$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer File: 29c52fab-59b0-46f8-851d-6644aaf1eaa7.cer (raw, json) Hash identifier: Fn19y6RF02IrroTjPX1zc1Y1E9DSyB8Dlt4FCjv5TY4= Subject key identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A3645FF69F178D54109057C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 16:15:27 +0000 Certificate not after: Mon 03 May 2027 00:45:33 +0000 Subordinate resources: IP: 162.208.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:45:ff:69:f1:78:d5:41:09:05:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 16 16:15:27 2025 GMT Not After : May 3 00:45:33 2027 GMT Subject: CN=29c52fab-59b0-46f8-851d-6644aaf1eaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b3:0f:ee:0c:95:7d:73:85:07:42:77:9b:2d: 86:4f:c0:75:49:a5:8d:93:98:0b:f2:7d:cf:09:f6: 6f:51:42:fc:52:28:b3:8e:6b:ca:1d:cd:61:c3:69: 74:0e:4e:d5:87:b0:7f:3e:5f:aa:25:01:01:58:f5: af:e5:b5:84:81:ad:c9:10:ce:02:52:84:e7:ff:ca: b1:af:62:89:f9:92:6d:aa:88:21:3b:34:04:ca:c9: 33:69:f6:57:f9:84:cc:e8:1d:7f:69:67:da:ba:a8: 9a:ba:fb:85:c6:15:8a:3d:49:98:75:8c:ad:5b:1e: 55:ab:f3:cb:61:27:99:64:e1:11:98:26:6e:55:f1: fd:f8:85:d0:a5:1a:9c:bd:c6:80:23:44:96:91:f1: 5f:44:f2:0e:1a:19:00:3f:df:40:5d:79:7d:15:8c: 23:37:98:39:a0:02:58:24:1d:63:79:3a:07:0a:9b: 6d:21:1d:48:16:a6:e6:30:20:2d:51:c8:d2:21:e1: ab:a4:fc:21:06:b7:22:27:4a:b2:64:d5:9f:16:e7: 63:3c:7c:1c:5d:00:bf:df:98:7b:0f:d4:70:0c:34: e6:48:04:01:1b:a0:5e:17:a2:68:49:78:74:e6:f8: e4:aa:31:15:b9:43:42:8b:7b:27:b8:81:ae:8d:6f: a3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:91:F3:75:E2:28:B8:9D:74:5C:35:5B:A9:12:2E:B2:87:25:FE:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/29c52fab-59b0-46f8-851d-6644aaf1eaa7/29c52fab-59b0-46f8-851d-6644aaf1eaa7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 162.208.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:c8:6b:c6:6f:ca:98:07:85:16:9e:bb:a6:c1:46:22:b6:35: 11:6b:29:7b:74:1b:ed:a6:d4:7c:ee:35:94:2a:c8:5e:29:56: f9:91:ce:44:b2:f2:a9:4b:a2:95:da:eb:29:ed:66:87:3a:c1: a7:1f:24:aa:89:ae:c4:45:a7:4d:d9:56:15:5c:92:af:4c:25: fc:33:e0:bb:5d:0e:47:81:85:19:2e:a8:2e:23:a8:42:73:74: 04:de:f9:59:b2:5a:e2:ec:f0:89:b4:32:30:a0:de:cd:55:31: 2c:dc:df:93:c2:0a:af:31:5d:db:5f:5f:91:db:20:6d:52:18: 45:ff:a5:ff:77:7b:83:d7:89:84:0c:a3:33:3a:4e:91:0f:c7: 29:5f:98:40:32:50:29:03:3b:42:a3:54:1d:c4:ff:1c:34:d6: 39:9f:3f:8c:b5:ef:f1:ec:f4:c0:4a:45:e1:78:b1:be:20:6e: 6d:48:3b:d1:8b:8f:2f:13:bd:2e:8d:9a:31:4d:b8:48:cc:de: 9f:94:65:03:2d:42:ee:ec:60:74:78:08:44:aa:73:df:f5:64: 88:eb:60:9e:7c:13:a2:f2:5b:56:fc:bb:95:45:23:88:f8:1e: c7:8a:22:2d:ef:34:7e:f4:4d:ea:ad:47:40:8f:af:90:ee:17: b6:14:d5:86 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEo2Rf9p8XjVQQkFfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYxNjE2MTUyN1oXDTI3MDUwMzAwNDUzM1owLzEtMCsGA1UEAxMk MjljNTJmYWItNTliMC00NmY4LTg1MWQtNjY0NGFhZjFlYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrMP7gyVfXOFB0J3my2GT8B1SaWNk5gL8n3P CfZvUUL8UiizjmvKHc1hw2l0Dk7Vh7B/Pl+qJQEBWPWv5bWEga3JEM4CUoTn/8qx r2KJ+ZJtqoghOzQEyskzafZX+YTM6B1/aWfauqiauvuFxhWKPUmYdYytWx5Vq/PL YSeZZOERmCZuVfH9+IXQpRqcvcaAI0SWkfFfRPIOGhkAP99AXXl9FYwjN5g5oAJY JB1jeToHCpttIR1IFqbmMCAtUcjSIeGrpPwhBrciJ0qyZNWfFudjPHwcXQC/35h7 D9RwDDTmSAQBG6BeF6JoSXh05vjkqjEVuUNCi3snuIGujW+jpwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFBaR83XiKLiddFw1W6kSLrKHJf72MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y OWM1MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0YWFmMWVhYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzI5YzUyZmFiLTU5YjAtNDZmOC04 NTFkLTY2NDRhYWYxZWFhNy8yOWM1MmZhYi01OWIwLTQ2ZjgtODUxZC02NjQ0YWFm MWVhYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKi0AwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdMhrxm/KmAeFFp67psFG IrY1EWspe3Qb7abUfO41lCrIXilW+ZHORLLyqUuildrrKe1mhzrBpx8kqomuxEWn TdlWFVySr0wl/DPgu10OR4GFGS6oLiOoQnN0BN75WbJa4uzwibQyMKDezVUxLNzf k8IKrzFd219fkdsgbVIYRf+l/3d7g9eJhAyjMzpOkQ/HKV+YQDJQKQM7QqNUHcT/ HDTWOZ8/jLXv8ez0wEpF4XixviBubUg70YuPLxO9Lo2aMU24SMzen5RlAy1C7uxg dHgIRKpz3/VkiOtgnnwTovJbVvy7lUUjiPgex4oiLe80fvRN6q1HQI+vkO4XthTV hg== -----END CERTIFICATE-----Generated at Tue Jun 17 04:01:49 2025 by rpki-client