$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer File: df1c4d20-5b5b-4073-83b7-529a82c159fd.cer (raw, json) Hash identifier: FTzbmFo6jafowp1vbZE8UhmoTSmJYUJ4F0RcyJKhq3E= Subject key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858491A9F2CF7B5624264B912FD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 07 Mar 2025 01:45:33 +0000 Certificate not after: Thu 10 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 22036 AS: 25854 AS: 46250 AS: 46271 AS: 393803 IP: 74.200.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:9f:2c:f7:b5:62:42:64:b9:12:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 7 01:45:33 2025 GMT Not After : Jun 10 00:45:33 2027 GMT Subject: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:c3:e0:68:de:94:83:2d:c0:5c:28:8c:89: 0c:d4:d1:91:02:c5:21:40:b1:ba:7c:3a:d1:e6:77: f3:9f:4d:53:8b:06:d2:e5:12:88:9c:6a:b1:d4:39: 87:c4:e9:26:dd:80:34:c6:80:43:40:61:51:c2:ad: d1:aa:22:3d:d9:8a:49:f5:3e:0c:fa:d1:3d:5e:29: 3c:6e:fd:92:72:d9:54:24:33:5e:12:7e:26:f7:04: 58:f2:40:4d:39:1d:00:ea:ec:78:a9:57:a0:57:81: 84:66:c9:5c:ff:b8:a4:24:7f:9d:e5:c2:de:15:ff: f7:49:91:11:80:8d:4d:2d:09:7a:f3:e9:1e:6c:85: 54:5c:f6:d7:30:80:95:92:4a:c4:92:24:02:10:75: b8:f0:11:c4:a5:a2:18:35:60:a5:06:c7:84:10:a4: 1f:d0:a7:f4:f9:21:61:31:9a:d6:14:eb:83:48:26: 7f:4d:4f:78:0f:e8:df:60:63:fb:68:48:13:7c:c9: ff:7e:57:62:7d:49:5b:f9:1e:bc:61:c8:45:ce:66: 16:e9:de:d7:1b:2f:58:22:b5:2c:0a:5a:f6:6e:b9: 57:ea:3e:06:86:a2:08:c9:0d:2d:7a:6a:f1:43:c3: dc:c7:b5:4f:df:0c:39:e2:fd:6e:12:2a:2e:4c:c8: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.200.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22036 25854 46250 46271 393803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:6a:1b:a2:36:3f:ef:e9:b2:1a:81:34:41:18:e4:3e:27:b7: c6:01:ab:c5:fc:f1:09:6a:79:e2:f1:cd:c0:81:ca:bf:73:67: 66:44:c2:71:77:c9:ea:3a:6a:83:60:dc:6d:23:e0:7e:1a:5a: 75:ba:5f:1e:48:31:1d:e8:5e:e2:af:ce:54:5c:a2:58:78:9f: 84:a5:95:f6:a0:a0:f9:c1:ba:ae:de:5f:9e:59:88:bb:4a:6b: 92:6d:f4:38:16:c6:40:5c:b6:94:29:68:67:4b:a7:90:45:48: b9:1b:c4:f2:c0:43:13:41:74:4d:d7:e4:cf:c3:1e:74:ee:c1: 39:cd:b8:c3:c9:f1:04:a2:cb:52:53:77:0c:5d:b4:81:28:33: f9:9b:8b:48:bc:1d:8f:ee:bb:dc:b9:7f:38:8a:8c:b9:14:a4: 83:f7:3a:e7:0b:9f:91:a6:7f:fd:ed:50:0e:e0:52:39:39:8c: 3e:76:b9:37:22:37:36:cf:74:36:ff:3a:68:54:52:e5:57:93: e9:3a:1d:c3:fc:ba:0e:ff:76:c4:e3:80:e2:d9:51:73:ec:a7: 1b:65:e5:09:21:7a:06:75:ab:b4:e9:00:8d:c2:9c:2c:1b:51: 42:a7:a3:be:bf:b7:b9:ad:0c:e6:e6:88:67:ea:9b:97:6e:4f: 2e:57:30:cf -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEkanyz3tWJCZLkS/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMwNzAxNDUzM1oXDTI3MDYxMDAwNDUzM1owLzEtMCsGA1UEAxMk ZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzDD4GjelIMtwFwojIkM1NGRAsUhQLG6fDrR 5nfzn01TiwbS5RKInGqx1DmHxOkm3YA0xoBDQGFRwq3RqiI92YpJ9T4M+tE9Xik8 bv2SctlUJDNeEn4m9wRY8kBNOR0A6ux4qVegV4GEZslc/7ikJH+d5cLeFf/3SZER gI1NLQl68+kebIVUXPbXMICVkkrEkiQCEHW48BHEpaIYNWClBseEEKQf0Kf0+SFh MZrWFOuDSCZ/TU94D+jfYGP7aEgTfMn/fldifUlb+R68YchFzmYW6d7XGy9YIrUs Clr2brlX6j4GhqIIyQ0temrxQ8Pcx7VP3ww54v1uEiouTMgRtwIDAQABo4IELTCC BCkwHQYDVR0OBBYEFDa8NCspzPkWqyJXpkNzc3poWetXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k ZjFjNGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RmMWM0ZDIwLTViNWItNDA3My04 M2I3LTUyOWE4MmMxNTlmZC9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01MjlhODJj MTU5ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVKyGAwLAYIKwYBBQUHAQgBAf8EHTAboBkwFwIC VhQCAmT+AgMAtKoCAwC0vwIDBgJLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAVqG6I2P+/pshqBNEEY5D4n t8YBq8X88QlqeeLxzcCByr9zZ2ZEwnF3yeo6aoNg3G0j4H4aWnW6Xx5IMR3oXuKv zlRcolh4n4SllfagoPnBuq7eX55ZiLtKa5Jt9DgWxkBctpQpaGdLp5BFSLkbxPLA QxNBdE3X5M/DHnTuwTnNuMPJ8QSiy1JTdwxdtIEoM/mbi0i8HY/uu9y5fziKjLkU pIP3OucLn5Gmf/3tUA7gUjk5jD52uTciNzbPdDb/OmhUUuVXk+k6HcP8ug7/dsTj gOLZUXPspxtl5QkhegZ1q7TpAI3CnCwbUUKno76/t7mtDObmiGfqm5duTy5XMM8= -----END CERTIFICATE-----Generated at Fri Apr 4 16:24:04 2025 by rpki-client