$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f.cer File: d84f9350-fc3d-4239-80bf-db10d2462a4f.cer (raw, json) Hash identifier: bZVXCw0f6/39Lj5g90r/LDOBzzabxSc1PNOa9ZQ394g= Subject key identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858492B417F82D0AEEABA894CC580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Mar 2025 00:45:33 +0000 Certificate not after: Wed 16 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 16545 IP: 192.74.220.0/22 IP: 2602:ff80::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2b:41:7f:82:d0:ae:ea:ba:89:4c:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 13 00:45:33 2025 GMT Not After : Jun 16 00:45:33 2027 GMT Subject: CN=d84f9350-fc3d-4239-80bf-db10d2462a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:8e:8d:29:3d:59:5c:da:46:0f:66:a3:3f: b1:44:0c:d6:c7:13:a8:12:e0:50:5f:6e:9b:e1:50: 2a:eb:c7:52:de:8f:74:8f:ec:f3:7f:dc:40:17:9d: e3:31:fb:5f:12:ea:a4:01:42:1c:49:a9:51:51:b7: 7b:6d:d6:df:b7:f3:05:ec:f6:7e:50:25:43:2a:42: 55:11:4d:30:42:08:6b:c6:b8:28:3f:eb:ff:33:81: 88:9e:0a:3d:36:6c:81:83:f6:92:13:a2:76:19:ac: 52:ca:d0:69:5b:c5:e3:9c:68:13:ce:3e:a5:77:79: cd:de:d4:2d:93:c7:a1:d9:eb:de:bc:72:51:e0:0f: 19:68:eb:5f:80:89:68:0f:49:0c:ca:19:5d:7a:2f: bc:c5:35:b9:20:29:4f:1e:67:fc:4f:3e:e9:a5:99: ed:bc:69:a3:17:0a:30:76:31:6c:7c:72:08:1c:b5: e9:94:90:79:82:a3:91:92:23:50:69:74:b8:86:a1: d9:c1:3a:1a:4d:e1:d1:0b:eb:b3:f4:f1:5a:15:a2: bc:3e:3f:10:5c:4b:a2:c0:a7:43:83:b4:dd:c1:12: b2:92:94:ff:12:52:20:a2:a2:65:0c:31:26:eb:56: 3c:f8:23:a9:9f:d4:8f:7c:dc:33:78:6d:01:bc:5d: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1A:F9:23:95:54:C1:F6:41:95:0B:3E:7C:11:DF:22:5A:28:90:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d84f9350-fc3d-4239-80bf-db10d2462a4f/d84f9350-fc3d-4239-80bf-db10d2462a4f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.74.220.0/22 IPv6: 2602:ff80::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16545 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0c:49:9f:4d:94:8c:1a:64:61:e7:9a:68:cb:03:fd:17:fd: 5f:93:b4:6b:c0:09:79:5b:3f:b2:14:bc:e1:c2:9e:6b:a2:a7: 67:8d:03:fe:47:67:a4:2a:b4:ea:fc:0e:36:0a:ec:5f:57:ae: e9:77:62:2f:0b:40:5a:3e:81:5a:25:84:39:30:81:0b:b6:de: 65:3a:4c:81:a2:e8:4b:26:e3:b3:f6:fa:9e:85:5b:bb:0b:10: 76:4a:ef:21:e6:06:c7:e1:f3:d6:54:b5:a6:21:43:f3:76:6a: 61:10:b5:2e:30:d9:6d:80:c1:36:58:3a:2e:30:aa:25:d9:c5: 18:e2:12:67:81:6d:cb:75:8b:e4:76:02:e1:ba:6d:5e:a5:a6: e1:6e:4e:bf:b8:1f:41:dd:f0:8b:5c:f1:40:27:b5:2a:cd:a8: d4:6d:ab:3f:e4:34:9c:47:3a:59:c8:dd:19:fe:76:19:89:66: 51:d1:f6:1d:11:bb:1d:d6:ac:8a:0c:56:0e:9e:59:2f:84:f8: e2:9e:53:4a:c9:24:b4:b6:c6:89:94:92:63:02:38:33:d3:db: c1:d7:48:29:7c:c5:82:cc:27:2c:69:6a:a7:8c:50:11:57:37: 3c:e4:78:0e:1d:ba:f9:ed:35:b8:c1:f6:6d:d9:b8:79:ad:99: a3:5a:27:f3 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEkrQX+C0K7quolMxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMxMzAwNDUzM1oXDTI3MDYxNjAwNDUzM1owLzEtMCsGA1UEAxMk ZDg0ZjkzNTAtZmMzZC00MjM5LTgwYmYtZGIxMGQyNDYyYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2qOjSk9WVzaRg9moz+xRAzWxxOoEuBQX26b 4VAq68dS3o90j+zzf9xAF53jMftfEuqkAUIcSalRUbd7bdbft/MF7PZ+UCVDKkJV EU0wQghrxrgoP+v/M4GIngo9NmyBg/aSE6J2GaxSytBpW8XjnGgTzj6ld3nN3tQt k8eh2evevHJR4A8ZaOtfgIloD0kMyhldei+8xTW5IClPHmf8Tz7ppZntvGmjFwow djFsfHIIHLXplJB5gqORkiNQaXS4hqHZwToaTeHRC+uz9PFaFaK8Pj8QXEuiwKdD g7TdwRKykpT/ElIgoqJlDDEm61Y8+COpn9SPfNwzeG0BvF3OMQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFGca+SOVVMH2QZULPnwR3yJaKJCLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k ODRmOTM1MC1mYzNkLTQyMzktODBiZi1kYjEwZDI0NjJhNGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q4NGY5MzUwLWZjM2QtNDIzOS04 MGJmLWRiMTBkMjQ2MmE0Zi9kODRmOTM1MC1mYzNkLTQyMzktODBiZi1kYjEwZDI0 NjJhNGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALAStwwDgQCAAIwCAMGBCYC/4AAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkChMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADYMSZ9NlIwaZGHnmmjLA/0X/V+T tGvACXlbP7IUvOHCnmuip2eNA/5HZ6QqtOr8DjYK7F9Xrul3Yi8LQFo+gVolhDkw gQu23mU6TIGi6Esm47P2+p6FW7sLEHZK7yHmBsfh89ZUtaYhQ/N2amEQtS4w2W2A wTZYOi4wqiXZxRjiEmeBbct1i+R2AuG6bV6lpuFuTr+4H0Hd8Itc8UAntSrNqNRt qz/kNJxHOlnI3Rn+dhmJZlHR9h0Rux3WrIoMVg6eWS+E+OKeU0rJJLS2xomUkmMC ODPT28HXSCl8xYLMJyxpaqeMUBFXNzzkeA4duvntNbjB9m3ZuHmtmaNaJ/M= -----END CERTIFICATE-----Generated at Fri Apr 4 19:31:41 2025 by rpki-client