$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer File: a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer (raw, json) Hash identifier: 3V+KiIS+jBgLZlhbkZCVHPWISNM728FvEOgfmmsvmJU= Subject key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584917D47D5AFF58741DE3A98980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 06 Mar 2025 01:45:33 +0000 Certificate not after: Wed 09 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 400422 IP: 104.249.160.0/22 IP: 134.65.198.0/23 IP: 2606:a440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:d4:7d:5a:ff:58:74:1d:e3:a9:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 6 01:45:33 2025 GMT Not After : Jun 9 00:45:33 2027 GMT Subject: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:4e:88:74:26:6b:01:ad:9b:90:8c:95:80: c0:51:1a:e5:a0:68:67:da:6e:ae:3f:65:23:49:32: 54:1f:52:6e:7e:a1:6a:f3:5a:52:9e:44:16:82:f1: 91:d7:26:dd:82:55:ad:99:b9:26:ef:a6:ee:b4:a8: 47:78:26:a7:24:40:99:40:00:d2:fa:86:ef:70:69: f1:75:4d:26:c7:4b:0a:88:ab:f7:84:84:db:b1:a0: 55:e6:c6:5a:e5:29:2b:54:fb:f0:f4:14:b3:8e:2a: 6f:7e:c0:e2:d9:5f:3b:22:9a:df:20:de:72:17:ee: 61:cb:e9:c3:95:be:c7:43:71:55:3c:d2:bd:78:51: 90:e0:27:e1:1e:f8:73:a3:63:cb:10:2c:9e:a5:52: 9a:51:d4:ad:f2:0a:b4:b0:2a:bd:fb:dc:16:1b:43: 1d:80:e0:53:66:2c:22:d2:2e:72:18:8d:34:ed:e7: a2:cb:b4:17:53:5d:35:90:a8:bd:c0:72:2a:3f:9d: 9e:9d:ca:2a:ba:45:14:3c:35:cf:5e:64:df:62:e0: bf:53:db:1a:93:87:e0:db:1f:eb:87:ec:b8:fc:62: a4:38:39:0f:ee:11:84:0a:d1:ee:30:e7:5e:d2:16: 23:4e:0d:75:80:11:95:b4:9f:d7:1c:de:54:e6:c7: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.249.160.0/22 134.65.198.0/23 IPv6: 2606:a440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400422 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:81:60:ef:1e:49:35:3a:34:c7:f0:78:ae:80:1b:aa:29:3f: 84:60:eb:d6:9b:f7:2d:9b:97:ce:d6:ce:3b:f2:89:45:f1:37: 13:49:c9:7e:62:b6:93:55:0e:58:57:73:9c:8b:fd:16:86:17: 69:93:bd:00:6b:af:0a:ce:86:f5:b7:db:97:51:ad:89:d9:22: 36:e5:0c:8a:88:80:14:e9:9a:ca:f0:9b:90:8a:38:bf:be:5d: 85:c2:86:77:89:62:f3:1e:dd:72:ca:c9:4d:14:91:d6:2f:77: 7e:e1:27:2c:90:e0:e0:a4:95:92:db:f8:24:c2:cf:56:2e:d6: d2:f6:81:57:24:56:6a:d6:45:87:2f:20:3c:4a:e7:6f:fe:62: 40:47:3d:57:41:c1:e3:af:e8:9b:07:53:ba:ea:5b:b4:c1:3a: 38:35:72:a8:a3:51:17:6a:e0:47:57:d3:ca:f8:86:65:10:8c: e3:4b:79:85:28:83:a4:f2:6f:93:19:eb:86:f6:26:97:d8:59: 97:78:bf:8e:e9:8e:25:93:00:d2:14:18:8a:8f:d6:ff:bb:be: 8f:92:f2:01:80:88:9c:2f:6d:ff:26:05:47:b5:c1:c0:17:93: 2d:de:2f:69:e3:ef:30:21:19:34:f0:0a:2e:e9:bc:23:a8:b3: d2:ac:d4:88 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEkX1H1a/1h0HeOpiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMwNjAxNDUzM1oXDTI3MDYwOTAwNDUzM1owLzEtMCsGA1UEAxMk YTJiODNhZTctNTJiNi00NWI0LTkyYzktYzEyZjdiYjAwOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSlOiHQmawGtm5CMlYDAURrloGhn2m6uP2Uj STJUH1JufqFq81pSnkQWgvGR1ybdglWtmbkm76butKhHeCanJECZQADS+obvcGnx dU0mx0sKiKv3hITbsaBV5sZa5SkrVPvw9BSzjipvfsDi2V87IprfIN5yF+5hy+nD lb7HQ3FVPNK9eFGQ4CfhHvhzo2PLECyepVKaUdSt8gq0sCq9+9wWG0MdgOBTZiwi 0i5yGI007eeiy7QXU101kKi9wHIqP52encoqukUUPDXPXmTfYuC/U9sak4fg2x/r h+y4/GKkODkP7hGECtHuMOde0hYjTg11gBGVtJ/XHN5U5sffCwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBkMk3GdLxVNvhJxrLW8dcgDKA4rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h MmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2JiMDA5ZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2EyYjgzYWU3LTUyYjYtNDViNC05 MmM5LWMxMmY3YmIwMDlmNC9hMmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2Ji MDA5ZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJo+aADBAGGQcYwDQQCAAIwBwMFACYGpEAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHCBYO8eSTU6NMfweK6A G6opP4Rg69ab9y2bl87WzjvyiUXxNxNJyX5itpNVDlhXc5yL/RaGF2mTvQBrrwrO hvW325dRrYnZIjblDIqIgBTpmsrwm5CKOL++XYXChneJYvMe3XLKyU0UkdYvd37h JyyQ4OCklZLb+CTCz1Yu1tL2gVckVmrWRYcvIDxK52/+YkBHPVdBweOv6JsHU7rq W7TBOjg1cqijURdq4EdX08r4hmUQjONLeYUog6Tyb5MZ64b2JpfYWZd4v47pjiWT ANIUGIqP1v+7vo+S8gGAiJwvbf8mBUe1wcAXky3eL2nj7zAhGTTwCi7pvCOos9Ks 1Ig= -----END CERTIFICATE-----Generated at Fri Apr 4 19:16:15 2025 by rpki-client