$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1.cer File: 5de35d89-662a-401a-a494-7d5da6facae1.cer (raw, json) Hash identifier: R8MWtBwyaQ7T55JywNDZIxp0/3bzWBvaO/SW352PC6w= Subject key identifier: 82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848B8E93C6AF42A15A9AAB62C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Jan 2025 01:45:33 +0000 Certificate not after: Thu 06 May 2027 00:45:33 +0000 Subordinate resources: AS: 3833 IP: 204.227.192.0/19 IP: 206.54.64.0/18 IP: 216.67.128.0/18 IP: 2604:1300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:e9:3c:6a:f4:2a:15:a9:aa:b6:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 31 01:45:33 2025 GMT Not After : May 6 00:45:33 2027 GMT Subject: CN=5de35d89-662a-401a-a494-7d5da6facae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:9d:61:60:00:1d:2a:fb:45:af:df:a4:23: 40:63:f7:f8:a9:86:a8:7d:8e:e5:b5:47:a9:29:c1: 63:37:99:a4:65:2a:79:df:a7:83:28:12:fd:c1:e8: 65:f0:52:82:94:86:e7:5f:70:40:6f:f2:59:60:fd: f7:30:75:74:ca:61:7e:ce:89:14:df:25:c0:fb:0c: 4f:65:bb:c8:af:99:35:ae:6b:d5:a3:8b:3c:98:bc: 68:33:51:21:5f:74:23:e7:98:9d:98:e2:3f:17:65: 98:86:c7:6d:16:97:5c:bd:80:a2:29:a1:10:24:56: 33:6e:ac:60:4b:4a:a3:3a:f8:c9:47:a0:87:a1:0d: ac:2b:e9:d6:e2:2e:77:28:21:17:c2:69:a1:2f:ea: 9b:3c:f0:9a:df:ef:38:27:58:a2:8a:d1:ed:ca:65: f4:a4:b3:35:c1:89:2f:cb:79:23:9a:82:4c:ba:b9: 70:33:62:5a:32:00:8d:2b:a6:2f:c1:91:d7:9c:24: 83:c7:0d:e6:97:86:eb:d9:0d:d0:99:40:f4:53:51: d2:55:20:19:4e:ad:3b:7c:68:8d:5d:ae:0e:3c:a4: ce:85:74:d6:49:7f:ec:0b:d7:bd:b9:2b:02:f9:7d: b0:99:bc:0e:16:40:af:dc:2d:d4:5f:da:3b:52:e2: 00:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.227.192.0/19 206.54.64.0/18 216.67.128.0/18 IPv6: 2604:1300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3833 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:67:08:31:82:32:dc:9e:b1:c9:f2:11:13:a2:7a:d2:ba:d1: f6:5f:46:a1:d3:30:3e:a4:81:45:17:71:00:ab:4d:82:4e:22: 01:54:37:e0:6e:f8:31:8d:ae:be:ef:bd:c2:ca:8c:5d:90:6f: 04:62:03:bf:9c:e2:9c:d3:82:bc:75:33:3e:73:83:14:82:24: 9f:33:9b:64:e3:d6:78:79:1b:02:fc:45:ed:e0:8f:1e:22:bc: 1f:7b:1f:b9:a3:07:0d:09:aa:8a:63:c7:17:23:75:2b:1f:8c: f3:44:00:38:6c:62:fd:e1:0c:f8:73:89:3d:bc:83:bf:03:d5: 2a:14:a6:84:95:c0:cb:c1:51:e6:2a:73:f3:19:3a:f3:aa:d1: 95:7c:d8:7f:1b:a9:1a:6c:6e:e8:e3:02:e3:f4:2d:3a:08:d0: ba:c2:ab:21:3a:fb:c0:b5:d3:ee:03:d1:ab:1a:0d:20:d3:a1: a8:db:00:00:ae:75:10:4d:76:94:d8:c0:b0:bf:e4:ea:bd:a5: 77:73:14:9f:df:84:27:94:84:d2:1f:a1:90:3d:b3:0d:24:ff: 49:2d:c9:9b:f1:09:d3:0d:6b:34:fa:8a:ec:c0:b0:71:11:f7: a0:98:47:e5:44:a1:fe:e3:af:17:ca:95:fa:99:8a:6c:6d:a1: 88:4e:b8:d7 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEi46Txq9CoVqaq2LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDEzMTAxNDUzM1oXDTI3MDUwNjAwNDUzM1owLzEtMCsGA1UEAxMk NWRlMzVkODktNjYyYS00MDFhLWE0OTQtN2Q1ZGE2ZmFjYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW2dYWAAHSr7Ra/fpCNAY/f4qYaofY7ltUep KcFjN5mkZSp536eDKBL9wehl8FKClIbnX3BAb/JZYP33MHV0ymF+zokU3yXA+wxP ZbvIr5k1rmvVo4s8mLxoM1EhX3Qj55idmOI/F2WYhsdtFpdcvYCiKaEQJFYzbqxg S0qjOvjJR6CHoQ2sK+nW4i53KCEXwmmhL+qbPPCa3+84J1iiitHtymX0pLM1wYkv y3kjmoJMurlwM2JaMgCNK6YvwZHXnCSDxw3ml4br2Q3QmUD0U1HSVSAZTq07fGiN Xa4OPKTOhXTWSX/sC9e9uSsC+X2wmbwOFkCv3C3UX9o7UuIAQwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFILCFDJHZFMKKhCxspFa4oOdQGbdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 ZGUzNWQ4OS02NjJhLTQwMWEtYTQ5NC03ZDVkYTZmYWNhZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVkZTM1ZDg5LTY2MmEtNDAxYS1h NDk0LTdkNWRhNmZhY2FlMS81ZGUzNWQ4OS02NjJhLTQwMWEtYTQ5NC03ZDVkYTZm YWNhZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAXM48ADBAbONkADBAbYQ4AwDQQCAAIwBwMFACYE EwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICDvkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFGcIMYIy3J6x yfIRE6J60rrR9l9GodMwPqSBRRdxAKtNgk4iAVQ34G74MY2uvu+9wsqMXZBvBGID v5zinNOCvHUzPnODFIIknzObZOPWeHkbAvxF7eCPHiK8H3sfuaMHDQmqimPHFyN1 Kx+M80QAOGxi/eEM+HOJPbyDvwPVKhSmhJXAy8FR5ipz8xk686rRlXzYfxupGmxu 6OMC4/QtOgjQusKrITr7wLXT7gPRqxoNINOhqNsAAK51EE12lNjAsL/k6r2ld3MU n9+EJ5SE0h+hkD2zDST/SS3Jm/EJ0w1rNPqK7MCwcRH3oJhH5USh/uOvF8qV+pmK bG2hiE641w== -----END CERTIFICATE-----Generated at Fri Apr 4 16:25:55 2025 by rpki-client