$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3.cer File: d10dc068-f40b-4a85-97fb-2769f176bce3.cer (raw, json) Hash identifier: 3b3JNqbl1BQVAX8k1FcrVR9P2dOu5c7Espzatd4w1RA= Subject key identifier: 80:C9:98:E5:C4:C9:11:22:09:55:B4:C2:FA:36:76:80:D4:D2:C2:E7 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848897399622E2A4222810F4200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/d10dc068-f40b-4a85-97fb-2769f176bce3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 14 Jan 2025 01:45:33 +0000 Certificate not after: Mon 19 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 396526 IP: 23.128.64.0/23 IP: 134.195.82.0/23 IP: 2602:fed3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:73:99:62:2e:2a:42:22:81:0f:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 14 01:45:33 2025 GMT Not After : Apr 19 00:45:33 2027 GMT Subject: CN=d10dc068-f40b-4a85-97fb-2769f176bce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:61:cc:66:47:d1:da:67:2c:b9:a0:d6:82:f1: b9:66:35:e7:ee:c9:6c:43:7b:1e:b1:b2:fa:8f:36: 38:90:5b:a0:06:ee:72:b0:a9:75:19:a6:03:01:97: 76:aa:2d:bb:5f:89:cf:97:30:97:ba:90:d9:f1:2f: 81:40:a5:24:bd:57:94:46:c8:95:80:5c:0e:39:88: f7:4e:e2:3d:59:b2:90:98:eb:c5:d1:42:44:f7:d9: 51:18:ec:29:d2:4e:88:59:4d:3d:dc:2f:9a:58:72: 8a:d5:1f:d7:69:2d:ec:a0:0d:ed:a5:7d:86:a6:b2: ec:f2:65:32:d4:0b:31:7a:5c:96:3f:97:92:36:d5: 1c:de:53:f3:67:92:48:b4:53:46:a9:ba:8a:df:b9: f5:59:eb:ed:27:84:17:ea:df:74:b4:72:03:50:99: ef:e5:41:8c:4d:24:31:35:c9:2a:19:e4:53:f2:75: 7c:a6:66:de:8d:b0:96:3c:96:3a:15:fa:b9:57:89: 90:9f:8c:ab:ca:73:1b:33:4a:6b:f5:41:dc:80:3c: 2e:a3:89:35:da:0b:75:9d:f6:d5:7e:36:b8:07:10: ff:4b:df:40:6d:b6:a1:b5:c6:43:ab:0e:2c:58:5c: c2:65:bf:c3:51:87:2b:5e:b5:60:74:c7:51:16:55: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C9:98:E5:C4:C9:11:22:09:55:B4:C2:FA:36:76:80:D4:D2:C2:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d10dc068-f40b-4a85-97fb-2769f176bce3/d10dc068-f40b-4a85-97fb-2769f176bce3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.128.64.0/23 134.195.82.0/23 IPv6: 2602:fed3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396526 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9b:be:93:13:1a:9f:db:41:b4:86:1a:2d:bf:6e:58:c6:39: 79:50:f0:18:72:94:cd:c8:9a:61:b5:31:43:0b:7b:b7:e6:a2: 5d:8a:81:5f:0f:0c:9d:d2:97:ef:f8:bb:42:83:b5:32:0d:5a: 7f:10:64:a4:ef:de:0a:79:c9:92:6f:90:8e:fb:d9:dd:c0:52: 5f:7b:ef:bf:9e:e7:91:96:39:04:ce:ba:9a:56:69:fb:be:5b: ca:bc:e0:87:13:b9:69:89:b2:e9:77:4e:00:79:52:5b:18:b5: fa:24:a8:25:9d:35:78:62:90:bd:0e:28:63:8f:d6:54:c8:28: e2:df:a9:2d:4e:31:37:4a:26:e6:44:1c:f8:31:bb:4b:17:89: a3:af:0b:e8:4a:d8:b7:b2:3b:e9:f7:8d:e8:89:0b:35:bb:25: 58:26:55:11:4f:8f:51:24:3b:11:f5:5a:0d:ce:b4:a3:63:4d: 8e:fc:ff:0a:ce:ce:ad:0e:e1:aa:06:21:a4:ab:b7:dc:00:35: 4a:fe:bd:9c:b8:64:9c:ce:1e:98:e8:1a:31:61:06:7f:36:fe: f2:63:bb:f1:fb:7e:cb:a6:01:dc:c1:8d:d1:28:be:ee:c1:26: 0d:d5:76:1f:ee:13:21:48:27:ba:70:5e:1c:7f:4f:c7:c0:c7: c0:d7:ed:0e -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEiJc5liLipCIoEPQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDExNDAxNDUzM1oXDTI3MDQxOTAwNDUzM1owLzEtMCsGA1UEAxMk ZDEwZGMwNjgtZjQwYi00YTg1LTk3ZmItMjc2OWYxNzZiY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGHMZkfR2mcsuaDWgvG5ZjXn7slsQ3sesbL6 jzY4kFugBu5ysKl1GaYDAZd2qi27X4nPlzCXupDZ8S+BQKUkvVeURsiVgFwOOYj3 TuI9WbKQmOvF0UJE99lRGOwp0k6IWU093C+aWHKK1R/XaS3soA3tpX2GprLs8mUy 1AsxelyWP5eSNtUc3lPzZ5JItFNGqbqK37n1WevtJ4QX6t90tHIDUJnv5UGMTSQx NckqGeRT8nV8pmbejbCWPJY6Ffq5V4mQn4yrynMbM0pr9UHcgDwuo4k12gt1nfbV fja4BxD/S99AbbahtcZDqw4sWFzCZb/DUYcrXrVgdMdRFlWJWwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFIDJmOXEyREiCVW0wvo2doDU0sLnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k MTBkYzA2OC1mNDBiLTRhODUtOTdmYi0yNzY5ZjE3NmJjZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2QxMGRjMDY4LWY0MGItNGE4NS05 N2ZiLTI3NjlmMTc2YmNlMy9kMTBkYzA2OC1mNDBiLTRhODUtOTdmYi0yNzY5ZjE3 NmJjZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXgEADBAGGw1IwDgQCAAIwCAMGBCYC/tMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYM7jBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAum76TExqf20G0hhot v25Yxjl5UPAYcpTNyJphtTFDC3u35qJdioFfDwyd0pfv+LtCg7UyDVp/EGSk794K ecmSb5CO+9ndwFJfe++/nueRljkEzrqaVmn7vlvKvOCHE7lpibLpd04AeVJbGLX6 JKglnTV4YpC9Dihjj9ZUyCji36ktTjE3SibmRBz4MbtLF4mjrwvoSti3sjvp943o iQs1uyVYJlURT49RJDsR9VoNzrSjY02O/P8Kzs6tDuGqBiGkq7fcADVK/r2cuGSc zh6Y6BoxYQZ/Nv7yY7vx+37LpgHcwY3RKL7uwSYN1XYf7hMhSCe6cF4cf0/HwMfA 1+0O -----END CERTIFICATE-----Generated at Sat Feb 15 21:11:03 2025 by rpki-client