$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd.cer File: 60853e5b-d7a9-4bc8-8250-635257ad49bd.cer (raw, json) Hash identifier: 4YmJ+G/IDu6qmPuNqMxq2uuqvopX7P//5JWkLcK3iQo= Subject key identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584933A190CD311EA508C3ABE5C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 16 Mar 2025 00:45:35 +0000 Certificate not after: Sat 19 Jun 2027 00:45:35 +0000 Subordinate resources: AS: 11996 IP: 192.189.147.0/24 IP: 207.251.48.0/20 IP: 208.64.92.0/22 IP: 216.243.96.0/20 IP: 2605:6800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:33:a1:90:cd:31:1e:a5:08:c3:ab:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 16 00:45:35 2025 GMT Not After : Jun 19 00:45:35 2027 GMT Subject: CN=60853e5b-d7a9-4bc8-8250-635257ad49bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:5b:89:64:92:18:0d:a4:86:89:dd:97:0b: 81:dc:6c:e4:42:77:29:8d:d2:ae:08:cc:f3:4d:fa: ef:23:3c:b3:25:be:36:f1:5b:d1:39:7b:dc:7c:bb: 37:bf:bd:8a:d6:d5:94:f1:97:e1:7f:20:be:b0:c9: 64:71:9c:81:6a:d8:ab:ea:d0:21:f3:e6:ec:4c:bb: 73:24:e5:8e:c6:1e:83:2e:44:f2:b8:0b:0b:79:77: ea:53:39:56:c1:99:6d:8f:5f:15:7a:0d:60:f1:c7: 2e:a3:1c:4d:1e:0c:b1:5f:9d:a1:00:8f:79:33:9b: ba:82:b0:a1:fd:3d:b0:a4:ee:b7:c8:cf:97:bf:2b: 2f:08:e0:fe:d4:da:a2:67:b1:b9:81:4e:34:d8:04: 09:ac:f8:f9:4f:76:33:6c:8e:14:22:11:a7:6e:d9: 42:5b:5d:aa:c4:5d:8f:0e:3f:cf:56:01:97:db:e8: ee:40:0e:4b:3f:01:71:2b:cb:69:7d:9c:bb:e7:05: b2:be:56:61:3e:df:ce:5d:f9:ee:1d:49:2f:03:3b: 94:06:3e:35:cd:03:75:d1:e0:4c:d0:db:34:d1:e1: 76:64:af:c0:7b:80:63:a4:8a:3a:dd:d8:68:66:79: b5:af:71:17:b0:04:e1:55:f3:2b:dc:5f:9f:4e:8f: 58:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:AA:E0:00:F0:39:12:32:8C:5B:C0:04:22:C9:AC:0F:3B:35:0F:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/60853e5b-d7a9-4bc8-8250-635257ad49bd/60853e5b-d7a9-4bc8-8250-635257ad49bd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.189.147.0/24 207.251.48.0/20 208.64.92.0/22 216.243.96.0/20 IPv6: 2605:6800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11996 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:04:af:e5:59:da:05:a3:7c:94:24:73:36:fc:be:df:1d:7d: 6d:85:62:37:ea:9f:26:08:2d:ef:17:c3:7e:6c:54:02:a4:60: a6:14:83:24:55:3b:e5:82:43:6a:3b:1a:79:e7:71:70:a7:d5: df:7d:f8:f9:4e:5b:45:a2:a0:08:ad:c4:e6:ea:35:ac:ad:e4: 22:d0:23:3b:f9:65:9b:ae:76:a7:b8:9a:b0:cb:b4:c1:dd:57: 18:a6:eb:9d:52:1b:0c:e7:f9:d3:90:18:ae:77:ee:c1:0b:cf: b3:99:d8:d0:7f:ff:8b:b9:da:45:ae:e9:85:45:3f:8a:02:7b: f0:6e:e0:7c:57:60:c5:71:fe:cb:11:9d:3c:2d:f7:a7:27:5e: 21:98:3b:f1:d3:27:2b:b8:7b:eb:d0:4f:8b:10:03:04:b8:0b: e9:cb:c9:69:c3:61:2c:27:83:61:aa:22:98:a3:f1:0a:c7:19: f9:a7:df:bc:82:d0:80:49:b1:da:fd:e8:3a:be:3a:15:4f:0c: 90:a5:47:2b:a6:6f:18:e7:cc:dd:b8:c9:af:17:97:7c:1b:31: 12:1c:1f:a3:8e:c3:7a:e2:ef:23:b1:18:f7:30:d5:51:95:8a: 31:e0:fe:ef:9e:6e:55:03:5a:e4:5f:3e:56:09:b0:7c:f3:23: e3:c0:1b:60 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEkzoZDNMR6lCMOr5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMxNjAwNDUzNVoXDTI3MDYxOTAwNDUzNVowLzEtMCsGA1UEAxMk NjA4NTNlNWItZDdhOS00YmM4LTgyNTAtNjM1MjU3YWQ0OWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMpbiWSSGA2khondlwuB3GzkQncpjdKuCMzz TfrvIzyzJb428VvROXvcfLs3v72K1tWU8ZfhfyC+sMlkcZyBatir6tAh8+bsTLtz JOWOxh6DLkTyuAsLeXfqUzlWwZltj18Veg1g8ccuoxxNHgyxX52hAI95M5u6grCh /T2wpO63yM+XvysvCOD+1NqiZ7G5gU402AQJrPj5T3YzbI4UIhGnbtlCW12qxF2P Dj/PVgGX2+juQA5LPwFxK8tpfZy75wWyvlZhPt/OXfnuHUkvAzuUBj41zQN10eBM 0Ns00eF2ZK/Ae4BjpIo63dhoZnm1r3EXsAThVfMr3F+fTo9YKQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFEuq4ADwORIyjFvABCLJrA87NQ8oMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdhZDQ5YmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzYwODUzZTViLWQ3YTktNGJjOC04 MjUwLTYzNTI1N2FkNDliZC82MDg1M2U1Yi1kN2E5LTRiYzgtODI1MC02MzUyNTdh ZDQ5YmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBADAvZMDBATP+zADBALQQFwDBATY82AwDQQCAAIw BwMFACYFaAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICLtwwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZQSv 5VnaBaN8lCRzNvy+3x19bYViN+qfJggt7xfDfmxUAqRgphSDJFU75YJDajsaeedx cKfV3334+U5bRaKgCK3E5uo1rK3kItAjO/llm652p7iasMu0wd1XGKbrnVIbDOf5 05AYrnfuwQvPs5nY0H//i7naRa7phUU/igJ78G7gfFdgxXH+yxGdPC33pydeIZg7 8dMnK7h769BPixADBLgL6cvJacNhLCeDYaoimKPxCscZ+affvILQgEmx2v3oOr46 FU8MkKVHK6ZvGOfM3bjJrxeXfBsxEhwfo47DeuLvI7EY9zDVUZWKMeD+755uVQNa 5F8+VgmwfPMj48AbYA== -----END CERTIFICATE-----Generated at Fri Apr 11 03:03:24 2025 by rpki-client