$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e75c1b43-3316-4664-8ba3-56a0cd2996be.cer File: e75c1b43-3316-4664-8ba3-56a0cd2996be.cer (raw, json) Hash identifier: gIZUmruJtLsxMgtUSXknl2P8XtJK2ES6YzfcsNWpNew= Subject key identifier: 2B:DA:95:CC:AB:9B:EA:2E:15:32:E0:B7:95:34:39:A4:61:BF:0F:5F Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584883DE3A07BB88A7CC0AB65900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e75c1b43-3316-4664-8ba3-56a0cd2996be/e75c1b43-3316-4664-8ba3-56a0cd2996be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e75c1b43-3316-4664-8ba3-56a0cd2996be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Jan 2025 01:45:31 +0000 Certificate not after: Sat 17 Apr 2027 00:45:31 +0000 Subordinate resources: IP: 136.175.113.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 13 Feb 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:83:de:3a:07:bb:88:a7:cc:0a:b6:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Jan 12 01:45:31 2025 GMT Not After : Apr 17 00:45:31 2027 GMT Subject: CN=e75c1b43-3316-4664-8ba3-56a0cd2996be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:29:2a:2d:fe:8a:40:bd:b1:a1:bd:40:f4:88: 76:4f:2a:df:8f:69:b1:c6:66:1e:4d:0a:aa:7d:b4: f8:f2:f4:e9:be:65:b9:7c:24:b2:c7:65:6c:b6:f7: 8f:bb:21:23:4e:21:42:3a:f1:22:7a:13:03:dd:19: 53:94:4f:28:0d:64:cf:bd:c4:c8:9d:6d:4f:8f:f2: 90:d8:60:f6:4b:f8:7e:bb:7c:0d:ec:20:7c:67:96: 17:7c:00:da:b6:43:c1:3b:fb:dd:fe:86:f1:42:17: eb:8e:8d:50:3f:eb:1f:59:94:cb:b0:6d:f6:23:0b: a3:a0:f3:1f:f2:92:d2:54:ca:cc:6b:ff:5b:0b:a0: 01:87:81:78:b6:ef:66:c7:e3:4e:89:bb:b3:16:36: 26:ac:69:aa:8f:05:2a:fc:8f:2d:e4:b0:4a:25:ab: b8:50:54:21:b4:6f:8b:24:0b:3f:57:f9:ed:86:4e: 9e:f3:9d:78:0e:fc:b9:37:6a:7c:ca:0e:f0:cc:a0: 11:b7:7c:1f:dd:5b:b1:06:aa:b6:fb:b9:70:60:cc: ba:77:88:1d:bf:e7:1e:94:da:a3:ee:d7:3e:69:4a: ec:e6:21:98:fa:b3:57:66:3c:85:07:05:ea:45:22: ab:5d:ca:80:f9:1d:b4:4f:fe:55:96:31:9a:56:e3: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DA:95:CC:AB:9B:EA:2E:15:32:E0:B7:95:34:39:A4:61:BF:0F:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e75c1b43-3316-4664-8ba3-56a0cd2996be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e75c1b43-3316-4664-8ba3-56a0cd2996be/e75c1b43-3316-4664-8ba3-56a0cd2996be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 136.175.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:35:28:61:ad:e8:c0:48:53:77:87:25:ec:96:86:cc:65:26: 7d:62:a1:cb:aa:cb:a0:59:d3:a0:89:73:ce:82:7a:a0:91:b1: 9d:bc:46:8d:96:d4:67:60:9a:55:9a:24:28:df:29:5f:4f:4b: a4:ff:6e:81:05:37:cf:c1:00:9e:e5:e1:4b:db:d9:36:84:74: 27:2e:5b:c6:17:fe:66:0f:bc:cf:1c:04:d6:57:9d:28:f0:c7: 50:32:0e:4b:5d:66:64:15:6e:44:56:3b:f9:f2:31:61:37:7e: ee:fa:79:e9:0a:59:c7:6f:09:3e:96:ae:cd:b4:90:9b:19:f2: 56:72:5d:c8:61:3c:78:ab:bd:1b:75:4c:60:a4:bd:52:f0:94: fa:2b:e2:12:c6:ca:10:43:16:2b:5d:03:e4:7e:d1:8a:15:f8: 36:22:0a:28:04:85:9a:c9:b1:21:66:03:b7:c5:a1:03:0e:1b: 9a:fe:41:4f:2a:b7:0a:86:b5:87:59:e2:54:b3:b9:da:a5:66: 9d:d9:a8:2d:89:b8:a4:8a:0b:9a:bd:29:1a:33:92:d3:f4:c3: e7:1a:cd:a4:29:31:06:26:86:7c:3a:7e:99:f8:8f:a9:2c:51: 60:8c:59:eb:8a:2c:32:99:d1:a6:1e:1f:f2:2b:a3:e4:95:13: 16:86:7e:19 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEiD3joHu4inzAq2WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDExMjAxNDUzMVoXDTI3MDQxNzAwNDUzMVowLzEtMCsGA1UEAxMk ZTc1YzFiNDMtMzMxNi00NjY0LThiYTMtNTZhMGNkMjk5NmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCkqLf6KQL2xob1A9Ih2Tyrfj2mxxmYeTQqq fbT48vTpvmW5fCSyx2VstvePuyEjTiFCOvEiehMD3RlTlE8oDWTPvcTInW1Pj/KQ 2GD2S/h+u3wN7CB8Z5YXfADatkPBO/vd/obxQhfrjo1QP+sfWZTLsG32IwujoPMf 8pLSVMrMa/9bC6ABh4F4tu9mx+NOibuzFjYmrGmqjwUq/I8t5LBKJau4UFQhtG+L JAs/V/nthk6e8514Dvy5N2p8yg7wzKARt3wf3VuxBqq2+7lwYMy6d4gdv+celNqj 7tc+aUrs5iGY+rNXZjyFBwXqRSKrXcqA+R20T/5VljGaVuPnTQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCvalcyrm+ouFTLgt5U0OaRhvw9fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l NzVjMWI0My0zMzE2LTQ2NjQtOGJhMy01NmEwY2QyOTk2YmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2U3NWMxYjQzLTMzMTYtNDY2NC04 YmEzLTU2YTBjZDI5OTZiZS9lNzVjMWI0My0zMzE2LTQ2NjQtOGJhMy01NmEwY2Qy OTk2YmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACIr3EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeDUoYa3owEhTd4cl7JaG zGUmfWKhy6rLoFnToIlzzoJ6oJGxnbxGjZbUZ2CaVZokKN8pX09LpP9ugQU3z8EA nuXhS9vZNoR0Jy5bxhf+Zg+8zxwE1ledKPDHUDIOS11mZBVuRFY7+fIxYTd+7vp5 6QpZx28JPpauzbSQmxnyVnJdyGE8eKu9G3VMYKS9UvCU+iviEsbKEEMWK10D5H7R ihX4NiIKKASFmsmxIWYDt8WhAw4bmv5BTyq3Coa1h1niVLO52qVmndmoLYm4pIoL mr0pGjOS0/TD5xrNpCkxBiaGfDp+mfiPqSxRYIxZ64osMpnRph4f8iuj5JUTFoZ+ GQ== -----END CERTIFICATE-----Generated at Tue Feb 11 21:15:31 2025 by rpki-client