$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb.cer File: 147f088f-ace0-45c8-9c73-f06e60d7debb.cer (raw, json) Hash identifier: r9HGUjIapDBa+7plyhVjiv4YVccp/fZjVkpqF0miTY4= Subject key identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848F0BEEB40707787A54393E810 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 20 Feb 2025 01:45:34 +0000 Certificate not after: Wed 26 May 2027 00:45:34 +0000 Subordinate resources: AS: 26794 IP: 66.97.224.0/19 IP: 108.163.96.0/19 IP: 216.147.160.0/19 IP: 2607:fe40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:be:eb:40:70:77:87:a5:43:93:e8:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 20 01:45:34 2025 GMT Not After : May 26 00:45:34 2027 GMT Subject: CN=147f088f-ace0-45c8-9c73-f06e60d7debb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:94:0b:0f:1e:e5:d8:61:77:9f:65:41:ea:2e: 31:89:e8:01:08:08:85:62:ea:7e:05:26:17:a7:3b: f2:83:65:70:f4:b1:3c:e4:e5:0b:13:e0:cb:e5:ea: 68:04:7e:54:d7:23:3d:e7:8f:f5:b7:bd:48:b5:84: 0b:ac:74:f1:9b:8c:47:ae:4d:e3:10:2e:12:73:63: f3:bf:d7:0e:54:f3:ab:ad:75:83:48:46:9c:1d:27: 69:cb:42:d8:fb:0f:2f:1f:1d:1f:f1:d8:4f:78:7c: 57:eb:6f:f6:76:e5:cb:5a:52:42:39:49:97:8a:ea: b0:97:96:fa:b6:d8:12:b4:9b:2d:68:e7:33:09:76: 57:5e:2b:59:f2:56:02:52:61:e1:b6:ef:de:73:ce: bc:7c:36:36:37:7e:e5:d1:43:84:94:64:93:26:bc: 06:82:95:ed:49:f0:8e:ef:5b:3b:8d:4d:56:35:cb: cd:c9:dd:ae:c3:65:cd:03:32:94:98:44:53:3e:df: 71:37:9a:ce:30:d1:c8:8c:4a:bf:0f:e0:c4:4b:b4: 07:4f:d2:ec:a5:4f:79:a7:20:96:c2:96:fa:f8:d9: 79:1b:e3:37:ee:6f:03:a6:6d:b4:c9:51:0a:95:05: 36:55:62:b3:2c:01:98:1c:20:fa:fd:cb:58:06:cb: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1A:EF:6B:4C:36:94:68:ED:3D:23:83:AE:63:05:1F:9B:3E:1D:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/147f088f-ace0-45c8-9c73-f06e60d7debb/147f088f-ace0-45c8-9c73-f06e60d7debb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.97.224.0/19 108.163.96.0/19 216.147.160.0/19 IPv6: 2607:fe40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26794 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f9:d7:34:98:15:bc:34:c9:7e:bb:e0:a4:45:95:63:65:dc: 1c:be:b1:10:1b:0d:d6:4b:da:2a:d2:89:c5:ec:09:81:50:52: b0:c1:30:ba:70:04:67:0e:55:b8:3b:03:5c:77:32:56:5b:39: 8f:ca:66:ed:2c:67:0d:21:b0:d4:9c:ee:6c:d5:88:72:8e:f1: d2:03:e3:08:09:a5:9a:bd:34:9a:97:ca:87:1b:0c:42:fd:31: 14:73:33:0b:3e:f5:8f:f0:a8:6d:89:ae:33:c1:49:da:db:72: de:f8:ae:3d:b8:c1:51:6f:28:2d:38:ff:25:52:a3:ee:cf:5a: df:ab:17:a4:25:f0:a8:4a:6a:c8:81:c4:73:44:6c:96:00:bf: ba:9f:d3:a4:dc:1f:64:c4:be:e6:36:56:88:57:91:c8:b2:b5: 3c:4c:6c:4f:68:97:7f:ea:a2:80:2a:cd:f7:9d:70:46:36:99: a7:3a:3e:87:1a:7c:d3:ed:ce:56:53:01:81:e8:42:ab:5b:ef: 00:ed:60:fa:c4:58:43:df:68:c4:dd:a3:74:cf:f5:70:9d:7a: 7f:a6:19:f5:e1:c7:cc:af:b5:8c:2c:4c:4c:c8:05:fc:50:9e: 77:a0:ca:d2:ac:49:03:49:2b:0f:f9:ae:8a:33:b0:62:32:af: 2f:30:16:52 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEjwvutAcHeHpUOT6BAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIyMDAxNDUzNFoXDTI3MDUyNjAwNDUzNFowLzEtMCsGA1UEAxMk MTQ3ZjA4OGYtYWNlMC00NWM4LTljNzMtZjA2ZTYwZDdkZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pQLDx7l2GF3n2VB6i4xiegBCAiFYup+BSYX pzvyg2Vw9LE85OULE+DL5epoBH5U1yM954/1t71ItYQLrHTxm4xHrk3jEC4Sc2Pz v9cOVPOrrXWDSEacHSdpy0LY+w8vHx0f8dhPeHxX62/2duXLWlJCOUmXiuqwl5b6 ttgStJstaOczCXZXXitZ8lYCUmHhtu/ec868fDY2N37l0UOElGSTJrwGgpXtSfCO 71s7jU1WNcvNyd2uw2XNAzKUmERTPt9xN5rOMNHIjEq/D+DES7QHT9LspU95pyCW wpb6+Nl5G+M37m8Dpm20yVEKlQU2VWKzLAGYHCD6/ctYBssCwwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFKMa72tMNpRo7T0jg65jBR+bPh1/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x NDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBkN2RlYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzE0N2YwODhmLWFjZTAtNDVjOC05 YzczLWYwNmU2MGQ3ZGViYi8xNDdmMDg4Zi1hY2UwLTQ1YzgtOWM3My1mMDZlNjBk N2RlYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAVCYeADBAVso2ADBAXYk6AwDQQCAAIwBwMFACYH /kAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICaKowVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPPnXNJgVvDTJ frvgpEWVY2XcHL6xEBsN1kvaKtKJxewJgVBSsMEwunAEZw5VuDsDXHcyVls5j8pm 7SxnDSGw1JzubNWIco7x0gPjCAmlmr00mpfKhxsMQv0xFHMzCz71j/CobYmuM8FJ 2tty3viuPbjBUW8oLTj/JVKj7s9a36sXpCXwqEpqyIHEc0RslgC/up/TpNwfZMS+ 5jZWiFeRyLK1PExsT2iXf+qigCrN951wRjaZpzo+hxp80+3OVlMBgehCq1vvAO1g +sRYQ99oxN2jdM/1cJ16f6YZ9eHHzK+1jCxMTMgF/FCed6DK0qxJA0krD/muijOw YjKvLzAWUg== -----END CERTIFICATE-----Generated at Sat Apr 26 18:12:05 2025 by rpki-client