$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer File: 29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer (raw, json) Hash identifier: 84DRcI+MT+cqM6nTrI3ArjUdawVifY1EpZ7fXLouATY= Subject key identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848B0892EAB82C2D31C705A6300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Jan 2025 01:45:33 +0000 Certificate not after: Mon 03 May 2027 00:45:33 +0000 Subordinate resources: IP: 162.208.12.0/22 IP: 2604:9880::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:89:2e:ab:82:c2:d3:1c:70:5a:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 28 01:45:33 2025 GMT Not After : May 3 00:45:33 2027 GMT Subject: CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b3:0f:ee:0c:95:7d:73:85:07:42:77:9b:2d: 86:4f:c0:75:49:a5:8d:93:98:0b:f2:7d:cf:09:f6: 6f:51:42:fc:52:28:b3:8e:6b:ca:1d:cd:61:c3:69: 74:0e:4e:d5:87:b0:7f:3e:5f:aa:25:01:01:58:f5: af:e5:b5:84:81:ad:c9:10:ce:02:52:84:e7:ff:ca: b1:af:62:89:f9:92:6d:aa:88:21:3b:34:04:ca:c9: 33:69:f6:57:f9:84:cc:e8:1d:7f:69:67:da:ba:a8: 9a:ba:fb:85:c6:15:8a:3d:49:98:75:8c:ad:5b:1e: 55:ab:f3:cb:61:27:99:64:e1:11:98:26:6e:55:f1: fd:f8:85:d0:a5:1a:9c:bd:c6:80:23:44:96:91:f1: 5f:44:f2:0e:1a:19:00:3f:df:40:5d:79:7d:15:8c: 23:37:98:39:a0:02:58:24:1d:63:79:3a:07:0a:9b: 6d:21:1d:48:16:a6:e6:30:20:2d:51:c8:d2:21:e1: ab:a4:fc:21:06:b7:22:27:4a:b2:64:d5:9f:16:e7: 63:3c:7c:1c:5d:00:bf:df:98:7b:0f:d4:70:0c:34: e6:48:04:01:1b:a0:5e:17:a2:68:49:78:74:e6:f8: e4:aa:31:15:b9:43:42:8b:7b:27:b8:81:ae:8d:6f: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 162.208.12.0/22 IPv6: 2604:9880::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:d3:1f:90:b2:3f:a4:99:8c:f2:54:6b:20:c0:ee:da:d0:89: 83:74:7f:4c:8a:15:1a:58:74:d6:56:93:22:48:82:a8:5d:8a: 1d:0e:98:b9:4e:36:98:17:6f:9c:67:ee:d7:4d:ce:6a:49:f7: 4c:9d:cb:a1:ce:a5:07:c7:ff:03:40:03:98:e5:41:11:f1:e2: 8b:c8:00:93:98:7c:e3:ca:0d:23:8f:5b:4e:55:1c:d7:2c:10: 99:09:48:6c:e3:6b:bc:ac:0a:90:56:d1:e8:f7:c0:7e:06:39: de:ef:81:0d:ed:15:59:c4:60:25:f8:8f:83:ff:00:3e:fb:d3: 4b:f0:17:0e:a3:7d:05:68:d7:f1:e6:16:c6:21:51:c5:5e:ff: a9:35:7b:5b:3f:79:9b:47:8a:c8:13:43:2e:d7:52:e9:9d:32: 86:1a:49:c4:a7:8f:31:d1:5c:94:60:6f:7c:fb:a9:a1:fe:52: 21:d9:98:42:ff:cd:b2:0b:05:49:66:f6:15:05:69:41:94:8e: b7:b2:2d:29:04:23:09:e1:aa:f6:f7:31:fa:d3:b3:c8:07:1e: 13:ab:09:26:2c:f9:0d:a0:cb:94:25:5b:b0:07:bc:87:62:da: 51:ef:b7:5e:9e:c0:fd:b8:47:37:c2:9a:ad:0c:f9:f5:a3:8c: 76:ff:38:dc -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEiwiS6rgsLTHHBaYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDEyODAxNDUzM1oXDTI3MDUwMzAwNDUzM1owLzEtMCsGA1UEAxMk MjljNTJmYWItNTliMC00NmY4LTg1MWQtNjY0NGFhZjFlYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrMP7gyVfXOFB0J3my2GT8B1SaWNk5gL8n3P CfZvUUL8UiizjmvKHc1hw2l0Dk7Vh7B/Pl+qJQEBWPWv5bWEga3JEM4CUoTn/8qx r2KJ+ZJtqoghOzQEyskzafZX+YTM6B1/aWfauqiauvuFxhWKPUmYdYytWx5Vq/PL YSeZZOERmCZuVfH9+IXQpRqcvcaAI0SWkfFfRPIOGhkAP99AXXl9FYwjN5g5oAJY JB1jeToHCpttIR1IFqbmMCAtUcjSIeGrpPwhBrciJ0qyZNWfFudjPHwcXQC/35h7 D9RwDDTmSAQBG6BeF6JoSXh05vjkqjEVuUNCi3snuIGujW+jpwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFBaR83XiKLiddFw1W6kSLrKHJf72MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y OWM1MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0YWFmMWVhYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzI5YzUyZmFiLTU5YjAtNDZmOC04 NTFkLTY2NDRhYWYxZWFhNy8yOWM1MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0YWFm MWVhYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKi0AwwDgQCAAIwCAMGBCYEmIAAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AInTH5CyP6SZjPJUayDA7trQiYN0f0yKFRpYdNZWkyJIgqhdih0OmLlONpgXb5xn 7tdNzmpJ90ydy6HOpQfH/wNAA5jlQRHx4ovIAJOYfOPKDSOPW05VHNcsEJkJSGzj a7ysCpBW0ej3wH4GOd7vgQ3tFVnEYCX4j4P/AD7700vwFw6jfQVo1/HmFsYhUcVe /6k1e1s/eZtHisgTQy7XUumdMoYaScSnjzHRXJRgb3z7qaH+UiHZmEL/zbILBUlm 9hUFaUGUjreyLSkEIwnhqvb3MfrTs8gHHhOrCSYs+Q2gy5QlW7AHvIdi2lHvt16e wP24RzfCmq0M+fWjjHb/ONw= -----END CERTIFICATE-----Generated at Fri Apr 4 16:21:58 2025 by rpki-client