$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer File: 98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer (raw, json) Hash identifier: 4wvPVsPajVmcHMzU562KQQpAK2uZNPCZEilXRGccc0I= Subject key identifier: F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285847FB12B6FCB134C311F40549B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 24 Nov 2024 01:45:33 +0000 Certificate not after: Sat 27 Feb 2027 01:45:33 +0000 Subordinate resources: AS: 18665 IP: 204.10.116.0/22 IP: 2602:fd7f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fb:12:b6:fc:b1:34:c3:11:f4:05:49:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 24 01:45:33 2024 GMT Not After : Feb 27 01:45:33 2027 GMT Subject: CN=98b2490c-dcb7-4b1f-a79f-05a43608aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:36:29:87:16:ef:af:81:fa:07:a3:de:1e: ee:76:51:a4:0a:b9:58:cd:f6:6e:c5:be:52:90:44: ae:b0:7b:ab:7f:a6:a9:7b:a7:12:86:7c:66:59:b9: 0b:7a:fb:2e:65:1d:e5:42:cc:66:8c:fa:69:4b:ae: 8b:d1:d4:4f:98:28:22:73:ef:c0:d9:78:cf:f4:30: 45:8a:84:9e:43:7d:6c:c9:c3:4a:7b:eb:2b:7d:25: d8:05:bb:ed:5c:cf:b0:f2:84:93:ac:39:0f:53:6c: f5:3b:8f:d4:4b:29:d3:50:3f:53:d3:35:94:89:94: b0:be:a7:71:e4:75:f2:57:d2:40:46:c7:d8:72:8d: d1:34:d7:4c:08:27:09:0e:65:60:0f:b1:92:9f:e1: 26:be:0d:c4:e1:fd:b3:df:6c:6a:54:14:5d:f0:ad: c0:50:a3:c3:50:1b:94:77:3d:d5:cb:c5:1e:04:7e: 2e:0e:84:46:7d:ef:13:82:00:0e:a6:6f:ed:d4:7e: ed:6a:d8:5c:c6:7e:09:5c:cb:7a:c6:7d:da:66:20: 67:69:7f:aa:3b:bb:64:c1:39:2b:28:2b:84:9e:cc: 62:5b:dc:60:7e:31:40:d8:3f:c8:a1:25:e3:a9:5f: d4:ba:55:2f:e8:8e:18:27:ca:04:3a:66:76:8b:35: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.10.116.0/22 IPv6: 2602:fd7f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18665 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:d9:a2:b9:7b:73:7f:25:80:55:33:37:cf:02:69:49:9e:65: bf:c1:6d:0e:61:5a:c8:ce:d5:bd:98:3c:f3:97:d6:c4:47:e2: b1:49:00:13:68:14:ec:21:3a:5e:3f:f2:62:63:c3:57:83:0b: d0:c3:0f:ae:69:40:fd:ef:7c:81:e8:38:ff:f3:ca:b2:0b:e9: ac:a4:11:6d:e2:28:07:77:1f:c6:df:14:30:9b:9d:87:fb:a6: d3:f1:4a:ee:93:90:ea:1c:67:4b:93:07:73:e9:04:24:38:c4: 79:32:f4:30:1d:4d:da:cf:bd:14:b3:ff:be:8c:af:7f:54:7e: c0:04:e6:da:7c:f0:22:4a:96:17:0b:7b:c5:0c:2c:4a:ac:4b: eb:8c:dc:46:21:02:fd:2d:39:ca:89:27:f7:92:3b:8b:95:58: 06:93:08:9e:a0:49:4b:ce:2a:43:0b:68:9a:6a:72:c9:57:95: 61:d3:82:be:8f:cb:25:e9:f6:36:16:b7:46:11:15:32:77:73: 70:d2:fa:5b:04:f3:ce:f2:24:7a:95:b5:d8:ad:8e:6d:0b:b6: 2c:1e:ac:c7:eb:33:26:3f:4e:20:71:bb:1e:e7:17:ce:d8:80: e6:f4:4e:27:46:fb:f9:13:84:59:46:79:f5:62:1d:5b:48:24: 56:95:74:9e -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEf7Erb8sTTDEfQFSbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTEyNDAxNDUzM1oXDTI3MDIyNzAxNDUzM1owLzEtMCsGA1UEAxMk OThiMjQ5MGMtZGNiNy00YjFmLWE3OWYtMDVhNDM2MDhhYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvg2KYcW76+B+gej3h7udlGkCrlYzfZuxb5S kESusHurf6ape6cShnxmWbkLevsuZR3lQsxmjPppS66L0dRPmCgic+/A2XjP9DBF ioSeQ31sycNKe+srfSXYBbvtXM+w8oSTrDkPU2z1O4/USynTUD9T0zWUiZSwvqdx 5HXyV9JARsfYco3RNNdMCCcJDmVgD7GSn+Emvg3E4f2z32xqVBRd8K3AUKPDUBuU dz3Vy8UeBH4uDoRGfe8TggAOpm/t1H7tathcxn4JXMt6xn3aZiBnaX+qO7tkwTkr KCuEnsxiW9xgfjFA2D/IoSXjqV/UulUv6I4YJ8oEOmZ2izWGCwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPhs9H2GfKqAXqq8cd32/QJAvkHvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 OGIyNDkwYy1kY2I3LTRiMWYtYTc5Zi0wNWE0MzYwOGFhNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk4YjI0OTBjLWRjYjctNGIxZi1h NzlmLTA1YTQzNjA4YWE2Mi85OGIyNDkwYy1kY2I3LTRiMWYtYTc5Zi0wNWE0MzYw OGFhNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALMCnQwDgQCAAIwCAMGBCYC/X8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkjpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACPZorl7c38lgFUzN88CaUmeZb/B bQ5hWsjO1b2YPPOX1sRH4rFJABNoFOwhOl4/8mJjw1eDC9DDD65pQP3vfIHoOP/z yrIL6aykEW3iKAd3H8bfFDCbnYf7ptPxSu6TkOocZ0uTB3PpBCQ4xHky9DAdTdrP vRSz/76Mr39UfsAE5tp88CJKlhcLe8UMLEqsS+uM3EYhAv0tOcqJJ/eSO4uVWAaT CJ6gSUvOKkMLaJpqcslXlWHTgr6PyyXp9jYWt0YRFTJ3c3DS+lsE887yJHqVtdit jm0LtiwerMfrMyY/TiBxux7nF87YgOb0TidG+/kThFlGefViHVtIJFaVdJ4= -----END CERTIFICATE-----Generated at Fri Apr 4 19:23:49 2025 by rpki-client