$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d.cer File: df5adac7-ed86-4b24-911d-716f2c94711d.cer (raw, json) Hash identifier: 0v9avaQW1mS2DREL6gybZ44j6vSkVOeTOE4X8KcPPNs= Subject key identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848ECB4231384D1FF66ED18A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 18 Feb 2025 15:00:37 +0000 Certificate not after: Sun 05 Jul 2026 19:09:39 +0000 Subordinate resources: AS: 40115 AS: 40929 AS: 53808 AS: 198304 IP: 23.175.24.0/23 IP: 149.112.117.0/24 IP: 2602:f92a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:b4:23:13:84:d1:ff:66:ed:18:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 18 15:00:37 2025 GMT Not After : Jul 5 19:09:39 2026 GMT Subject: CN=df5adac7-ed86-4b24-911d-716f2c94711d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:68:d2:b2:49:4d:f6:d7:e9:1d:98:21:4c: e8:3e:c7:65:c3:ad:bf:67:a1:18:84:5c:0e:60:d5: 38:17:45:dd:32:6f:56:2a:dd:9c:c9:a1:de:58:f3: f7:df:47:27:21:14:c6:c7:f1:20:29:c8:81:4c:83: 08:52:6c:6d:35:65:d0:97:4f:6b:9f:21:58:e3:fc: 21:aa:cd:cd:8b:03:f7:30:69:df:8a:a6:3c:5b:33: 9f:21:36:95:74:eb:42:13:e6:12:78:94:32:24:5f: 1e:fd:e6:b8:89:73:6c:89:9c:41:2b:de:90:28:f3: 16:35:94:26:4b:48:79:62:06:ca:93:35:0c:da:1e: 74:2e:98:25:0d:52:3f:b2:7e:fa:20:4b:93:1d:d3: 9d:b6:84:bd:5c:93:ff:ae:94:19:af:d5:a0:f4:49: 96:7d:48:27:a4:f3:b8:e6:62:c4:37:8d:c4:55:50: e0:1f:5b:9b:0b:32:f4:63:48:b6:60:9d:96:e5:95: 81:f5:3a:60:ef:0a:9e:ab:43:a7:53:f3:d8:38:9c: 64:68:7e:0f:52:3f:71:ce:b3:f0:b3:3a:8e:8c:a9: 57:ee:dc:d1:e8:bc:63:1a:f3:d0:62:4d:4d:3e:ac: b7:41:32:e7:ce:c9:1b:95:31:df:5a:f9:fb:d4:92: 54:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:84:C0:FB:8B:8E:95:4C:39:8B:05:24:6C:9B:F7:2A:F6:14:EE:42 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/df5adac7-ed86-4b24-911d-716f2c94711d/df5adac7-ed86-4b24-911d-716f2c94711d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.175.24.0/23 149.112.117.0/24 IPv6: 2602:f92a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40115 40929 53808 198304 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:ca:6a:8a:70:d2:48:36:a3:f9:46:7e:8f:e4:11:7c:8e:7b: d0:42:3e:1e:1c:22:3f:11:46:8f:07:cc:f1:a5:7c:e5:9c:0e: 62:a0:4e:12:7e:5d:9f:a1:60:14:8f:3e:52:ef:a7:d7:ea:11: 11:bf:84:59:da:71:fd:d2:78:f8:08:30:f7:0f:da:de:40:97: 27:5f:cf:43:de:6a:e4:15:79:f4:6c:f4:9c:8b:e7:01:fd:c2: f1:d9:97:cc:79:59:5f:6b:fa:3b:6c:00:fb:b2:3b:75:eb:5a: b5:3c:70:02:19:0f:ff:74:c8:b7:93:6a:fd:5c:4e:73:e1:60: 96:a7:3a:1b:d5:27:cc:65:bb:82:dd:46:9a:9d:9a:bd:d9:c2: 27:83:7d:92:72:aa:44:db:ad:0e:5a:aa:fc:e1:22:b6:ee:f6: 1d:2a:0a:62:6c:4b:5b:67:00:ca:2d:6b:41:b6:fb:be:3a:2c: 46:44:0b:6f:08:1b:df:ac:b6:aa:c2:71:45:8b:b2:d9:96:54: aa:83:0a:18:c5:d2:83:cb:d3:0a:b0:f4:19:b4:1d:c1:b0:f4: 09:fd:a6:bc:04:9c:1a:2f:1d:5e:39:6e:0d:e4:1d:11:90:4d: f8:ba:1e:cf:9f:0c:c5:83:76:ef:be:9a:36:f0:f1:1e:47:2a: 0a:a7:cb:8a -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEjstCMThNH/Zu0YpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDIxODE1MDAzN1oXDTI2MDcwNTE5MDkzOVowLzEtMCsGA1UEAxMk ZGY1YWRhYzctZWQ4Ni00YjI0LTkxMWQtNzE2ZjJjOTQ3MTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAho0rJJTfbX6R2YIUzoPsdlw62/Z6EYhFwO YNU4F0XdMm9WKt2cyaHeWPP330cnIRTGx/EgKciBTIMIUmxtNWXQl09rnyFY4/wh qs3NiwP3MGnfiqY8WzOfITaVdOtCE+YSeJQyJF8e/ea4iXNsiZxBK96QKPMWNZQm S0h5YgbKkzUM2h50LpglDVI/sn76IEuTHdOdtoS9XJP/rpQZr9Wg9EmWfUgnpPO4 5mLEN43EVVDgH1ubCzL0Y0i2YJ2W5ZWB9Tpg7wqeq0OnU/PYOJxkaH4PUj9xzrPw szqOjKlX7tzR6LxjGvPQYk1NPqy3QTLnzskblTHfWvn71JJUTwIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFGWEwPuLjpVMOYsFJGyb9yr2FO5CMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9k ZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5NDcxMWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2RmNWFkYWM3LWVkODYtNGIyNC05 MTFkLTcxNmYyYzk0NzExZC9kZjVhZGFjNy1lZDg2LTRiMjQtOTExZC03MTZmMmM5 NDcxMWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAEXrxgDBACVcHUwDgQCAAIwCAMGBCYC+SoAMCkG CCsGAQUFBwEIAQH/BBowGKAWMBQCAwCcswIDAJ/hAgMA0jACAwMGoDBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCUymqKcNJINqP5Rn6P5BF8jnvQQj4eHCI/EUaPB8zxpXzlnA5ioE4Sfl2foWAU jz5S76fX6hERv4RZ2nH90nj4CDD3D9reQJcnX89D3mrkFXn0bPSci+cB/cLx2ZfM eVlfa/o7bAD7sjt161q1PHACGQ//dMi3k2r9XE5z4WCWpzob1SfMZbuC3UaanZq9 2cIng32ScqpE260OWqr84SK27vYdKgpibEtbZwDKLWtBtvu+OixGRAtvCBvfrLaq wnFFi7LZllSqgwoYxdKDy9MKsPQZtB3BsPQJ/aa8BJwaLx1eOW4N5B0RkE34uh7P nwzFg3bvvpo28PEeRyoKp8uK -----END CERTIFICATE-----Generated at Fri Apr 4 19:33:58 2025 by rpki-client