$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer File: 7c74b511-7d11-4209-84c2-f7b800242a7b.cer (raw, json) Hash identifier: 9ca4lJ7Ica+rkKrqNsOImH9ev3AetVNFVTyi+zeVzDQ= Subject key identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848BE7E99309EEA0AC3A658FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Feb 2025 01:45:33 +0000 Certificate not after: Sat 08 May 2027 00:45:33 +0000 Subordinate resources: IP: 192.231.202.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:7e:99:30:9e:ea:0a:c3:a6:58:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 2 01:45:33 2025 GMT Not After : May 8 00:45:33 2027 GMT Subject: CN=7c74b511-7d11-4209-84c2-f7b800242a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:9b:ed:88:a7:f1:f7:a1:80:75:17:d8:d9: a4:7d:11:0d:d1:0e:9f:88:f0:96:f8:c9:a2:98:c6: 09:36:84:50:d4:ed:65:c2:f6:76:de:37:6e:ab:81: 54:c3:91:3a:e8:6b:df:11:82:cb:3b:60:33:18:3e: c1:38:1b:cd:43:0f:ed:97:1a:82:8d:50:db:79:35: cc:b2:11:b3:8b:d4:14:d9:72:0d:ed:53:be:f1:2d: e6:71:a4:f1:9e:73:3e:85:77:1e:a4:33:c2:58:2f: e2:4d:24:c7:91:52:2d:dc:4b:22:00:6a:01:ec:cc: 06:7d:fe:cf:33:7d:b3:88:27:0a:5b:f9:39:53:46: 07:4b:3d:fa:b4:4a:ea:45:d2:f5:7c:d2:60:6c:6a: 83:c9:a2:db:27:f7:db:2c:16:75:a2:60:72:10:5b: c9:1c:76:c3:e4:a7:6e:68:56:6b:bc:b3:37:7d:e8: 04:09:8d:d0:22:fa:c0:9b:a4:68:9b:fd:41:78:98: e4:0d:77:a6:0e:41:92:c5:ce:c2:50:ee:f3:2c:ca: ac:d9:34:fd:2c:4e:0a:48:84:f2:ed:f8:d8:0b:61: 15:9c:f2:a3:33:e3:1e:2b:0d:2f:43:81:9d:1c:6b: 06:57:6d:d3:18:5c:6c:cf:6c:43:c5:06:57:89:ef: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.231.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e2:56:6c:ce:4f:4c:63:4a:c9:af:48:99:e1:3f:a3:85:82: d3:dc:64:ed:34:60:15:7c:34:06:68:2f:01:4b:db:2e:4e:6c: 70:62:dc:e9:fa:1e:5b:5b:4a:08:5f:50:2c:8f:6f:20:c9:47: d3:78:50:5a:67:56:5a:bf:20:95:9f:80:9f:c5:aa:53:60:6a: 8a:fb:67:43:ee:57:45:93:e9:0f:17:53:bb:88:28:d1:a9:0a: 0d:9e:11:1f:b7:12:b8:48:1e:8e:80:96:54:66:f7:97:3a:41: a0:49:85:ce:6f:ec:d6:3b:0f:23:28:9c:80:fc:90:d6:b7:51: aa:d2:ca:27:66:3b:64:6e:01:90:ef:03:92:b5:29:fa:6c:6c: a1:e9:1f:c4:82:90:ae:70:94:cc:9b:60:70:da:9c:95:91:3f: 25:cb:ce:88:05:9a:7b:ea:81:37:d4:5b:58:15:9f:d0:49:02: 3c:82:06:c0:28:bf:36:41:60:95:1c:a5:e7:b6:dd:a1:1e:bb: 74:44:70:6d:5c:31:42:1f:89:2e:a2:2a:39:03:8d:93:b0:bb: cd:6e:2a:e0:4e:d4:91:51:14:53:36:e9:a2:4a:05:e3:c5:21: ed:e9:fa:fd:33:37:17:f5:22:8e:b0:1b:cc:72:59:02:25:c6: 44:bf:80:51 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEi+fpkwnuoKw6ZY/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIwMjAxNDUzM1oXDTI3MDUwODAwNDUzM1owLzEtMCsGA1UEAxMk N2M3NGI1MTEtN2QxMS00MjA5LTg0YzItZjdiODAwMjQyYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VGb7Yin8fehgHUX2NmkfREN0Q6fiPCW+Mmi mMYJNoRQ1O1lwvZ23jduq4FUw5E66GvfEYLLO2AzGD7BOBvNQw/tlxqCjVDbeTXM shGzi9QU2XIN7VO+8S3mcaTxnnM+hXcepDPCWC/iTSTHkVIt3EsiAGoB7MwGff7P M32ziCcKW/k5U0YHSz36tErqRdL1fNJgbGqDyaLbJ/fbLBZ1omByEFvJHHbD5Kdu aFZrvLM3fegECY3QIvrAm6Rom/1BeJjkDXemDkGSxc7CUO7zLMqs2TT9LE4KSITy 7fjYC2EVnPKjM+MeKw0vQ4GdHGsGV23TGFxsz2xDxQZXie/F1QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHa5Noe4TqPZs1E0AiHWEi+C5CzoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAyNDJhN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdjNzRiNTExLTdkMTEtNDIwOS04 NGMyLWY3YjgwMDI0MmE3Yi83Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAy NDJhN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA58owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIOJWbM5PTGNKya9ImeE/ o4WC09xk7TRgFXw0BmgvAUvbLk5scGLc6foeW1tKCF9QLI9vIMlH03hQWmdWWr8g lZ+An8WqU2BqivtnQ+5XRZPpDxdTu4go0akKDZ4RH7cSuEgejoCWVGb3lzpBoEmF zm/s1jsPIyicgPyQ1rdRqtLKJ2Y7ZG4BkO8DkrUp+mxsoekfxIKQrnCUzJtgcNqc lZE/JcvOiAWae+qBN9RbWBWf0EkCPIIGwCi/NkFglRyl57bdoR67dERwbVwxQh+J LqIqOQONk7C7zW4q4E7UkVEUUzbpokoF48Uh7en6/TM3F/UijrAbzHJZAiXGRL+A UQ== -----END CERTIFICATE-----Generated at Fri Apr 4 16:24:55 2025 by rpki-client