$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280.cer File: acdcf67c-3f56-42fa-a790-eac540e58280.cer (raw, json) Hash identifier: zfSN+WyxHfuOkxcSEC9yOBv1B1Z6wT0+Skj+Tna1esU= Subject key identifier: C9:67:19:6F:42:9D:1A:2A:28:CB:B6:E1:55:9B:9F:38:40:A6:84:68 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584949F7056B366E97AD4E3AFE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Mar 2025 00:45:33 +0000 Certificate not after: Sun 27 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 16744 AS: 20174 AS: 20293 AS: 36154 AS: 62799 AS: 395299 IP: 66.218.160.0/20 IP: 206.201.224.0/20 IP: 2620:112:6000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:f7:05:6b:36:6e:97:ad:4e:3a:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Mar 24 00:45:33 2025 GMT Not After : Jun 27 00:45:33 2027 GMT Subject: CN=acdcf67c-3f56-42fa-a790-eac540e58280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b4:ef:4e:47:59:c2:46:75:52:d2:94:12:05: 9b:0a:33:a6:b2:73:46:86:54:aa:63:14:9f:1f:23: 54:34:f9:b5:15:10:ce:04:53:81:81:28:ba:f7:a2: b6:c6:05:3b:52:df:bf:cf:01:0d:b0:b8:93:de:71: 06:3c:25:78:d9:44:dd:a0:52:73:f9:d9:65:24:e6: ad:c6:91:97:aa:69:fb:ac:f9:34:a7:b3:cc:3b:3f: 31:4c:00:8f:73:1d:23:b6:06:bd:af:a4:dc:86:51: ea:a5:08:42:de:60:da:98:e9:b7:a9:5e:04:87:7f: fb:2f:04:fc:64:9b:b1:42:a5:99:23:f7:e3:ce:cb: be:5d:c6:2b:94:51:06:32:04:61:06:7d:cf:f1:ad: fd:8d:b9:8e:9b:66:a5:1c:16:4b:4a:9f:3b:a9:e1: af:2f:62:61:7c:b4:d4:02:a3:fd:1b:86:7e:3b:6c: de:00:03:c8:3e:c2:96:75:b7:50:4c:75:31:26:47: 0c:8c:60:9d:b7:a4:0a:0f:6d:98:77:23:e0:5d:77: 0a:8c:31:c9:35:1f:e7:49:62:1f:a1:97:fc:cc:d5: 19:e2:a4:e0:56:2c:54:6a:c1:a5:3d:a5:70:da:4f: 17:cc:36:c2:c0:6c:f4:5b:d0:8a:62:fe:52:67:f7: c3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:19:6F:42:9D:1A:2A:28:CB:B6:E1:55:9B:9F:38:40:A6:84:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/acdcf67c-3f56-42fa-a790-eac540e58280/acdcf67c-3f56-42fa-a790-eac540e58280.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 66.218.160.0/20 206.201.224.0/20 IPv6: 2620:112:6000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16744 20174 20293 36154 62799 395299 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:66:fd:cb:d3:4d:38:d9:ac:cf:2b:fe:ea:8d:41:b6:87:b0: c6:b2:8d:30:4f:12:ed:1e:44:2f:bd:a0:ea:d0:99:70:9a:2a: 12:9c:8f:0d:7b:4e:84:f7:d5:47:fb:88:4d:e5:82:aa:a7:45: 74:8d:ea:86:35:2e:ba:87:cb:d3:5c:fa:d9:0f:50:80:f3:ca: 5e:6c:bb:6d:32:c9:38:52:c6:b7:04:f6:83:99:58:86:9a:c8: b7:ea:8a:85:0f:cf:e4:b5:07:66:61:f8:e1:1c:00:5b:1b:cd: fb:e2:08:77:8f:5f:e6:90:27:9e:cc:b5:d2:0d:44:c6:57:e6: 87:ff:e8:c7:e3:59:6b:cf:2e:80:12:bf:b4:c4:3d:89:bb:87: d8:bc:4b:80:5d:54:3c:17:b4:95:51:cf:02:7b:9b:54:17:54: 6e:09:55:6c:1a:8b:16:08:00:ab:76:a3:b0:99:d1:92:fa:6b: 65:f8:1d:4f:df:e7:3e:e5:d9:c6:02:c4:a3:92:b7:1c:d7:f4: 9a:c6:16:f0:6c:13:43:17:71:3d:1a:51:f7:40:4b:51:94:be: ad:bb:8e:cf:ec:f2:03:3e:74:8a:7d:15:da:d8:5d:7b:43:d4: d2:4f:96:67:5d:93:d7:72:ca:97:60:13:92:fd:de:f9:16:df: 11:0b:73:ee -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWElJ9wVrNm6XrU46/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI1MDMyNDAwNDUzM1oXDTI3MDYyNzAwNDUzM1owLzEtMCsGA1UEAxMk YWNkY2Y2N2MtM2Y1Ni00MmZhLWE3OTAtZWFjNTQwZTU4MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybTvTkdZwkZ1UtKUEgWbCjOmsnNGhlSqYxSf HyNUNPm1FRDOBFOBgSi696K2xgU7Ut+/zwENsLiT3nEGPCV42UTdoFJz+dllJOat xpGXqmn7rPk0p7PMOz8xTACPcx0jtga9r6TchlHqpQhC3mDamOm3qV4Eh3/7LwT8 ZJuxQqWZI/fjzsu+XcYrlFEGMgRhBn3P8a39jbmOm2alHBZLSp87qeGvL2JhfLTU AqP9G4Z+O2zeAAPIPsKWdbdQTHUxJkcMjGCdt6QKD22YdyPgXXcKjDHJNR/nSWIf oZf8zNUZ4qTgVixUasGlPaVw2k8XzDbCwGz0W9CKYv5SZ/fDwwIDAQABo4IESDCC BEQwHQYDVR0OBBYEFMlnGW9CnRoqKMu24VWbnzhApoRoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9h Y2RjZjY3Yy0zZjU2LTQyZmEtYTc5MC1lYWM1NDBlNTgyODAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2FjZGNmNjdjLTNmNTYtNDJmYS1h NzkwLWVhYzU0MGU1ODI4MC9hY2RjZjY3Yy0zZjU2LTQyZmEtYTc5MC1lYWM1NDBl NTgyODAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBARC2qADBATOyeAwDwQCAAIwCQMHBCYgARJgADAw BggrBgEFBQcBCAEB/wQhMB+gHTAbAgJBaAICTs4CAk9FAgMAjToCAwD1TwIDBggj MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBALZm/cvTTTjZrM8r/uqNQbaHsMayjTBPEu0eRC+9oOrQmXCaKhKc jw17ToT31Uf7iE3lgqqnRXSN6oY1LrqHy9Nc+tkPUIDzyl5su20yyThSxrcE9oOZ WIaayLfqioUPz+S1B2Zh+OEcAFsbzfviCHePX+aQJ57MtdINRMZX5of/6MfjWWvP LoASv7TEPYm7h9i8S4BdVDwXtJVRzwJ7m1QXVG4JVWwaixYIAKt2o7CZ0ZL6a2X4 HU/f5z7l2cYCxKOStxzX9JrGFvBsE0MXcT0aUfdAS1GUvq27js/s8gM+dIp9FdrY XXtD1NJPlmddk9dyypdgE5L93vkW3xELc+4= -----END CERTIFICATE-----Generated at Sun May 4 19:50:12 2025 by rpki-client