$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940.cer File: f411593b-365b-40a2-ae58-c8e00500c940.cer (raw, json) Hash identifier: xyKwEkqURJjqRLkuRyyJyqTxL80K/ZJ3tKWAzPACZ6A= Subject key identifier: 43:64:1D:EB:7D:56:29:96:C1:61:39:B7:DA:1B:F5:A1:93:5E:81:7A Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285848D79EC25AF622046480F092C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/f411593b-365b-40a2-ae58-c8e00500c940.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Feb 2025 01:45:34 +0000 Certificate not after: Mon 17 May 2027 00:45:34 +0000 Subordinate resources: AS: 395462 IP: 204.225.80.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:9e:c2:5a:f6:22:04:64:80:f0:92:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 11 01:45:34 2025 GMT Not After : May 17 00:45:34 2027 GMT Subject: CN=f411593b-365b-40a2-ae58-c8e00500c940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cc:f8:22:e8:82:19:d0:b5:92:dd:b1:06:c8: a7:52:bd:e2:9d:71:dd:21:73:87:e4:1c:2e:46:28: 96:25:57:f7:be:b0:e7:51:be:88:6b:ec:29:d0:cb: 6c:cb:09:ae:35:81:90:7f:ab:23:32:ef:7e:ca:05: 9a:05:cf:14:2d:02:99:2b:24:5e:c5:e1:5d:46:c5: f8:c6:08:9a:0d:ae:77:a6:7d:62:22:d7:05:84:fe: ab:bb:78:3f:60:04:04:76:e6:1b:2c:ad:aa:30:ca: de:ff:bb:93:19:69:68:04:28:0e:fb:7f:4f:db:45: 74:9f:1c:0c:08:41:a5:f5:c0:15:57:b6:18:40:cb: 84:77:d8:8f:cb:39:d0:23:22:1b:c3:80:64:da:4d: 33:41:f7:fe:c0:ae:a6:a7:17:ef:d3:d2:2a:cf:c8: c1:76:95:f6:fc:8b:e1:2d:f2:2c:d7:c0:f6:e9:fe: bf:fd:6f:51:30:10:39:d2:51:16:b9:5a:f8:98:61: 4a:fa:2d:01:46:1a:f2:fa:23:8d:73:45:30:88:f2: 45:b1:24:88:2f:4e:0d:ba:bc:1f:a4:86:94:58:f7: cf:5a:b3:39:d1:da:77:49:c5:94:12:ca:ae:c2:f5: 3b:64:e6:34:9a:e3:3a:60:b9:1c:44:56:14:37:c3: 0a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:64:1D:EB:7D:56:29:96:C1:61:39:B7:DA:1B:F5:A1:93:5E:81:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f411593b-365b-40a2-ae58-c8e00500c940/f411593b-365b-40a2-ae58-c8e00500c940.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 204.225.80.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395462 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ab:99:97:d4:1f:fd:cf:52:6d:f6:9d:ce:3d:0a:26:58:38: 1f:8d:83:0f:09:bd:d3:82:3f:4d:62:a2:2d:cf:c4:e2:07:4d: 21:00:b0:3d:70:8a:28:26:a8:d9:65:1c:87:10:82:d9:c3:18: 35:c4:e4:2a:3a:f1:0b:5d:dd:11:c7:7c:0e:4e:09:d5:3a:9d: f5:2a:2d:3b:10:be:96:c8:d0:c5:1f:58:ac:fd:a3:c9:52:b4: 5f:e5:49:12:ba:54:b6:1b:ca:6d:94:bd:30:f0:ab:fd:2e:ba: e5:dc:36:53:9c:72:93:ca:a5:b2:7c:dc:cf:6e:b4:2d:9d:7d: 84:3f:24:b2:50:ca:02:ae:3d:ed:a9:6f:31:96:c1:ac:3e:2d: 86:cc:d4:fa:76:ae:b9:d2:6e:e4:ae:9f:21:27:ea:d8:44:0c: 8c:74:d7:ff:21:bc:37:fc:fe:b7:c4:6d:cf:e5:4a:54:e2:d0: c4:aa:49:b2:e3:19:86:bc:16:65:66:2b:b8:0e:b3:d5:e6:b0: 69:47:ac:61:99:57:dc:ff:f3:ba:a4:84:91:3f:88:f5:17:af: 02:db:c9:4f:9c:de:1c:9a:e8:ff:ac:76:71:77:75:e1:f2:03: 60:a8:e9:32:8a:d2:7b:44:41:35:bf:c7:79:f0:7c:ca:2e:ae: 8c:d9:44:36 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEjXnsJa9iIEZIDwksAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDIxMTAxNDUzNFoXDTI3MDUxNzAwNDUzNFowLzEtMCsGA1UEAxMk ZjQxMTU5M2ItMzY1Yi00MGEyLWFlNTgtYzhlMDA1MDBjOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8z4IuiCGdC1kt2xBsinUr3inXHdIXOH5Bwu RiiWJVf3vrDnUb6Ia+wp0MtsywmuNYGQf6sjMu9+ygWaBc8ULQKZKyRexeFdRsX4 xgiaDa53pn1iItcFhP6ru3g/YAQEduYbLK2qMMre/7uTGWloBCgO+39P20V0nxwM CEGl9cAVV7YYQMuEd9iPyznQIyIbw4Bk2k0zQff+wK6mpxfv09Iqz8jBdpX2/Ivh LfIs18D26f6//W9RMBA50lEWuVr4mGFK+i0BRhry+iONc0UwiPJFsSSIL04Nurwf pIaUWPfPWrM50dp3ScWUEsquwvU7ZOY0muM6YLkcRFYUN8MKkQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFENkHet9VimWwWE5t9ob9aGTXoF6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9m NDExNTkzYi0zNjViLTQwYTItYWU1OC1jOGUwMDUwMGM5NDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2Y0MTE1OTNiLTM2NWItNDBhMi1h ZTU4LWM4ZTAwNTAwYzk0MC9mNDExNTkzYi0zNjViLTQwYTItYWU1OC1jOGUwMDUw MGM5NDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALM4VAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgjGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAByrmZfUH/3PUm32nc49CiZYOB+Ngw8JvdOCP01ioi3PxOIH TSEAsD1wiigmqNllHIcQgtnDGDXE5Co68Qtd3RHHfA5OCdU6nfUqLTsQvpbI0MUf WKz9o8lStF/lSRK6VLYbym2UvTDwq/0uuuXcNlOccpPKpbJ83M9utC2dfYQ/JLJQ ygKuPe2pbzGWwaw+LYbM1Pp2rrnSbuSunyEn6thEDIx01/8hvDf8/rfEbc/lSlTi 0MSqSbLjGYa8FmVmK7gOs9XmsGlHrGGZV9z/87qkhJE/iPUXrwLbyU+c3hya6P+s dnF3deHyA2Co6TKK0ntEQTW/x3nwfMourozZRDY= -----END CERTIFICATE-----Generated at Fri Apr 4 16:20:48 2025 by rpki-client