$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e.cer File: 63dfa533-829d-4752-9f73-458a9e42bd9e.cer (raw, json) Hash identifier: I10o8O4h30lp8jQUPMESsUjnqG9upw7f4wPo0J8Qe9s= Subject key identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849928CD1DF5AFF71BD83413B30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Apr 2025 00:45:34 +0000 Certificate not after: Fri 23 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 21700 AS: 397143 IP: 23.157.160.0/24 IP: 170.39.136.0/24 IP: 172.82.22.0/23 IP: 209.151.100.0/22 IP: 2602:fe2e::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:8c:d1:df:5a:ff:71:bd:83:41:3b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Apr 19 00:45:34 2025 GMT Not After : Jul 23 00:45:34 2027 GMT Subject: CN=63dfa533-829d-4752-9f73-458a9e42bd9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:d7:57:91:50:ab:17:39:50:36:4c:b0:ef: 11:15:7d:43:bc:a8:55:7c:3c:3f:37:ea:d6:6f:da: b9:2c:94:81:8f:28:41:46:6b:cd:8b:af:6a:e2:7f: 7c:e2:5b:82:f5:0f:3b:f4:5e:56:45:7f:7d:c5:44: 16:17:8b:49:3d:3f:42:ef:64:03:2b:01:e2:2e:00: 19:58:7a:4f:4d:e7:64:8b:57:21:dd:c2:6f:43:db: 64:b7:71:3f:93:a1:e9:3e:85:06:95:13:fb:03:85: bd:98:02:40:11:7e:68:1a:3b:c7:ce:b7:a9:4b:47: 06:52:50:29:59:4a:17:d3:84:eb:e4:6f:64:09:e3: b7:f6:9f:ef:72:34:16:f2:03:5a:21:cc:bc:0d:2f: 0a:cf:be:2a:07:d9:be:7b:1a:82:54:34:0a:57:10: 2f:ee:31:90:f1:de:e1:15:f2:83:ac:38:f2:d5:8e: 60:9b:ac:9e:f1:b4:73:48:ec:74:92:b4:ee:e6:2d: 42:20:a4:34:b7:33:6d:32:b6:f2:2c:10:be:e5:20: 2e:70:68:ad:ca:39:a2:6a:8f:52:42:60:00:a4:ed: 0e:33:fc:1e:4c:97:95:dd:12:dc:9b:80:33:c8:29: 01:04:f9:fb:7a:23:19:26:64:47:4b:16:43:73:35: 87:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:85:9A:3C:FA:98:C0:11:67:6D:31:19:94:1D:95:83:28:E2:4C:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/63dfa533-829d-4752-9f73-458a9e42bd9e/63dfa533-829d-4752-9f73-458a9e42bd9e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.157.160.0/24 170.39.136.0/24 172.82.22.0/23 209.151.100.0/22 IPv6: 2602:fe2e::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21700 397143 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:f9:fc:5a:16:b0:73:c9:34:78:08:27:36:b5:a7:cf:2b:1b: 1a:33:60:bf:7b:3b:1f:be:17:32:7b:1e:04:cf:33:df:63:01: 39:2f:7f:b4:14:2b:7b:4c:2d:c3:9a:47:84:2a:e7:e8:5a:2c: dd:fb:79:9b:e1:50:95:e4:5b:9b:7d:4c:f4:34:14:9c:cb:de: ab:e8:2e:54:60:b5:fe:23:00:93:21:7c:77:8e:50:63:8b:22: 82:73:c2:06:d6:0a:0c:98:18:72:05:d8:e5:8d:78:24:9e:3f: 58:92:11:45:88:a6:b7:7c:81:49:ec:cb:7b:7e:ca:04:32:12: c0:3d:ea:b5:8a:c2:97:96:db:99:ca:ad:9a:31:bf:06:9c:a8: 13:53:68:8b:3f:e8:df:12:62:be:26:8b:e0:b0:a7:56:8d:08: 07:c4:06:b1:f7:c9:7d:dd:2e:28:31:1b:da:48:1c:6b:bf:4d: 16:8e:81:af:ca:81:e9:3f:80:eb:37:6a:d5:f9:3f:08:f9:0d: 9c:08:62:e1:a7:cf:2f:19:36:b6:34:55:30:36:5c:a8:f1:44: 50:a6:61:79:73:31:31:38:24:cc:ea:a4:54:b2:53:a3:55:56: 00:21:b2:7d:47:cc:35:78:32:25:36:f6:68:3f:a2:9d:60:04: 69:5b:67:0d -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEmSjNHfWv9xvYNBOzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDQxOTAwNDUzNFoXDTI3MDcyMzAwNDUzNFowLzEtMCsGA1UEAxMk NjNkZmE1MzMtODI5ZC00NzUyLTlmNzMtNDU4YTllNDJiZDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5PXV5FQqxc5UDZMsO8RFX1DvKhVfDw/N+rW b9q5LJSBjyhBRmvNi69q4n984luC9Q879F5WRX99xUQWF4tJPT9C72QDKwHiLgAZ WHpPTedki1ch3cJvQ9tkt3E/k6HpPoUGlRP7A4W9mAJAEX5oGjvHzrepS0cGUlAp WUoX04Tr5G9kCeO39p/vcjQW8gNaIcy8DS8Kz74qB9m+exqCVDQKVxAv7jGQ8d7h FfKDrDjy1Y5gm6ye8bRzSOx0krTu5i1CIKQ0tzNtMrbyLBC+5SAucGityjmiao9S QmAApO0OM/weTJeV3RLcm4AzyCkBBPn7eiMZJmRHSxZDczWHmwIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFI+Fmjz6mMARZ20xGZQdlYMo4kzfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82 M2RmYTUzMy04MjlkLTQ3NTItOWY3My00NThhOWU0MmJkOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzYzZGZhNTMzLTgyOWQtNDc1Mi05 ZjczLTQ1OGE5ZTQyYmQ5ZS82M2RmYTUzMy04MjlkLTQ3NTItOWY3My00NThhOWU0 MmJkOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBAAXnaADBACqJ4gDBAGsUhYDBALRl2QwDgQCAAIw CAMGBCYC/i4AMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlTEAgMGD1cwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAE/n8Whawc8k0eAgnNrWnzysbGjNgv3s7H74XMnseBM8z32MBOS9/tBQre0wt w5pHhCrn6Fos3ft5m+FQleRbm31M9DQUnMveq+guVGC1/iMAkyF8d45QY4signPC BtYKDJgYcgXY5Y14JJ4/WJIRRYimt3yBSezLe37KBDISwD3qtYrCl5bbmcqtmjG/ BpyoE1Noiz/o3xJiviaL4LCnVo0IB8QGsffJfd0uKDEb2kgca79NFo6Br8qB6T+A 6zdq1fk/CPkNnAhi4afPLxk2tjRVMDZcqPFEUKZheXMxMTgkzOqkVLJTo1VWACGy fUfMNXgyJTb2aD+inWAEaVtnDQ== -----END CERTIFICATE-----Generated at Tue Apr 29 03:35:34 2025 by rpki-client