$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer File: fcbf2352-8296-41fd-bfd5-576c02b9d483.cer (raw, json) Hash identifier: DkK8Grd5qwaFF5C5CH0Ya+ZLYUIgRgMhmUShbYpKZKE= Subject key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858494380C273920EBFA9F23BCD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 17:12:25 +0000 Certificate not after: Thu 16 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 20283 AS: 64227 IP: 64.90.64.0/19 IP: 64.238.0.0/20 IP: 68.170.112.0/20 IP: 69.168.240.0/20 IP: 161.199.130.0/24 IP: 167.94.42.0/23 IP: 167.94.52.0/23 IP: 167.94.62.0/23 IP: 167.94.76.0/23 IP: 172.87.0.0/20 IP: 199.59.116.0/22 IP: 205.214.160.0/20 IP: 209.73.80.0/20 IP: 209.212.32.0/20 IP: 2605:5000::/32 IP: 2606:df80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:80:c2:73:92:0e:bf:a9:f2:3b:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 21 17:12:25 2025 GMT Not After : Jul 16 00:45:21 2026 GMT Subject: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7f:32:a2:8c:28:62:b9:4b:d3:45:44:cb:67: a6:d2:fe:d1:cf:2f:69:58:5c:a7:f8:d8:b2:7d:d6: dc:cf:18:e1:92:1b:25:c7:19:98:45:16:90:fb:20: fe:81:c9:12:60:1f:16:52:c3:1d:8f:2a:3a:9d:14: 85:dd:56:11:45:5f:b3:d6:2d:22:7e:06:e5:93:40: 90:7e:15:d3:2d:63:21:6d:ea:99:58:be:20:50:d4: c0:fb:09:64:76:80:08:db:16:6e:44:1d:6c:08:e4: 51:97:8b:cd:3b:5c:f7:ed:ea:b9:b1:18:a1:69:64: 3d:76:d8:6e:f1:11:aa:f2:a0:31:1c:5c:7e:57:2f: 1d:fa:84:a2:ef:33:6e:25:b3:c0:0e:32:5a:aa:0b: 14:b9:3e:04:3d:be:28:8b:a1:a0:06:1b:9b:5e:6f: ce:0b:80:58:d4:a2:2e:f7:ba:26:f7:d6:81:f5:c1: 69:42:bb:c2:e4:8e:ae:ca:d7:d6:b1:ae:1e:6f:67: d2:81:e5:b4:2f:33:fa:fd:80:f4:76:31:92:ba:c7: 4d:97:e6:22:bc:d5:cb:49:4a:ab:07:c1:c6:c2:2b: 5d:2a:ef:15:eb:8d:fd:bd:a2:ef:d7:33:e9:89:ea: 9e:d7:b1:fb:ce:1d:d6:fd:c3:c5:bd:1d:91:22:95: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.90.64.0/19 64.238.0.0/20 68.170.112.0/20 69.168.240.0/20 161.199.130.0/24 167.94.42.0/23 167.94.52.0/23 167.94.62.0/23 167.94.76.0/23 172.87.0.0/20 199.59.116.0/22 205.214.160.0/20 209.73.80.0/20 209.212.32.0/20 IPv6: 2605:5000::/32 2606:df80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20283 64227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5f:3f:60:95:62:95:be:80:79:67:e6:82:7d:e2:6c:f0:c5: 33:b6:c7:c8:50:82:b5:23:3e:7b:8c:f7:ee:96:f1:ef:26:55: 