$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer File: 7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer (raw, json) Hash identifier: FXqr5btIZ5n/cE3/ZHokFDCUQR0Mdhl3tTI+8+jqvGM= Subject key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584925AC1FD33195E1DA0F8AC900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Mar 2025 00:45:32 +0000 Certificate not after: Mon 14 Jun 2027 00:45:32 +0000 Subordinate resources: IP: 165.140.92.0/22 IP: 167.253.48.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:ac:1f:d3:31:95:e1:da:0f:8a:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 11 00:45:32 2025 GMT Not After : Jun 14 00:45:32 2027 GMT Subject: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:7f:52:fb:41:c0:8f:e0:24:f6:a5:f5:68: 1f:aa:80:d7:7c:72:14:a3:26:9a:a8:e6:0b:de:c6: 13:e3:1a:36:af:3a:f5:bd:6e:31:19:2b:eb:45:cc: dd:cc:04:fe:41:da:07:cc:ec:40:e8:32:59:2f:d9: 74:54:fe:65:5e:06:5e:1b:e9:ce:f7:9e:b8:32:68: cc:17:ee:72:68:1d:07:fe:d8:a2:86:dc:6a:be:51: 7e:cd:9c:94:ba:43:8d:e2:ce:cd:c3:75:f3:34:a5: 7f:10:82:9b:42:20:12:d5:2c:51:63:89:41:ab:da: 49:d2:e9:b7:23:60:e7:21:dc:4c:7d:52:5a:48:34: 70:ec:bf:93:5a:d1:89:c4:0c:42:70:9e:fa:f6:6b: c0:9b:4f:63:16:29:64:a1:b5:ba:15:86:60:22:29: 4a:a5:76:3b:e5:81:b2:8d:d6:31:a6:4b:58:e4:50: b9:0a:6c:92:c4:1d:93:eb:a7:03:e4:74:d9:7d:ce: 00:b5:af:52:9b:87:d4:eb:6a:8d:90:d2:1f:c2:38: 06:07:d5:a5:cc:b1:a8:c0:7b:79:d5:80:e8:7c:1d: 51:da:97:b0:5d:23:1e:6a:09:b7:4c:fb:af:ce:80: 11:f3:93:18:86:cd:93:37:37:75:a4:d5:dd:ef:8b: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 165.140.92.0/22 167.253.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:f4:1c:f7:3c:90:9e:b8:9a:78:da:62:51:53:9d:ac:2a:fb: 13:42:62:8e:c6:5d:cf:dc:56:18:5b:95:0d:ff:cf:3e:9d:9b: db:44:f7:b6:d7:28:08:86:73:9f:45:e5:04:b3:de:48:38:cd: 68:e4:f2:c4:a7:51:99:b1:29:27:ff:5a:b7:d3:ff:e1:c7:a8: 88:ac:a2:cb:3a:05:fd:18:f6:35:4b:43:c9:cb:d2:a7:2d:a5: 59:c4:5c:08:b5:6f:71:76:7c:1a:b1:39:a4:4e:c6:d8:4a:bb: 49:19:f5:fd:3e:20:39:96:c9:8e:b3:15:d2:ae:5a:db:51:83: 74:c8:1e:3d:c9:73:31:d6:07:f2:a7:6a:ae:e2:7e:0c:8d:ac: ab:48:ab:fb:62:a8:21:40:33:16:39:33:53:8d:9a:98:72:3b: 49:44:a4:7e:83:79:11:cf:96:2a:63:c9:4d:45:2c:21:7c:0b: 72:65:ca:4d:39:a0:c1:99:c1:08:5a:f4:dc:dc:d0:93:1b:f5: 29:da:ae:8b:be:0b:2d:4c:a3:dd:6a:10:95:f9:d7:50:a2:f9: ab:7a:2f:17:11:7c:1f:f3:58:b4:3e:01:1a:8f:6b:1d:9c:ff: 8b:8f:de:3a:4e:94:c0:85:b0:f6:c8:f4:3b:b9:08:0c:81:e1: a2:77:b8:0d -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEklrB/TMZXh2g+KyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMxMTAwNDUzMloXDTI3MDYxNDAwNDUzMlowLzEtMCsGA1UEAxMk N2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTZ/UvtBwI/gJPal9WgfqoDXfHIUoyaaqOYL 3sYT4xo2rzr1vW4xGSvrRczdzAT+QdoHzOxA6DJZL9l0VP5lXgZeG+nO9564MmjM F+5yaB0H/tiihtxqvlF+zZyUukON4s7Nw3XzNKV/EIKbQiAS1SxRY4lBq9pJ0um3 I2DnIdxMfVJaSDRw7L+TWtGJxAxCcJ769mvAm09jFilkobW6FYZgIilKpXY75YGy jdYxpktY5FC5CmySxB2T66cD5HTZfc4Ata9Sm4fU62qNkNIfwjgGB9WlzLGowHt5 1YDofB1R2pewXSMeagm3TPuvzoAR85MYhs2TNzd1pNXd74v1HwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFELrrwdyDRgyr8B8AbyYD+JKk8NVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdhMWQxYzY4LTc4YzQtNDczMS1h MmU5LTU3NDA4ZmU4OGI4NC83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZl ODhiODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKljFwDBAKn/TAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgfQc9zyQnria eNpiUVOdrCr7E0JijsZdz9xWGFuVDf/PPp2b20T3ttcoCIZzn0XlBLPeSDjNaOTy xKdRmbEpJ/9at9P/4ceoiKyiyzoF/Rj2NUtDycvSpy2lWcRcCLVvcXZ8GrE5pE7G 2Eq7SRn1/T4gOZbJjrMV0q5a21GDdMgePclzMdYH8qdqruJ+DI2sq0ir+2KoIUAz FjkzU42amHI7SUSkfoN5Ec+WKmPJTUUsIXwLcmXKTTmgwZnBCFr03NzQkxv1Kdqu i74LLUyj3WoQlfnXUKL5q3ovFxF8H/NYtD4BGo9rHZz/i4/eOk6UwIWw9sj0O7kI DIHhone4DQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:24:06 2025 by rpki-client