$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer File: 40a485a4-e936-4174-8999-571e03203823.cer (raw, json) Hash identifier: o3+2oYXt1jghUCN5QCT5S4vf15eyiIvHatMI9aGonrA= Subject key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584867F3663D4EA13C90A032C740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Jan 2025 01:45:33 +0000 Certificate not after: Wed 07 Apr 2027 00:45:33 +0000 Subordinate resources: AS: 15177 IP: 199.102.60.0/22 IP: 199.191.120.0/21 IP: 208.74.152.0/21 IP: 2607:6b00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:f3:66:3d:4e:a1:3c:90:a0:32:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 2 01:45:33 2025 GMT Not After : Apr 7 00:45:33 2027 GMT Subject: CN=40a485a4-e936-4174-8999-571e03203823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:d3:23:bb:9b:29:89:30:84:ed:9e:61:25: ca:7f:6a:f3:c6:22:e6:56:ce:2a:18:0d:c6:ee:3d: 2b:21:de:f1:7f:58:cb:6b:c9:57:09:92:08:f7:b3: 07:55:5d:8e:c6:cb:f0:10:c6:c8:f3:d7:5c:16:32: 5e:3d:9c:e2:72:8a:0c:15:4c:42:cd:8f:e5:35:1a: 2e:b7:28:cd:c9:f6:18:99:1d:5b:64:d2:fb:d6:23: 03:5c:d6:86:b2:db:f2:91:fd:04:d4:08:0d:46:44: fe:17:d5:d9:78:7e:b4:9a:29:86:cc:a2:31:85:78: 39:80:d3:79:e1:a7:05:42:3f:bf:22:79:4d:81:ed: a5:06:bb:3d:83:6d:dd:38:b3:f5:60:f8:5d:57:ed: 81:24:05:f2:c2:3f:d1:a5:6e:ed:f2:4b:44:ec:06: ab:3f:a5:d9:47:20:ad:a8:9c:16:32:ca:9f:e8:12: 4c:b9:57:07:98:c4:83:15:8b:04:85:30:df:df:c1: 7d:85:7d:b8:be:54:67:3b:e4:be:c3:bd:50:ff:88: ef:58:5f:04:9c:f7:85:f8:55:b3:68:06:3e:62:bb: 2a:4d:df:ab:d3:84:de:69:d2:1a:47:35:d6:65:43: 7f:b8:76:eb:69:cc:7f:fd:63:ea:60:17:bd:42:f1: dd:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.102.60.0/22 199.191.120.0/21 208.74.152.0/21 IPv6: 2607:6b00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15177 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:14:41:f0:fd:13:b5:a6:d7:94:a4:81:d5:b0:a5:93:05:75: a5:5f:d6:41:5a:e4:ef:8c:f1:ce:d5:20:4e:18:2f:29:e3:1b: 69:a1:b7:af:78:a6:cd:22:e5:4e:4d:b1:77:da:fb:a2:82:0a: 18:5c:00:b7:fe:6f:ba:7f:03:b1:28:46:86:90:ef:78:7b:b5: e6:04:5d:34:2a:fc:18:e8:90:2b:f7:e6:72:19:eb:18:9b:08: cf:1f:21:2d:55:19:1c:13:02:0e:3d:75:ae:62:48:9e:8f:98: 07:59:19:5e:67:fe:d3:6d:53:11:ae:6c:04:2b:6c:b8:08:42: a3:9e:2a:56:dc:90:46:2a:b9:8b:c7:d9:59:2f:13:4a:bd:15: ed:48:8d:90:af:1a:3b:bf:a9:50:f4:ae:10:2c:1a:8f:5a:37: 46:c7:4c:7f:74:2c:53:34:6c:4f:07:ee:f4:4d:e1:f1:25:7d: 0d:0f:2a:7c:b9:66:7b:f0:aa:50:5c:f3:f6:25:7f:78:20:86: b6:55:b3:8c:80:8d:13:ec:9b:51:30:cb:53:65:37:7b:65:ae: 9b:6c:95:79:df:82:d4:5b:4f:61:82:4e:79:f6:8e:c3:b9:0a: 04:d4:9f:9f:fe:f8:7d:72:b4:ce:c1:ae:bb:04:53:ec:1b:94: 06:ff:1b:f4 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEhn82Y9TqE8kKAyx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDEwMjAxNDUzM1oXDTI3MDQwNzAwNDUzM1owLzEtMCsGA1UEAxMk NDBhNDg1YTQtZTkzNi00MTc0LTg5OTktNTcxZTAzMjAzODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpTTI7ubKYkwhO2eYSXKf2rzxiLmVs4qGA3G 7j0rId7xf1jLa8lXCZII97MHVV2OxsvwEMbI89dcFjJePZzicooMFUxCzY/lNRou tyjNyfYYmR1bZNL71iMDXNaGstvykf0E1AgNRkT+F9XZeH60mimGzKIxhXg5gNN5 4acFQj+/InlNge2lBrs9g23dOLP1YPhdV+2BJAXywj/RpW7t8ktE7AarP6XZRyCt qJwWMsqf6BJMuVcHmMSDFYsEhTDf38F9hX24vlRnO+S+w71Q/4jvWF8EnPeF+FWz aAY+YrsqTd+r04TeadIaRzXWZUN/uHbracx//WPqYBe9QvHdewIDAQABo4IENTCC BDEwHQYDVR0OBBYEFI7bchTsN2poe3kWISQntLBAQkkBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMyMDM4MjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQwYTQ4NWE0LWU5MzYtNDE3NC04 OTk5LTU3MWUwMzIwMzgyMy80MGE0ODVhNC1lOTM2LTQxNzQtODk5OS01NzFlMDMy MDM4MjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBALHZjwDBAPHv3gDBAPQSpgwDQQCAAIwBwMFACYH awAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICO0kwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdxRB8P0TtabX lKSB1bClkwV1pV/WQVrk74zxztUgThgvKeMbaaG3r3imzSLlTk2xd9r7ooIKGFwA t/5vun8DsShGhpDveHu15gRdNCr8GOiQK/fmchnrGJsIzx8hLVUZHBMCDj11rmJI no+YB1kZXmf+021TEa5sBCtsuAhCo54qVtyQRiq5i8fZWS8TSr0V7UiNkK8aO7+p UPSuECwaj1o3RsdMf3QsUzRsTwfu9E3h8SV9DQ8qfLlme/CqUFzz9iV/eCCGtlWz jICNE+ybUTDLU2U3e2Wum2yVed+C1FtPYYJOefaOw7kKBNSfn/74fXK0zsGuuwRT 7BuUBv8b9A== -----END CERTIFICATE-----Generated at Fri Apr 4 16:27:18 2025 by rpki-client