34:f8:0f:fe:4b:d4:5b:a1:4b:4b:f4:a1:5b:e0:3b:bc:6c:2a: c0:83:02:2b:e0:51:da:ee:51:b5:ac:a2:89:ec:2e:d1:0c:5f: f0:3a:92:ed:64:80:72:97:96:30:e7:ea:30:0b:60:6b:2d:5d: fe:29:1b:2a:05:be:25:85:60:9d:77:d4:8e:f2:61:43:cc:6b: 69:57:3a:8e:8b:41:8e:dd:09:e3:94:46:c1:bc:c9:27:45:07: f9:78:55:ce:2e:ff:cc:70:33:99:05:3d:5c:22:56:ce:a9:51: f4:5a:57:d3:10:5e:c4:a2:97:91:3c:90:dc:47:b4:4f:e8:6f: 11:9e:00:f2:8d:26:de:5f:2b:7d:90:70:3d:01:6d:6e:dd:20: e3:90:f8:28:c4:0e:35:65:93:9d:0a:dd:54:f5:f2:ad:e1:f3: 2d:54:95:be:f8:d9:ec:7f:09:90:2d:e0:21:2e:d3:6c:de:09: 5e:38:c0:47:88:3a:ea:84:54:d1:ca:1b:03:49:cc:c9:0b:d1: 08:5d:86:0a:fe:82:49:42:3e:f4:49:6f:a0:f4:76:fc:9b:d3: 58:ac:b4:2e -----BEGIN CERTIFICATE----- MIIHcjCCBlqgAwIBAgIUAQ0Mn0MoWElDgMJzkg6/qfI7zQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMyMTE3MTIyNVoXDTI2MDcxNjAwNDUyMVowLzEtMCsGA1UEAxMk ZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlkNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX8yoowoYrlL00VEy2em0v7Rzy9pWFyn+Niy fdbczxjhkhslxxmYRRaQ+yD+gckSYB8WUsMdjyo6nRSF3VYRRV+z1i0ifgblk0CQ fhXTLWMhbeqZWL4gUNTA+wlkdoAI2xZuRB1sCORRl4vNO1z37eq5sRihaWQ9dthu 8RGq8qAxHFx+Vy8d+oSi7zNuJbPADjJaqgsUuT4EPb4oi6GgBhubXm/OC4BY1KIu 97om99aB9cFpQrvC5I6uytfWsa4eb2fSgeW0LzP6/YD0djGSusdNl+YivNXLSUqr B8HGwitdKu8V6439vaLv1zPpieqe17H7zh3W/cPFvR2RIpUlNwIDAQABo4IEhDCC BIAwHQYDVR0OBBYEFJD7Ljxim5GAZHm/7tyy/XNqbFlsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m Y2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZjYmYyMzUyLTgyOTYtNDFmZC1i ZmQ1LTU3NmMwMmI5ZDQ4My9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJi OWQ0ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgYMGCCsGAQUF BwEHAQH/BHQwcjBaBAIAATBUAwQFQFpAAwQEQO4AAwQERKpwAwQERajwAwQAoceC AwQBp14qAwQBp140AwQBp14+AwQBp15MAwQErFcAAwQCxzt0AwQEzdagAwQE0UlQ AwQE0dQgMBQEAgACMA4DBQAmBVAAAwUAJgbfgDAeBggrBgEFBQcBCAEB/wQPMA2g CzAJAgJPOwIDAPrjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAFhfP2CVYpW+gHln5oJ94mzwxTO2x8hQgrUj PnuM9+6W8e8mVTT4D/5L1FuhS0v0oVvgO7xsKsCDAivgUdruUbWsoonsLtEMX/A6 ku1kgHKXljDn6jALYGstXf4pGyoFviWFYJ131I7yYUPMa2lXOo6LQY7dCeOURsG8 ySdFB/l4Vc4u/8xwM5kFPVwiVs6pUfRaV9MQXsSil5E8kNxHtE/obxGeAPKNJt5f K32QcD0BbW7dIOOQ+CjEDjVlk50K3VT18q3h8y1Ulb742ex/CZAt4CEu02zeCV44 wEeIOuqEVNHKGwNJzMkL0Qhdhgr+gklCPvRJb6D0dvyb01istC4= -----END CERTIFICATE-----Generated at Fri Apr 4 16:26:01 2025 by rpki-client