$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer File: 5ef4d5f1-c1e2-4799-9868-866a263537cc.cer (raw, json) Hash identifier: O7Rw0e1HAQSzWIxRbTBxUOB8Yms8IrLpo4Fq60KI/oE= Subject key identifier: F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848B353DD76EAA762161C385980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jan 2025 01:45:33 +0000 Certificate not after: Tue 04 May 2027 00:45:33 +0000 Subordinate resources: IP: 2602:fcde::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:53:dd:76:ea:a7:62:16:1c:38:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 29 01:45:33 2025 GMT Not After : May 4 00:45:33 2027 GMT Subject: CN=5ef4d5f1-c1e2-4799-9868-866a263537cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:f4:e6:f8:e0:bf:97:45:e7:eb:2c:52:03: e2:6a:92:b2:d1:c6:97:20:f0:23:22:1a:b9:09:d0: a2:2d:34:17:4a:33:33:e0:85:0b:cc:82:3b:39:a6: 5b:6d:0e:d5:f7:37:ec:e9:df:67:1c:09:12:ad:96: 36:8d:66:14:d7:bb:6b:f7:70:69:27:9e:03:2a:a7: 02:5c:80:4f:7b:a9:d4:f7:4f:ed:ec:56:46:b2:d8: 2f:e5:2f:28:f4:8c:d9:f2:e6:a2:d6:e6:39:20:22: 36:ed:86:d3:e6:fe:68:2c:34:55:c7:c1:ed:5a:43: 4f:dd:c3:fe:56:5b:71:84:ca:ad:a5:7e:f0:d6:da: ec:4b:39:22:0a:29:2c:77:24:a9:1d:66:c4:38:56: fa:9e:62:e7:73:2c:76:cf:c6:06:8a:15:1b:43:f0: dd:a4:ab:df:2b:56:cd:2c:4a:b5:0f:c6:ad:b9:cb: fb:8d:cf:ef:2d:3b:51:ad:78:76:6a:5c:d5:dc:9a: e7:a3:0e:22:05:76:e8:7b:53:08:7e:d9:df:9c:ba: f8:98:12:e4:b3:a0:83:3a:fa:1e:0a:79:e2:fb:04: 94:9c:eb:db:5e:f4:18:c2:c1:ca:11:32:b4:fc:cd: ad:b2:70:66:49:71:b9:e2:b5:04:76:13:9e:c3:52: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcde::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:cf:3c:50:8a:76:49:ab:b9:7c:e1:59:79:7d:a4:8b:d3:37: 54:4e:4d:cc:87:c2:ca:6c:93:ba:42:02:db:31:7d:88:bc:dc: 45:d2:88:6f:35:ab:c4:c4:a5:12:e6:67:db:5a:c6:e6:03:06: 03:98:fc:42:74:4b:96:fb:fe:8f:eb:fc:60:13:25:a7:29:4f: a7:89:c6:1f:78:03:7d:b7:e2:b6:33:0f:ca:06:70:88:71:18: a6:e2:ef:50:c2:38:d8:c6:59:3c:30:8c:14:7b:04:6b:c2:a8: e2:dc:01:60:6d:67:35:22:08:68:45:71:5d:40:fe:78:a9:a5: b0:44:5d:15:81:ac:b6:9e:49:e2:f6:6a:cd:f9:e6:64:93:e9: 11:88:a8:04:35:ad:d2:4e:e6:ae:20:d0:c3:63:e2:ee:8d:be: 9c:bc:dc:40:b4:0b:66:65:81:79:62:e2:cd:be:62:13:e9:72: b3:b0:ce:a7:74:15:c6:73:87:38:a2:90:b8:ab:59:65:c8:f0: 01:bd:72:92:40:4e:0e:25:4d:5e:98:0b:8e:60:e0:a7:41:b8: b2:fa:be:fc:4c:76:4b:b1:75:e0:f9:47:bc:16:d2:db:d1:d2: dd:bd:38:bd:ee:8d:8b:49:fe:2f:4c:89:67:34:25:2a:20:5d: f7:a4:65:82 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEizU9126qdiFhw4WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDEyOTAxNDUzM1oXDTI3MDUwNDAwNDUzM1owLzEtMCsGA1UEAxMk NWVmNGQ1ZjEtYzFlMi00Nzk5LTk4NjgtODY2YTI2MzUzN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaH05vjgv5dF5+ssUgPiapKy0caXIPAjIhq5 CdCiLTQXSjMz4IULzII7OaZbbQ7V9zfs6d9nHAkSrZY2jWYU17tr93BpJ54DKqcC XIBPe6nU90/t7FZGstgv5S8o9IzZ8uai1uY5ICI27YbT5v5oLDRVx8HtWkNP3cP+ VltxhMqtpX7w1trsSzkiCiksdySpHWbEOFb6nmLncyx2z8YGihUbQ/DdpKvfK1bN LEq1D8atucv7jc/vLTtRrXh2alzV3Jrnow4iBXboe1MIftnfnLr4mBLks6CDOvoe Cnni+wSUnOvbXvQYwsHKETK0/M2tsnBmSXG54rUEdhOew1IsFQIDAQABo4IEATCC A/0wHQYDVR0OBBYEFPfA0d5XgyZxzZumZYUT5UrZ1pKVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 ZWY0ZDVmMS1jMWUyLTQ3OTktOTg2OC04NjZhMjYzNTM3Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVlZjRkNWYxLWMxZTItNDc5OS05 ODY4LTg2NmEyNjM1MzdjYy81ZWY0ZDVmMS1jMWUyLTQ3OTktOTg2OC04NjZhMjYz NTM3Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvzeADBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQzzxQinZJq7l84Vl5 faSL0zdUTk3Mh8LKbJO6QgLbMX2IvNxF0ohvNavExKUS5mfbWsbmAwYDmPxCdEuW +/6P6/xgEyWnKU+nicYfeAN9t+K2Mw/KBnCIcRim4u9QwjjYxlk8MIwUewRrwqji 3AFgbWc1IghoRXFdQP54qaWwRF0Vgay2nkni9mrN+eZkk+kRiKgENa3STuauINDD Y+Lujb6cvNxAtAtmZYF5YuLNvmIT6XKzsM6ndBXGc4c4opC4q1llyPABvXKSQE4O JU1emAuOYOCnQbiy+r78THZLsXXg+Ue8FtLb0dLdvTi97o2LSf4vTIlnNCUqIF33 pGWC -----END CERTIFICATE-----Generated at Fri Apr 4 20:20:49 2025 by rpki-client