$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e.cer File: 2775f7c3-c238-47d5-98c9-835a28d9095e.cer (raw, json) Hash identifier: ExROT4JtXovmUIwvIfmc9d8PedMy+lCQUHZ1xmE9z84= Subject key identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584952571439B8F7DAF41265EC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Mar 2025 00:45:33 +0000 Certificate not after: Wed 30 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 398355 AS: 400518 IP: 104.167.240.0/22 IP: 2602:fccf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:52:57:14:39:b8:f7:da:f4:12:65:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 27 00:45:33 2025 GMT Not After : Jun 30 00:45:33 2027 GMT Subject: CN=2775f7c3-c238-47d5-98c9-835a28d9095e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:47:0c:67:18:ff:4e:6c:94:1c:d9:bd:b9:23: 43:84:d8:0b:4e:20:39:71:30:27:f3:4d:cd:26:e9: c2:72:5a:88:85:b9:70:c2:84:32:5d:52:03:67:5f: f6:5e:2f:05:8e:59:a7:f1:1d:14:35:14:69:57:17: 9f:f3:3e:6f:87:bd:d9:c2:31:01:8e:54:c9:f0:45: 74:c3:24:b2:bd:01:31:70:bb:ef:1d:d5:57:0d:26: bf:6d:9d:51:26:6d:e1:c4:ab:9d:f4:21:9f:9a:34: 2e:4d:9a:1e:cc:72:e6:1f:97:d6:0f:ba:2a:02:fd: b4:65:e4:5e:73:9d:66:83:d5:dc:f0:7b:20:29:28: c3:e8:5a:d5:58:b0:71:7a:5b:80:8f:8a:b7:d5:97: 2e:40:5e:9a:aa:93:b1:8e:71:cb:e9:c1:63:97:f1: 53:23:ba:c3:c5:5b:65:07:c8:ab:70:8b:ee:49:de: 2b:66:d6:f2:4d:c9:b1:43:8a:15:32:a7:98:20:5c: 8f:b6:5a:25:ff:6b:4e:cd:a1:d7:84:63:cf:39:f8: b3:99:1a:61:b0:fb:b1:9c:5d:ec:36:5e:1e:f2:09: 86:1b:05:bf:13:b2:c4:66:10:84:74:9c:b4:69:a5: 57:88:73:f4:0d:36:41:f9:34:81:22:1b:e0:be:ed: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:24:DF:CC:7F:5B:80:D2:8D:EC:FE:EE:8C:CF:52:33:8E:B5:21:44 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2775f7c3-c238-47d5-98c9-835a28d9095e/2775f7c3-c238-47d5-98c9-835a28d9095e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.167.240.0/22 IPv6: 2602:fccf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398355 400518 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:78:e7:ad:68:6f:eb:52:8d:fe:f9:c5:ab:fa:78:91:d7:76: 7b:13:5b:12:bb:71:fb:42:f4:0d:b2:95:5e:7e:1e:ed:f4:98: 27:53:1b:fb:a6:d2:60:0c:7e:0e:ea:69:34:80:cd:bc:15:42: 57:44:ba:5a:16:67:c7:95:30:1f:02:78:5f:db:ae:15:0f:be: 44:63:e4:a9:d9:c1:b6:d0:79:e3:34:b1:c4:64:c2:5c:17:5b: 41:45:12:50:3b:ae:6c:18:26:c8:6d:74:d7:85:9e:99:bd:25: a2:f0:a4:4d:a7:16:39:25:02:f4:16:a2:20:76:b3:eb:4e:e2: 68:e1:f8:74:02:6b:f5:59:c6:75:b8:8c:55:aa:55:4a:84:d1: a6:a1:8c:d9:11:06:b0:5a:1b:a1:7d:5b:21:78:11:f2:d4:8b: 70:aa:3b:7b:cd:37:ee:41:07:62:5d:24:c3:5e:35:a9:57:c8: 27:40:dc:b3:49:43:77:99:95:18:21:67:0e:e2:f0:21:3b:8d: db:27:31:d4:47:3e:dc:b9:f7:65:35:90:46:c8:76:79:9f:9f: 17:d4:38:5f:12:df:f6:67:4f:ca:a8:86:64:96:0f:8e:d4:f6: 10:01:5d:d5:4e:ba:17:5b:c0:57:8a:a6:bd:4f:4b:15:b8:8b: 08:39:e5:2d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWElSVxQ5uPfa9BJl7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMyNzAwNDUzM1oXDTI3MDYzMDAwNDUzM1owLzEtMCsGA1UEAxMk Mjc3NWY3YzMtYzIzOC00N2Q1LTk4YzktODM1YTI4ZDkwOTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUcMZxj/TmyUHNm9uSNDhNgLTiA5cTAn803N JunCclqIhblwwoQyXVIDZ1/2Xi8Fjlmn8R0UNRRpVxef8z5vh73ZwjEBjlTJ8EV0 wySyvQExcLvvHdVXDSa/bZ1RJm3hxKud9CGfmjQuTZoezHLmH5fWD7oqAv20ZeRe c51mg9Xc8HsgKSjD6FrVWLBxeluAj4q31ZcuQF6aqpOxjnHL6cFjl/FTI7rDxVtl B8ircIvuSd4rZtbyTcmxQ4oVMqeYIFyPtlol/2tOzaHXhGPPOfizmRphsPuxnF3s Nl4e8gmGGwW/E7LEZhCEdJy0aaVXiHP0DTZB+TSBIhvgvu30mQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFNEk38x/W4DSjez+7ozPUjOOtSFEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y Nzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhkOTA5NWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzI3NzVmN2MzLWMyMzgtNDdkNS05 OGM5LTgzNWEyOGQ5MDk1ZS8yNzc1ZjdjMy1jMjM4LTQ3ZDUtOThjOS04MzVhMjhk OTA5NWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJop/AwDgQCAAIwCAMGBCYC/M8AMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwYUEwIDBhyGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJh4561ob+tSjf75xav6 eJHXdnsTWxK7cftC9A2ylV5+Hu30mCdTG/um0mAMfg7qaTSAzbwVQldEuloWZ8eV MB8CeF/brhUPvkRj5KnZwbbQeeM0scRkwlwXW0FFElA7rmwYJshtdNeFnpm9JaLw pE2nFjklAvQWoiB2s+tO4mjh+HQCa/VZxnW4jFWqVUqE0aahjNkRBrBaG6F9WyF4 EfLUi3CqO3vNN+5BB2JdJMNeNalXyCdA3LNJQ3eZlRghZw7i8CE7jdsnMdRHPty5 92U1kEbIdnmfnxfUOF8S3/ZnT8qohmSWD47U9hABXdVOuhdbwFeKpr1PSxW4iwg5 5S0= -----END CERTIFICATE-----Generated at Fri Apr 4 16:18:21 2025 by rpki-client