$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer File: 4e87d83f-b50c-4a65-9d9a-c28458fc1979.cer (raw, json) Hash identifier: d07drNwdC1o2NYST8402qoZ12/EEkJFcseBFycdwOw0= Subject key identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848C6DEA6DC96A4F6DC757E5980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 05 Feb 2025 01:45:33 +0000 Certificate not after: Tue 11 May 2027 00:45:33 +0000 Subordinate resources: AS: 394449 IP: 199.68.53.0/24 IP: 2604:3dc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:de:a6:dc:96:a4:f6:dc:75:7e:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 5 01:45:33 2025 GMT Not After : May 11 00:45:33 2027 GMT Subject: CN=4e87d83f-b50c-4a65-9d9a-c28458fc1979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:e0:f0:44:d5:74:92:58:f0:62:75:e6:99: 35:82:c7:20:ff:29:5e:23:f0:bf:19:43:59:f4:e7: b3:ec:d8:aa:c6:74:eb:75:70:2f:79:76:47:b3:d8: 16:e1:7a:a2:53:84:c8:ec:0e:2f:e0:5e:08:31:de: ca:90:f5:5a:0e:c1:d1:fd:b5:07:69:00:45:9d:7f: 67:55:c8:cb:3e:21:ff:93:88:67:3d:e9:ed:e4:4c: 81:81:c0:7b:5d:d6:5d:d9:dc:40:05:24:4c:d2:2a: f8:b5:85:97:dd:9f:66:f8:b2:10:8f:59:49:26:f9: e4:8c:5e:d5:3b:72:75:f8:c0:08:75:2c:01:01:9c: 04:5a:fc:37:cc:93:3f:c0:03:aa:4a:af:35:ac:56: 82:45:24:85:76:c5:e2:23:a9:45:52:11:22:ae:66: 7d:1e:58:c0:49:6b:9e:b0:4c:db:0d:e6:7e:97:d7: 82:21:fc:1a:06:11:52:dc:cc:7e:de:c9:0e:1f:8c: 20:2d:c7:77:06:e6:29:0a:c3:e6:5c:b7:e7:38:3a: 08:e6:8f:90:cf:18:c1:1c:2b:96:d2:87:b8:d7:d8: b2:a0:47:35:88:48:55:80:ce:93:c6:ab:5b:f5:a6: 4f:e2:fd:82:ea:30:1b:87:af:5b:d5:a4:8a:26:0c: 63:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:08:01:51:82:F8:E8:30:43:E7:6A:B3:45:CD:54:72:A4:B4:CD:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e87d83f-b50c-4a65-9d9a-c28458fc1979/4e87d83f-b50c-4a65-9d9a-c28458fc1979.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.68.53.0/24 IPv6: 2604:3dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394449 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ae:a5:e5:70:89:9a:a1:3d:b3:fb:b5:67:a4:8f:d5:a1:fe: ef:0f:0e:8f:81:a6:3d:d2:97:30:a7:a9:14:9b:fc:f6:bd:38: 1c:7c:6b:37:d0:61:23:40:01:2c:df:bd:d1:74:a0:d4:37:9a: af:99:fd:08:47:db:54:eb:d2:9a:4d:61:47:6b:b4:aa:d3:05: d2:48:91:89:a2:0b:41:4d:d6:68:37:f6:28:2a:c6:4e:f9:94: 4b:e8:90:ab:48:ed:ca:dd:ed:c8:18:37:7e:ab:ff:ff:2e:c8: 10:92:91:7e:f4:22:d4:39:b1:6f:57:fb:0c:f2:cf:f6:c5:5e: d0:9d:cd:ec:93:a7:c2:3f:15:2e:0e:95:f7:e0:ac:ca:c6:23: b1:63:2f:64:cd:75:df:0a:57:45:39:d6:59:20:28:25:98:0f: f3:f4:86:3f:77:94:c8:3f:22:5e:e7:1e:53:43:5e:e5:d0:c8: f6:86:b2:9d:ec:5d:e9:dc:ec:6a:c4:20:1d:81:9a:0e:4b:ff: 73:60:8d:ce:de:4b:48:41:bd:0a:10:29:6f:9b:87:c6:e9:e2: 4f:92:f3:68:18:ad:0e:fb:19:16:09:2c:e3:e6:78:c9:76:73: fa:6f:2d:34:b4:a7:88:6f:54:3a:3d:e1:20:3d:6b:09:d3:ea: 44:23:d4:60 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjG3qbclqT23HV+WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIwNTAxNDUzM1oXDTI3MDUxMTAwNDUzM1owLzEtMCsGA1UEAxMk NGU4N2Q4M2YtYjUwYy00YTY1LTlkOWEtYzI4NDU4ZmMxOTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzg8ETVdJJY8GJ15pk1gscg/yleI/C/GUNZ 9Oez7NiqxnTrdXAveXZHs9gW4XqiU4TI7A4v4F4IMd7KkPVaDsHR/bUHaQBFnX9n VcjLPiH/k4hnPent5EyBgcB7XdZd2dxABSRM0ir4tYWX3Z9m+LIQj1lJJvnkjF7V O3J1+MAIdSwBAZwEWvw3zJM/wAOqSq81rFaCRSSFdsXiI6lFUhEirmZ9HljASWue sEzbDeZ+l9eCIfwaBhFS3Mx+3skOH4wgLcd3BuYpCsPmXLfnODoI5o+QzxjBHCuW 0oe419iyoEc1iEhVgM6Txqtb9aZP4v2C6jAbh69b1aSKJgxjrQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBoIAVGC+OgwQ+dqs0XNVHKktM38MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThmYzE5NzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRlODdkODNmLWI1MGMtNGE2NS05 ZDlhLWMyODQ1OGZjMTk3OS80ZTg3ZDgzZi1iNTBjLTRhNjUtOWQ5YS1jMjg0NThm YzE5NzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADHRDUwDQQCAAIwBwMFACYEPcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgTRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHGupeVwiZqhPbP7tWekj9Wh/u8P Do+Bpj3SlzCnqRSb/Pa9OBx8azfQYSNAASzfvdF0oNQ3mq+Z/QhH21Tr0ppNYUdr tKrTBdJIkYmiC0FN1mg39igqxk75lEvokKtI7crd7cgYN36r//8uyBCSkX70ItQ5 sW9X+wzyz/bFXtCdzeyTp8I/FS4OlffgrMrGI7FjL2TNdd8KV0U51lkgKCWYD/P0 hj93lMg/Il7nHlNDXuXQyPaGsp3sXenc7GrEIB2Bmg5L/3Ngjc7eS0hBvQoQKW+b h8bp4k+S82gYrQ77GRYJLOPmeMl2c/pvLTS0p4hvVDo94SA9awnT6kQj1GA= -----END CERTIFICATE-----Generated at Fri Apr 4 19:31:42 2025 by rpki-client