$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer File: 25a08492-b3b1-4aa1-b56d-01a98f7d0919.cer (raw, json) Hash identifier: O0/m0sAagAwBMWSOQ6Bq8XI3JwG11bp487rA1xzlpWQ= Subject key identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A0502E184165F97AD66D99780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 May 2025 00:45:36 +0000 Certificate not after: Thu 02 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 22446 IP: 205.233.244.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:05:02:e1:84:16:5f:97:ad:66:d9:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 30 00:45:36 2025 GMT Not After : Sep 2 00:45:36 2027 GMT Subject: CN=25a08492-b3b1-4aa1-b56d-01a98f7d0919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0d:13:1a:f2:8f:ff:b0:da:c2:5c:64:f2:b8: 57:06:75:2a:1a:c2:4d:3e:21:54:e8:e7:cc:06:c6: 5e:d4:ab:4c:be:ca:4b:2c:74:55:12:a2:ab:cd:8b: 74:ff:04:97:d3:e4:de:89:35:f6:77:aa:cf:7f:06: 19:ad:e5:e1:cf:6e:77:92:5e:15:c9:da:20:57:5b: 82:fb:93:6c:fe:ec:ab:20:88:ed:34:1d:b7:fc:c5: ae:18:a1:f7:a2:cc:b7:6f:03:1f:b8:9b:97:0d:a0: bd:5a:9f:71:51:a4:2a:60:0c:2d:41:56:2f:08:f0: cf:cd:f6:9c:b0:8c:34:51:43:20:37:6a:07:1f:c0: 0c:7b:c5:e8:98:1c:45:18:e5:1a:ad:91:0a:88:46: d2:65:f9:21:e1:10:19:d0:6d:4a:4c:2e:ba:cd:5b: a9:22:53:d5:22:78:5c:66:b4:d2:a9:1f:ad:5c:65: 28:ce:c2:21:17:7f:12:b0:b1:28:71:81:b8:f3:11: c5:24:b7:bd:dc:53:40:8a:39:38:d3:58:6b:2c:9e: a1:a6:6a:14:5e:a6:0d:f3:44:e3:cd:6c:ab:77:cf: 60:f8:b8:e5:f6:db:37:e7:fe:9b:30:69:15:55:44: 4c:2d:7a:45:24:b9:8f:5c:fe:bd:e6:e8:37:34:94: be:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:09:FA:21:7C:D7:8E:9E:A4:DE:A4:06:DE:33:AF:CB:24:DA:6B:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/25a08492-b3b1-4aa1-b56d-01a98f7d0919/25a08492-b3b1-4aa1-b56d-01a98f7d0919.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 205.233.244.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:a8:39:e2:46:02:43:96:c4:4a:bc:3c:e4:f6:47:a1:2c:80: a1:9b:f0:8d:11:2c:b8:70:22:bd:e4:56:8d:6f:ed:55:ec:5b: 20:d6:58:c3:ad:52:2c:13:30:f5:2c:0f:6a:77:71:33:2f:3e: bc:b1:48:9f:10:a1:5c:5e:c4:0f:83:30:4c:5a:1b:82:be:8e: 55:76:33:69:6d:b2:21:f2:d1:3e:13:c7:f2:bc:09:7b:f8:d8: b9:21:60:dd:4e:f1:56:6d:80:99:47:39:10:70:2e:d8:db:52: 92:16:ac:f2:46:5f:7f:84:c3:b2:5f:fd:e3:46:4c:d1:49:ef: 42:d7:6b:17:40:9b:f2:44:fb:93:74:1a:e5:9c:f5:7d:2f:16: e4:ce:a1:a2:d8:ce:a5:d4:3c:b6:88:4e:4f:ba:1b:97:30:a4: 6a:a7:bc:38:91:de:0b:dc:81:61:5d:60:49:1a:7d:5b:3e:4c: d8:9b:47:2b:7e:1e:fa:b5:e9:ce:17:58:a7:e0:7c:c7:1c:f5: 0d:f7:3b:b4:58:a3:87:75:34:38:02:c8:2d:06:2f:64:57:74: 6a:23:94:bb:12:05:f3:a4:50:f8:3c:02:c8:ae:1b:cc:7d:b6: 84:eb:4b:04:9f:5b:f5:44:de:18:26:ab:d8:db:1f:57:66:01: c4:c1:77:7f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEoFAuGEFl+XrWbZl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUzMDAwNDUzNloXDTI3MDkwMjAwNDUzNlowLzEtMCsGA1UEAxMk MjVhMDg0OTItYjNiMS00YWExLWI1NmQtMDFhOThmN2QwOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ0TGvKP/7Dawlxk8rhXBnUqGsJNPiFU6OfM BsZe1KtMvspLLHRVEqKrzYt0/wSX0+TeiTX2d6rPfwYZreXhz253kl4VydogV1uC +5Ns/uyrIIjtNB23/MWuGKH3osy3bwMfuJuXDaC9Wp9xUaQqYAwtQVYvCPDPzfac sIw0UUMgN2oHH8AMe8XomBxFGOUarZEKiEbSZfkh4RAZ0G1KTC66zVupIlPVInhc ZrTSqR+tXGUozsIhF38SsLEocYG48xHFJLe93FNAijk401hrLJ6hpmoUXqYN80Tj zWyrd89g+Ljl9ts35/6bMGkVVURMLXpFJLmPXP695ug3NJS+AwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFBMJ+iF8146epN6kBt4zr8sk2msGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y NWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3ZDA5MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzI1YTA4NDkyLWIzYjEtNGFhMS1i NTZkLTAxYTk4ZjdkMDkxOS8yNWEwODQ5Mi1iM2IxLTRhYTEtYjU2ZC0wMWE5OGY3 ZDA5MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALN6fQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC V64wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdKg54kYCQ5bESrw85PZHoSyAoZvwjREsuHAiveRWjW/tVexb INZYw61SLBMw9SwPandxMy8+vLFInxChXF7ED4MwTFobgr6OVXYzaW2yIfLRPhPH 8rwJe/jYuSFg3U7xVm2AmUc5EHAu2NtSkhas8kZff4TDsl/940ZM0UnvQtdrF0Cb 8kT7k3Qa5Zz1fS8W5M6hotjOpdQ8tohOT7oblzCkaqe8OJHeC9yBYV1gSRp9Wz5M 2JtHK34e+rXpzhdYp+B8xxz1Dfc7tFijh3U0OALILQYvZFd0aiOUuxIF86RQ+DwC yK4bzH22hOtLBJ9b9UTeGCar2NsfV2YBxMF3fw== -----END CERTIFICATE-----Generated at Sun Jun 15 20:20:02 2025 by rpki-client