$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer File: 1a784112-3bbf-41c8-9c32-bdb85ae76b1b.cer (raw, json) Hash identifier: udCMW6/nNj1jb+UBXNcqkDHEGSQGQYNGKqNJjaOjCGw= Subject key identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584930D6DD580C42569B96914D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 15 Mar 2025 00:45:33 +0000 Certificate not after: Fri 18 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 4460 IP: 192.231.207.0/24 IP: 207.200.160.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:d6:dd:58:0c:42:56:9b:96:91:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 15 00:45:33 2025 GMT Not After : Jun 18 00:45:33 2027 GMT Subject: CN=1a784112-3bbf-41c8-9c32-bdb85ae76b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a5:b8:63:a4:40:9f:18:fa:86:40:1a:50:68: b1:ef:67:b3:dd:bc:35:8c:7f:9e:f9:51:19:14:ca: 8d:94:9a:79:91:85:76:a3:2b:bf:5f:22:e2:5a:3f: ee:a7:e3:ab:82:23:34:87:83:49:5f:ab:d1:05:38: 4d:11:eb:32:b8:e8:1d:b1:fe:83:33:ec:9b:1f:ae: bd:d1:42:ce:80:39:c9:2b:73:c2:ed:ab:f2:f1:cc: 03:2f:b4:d8:12:cb:31:95:1a:2b:be:ec:ec:2b:78: a5:08:13:31:b8:f6:56:59:ab:07:d8:6f:02:3a:43: a8:96:2c:e7:31:2d:73:49:2b:42:cd:0c:8f:6a:39: a7:37:a0:73:93:30:eb:7c:80:3a:9e:cf:3a:ee:18: 90:8b:9b:cf:8f:0e:c3:28:06:51:6d:82:51:99:6c: 60:77:67:87:7e:0a:47:44:c3:42:63:e5:b6:82:76: a6:24:95:5e:ea:2e:b2:39:ec:89:0d:48:16:d0:60: b5:59:b6:6e:cd:8c:e0:bd:94:54:05:cf:ef:7d:31: a5:6d:e0:49:2c:dd:65:5c:b3:34:01:a7:93:13:7e: 94:6e:21:f0:1a:95:4c:16:56:31:81:8f:4b:e0:96: bc:e5:8e:0e:8a:f0:d1:86:60:10:ca:3c:2d:d6:e3: 59:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5D:84:99:81:5D:2D:C3:28:A2:8C:EC:05:14:9F:29:E4:B6:17:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a784112-3bbf-41c8-9c32-bdb85ae76b1b/1a784112-3bbf-41c8-9c32-bdb85ae76b1b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.231.207.0/24 207.200.160.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4460 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:87:3e:7c:bc:01:b3:96:0b:72:e6:e7:3c:2a:b4:03:7a:de: 47:dd:8f:c4:4f:a1:64:ae:f1:9c:2c:db:04:b7:09:b9:3e:af: 95:5c:9a:30:44:e4:0e:9c:0c:e0:5f:0e:4d:ba:9d:c0:fc:10: 38:3b:f3:4f:69:92:3e:a1:c4:5c:3d:08:d3:6a:1f:3f:2f:60: be:c8:51:73:06:ae:ee:08:08:34:c6:fb:d7:02:6f:56:7c:6f: 99:84:d0:12:81:f3:68:c8:b3:f0:53:65:db:d7:f3:a1:61:c7: 90:da:c1:72:db:76:43:75:27:d0:28:2c:23:92:5e:bb:f9:9c: 69:87:56:ca:c5:88:0d:d2:ac:20:ad:e4:2d:00:dc:30:12:7a: 32:15:f7:e8:a7:4a:ed:d9:4b:e8:b2:bc:e4:f4:12:ef:7e:b9: 41:78:30:95:b2:61:e4:da:a4:4f:f1:57:5e:0c:29:e4:0e:e4: da:a6:a8:a8:ea:4a:82:a1:f3:34:47:d8:47:a0:d5:8d:5a:89: b9:2c:c5:e4:b3:4d:e5:ea:5c:64:3a:8b:84:c9:72:c0:4c:22: 00:a0:ed:0b:fb:33:2f:b5:0c:de:7b:52:7b:d0:9b:34:aa:66: 70:2f:14:80:07:1a:bc:94:72:e2:8f:2e:58:93:d3:6c:ac:80: 10:bd:04:2e -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEkw1t1YDEJWm5aRTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMxNTAwNDUzM1oXDTI3MDYxODAwNDUzM1owLzEtMCsGA1UEAxMk MWE3ODQxMTItM2JiZi00MWM4LTljMzItYmRiODVhZTc2YjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKW4Y6RAnxj6hkAaUGix72ez3bw1jH+e+VEZ FMqNlJp5kYV2oyu/XyLiWj/up+OrgiM0h4NJX6vRBThNEesyuOgdsf6DM+ybH669 0ULOgDnJK3PC7avy8cwDL7TYEssxlRorvuzsK3ilCBMxuPZWWasH2G8COkOolizn MS1zSStCzQyPajmnN6BzkzDrfIA6ns867hiQi5vPjw7DKAZRbYJRmWxgd2eHfgpH RMNCY+W2gnamJJVe6i6yOeyJDUgW0GC1WbZuzYzgvZRUBc/vfTGlbeBJLN1lXLM0 AaeTE36UbiHwGpVMFlYxgY9L4Ja85Y4OivDRhmAQyjwt1uNZowIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFCxdhJmBXS3DKKKM7AUUnynkthc6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x YTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFlNzZiMWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzFhNzg0MTEyLTNiYmYtNDFjOC05 YzMyLWJkYjg1YWU3NmIxYi8xYTc4NDExMi0zYmJmLTQxYzgtOWMzMi1iZGI4NWFl NzZiMWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADA588DBATPyKAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICEWwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAcYc+fLwBs5YLcubnPCq0A3reR92PxE+hZK7xnCzb BLcJuT6vlVyaMETkDpwM4F8OTbqdwPwQODvzT2mSPqHEXD0I02ofPy9gvshRcwau 7ggINMb71wJvVnxvmYTQEoHzaMiz8FNl29fzoWHHkNrBctt2Q3Un0CgsI5Jeu/mc aYdWysWIDdKsIK3kLQDcMBJ6MhX36KdK7dlL6LK85PQS7365QXgwlbJh5NqkT/FX Xgwp5A7k2qaoqOpKgqHzNEfYR6DVjVqJuSzF5LNN5epcZDqLhMlywEwiAKDtC/sz L7UM3ntSe9CbNKpmcC8UgAcavJRy4o8uWJPTbKyAEL0ELg== -----END CERTIFICATE-----Generated at Wed Apr 9 17:14:46 2025 by rpki-client