$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d.cer File: 733a751b-f4f7-4986-8389-8938fc4a481d.cer (raw, json) Hash identifier: CxshVVyWlM3mCoqht6CPfl4kK9ZpnuWG2lTprEGjM58= Subject key identifier: DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F43285849710C9B5D13663C00ABDBD0A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Apr 2025 00:45:34 +0000 Certificate not after: Sun 11 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 30514 IP: 23.168.248.0/24 IP: 2602:816:f000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:71:0c:9b:5d:13:66:3c:00:ab:db:d0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Apr 7 00:45:34 2025 GMT Not After : Jul 11 00:45:34 2027 GMT Subject: CN=733a751b-f4f7-4986-8389-8938fc4a481d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:6e:2c:30:ad:71:82:f7:b5:19:90:87:50:ed: 27:d8:97:17:41:50:05:7c:81:de:26:a4:0d:be:52: 25:14:e1:8b:fb:2f:d6:a3:54:2a:e2:43:29:7b:5f: 56:c2:6e:52:cd:99:db:54:b6:c0:96:e5:f9:ea:71: 3f:88:35:69:e5:fa:4f:30:4d:82:d1:aa:3e:4c:de: a6:c7:98:a0:af:ca:3a:3e:bd:f4:c0:06:6c:62:c4: 30:7b:25:0d:2a:85:58:cc:d9:3d:c2:ad:e6:e8:30: 85:db:db:45:f1:b6:7a:c6:b6:39:1f:cc:a1:84:e0: 7d:81:66:6d:44:a2:c0:1d:b6:fd:d8:02:ed:50:a9: 18:7e:45:ca:6e:c6:37:c7:54:f5:b6:a0:be:a5:48: 43:0d:a5:74:b6:c0:7d:96:06:e2:6c:ce:2f:81:27: 72:01:22:88:04:c3:57:6f:05:91:3d:90:8a:e1:37: f5:e7:ba:f5:25:25:02:85:35:e8:51:2d:ba:5f:63: ec:93:fd:49:57:fc:8c:c4:77:76:c2:44:69:af:23: 0f:71:06:a7:01:e9:f5:ee:27:4e:2b:8f:7a:4d:81: d4:21:95:e6:97:06:8e:48:cc:62:5a:b8:57:fb:64: fe:ae:bb:9f:ef:a8:18:dc:95:ba:1e:25:1b:83:ad: 07:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D0:12:81:EE:5E:86:76:82:0F:04:E7:78:FE:09:C6:EE:75:69:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/733a751b-f4f7-4986-8389-8938fc4a481d/733a751b-f4f7-4986-8389-8938fc4a481d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 23.168.248.0/24 IPv6: 2602:816:f000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30514 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:af:ae:de:76:91:03:82:46:80:0f:4e:72:2a:ba:f4:c0:1c: 9f:8f:bd:66:ce:5b:c5:08:45:b4:30:3a:aa:f5:cd:e9:ce:07: 2a:ae:73:1c:ca:7b:2b:13:d3:b9:51:e6:b4:5d:e8:4b:d3:68: 6c:8c:75:e8:ff:8b:8e:0f:bf:43:46:81:74:38:0e:ec:26:17: d0:99:1f:96:18:1f:dd:f1:1e:e8:84:0d:04:9d:e7:09:a9:52: b8:a2:cf:29:a3:53:4c:1e:a2:43:fc:2c:79:4b:67:99:9e:82: 2e:72:82:ef:87:44:35:62:58:42:31:37:3a:d3:e9:94:e5:c6: 48:5d:87:13:65:8e:96:11:b0:21:79:b2:87:8a:24:59:70:52: cb:07:d6:54:ff:fa:c5:cd:00:03:f7:64:ae:bc:e9:16:5d:f8: 5a:82:20:f8:ce:f4:5e:1b:2b:08:a1:e6:fe:d0:6a:48:31:2e: b9:f7:b5:b1:08:d0:1c:e4:5b:65:6c:67:2f:4f:20:76:40:29: f4:c0:c7:f0:af:70:b4:16:45:ed:e8:22:85:ed:d4:e6:34:49: 15:43:2b:39:69:c5:e1:dd:b3:99:17:4c:fe:74:46:c5:ef:db: dc:22:c0:33:11:d2:a4:09:2a:f8:ee:2e:b5:fc:c5:26:66:79: 1b:73:9a:e8 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWElxDJtdE2Y8AKvb0KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDQwNzAwNDUzNFoXDTI3MDcxMTAwNDUzNFowLzEtMCsGA1UEAxMk NzMzYTc1MWItZjRmNy00OTg2LTgzODktODkzOGZjNGE0ODFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+m4sMK1xgve1GZCHUO0n2JcXQVAFfIHeJqQN vlIlFOGL+y/Wo1Qq4kMpe19Wwm5SzZnbVLbAluX56nE/iDVp5fpPME2C0ao+TN6m x5igr8o6Pr30wAZsYsQweyUNKoVYzNk9wq3m6DCF29tF8bZ6xrY5H8yhhOB9gWZt RKLAHbb92ALtUKkYfkXKbsY3x1T1tqC+pUhDDaV0tsB9lgbibM4vgSdyASKIBMNX bwWRPZCK4Tf157r1JSUChTXoUS26X2Psk/1JV/yMxHd2wkRpryMPcQanAen17idO K496TYHUIZXmlwaOSMxiWrhX+2T+rruf76gY3JW6HiUbg60HjQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFN7QEoHuXoZ2gg8E53j+CcbudWmCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83 MzNhNzUxYi1mNGY3LTQ5ODYtODM4OS04OTM4ZmM0YTQ4MWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4LzczM2E3NTFiLWY0ZjctNDk4Ni04 Mzg5LTg5MzhmYzRhNDgxZC83MzNhNzUxYi1mNGY3LTQ5ODYtODM4OS04OTM4ZmM0 YTQ4MWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXqPgwDgQCAAIwCAMGACYCCBbwMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAncyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIyvrt52kQOCRoAPTnIquvTAHJ+P vWbOW8UIRbQwOqr1zenOByqucxzKeysT07lR5rRd6EvTaGyMdej/i44Pv0NGgXQ4 DuwmF9CZH5YYH93xHuiEDQSd5wmpUriizymjU0weokP8LHlLZ5megi5ygu+HRDVi WEIxNzrT6ZTlxkhdhxNljpYRsCF5soeKJFlwUssH1lT/+sXNAAP3ZK686RZd+FqC IPjO9F4bKwih5v7QakgxLrn3tbEI0BzkW2VsZy9PIHZAKfTAx/CvcLQWRe3oIoXt 1OY0SRVDKzlpxeHds5kXTP50RsXv29wiwDMR0qQJKvjuLrX8xSZmeRtzmug= -----END CERTIFICATE-----Generated at Sun May 4 20:21:30 2025 by rpki-client