$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer File: 4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer (raw, json) Hash identifier: ISHCpipR/RqiEmMhu5yOd5xlG/vBU6lZg/lqCRyDhHA= Subject key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858491509D14D88746928CA677A90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Mar 2025 01:45:34 +0000 Certificate not after: Tue 08 Jun 2027 00:45:34 +0000 Subordinate resources: AS: 3143 AS: 29992 IP: 146.73.0.0/16 IP: 151.107.0.0/16 IP: 152.124.0.0 -- 152.133.255.255 IP: 192.26.48.0/24 IP: 2600:8000::/24 IP: 2601:d000::/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:15:09:d1:4d:88:74:69:28:ca:67:7a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 5 01:45:34 2025 GMT Not After : Jun 8 00:45:34 2027 GMT Subject: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:0d:18:ff:78:17:d3:15:57:5e:c7:60:ba: dd:63:49:70:49:2d:0c:25:5a:52:83:7f:6d:97:31: 3f:7f:6b:6c:c6:1a:58:b9:01:e9:06:60:bc:1b:ac: 44:de:5e:dc:10:ce:ea:7d:02:94:19:01:35:f0:f1: 0d:94:04:ab:7d:b4:0f:ff:0b:c2:33:c4:88:72:fb: ff:37:96:c8:e6:34:23:36:95:77:5f:f0:83:3a:42: 89:df:79:bb:5b:29:84:0d:08:74:af:4b:92:3c:3c: 2d:6c:7f:e2:52:f3:04:79:67:82:f1:c1:b9:56:f9: 92:26:77:b6:6a:fd:72:7f:aa:94:4a:67:21:63:0a: bd:5c:f1:e9:a9:18:c8:cc:39:00:1f:d4:91:c2:5d: 7f:cd:de:4c:a9:d6:35:61:1a:57:11:f7:40:f2:61: 84:92:5c:4c:c4:52:e0:d8:1d:cf:f1:12:85:6e:87: fc:01:de:71:9e:e4:17:a9:e1:c1:a6:4f:42:4e:6d: 56:a2:26:d7:f8:d3:67:30:64:b2:bb:4d:dd:8e:40: f5:d1:21:9e:d0:50:17:a6:56:36:34:27:1f:29:f5: da:5f:ce:5a:52:ed:d4:d0:16:7f:53:a4:36:13:6a: f2:57:de:4a:bb:8e:4c:b1:25:f5:ab:44:c8:ef:06: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 146.73.0.0/16 151.107.0.0/16 152.124.0.0-152.133.255.255 192.26.48.0/24 IPv6: 2600:8000::/24 2601:d000::/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3143 29992 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:e8:40:46:dc:7b:7c:14:39:b4:ea:c4:cc:1b:b8:f9:03:e1: 80:07:1a:56:17:f2:a6:cc:a8:7c:bd:35:33:fa:32:0a:f3:eb: 17:bb:0e:cd:50:a1:06:fc:91:ab:10:fe:b5:b6:c0:ee:47:41: 96:a5:da:f7:8c:c6:31:7f:85:03:af:21:dc:b2:38:79:27:ad: 4b:e7:cd:b7:d3:55:cf:49:cc:a0:80:ad:38:ac:89:28:a1:30: fe:1c:3f:68:d6:db:30:84:8a:57:53:e7:3d:72:ed:e9:f0:c2: 9c:d1:23:b6:5e:3b:ba:83:a4:d3:8b:06:f8:fb:da:5d:ab:c2: 20:4c:bb:0c:e8:6d:69:e2:99:a8:65:5e:a8:5a:31:40:46:d1: ee:a5:57:d8:16:55:35:1a:52:72:10:d7:b2:45:2d:74:e1:cb: a7:19:17:c0:cd:47:b1:36:d7:17:59:8a:74:06:bb:3a:d3:28: 30:d4:6b:87:71:c8:ff:b1:44:60:0d:2c:66:d3:4a:d8:14:f6: 19:58:d8:93:b1:0d:02:49:0a:20:4e:3f:03:47:e3:3a:73:58: fd:ee:50:c9:e7:f1:0f:13:ac:03:99:9b:87:81:40:f0:33:5c: ff:46:09:41:3b:24:53:f7:5a:64:cf:68:e2:36:c4:75:44:35: 23:f8:b4:d4 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEkVCdFNiHRpKMpnepAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMwNTAxNDUzNFoXDTI3MDYwODAwNDUzNFowLzEtMCsGA1UEAxMk NGY0ZmFmMmEtMTdmZi00ODI3LTliZWMtYzZmZmNiMmFkMDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh0NGP94F9MVV17HYLrdY0lwSS0MJVpSg39t lzE/f2tsxhpYuQHpBmC8G6xE3l7cEM7qfQKUGQE18PENlASrfbQP/wvCM8SIcvv/ N5bI5jQjNpV3X/CDOkKJ33m7WymEDQh0r0uSPDwtbH/iUvMEeWeC8cG5VvmSJne2 av1yf6qUSmchYwq9XPHpqRjIzDkAH9SRwl1/zd5MqdY1YRpXEfdA8mGEklxMxFLg 2B3P8RKFbof8Ad5xnuQXqeHBpk9CTm1WoibX+NNnMGSyu03djkD10SGe0FAXplY2 NCcfKfXaX85aUu3U0BZ/U6Q2E2ryV95Ku45MsSX1q0TI7wY67QIDAQABo4IESDCC BEQwHQYDVR0OBBYEFOATXsDdxnKnOFSVhxeUFo5tmXAvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80 ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2IyYWQwOTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzRmNGZhZjJhLTE3ZmYtNDgyNy05 YmVjLWM2ZmZjYjJhZDA5Mi80ZjRmYWYyYS0xN2ZmLTQ4MjctOWJlYy1jNmZmY2Iy YWQwOTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwSQYIKwYBBQUH AQcBAf8EOjA4MCIEAgABMBwDAwCSSQMDAJdrMAoDAwKYfAMDAZiEAwQAwBowMBIE AgACMAwDBAAmAIADBAQmAdAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAICDEcCAnUo MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB/oQEbce3wUObTqxMwbuPkD4YAHGlYX8qbMqHy9NTP6Mgrz6xe7 Ds1QoQb8kasQ/rW2wO5HQZal2veMxjF/hQOvIdyyOHknrUvnzbfTVc9JzKCArTis iSihMP4cP2jW2zCEildT5z1y7enwwpzRI7ZeO7qDpNOLBvj72l2rwiBMuwzobWni mahlXqhaMUBG0e6lV9gWVTUaUnIQ17JFLXThy6cZF8DNR7E21xdZinQGuzrTKDDU a4dxyP+xRGANLGbTStgU9hlY2JOxDQJJCiBOPwNH4zpzWP3uUMnn8Q8TrAOZm4eB QPAzXP9GCUE7JFP3WmTPaOI2xHVENSP4tNQ= -----END CERTIFICATE-----Generated at Sat Apr 26 19:29:54 2025 by rpki-client