$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer File: 0d32fa67-7158-4437-9e64-f0926c4e4d26.cer (raw, json) Hash identifier: 7uBDjnq37iZhxCYtL311+dkTGboviKphaOVLis1IzLE= Subject key identifier: 04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F432858495D81D263E6D9D9C18FE56B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 31 Mar 2025 00:45:35 +0000 Certificate not after: Sun 04 Jul 2027 00:45:35 +0000 Subordinate resources: AS: 399134 IP: 52.124.25.0/24 IP: 2602:2cf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5d:81:d2:63:e6:d9:d9:c1:8f:e5:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 31 00:45:35 2025 GMT Not After : Jul 4 00:45:35 2027 GMT Subject: CN=0d32fa67-7158-4437-9e64-f0926c4e4d26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:fc:96:94:ee:74:45:7b:7a:18:57:34:72: 02:29:df:7a:26:a8:cd:89:e4:c5:1e:1a:98:fd:f9: 20:3e:c1:51:53:9a:19:89:84:f5:6e:5d:d2:01:66: 6e:d6:8d:47:3c:f5:06:ae:fe:0c:63:8d:4e:7d:23: 61:0f:3e:a5:47:80:c1:8c:7e:47:8a:ce:3e:b8:98: 88:45:d7:ef:a8:8d:fd:01:39:8e:e7:5e:23:6c:d5: 7a:b0:ae:c6:69:87:37:ad:b4:16:ce:23:94:82:0e: 26:0c:ab:3c:be:97:bb:22:70:42:b6:bf:ab:ab:6d: e4:83:44:25:17:5f:2b:e2:e3:ca:2f:8a:be:50:f0: aa:e4:5a:91:f7:c1:1f:d9:a2:32:ce:fd:4b:f3:35: 39:ea:40:d6:de:d5:d2:6d:d6:4e:c0:93:48:f9:42: c8:a4:52:9e:38:3e:b7:ac:2b:69:0e:97:02:78:75: ea:4e:49:82:b8:9e:1e:fa:35:57:f9:a2:1f:54:6a: b9:7f:b4:f3:f3:48:d6:bb:64:f6:2d:3d:8b:d3:1f: dc:fd:e0:0e:e1:18:39:05:c4:1d:5a:11:42:82:be: a2:50:d9:2b:a6:66:13:c6:66:0a:8e:9a:ee:02:86: 9c:34:95:8f:93:dc:14:26:f0:79:a0:73:a7:50:32: 30:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 52.124.25.0/24 IPv6: 2602:2cf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399134 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:08:0f:67:18:1d:e0:ab:cf:84:6e:74:02:ca:8a:3a:80:60: bc:6d:ad:ef:dc:02:95:04:d6:7f:fa:34:10:6c:b3:f8:3c:ab: ae:8a:1b:86:63:7d:7a:bc:a4:c7:88:c6:76:d4:d6:f8:f9:37: 23:fa:4c:e2:a3:57:8a:c9:af:49:80:07:b2:05:14:c3:f8:0c: b2:73:51:a2:f1:bf:9f:1a:e4:96:7f:bd:62:d6:07:3b:77:c2: 88:df:1d:de:1e:b5:0b:5c:03:10:f2:4c:e6:d7:ea:f0:10:9a: 4e:74:66:36:be:de:6e:41:d0:db:5e:86:76:df:d6:4d:d7:2f: 55:42:bb:07:ec:8b:7b:fd:5e:15:a9:5f:19:ba:9e:65:e1:9b: 13:08:c4:8a:f1:73:fe:8c:9c:17:07:32:22:96:7a:f8:c5:d5: 10:52:4f:c1:66:f8:dc:fc:ed:56:b6:f1:6c:61:56:6d:68:0c: a1:c5:4a:53:48:db:cf:c0:54:b0:71:ad:f1:3a:0d:3b:a4:48: 0d:58:2b:8f:71:b3:02:38:40:79:7c:4e:fa:b5:66:cb:52:d3: de:95:fe:cc:cc:99:ce:24:fe:c3:31:42:5c:a4:b5:f8:30:06: 50:f8:08:72:c4:ce:77:b6:a7:4f:d7:18:6a:1f:46:71:99:cc: 94:3f:0a:68 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEldgdJj5tnZwY/la4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMzMTAwNDUzNVoXDTI3MDcwNDAwNDUzNVowLzEtMCsGA1UEAxMk MGQzMmZhNjctNzE1OC00NDM3LTllNjQtZjA5MjZjNGU0ZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48H8lpTudEV7ehhXNHICKd96JqjNieTFHhqY /fkgPsFRU5oZiYT1bl3SAWZu1o1HPPUGrv4MY41OfSNhDz6lR4DBjH5His4+uJiI RdfvqI39ATmO514jbNV6sK7GaYc3rbQWziOUgg4mDKs8vpe7InBCtr+rq23kg0Ql F18r4uPKL4q+UPCq5FqR98Ef2aIyzv1L8zU56kDW3tXSbdZOwJNI+ULIpFKeOD63 rCtpDpcCeHXqTkmCuJ4e+jVX+aIfVGq5f7Tz80jWu2T2LT2L0x/c/eAO4Rg5BcQd WhFCgr6iUNkrpmYTxmYKjpruAoacNJWPk9wUJvB5oHOnUDIwTQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFARMdQ5FusQJwOkCO79tPiDO/wXXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8w ZDMyZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDkyNmM0ZTRkMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzBkMzJmYTY3LTcxNTgtNDQzNy05 ZTY0LWYwOTI2YzRlNGQyNi8wZDMyZmE2Ny03MTU4LTQ0MzctOWU2NC1mMDkyNmM0 ZTRkMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAA0fBkwDgQCAAIwCAMGBCYCAs8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYXHjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsCA9nGB3gq8+EbnQCyoo6gGC8 ba3v3AKVBNZ/+jQQbLP4PKuuihuGY316vKTHiMZ21Nb4+Tcj+kzio1eKya9JgAey BRTD+Ayyc1Gi8b+fGuSWf71i1gc7d8KI3x3eHrULXAMQ8kzm1+rwEJpOdGY2vt5u QdDbXoZ239ZN1y9VQrsH7It7/V4VqV8Zup5l4ZsTCMSK8XP+jJwXBzIilnr4xdUQ Uk/BZvjc/O1WtvFsYVZtaAyhxUpTSNvPwFSwca3xOg07pEgNWCuPcbMCOEB5fE76 tWbLUtPelf7MzJnOJP7DMUJcpLX4MAZQ+AhyxM53tqdP1xhqH0ZxmcyUPwpo -----END CERTIFICATE-----Generated at Sun May 4 20:05:40 2025 by rpki-client