$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer File: 7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer (raw, json) Hash identifier: VTEMoFBRMcilCXT+VQZuqb2ixEFJ2mjtXS9Lq1+oMWA= Subject key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848A293C57AC96DD98253105980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Jan 2025 01:45:34 +0000 Certificate not after: Wed 28 Apr 2027 00:45:34 +0000 Subordinate resources: AS: 26223 IP: 107.190.184.0/21 IP: 162.248.128.0/23 IP: 162.248.131.0/24 IP: 192.64.2.0/23 IP: 192.187.62.0/23 IP: 192.243.36.0/24 IP: 199.19.112.0/21 IP: 199.66.104.0/22 IP: 199.192.124.0/22 IP: 204.8.60.0/22 IP: 204.8.68.0/22 IP: 207.183.160.0/19 IP: 216.21.208.0/22 IP: 216.128.224.0/20 IP: 217.147.184.0/21 IP: 2605:c900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:93:c5:7a:c9:6d:d9:82:53:10:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 23 01:45:34 2025 GMT Not After : Apr 28 00:45:34 2027 GMT Subject: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:67:70:b7:70:89:ed:77:a5:ba:cd:18:97: fc:79:9a:7d:21:e2:e5:53:31:99:9e:ce:bd:f1:84: 0e:ea:4d:26:29:c2:5c:f5:ae:75:1c:25:f2:7d:dd: 26:8a:09:ac:18:ce:7c:1b:33:0f:3e:42:d1:0e:7d: c6:42:45:cb:e7:0a:cb:d5:fe:fd:68:f8:9b:52:e5: 14:a9:e6:eb:d4:cc:62:58:06:54:f6:9d:6d:89:2e: 5e:70:f2:86:bf:60:3d:d0:77:6e:b4:a3:32:51:07: e9:99:a8:e5:14:71:40:09:1f:6e:4f:47:70:07:cf: 48:5c:16:ea:1a:b7:a0:7a:1e:be:c1:f5:6e:02:af: 69:d3:27:0b:df:52:86:fc:52:04:57:65:db:35:43: ae:01:bf:0e:19:c2:22:45:f7:59:70:ef:48:92:14: ce:58:20:5f:f9:ed:fd:87:07:5d:6a:a4:24:01:44: 6b:50:89:98:f7:4c:7d:49:fb:13:b5:2c:09:21:b8: 5c:9a:6e:49:17:23:ba:82:db:ce:df:f7:27:36:4a: c6:c6:92:27:f6:e1:c4:06:5b:61:45:29:1b:f0:e9: 53:29:4e:45:7f:55:91:ff:80:40:61:9a:9d:5c:ed: 89:17:54:46:78:a3:6a:0b:e6:43:2b:9d:10:9c:94: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 107.190.184.0/21 162.248.128.0/23 162.248.131.0/24 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 IPv6: 2605:c900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26223 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:49:6a:18:ae:a0:9b:c7:96:30:5f:41:e8:93:13:20:ae:53: ed:0f:23:b5:8c:de:2e:97:a1:aa:54:a1:b9:22:15:72:b5:ad: 8c:35:5a:ba:cf:72:5f:c0:19:17:fb:0a:81:da:a3:ed:0c:3c: 7e:25:c1:f7:29:55:e5:2b:5f:a1:52:00:3c:7b:4b:46:7f:85: 18:92:21:eb:1e:15:81:4f:0c:f8:96:d5:fb:1a:e8:be:98:29: 17:79:46:b6:62:54:cb:f1:11:a9:29:d9:2c:bc:fd:30:30:15: 61:67:76:df:19:04:da:6a:04:b2:33:6c:48:5f:9a:17:1f:16: 02:b5:f9:5a:b9:fc:97:b0:89:69:b7:a2:c9:a7:7b:1e:e6:46: bd:38:bb:77:83:69:d2:c6:86:97:73:8c:f2:a5:6f:79:f2:cd: 3f:52:33:b7:b6:d5:d2:77:9d:39:31:4b:cc:5f:4b:56:bc:f7: 4f:71:69:08:01:cb:13:1d:29:f5:0c:1e:79:62:85:86:c8:fa: f5:ae:e0:ee:1e:a8:da:5c:d3:df:0f:e6:4e:3d:f5:b9:7b:0b: e7:7d:bc:23:66:58:b3:61:6a:af:a1:97:cc:a3:d2:4c:b1:1c: a7:1e:a8:64:e2:c5:a8:07:7d:28:fa:46:a0:07:a0:78:5a:82: e8:49:1c:6e -----BEGIN CERTIFICATE----- MIIHbDCCBlSgAwIBAgIUAQ0Mn0MoWEiik8V6yW3ZglMQWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDEyMzAxNDUzNFoXDTI3MDQyODAwNDUzNFowLzEtMCsGA1UEAxMk N2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJmODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+1ncLdwie13pbrNGJf8eZp9IeLlUzGZns69 8YQO6k0mKcJc9a51HCXyfd0migmsGM58GzMPPkLRDn3GQkXL5wrL1f79aPibUuUU qebr1MxiWAZU9p1tiS5ecPKGv2A90HdutKMyUQfpmajlFHFACR9uT0dwB89IXBbq Gregeh6+wfVuAq9p0ycL31KG/FIEV2XbNUOuAb8OGcIiRfdZcO9IkhTOWCBf+e39 hwddaqQkAURrUImY90x9SfsTtSwJIbhcmm5JFyO6gtvO3/cnNkrGxpIn9uHEBlth RSkb8OlTKU5Ff1WR/4BAYZqdXO2JF1RGeKNqC+ZDK50QnJRUbQIDAQABo4IEfjCC BHowHQYDVR0OBBYEFCKO5/oOAEDFuj8gZ3f6PAW9b1rPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdmNmJjMDZhLTBhNDItNDc1OC04 NjI5LThjOTBlY2YyZjgyZS83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNm MmY4MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgYIGCCsGAQUF BwEHAQH/BHMwcTBgBAIAATBaAwQDa764AwQBoviAAwQAoviDAwQBwEACAwQBwLs+ AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQFz7egAwQC2BXQ AwQE2IDgAwQD2ZO4MA0EAgACMAcDBQAmBckAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAmZvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAHJJahiuoJvHljBfQeiTEyCuU+0PI7WM3i6XoapUobki FXK1rYw1WrrPcl/AGRf7CoHao+0MPH4lwfcpVeUrX6FSADx7S0Z/hRiSIeseFYFP DPiW1fsa6L6YKRd5RrZiVMvxEakp2Sy8/TAwFWFndt8ZBNpqBLIzbEhfmhcfFgK1 +Vq5/JewiWm3osmnex7mRr04u3eDadLGhpdzjPKlb3nyzT9SM7e21dJ3nTkxS8xf S1a8909xaQgByxMdKfUMHnlihYbI+vWu4O4eqNpc098P5k499bl7C+d9vCNmWLNh aq+hl8yj0kyxHKceqGTixagHfSj6RqAHoHhaguhJHG4= -----END CERTIFICATE-----Generated at Fri Apr 4 16:25:09 2025 by rpki-client