17:b2:be:ff:60:d1: 19:14:2c:e8:a5:18:00:d2:b4:ea:05:ea:7b:a8:5d:24:95:f9: ae:4d:ca:15:ef:16:9f:fe:32:53:d7:7f:cf:2a:7c:07:16:ab: 5a:3e:49:5c:55:45:4c:1d:14:9e:22:89:59:a9:01:79:2d:38: b1:79:ae:96:86:6b:f5:d0:f4:7d:29:41:b8:1e:39:04:4d:16: 27:5e:ba:4a:92:2f:02:b9:b4:04:c1:34:88:10:12:a0:64:d9: 1d:c6:5d:47:d9:8e:43:c1:91:83:76:2a:f6:c4:a5:21:66:ab: 5a:87:59:d7:bf:1b:b7:c8:64:d3:e1:f4:e4:a4:fa:07:95:66: 6f:f7:89:96:c9:7a:a5:bf:57:1e:f9:f0:c2:69:54:7e:49:40: ab:c8:06:54 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEKHFsZOqF00CffiEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTIzMDcxMzAwNDUxNloXDTI1MTAxNTAwNDUxNlowLzEtMCsGA1UEAxMk YmY1Zjc3NDItOThmNy00MWNhLTljNTctNWI5MDJiYzRiMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYPP+QKHP+warBVWMWKfWOGf/zPRld0pdF37 Au+73Uy0HpSm23oRuKxFJneyuenVhwsSoLhqOPrc55u+AenRRUUkypLhRjlWT9sp yROBbw2y3yivScHGaMC2xO7m5RuRcCEKluShZ8LKptCvVvq+dQkVs2WTIX0qJiuJ ronYGdLES+c0ez5H48GC22TeBSQzkpqXrdYzoRjnzeA2ZWXc0+jA9ts2/Lwl80/d 9BT6ZMczzbLi9mn0yocGZSitnjoL1eZJ/3zLB/FmRjhhAtMu/8XosqxHeDDu062O FftOKcs9vT1a24nDRGHSfbXt5lltABvRMWF35wDBX+v9xIX7yQIDAQABo4IELTCC BCkwHQYDVR0OBBYEFJ16aVuSVsBh4ZEDUnCjUGGQNndiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9i ZjVmNzc0Mi05OGY3LTQxY2EtOWM1Ny01YjkwMmJjNGIxODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2JmNWY3NzQyLTk4ZjctNDFjYS05 YzU3LTViOTAyYmM0YjE4Ni9iZjVmNzc0Mi05OGY3LTQxY2EtOWM1Ny01YjkwMmJj NGIxODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAQX4qADBAJAviwDBASoZDADBALY9swwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDBhz5MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEv+qQ78ANy/vDO8PMNo+5Og K0yLTug0yc5DgGT4f/pVZN6XFLggNviV/bOqBBV9OixW6Eq+fYTQRbUGQvk//sra RUR9yBWQJPdsXeKASSLRQN7raEYEpDtNPlId9y4GlkFwn7+LLReyvv9g0RkULOil GADStOoF6nuoXSSV+a5NyhXvFp/+MlPXf88qfAcWq1o+SVxVRUwdFJ4iiVmpAXkt OLF5rpaGa/XQ9H0pQbgeOQRNFideukqSLwK5tATBNIgQEqBk2R3GXUfZjkPBkYN2 KvbEpSFmq1qHWde/G7fIZNPh9OSk+geVZm/3iZbJeqW/Vx758MJpVH5JQKvIBlQ= -----END CERTIFICATE-----Generated at Fri Apr 19 06:30:38 2024 by rpki-client on console-fra.rpki-client.org