$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer File: 207c40f4-33c4-478b-ae61-d3f51358881b.cer (raw, json) Hash identifier: wahgtcl84kLQDVNtuT1k+UNSxUwJ95BCl5DjRdcBPQA= Subject key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849604C81A6119CC821B3206E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Apr 2025 00:45:34 +0000 Certificate not after: Mon 05 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 40091 IP: 76.9.224.0/20 IP: 216.115.192.0/20 IP: 2607:2580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:4c:81:a6:11:9c:c8:21:b3:20:6e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 1 00:45:34 2025 GMT Not After : Jul 5 00:45:34 2027 GMT Subject: CN=207c40f4-33c4-478b-ae61-d3f51358881b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:e3:64:d7:4f:f1:3f:0d:41:10:87:55:02: 01:bb:c0:44:33:9b:35:ea:ba:90:dd:1a:0b:15:d6: 5a:24:d0:ee:86:9f:d1:1d:c7:36:eb:f8:6c:78:f4: d0:18:e7:66:e6:c5:33:0d:aa:2f:0d:29:03:67:79: a5:5f:22:ec:8e:9c:9e:60:08:85:c1:ae:0c:56:f0: 3d:01:e5:df:55:b3:ce:52:6c:7c:b6:b1:ff:39:c5: 52:19:7c:e9:41:b9:cc:ae:ca:71:ef:75:27:ed:33: bb:1b:1d:35:77:a3:a8:94:9e:0d:cc:3c:0c:9a:a7: 3f:05:cf:4a:99:57:32:d1:4b:ae:64:1c:de:59:e9: 8a:a0:87:73:35:df:ec:a7:57:70:c6:c7:20:c7:74: f2:f7:86:f7:df:06:e0:02:73:98:7c:ad:56:4e:c3: 43:db:b6:5a:3b:6b:db:d2:8a:b2:91:f8:6b:33:d1: 57:e6:5b:58:5f:46:6d:0c:1a:fd:de:4e:99:0a:19: 25:f0:5f:c8:9d:eb:4f:dd:8d:27:c5:0a:9e:80:1d: d6:aa:d5:0a:db:62:2e:9c:20:70:89:b3:e6:54:f2: 10:e3:46:ae:8d:3e:d7:65:cf:18:9e:ab:c9:a1:b9: 86:3b:d8:57:93:c0:5b:45:5b:db:1d:71:7f:f8:cc: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 76.9.224.0/20 216.115.192.0/20 IPv6: 2607:2580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40091 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4c:62:84:b9:58:5a:79:3f:64:45:ff:5b:b1:75:11:2b:3c: 59:97:5f:ca:b1:70:b2:41:59:45:c3:1e:a0:aa:28:cb:64:8a: 2e:b4:3f:c5:7a:f6:49:3f:9a:e2:e1:53:eb:45:78:a8:81:1e: af:11:47:0d:d7:e1:85:62:25:b1:d2:f5:c5:87:cf:4c:22:9d: 6c:84:f3:92:2e:51:c3:ed:fb:cb:06:cb:a7:bc:fd:a7:d4:32: f6:37:0f:b3:19:83:0e:6d:c0:ab:67:ef:7a:c9:ac:21:b5:02: de:ee:94:35:7e:b9:14:50:dc:ff:9e:72:c7:19:9a:a6:e8:68: 55:d1:f0:24:f0:57:2c:23:46:28:a7:0b:d8:2d:6a:f5:89:21: ca:e9:4d:90:19:2f:9e:18:0f:b7:e8:21:7b:6b:32:87:82:2d: ff:c9:c7:90:19:c8:24:4c:21:75:70:fb:07:b6:d9:af:0a:b4: fe:86:49:58:18:0e:00:d4:f2:64:a6:df:50:45:0c:38:d5:5d: 41:00:0f:50:76:27:a2:70:34:eb:f3:01:39:d1:55:7f:db:ec: 17:0b:44:9c:57:56:4a:40:59:b0:44:9c:18:29:d0:71:27:78: 2d:d1:b9:12:4b:e9:89:f1:95:04:0b:27:2d:b9:69:40:68:ab: 64:4d:34:aa -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWElgTIGmEZzIIbMgbkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQwMTAwNDUzNFoXDTI3MDcwNTAwNDUzNFowLzEtMCsGA1UEAxMk MjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSvjZNdP8T8NQRCHVQIBu8BEM5s16rqQ3RoL FdZaJNDuhp/RHcc26/hsePTQGOdm5sUzDaovDSkDZ3mlXyLsjpyeYAiFwa4MVvA9 AeXfVbPOUmx8trH/OcVSGXzpQbnMrspx73Un7TO7Gx01d6OolJ4NzDwMmqc/Bc9K mVcy0UuuZBzeWemKoIdzNd/sp1dwxscgx3Ty94b33wbgAnOYfK1WTsND27ZaO2vb 0oqykfhrM9FX5ltYX0ZtDBr93k6ZChkl8F/InetP3Y0nxQqegB3WqtUK22IunCBw ibPmVPIQ40aujT7XZc8YnqvJobmGO9hXk8BbRVvbHXF/+My4FwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFICzsDtpDHXU0jMdtiIPHYc0e3sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y MDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzIwN2M0MGY0LTMzYzQtNDc4Yi1h ZTYxLWQzZjUxMzU4ODgxYi8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1 ODg4MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARMCeADBATYc8AwDQQCAAIwBwMFACYHJYAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAJybMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADhMYoS5WFp5P2RF/1ux dRErPFmXX8qxcLJBWUXDHqCqKMtkii60P8V69kk/muLhU+tFeKiBHq8RRw3X4YVi JbHS9cWHz0winWyE85IuUcPt+8sGy6e8/afUMvY3D7MZgw5twKtn73rJrCG1At7u lDV+uRRQ3P+ecscZmqboaFXR8CTwVywjRiinC9gtavWJIcrpTZAZL54YD7foIXtr MoeCLf/Jx5AZyCRMIXVw+we22a8KtP6GSVgYDgDU8mSm31BFDDjVXUEAD1B2J6Jw NOvzATnRVX/b7BcLRJxXVkpAWbBEnBgp0HEneC3RuRJL6YnxlQQLJy25aUBoq2RN NKo= -----END CERTIFICATE-----Generated at Sat Apr 26 22:55:01 2025 by rpki-client