$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178.cer File: cffdb071-c372-4fb8-ae3c-ab449c400178.cer (raw, json) Hash identifier: MFgPB9p8488OKHuLRKRtfQ56LQYLcP5dUGMmtcnKUzc= Subject key identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858491D69DA2AE92900B201489168 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Mar 2025 01:45:32 +0000 Certificate not after: Fri 11 Jun 2027 00:45:32 +0000 Subordinate resources: AS: 22362 AS: 46409 IP: 207.34.8.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:69:da:2a:e9:29:00:b2:01:48:91:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 8 01:45:32 2025 GMT Not After : Jun 11 00:45:32 2027 GMT Subject: CN=cffdb071-c372-4fb8-ae3c-ab449c400178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a3:17:97:97:31:23:e3:6d:fa:af:77:1c:d3: 8a:86:c8:2a:33:89:7a:64:f4:37:95:3f:1f:0b:fb: 90:73:02:96:37:c0:ac:de:40:12:64:11:d3:d1:9f: 95:5f:27:68:59:e6:50:9b:e3:d6:2c:03:b6:18:a3: 72:cc:69:05:12:13:86:fe:c2:96:48:f8:01:c7:ed: 63:b0:e3:d7:bd:f7:62:cd:31:33:0c:0a:f1:04:7a: db:c0:96:0a:7a:35:ff:3f:06:4a:5c:d6:3a:b5:c2: c2:d0:a4:ff:36:59:02:bd:86:e0:78:95:a8:d5:b5: 96:6f:ae:de:2f:10:8b:88:cc:dd:31:ee:54:99:0d: 1f:90:87:0b:7a:b2:2e:6d:74:16:f2:e7:8c:4b:05: 60:b7:99:51:d1:25:e9:da:0a:66:1c:6f:84:fa:bc: 8d:34:11:bb:c4:6c:ee:45:04:c7:3d:62:58:2c:14: aa:c9:a0:73:76:ea:af:0d:6f:84:9b:ad:da:59:e6: 89:7d:e1:d1:4d:0e:5e:a8:95:ef:07:73:66:f5:48: c1:bf:27:b5:78:38:76:2f:f9:c3:a0:9f:05:12:40: 54:5c:97:fd:15:54:41:1b:1a:99:fc:ba:72:3d:25: fc:b5:d2:1a:a1:66:b1:43:c6:15:61:ab:7a:df:2a: 12:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6F:6B:A4:AA:B8:36:BB:87:9F:70:9F:26:54:41:88:92:FD:6D:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cffdb071-c372-4fb8-ae3c-ab449c400178/cffdb071-c372-4fb8-ae3c-ab449c400178.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 207.34.8.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22362 46409 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:68:3a:22:f7:7f:15:fb:04:e5:83:44:81:8d:f6:a3:88:e5: 6f:61:e4:2c:2e:50:b1:15:e7:20:a8:dd:1e:ab:73:af:65:70: 57:32:6a:38:67:2d:a0:44:16:b3:f1:14:86:53:7d:8e:20:c5: 66:50:98:f5:58:b7:46:00:61:2b:e4:cd:4e:e5:8c:9c:d7:c6: b3:58:0d:57:2a:0f:91:64:ec:ee:cd:e6:eb:d4:f4:8b:15:f8: d0:74:c1:01:7a:51:89:d6:9a:1c:86:9d:44:bc:3b:e0:29:6b: ec:0d:c3:f9:bb:ec:96:56:31:b8:73:aa:db:fe:f2:6f:0d:92: c0:37:59:9a:c0:c5:00:96:a0:6a:6f:ca:ec:a4:61:50:f0:fc: f4:10:35:6e:40:1b:96:61:46:6e:63:4b:9e:6c:c4:10:81:91: ea:73:d1:0f:52:a0:c5:59:a5:80:48:63:98:08:d3:28:91:e4: 6e:c5:fb:a8:52:60:7e:c1:3d:99:2b:64:42:36:c8:a9:f7:55: 14:0b:0e:38:d1:42:93:c2:04:65:ee:45:10:b9:f3:96:de:86: 9d:c4:a3:21:7b:aa:1d:8d:f3:13:51:73:e8:ce:e9:7e:40:39: 35:51:ab:9d:0d:9e:1f:ea:69:29:65:9f:5a:d3:b8:fd:b9:a1: 72:f9:bd:01 -----BEGIN CERTIFICATE----- MIIHDTCCBfWgAwIBAgIUAQ0Mn0MoWEkdadoq6SkAsgFIkWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMwODAxNDUzMloXDTI3MDYxMTAwNDUzMlowLzEtMCsGA1UEAxMk Y2ZmZGIwNzEtYzM3Mi00ZmI4LWFlM2MtYWI0NDljNDAwMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaMXl5cxI+Nt+q93HNOKhsgqM4l6ZPQ3lT8f C/uQcwKWN8Cs3kASZBHT0Z+VXydoWeZQm+PWLAO2GKNyzGkFEhOG/sKWSPgBx+1j sOPXvfdizTEzDArxBHrbwJYKejX/PwZKXNY6tcLC0KT/NlkCvYbgeJWo1bWWb67e LxCLiMzdMe5UmQ0fkIcLerIubXQW8ueMSwVgt5lR0SXp2gpmHG+E+ryNNBG7xGzu RQTHPWJYLBSqyaBzduqvDW+Em63aWeaJfeHRTQ5eqJXvB3Nm9UjBvye1eDh2L/nD oJ8FEkBUXJf9FVRBGxqZ/LpyPSX8tdIaoWaxQ8YVYat63yoSSwIDAQABo4IEHzCC BBswHQYDVR0OBBYEFNBva6SquDa7h59wnyZUQYiS/W3EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j ZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0MDAxNzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2NmZmRiMDcxLWMzNzItNGZiOC1h ZTNjLWFiNDQ5YzQwMDE3OC9jZmZkYjA3MS1jMzcyLTRmYjgtYWUzYy1hYjQ0OWM0 MDAxNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALPIggwHgYIKwYBBQUHAQgBAf8EDzANoAswCQIC V1oCAwC1STBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBFaDoi938V+wTlg0SBjfajiOVvYeQsLlCxFecgqN0e q3OvZXBXMmo4Zy2gRBaz8RSGU32OIMVmUJj1WLdGAGEr5M1O5Yyc18azWA1XKg+R ZOzuzebr1PSLFfjQdMEBelGJ1pochp1EvDvgKWvsDcP5u+yWVjG4c6rb/vJvDZLA N1mawMUAlqBqb8rspGFQ8Pz0EDVuQBuWYUZuY0uebMQQgZHqc9EPUqDFWaWASGOY CNMokeRuxfuoUmB+wT2ZK2RCNsip91UUCw440UKTwgRl7kUQufOW3oadxKMhe6od jfMTUXPozul+QDk1UaudDZ4f6mkpZZ9a07j9uaFy+b0B -----END CERTIFICATE-----Generated at Fri Apr 4 16:13:07 2025 by rpki-client