$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd.cer File: e502a731-806a-429f-b296-43783f00f6fd.cer (raw, json) Hash identifier: OwEsQExUK33OOcavd8f+a53MNSSw2BppJhNQjW0BHN8= Subject key identifier: 4A:BE:B9:3D:52:61:E2:A6:07:3E:82:39:AD:77:EC:B5:5C:47:31:83 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285847FDDD6A833418E6CB6FC77840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd/e502a731-806a-429f-b296-43783f00f6fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Nov 2024 01:45:35 +0000 Certificate not after: Sun 28 Feb 2027 01:45:35 +0000 Subordinate resources: IP: 141.160.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fd:dd:6a:83:34:18:e6:cb:6f:c7:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Nov 25 01:45:35 2024 GMT Not After : Feb 28 01:45:35 2027 GMT Subject: CN=e502a731-806a-429f-b296-43783f00f6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:b3:51:c6:a2:46:43:dc:78:2d:2b:d9:8a: 2b:83:1e:f2:05:c9:cd:17:fd:f1:b0:9b:04:46:a0: 81:25:ed:52:02:1d:a7:7e:42:57:ea:dd:40:69:e9: 69:00:c3:6c:61:d2:dc:8c:e8:df:33:08:f9:ab:3c: 13:a3:a9:c3:aa:41:54:90:cf:d8:b4:3d:92:2e:63: 06:20:9e:ff:43:03:77:12:16:5a:22:31:c2:58:57: 73:01:31:0b:f1:8f:c7:13:fb:d6:6b:c9:d6:13:01: 12:78:3f:64:f0:f3:2c:5e:fc:76:87:22:48:44:1f: 22:70:46:db:91:32:40:e6:d4:62:91:26:55:22:0f: c6:55:74:52:f5:d9:e3:ce:a8:42:f3:1f:e2:25:0c: ed:50:68:b8:4b:1c:2b:54:09:8f:80:37:2c:c6:48: 82:3a:65:34:4a:a1:e2:4c:7a:99:5e:9d:28:e6:29: 0f:05:0e:38:9a:62:7c:17:4c:e1:1e:b7:73:58:ca: e8:2c:04:2f:47:90:61:8d:a5:75:ca:6e:a6:b8:e9: f9:e0:da:a9:fe:02:15:3b:99:29:11:a5:0d:7a:d6: 8e:c1:c4:db:82:84:d5:87:26:ea:00:49:2e:c2:c3: ee:01:bd:d5:6e:a7:17:3f:04:ac:06:fb:c1:61:d9: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BE:B9:3D:52:61:E2:A6:07:3E:82:39:AD:77:EC:B5:5C:47:31:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd/e502a731-806a-429f-b296-43783f00f6fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 141.160.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:dc:e1:a1:c4:63:e5:01:c6:34:11:97:1a:72:b7:ab:47:cb: b9:7b:81:bf:14:e8:2e:87:08:ff:0a:da:5b:5c:df:b9:a2:42: 82:2d:24:fb:d8:bc:b9:4d:26:81:db:0d:e4:6f:0a:3c:df:48: f8:ac:06:7b:41:b5:04:7c:f2:42:f3:14:7e:bd:2d:b4:13:fc: ca:b9:50:de:e4:1b:02:44:70:47:73:2a:02:0c:2e:08:55:76: e7:87:d5:d6:48:ed:d4:ed:82:15:9e:08:6f:d8:a6:38:49:7f: a6:a5:7d:09:16:d7:a9:2b:df:18:60:56:22:c0:d3:61:f1:82: 4a:50:6b:f7:27:e2:a6:94:b8:f0:04:25:6a:e0:20:8e:e5:43: a4:73:70:90:b9:6b:2c:cf:8f:94:12:df:6c:49:c6:a5:b1:5b: bc:89:c6:13:8b:c7:a4:96:00:33:f7:ba:c8:71:71:6e:bb:13: 08:09:b1:c2:8f:6c:e5:bd:97:50:e9:cf:29:2f:4a:cd:33:73: bc:67:0b:a0:f6:15:89:a1:2b:24:eb:24:84:f5:9a:71:60:d8: fe:ac:a9:d9:46:17:19:a6:ca:8a:22:3d:7d:5a:3e:79:33:fd: 15:b8:6d:63:a0:01:bf:93:87:9c:81:e0:da:81:eb:47:f6:6a: 3f:0b:d2:16 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEf93WqDNBjmy2/HeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI0MTEyNTAxNDUzNVoXDTI3MDIyODAxNDUzNVowLzEtMCsGA1UEAxMk ZTUwMmE3MzEtODA2YS00MjlmLWIyOTYtNDM3ODNmMDBmNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZOzUcaiRkPceC0r2Yorgx7yBcnNF/3xsJsE RqCBJe1SAh2nfkJX6t1AaelpAMNsYdLcjOjfMwj5qzwTo6nDqkFUkM/YtD2SLmMG IJ7/QwN3EhZaIjHCWFdzATEL8Y/HE/vWa8nWEwESeD9k8PMsXvx2hyJIRB8icEbb kTJA5tRikSZVIg/GVXRS9dnjzqhC8x/iJQztUGi4SxwrVAmPgDcsxkiCOmU0SqHi THqZXp0o5ikPBQ44mmJ8F0zhHrdzWMroLAQvR5BhjaV1ym6muOn54Nqp/gIVO5kp EaUNetaOwcTbgoTVhybqAEkuwsPuAb3VbqcXPwSsBvvBYdnSuwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFEq+uT1SYeKmBz6COa137LVcRzGDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l NTAyYTczMS04MDZhLTQyOWYtYjI5Ni00Mzc4M2YwMGY2ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2U1MDJhNzMxLTgwNmEtNDI5Zi1i Mjk2LTQzNzgzZjAwZjZmZC9lNTAyYTczMS04MDZhLTQyOWYtYjI5Ni00Mzc4M2Yw MGY2ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCNoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCo3OGhxGPlAcY0EZcacrer R8u5e4G/FOguhwj/CtpbXN+5okKCLST72Ly5TSaB2w3kbwo830j4rAZ7QbUEfPJC 8xR+vS20E/zKuVDe5BsCRHBHcyoCDC4IVXbnh9XWSO3U7YIVnghv2KY4SX+mpX0J FtepK98YYFYiwNNh8YJKUGv3J+KmlLjwBCVq4CCO5UOkc3CQuWssz4+UEt9sScal sVu8icYTi8eklgAz97rIcXFuuxMICbHCj2zlvZdQ6c8pL0rNM3O8Zwug9hWJoSsk 6ySE9ZpxYNj+rKnZRhcZpsqKIj19Wj55M/0VuG1joAG/k4ecgeDagetH9mo/C9IW -----END CERTIFICATE-----Generated at Fri Feb 14 10:22:18 2025 by rpki-client