$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer File: 2c2ae48f-475b-42b3-9a56-ce8852515055.cer (raw, json) Hash identifier: WIPjA1B824wxcDaG+JpQik1FLMld+A9kwbIlrisPUOw= Subject key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848D4D410FC54EA78B7C9781080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Feb 2025 01:45:32 +0000 Certificate not after: Sun 16 May 2027 00:45:32 +0000 Subordinate resources: AS: 400142 IP: 23.191.176.0/24 IP: 2602:fc99::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d4:d4:10:fc:54:ea:78:b7:c9:78:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 10 01:45:32 2025 GMT Not After : May 16 00:45:32 2027 GMT Subject: CN=2c2ae48f-475b-42b3-9a56-ce8852515055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:7d:f9:45:8e:97:c4:83:1e:39:3e:2b:ac: d1:13:58:4d:a7:64:28:0e:e4:66:15:ee:71:96:97: 58:30:eb:1c:93:28:58:35:8b:6b:7a:11:cc:0e:38: 77:e7:6f:c2:5c:8c:5e:5d:c7:f9:59:1b:9c:2d:a4: bd:8c:12:3e:d7:7b:08:bd:25:43:57:95:c6:b8:62: 84:d9:9d:48:a0:bf:68:67:83:5b:72:e7:b9:06:df: 08:ea:a4:2b:72:1f:2b:2c:82:7b:88:dd:91:08:56: f9:03:ef:80:e1:c0:c2:7d:0d:71:47:cf:fd:9f:a5: 61:9b:99:70:b7:13:53:77:71:2e:6c:3b:98:d7:a4: 18:b9:28:0b:62:cc:b8:a8:ae:ed:2a:7d:59:de:7e: 96:84:c8:0b:c2:6c:9b:b6:d1:1d:b0:75:31:d0:16: b4:ad:61:5a:5b:cd:b4:01:b8:f1:24:58:f8:dd:9e: bc:90:ef:a9:7f:41:95:65:f5:9f:8a:44:ca:06:36: 25:3d:39:2d:6a:72:3c:3c:95:78:8c:7b:53:df:f8: 3a:17:3f:01:7a:5f:b3:4c:bc:da:31:f1:fe:25:10: 46:d8:f2:46:8c:fb:ed:16:c1:89:67:0a:27:b1:48: fc:c6:b0:1d:73:21:5d:c4:86:3f:9a:34:96:4b:d1: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.191.176.0/24 IPv6: 2602:fc99::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400142 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e7:c4:16:ac:71:02:5b:b6:16:01:4c:d4:9a:d3:37:3e:38: 93:5a:67:d0:e5:6a:4e:b5:0d:68:ae:53:bb:38:a3:d9:b5:d2: 4c:c7:f5:83:5d:8c:0e:33:15:e5:90:05:12:f1:5d:b1:0d:b3: 4b:06:1d:b6:12:34:2f:d6:96:85:8e:2f:7f:71:72:39:b8:ce: 09:03:06:fe:55:ae:91:13:02:f9:64:84:d4:99:0d:c1:96:8f: 0b:59:41:53:85:3e:76:6c:9e:60:08:30:e8:93:19:7d:0c:ae: 69:0a:44:a0:67:bc:42:64:20:7c:0a:34:3a:c2:71:b8:90:e2: 6c:8a:40:e8:05:97:15:ee:c1:2a:15:45:f4:19:7c:b3:34:8d: da:3c:53:bd:1f:e3:d4:0a:13:62:5f:fa:2d:a4:06:6f:0a:bb: 13:6e:5d:32:74:65:3e:ce:35:c3:34:65:07:09:ff:15:63:9f: 1f:9d:82:c5:4b:c4:f4:a4:e5:76:d7:f5:1d:e3:53:bd:2d:d8: 84:c7:be:f0:e2:9f:db:4a:0b:7e:e0:e5:14:97:4b:87:8c:8d: c6:c2:6d:a1:b2:1c:27:ff:7e:cb:21:bf:8f:20:85:cd:9a:ae: 32:27:b5:e9:63:e5:a4:51:80:57:50:39:d8:cf:07:68:0f:e0: e9:2f:85:e3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEjU1BD8VOp4t8l4EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIxMDAxNDUzMloXDTI3MDUxNjAwNDUzMlowLzEtMCsGA1UEAxMk MmMyYWU0OGYtNDc1Yi00MmIzLTlhNTYtY2U4ODUyNTE1MDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNZ9+UWOl8SDHjk+K6zRE1hNp2QoDuRmFe5x lpdYMOsckyhYNYtrehHMDjh352/CXIxeXcf5WRucLaS9jBI+13sIvSVDV5XGuGKE 2Z1IoL9oZ4Nbcue5Bt8I6qQrch8rLIJ7iN2RCFb5A++A4cDCfQ1xR8/9n6Vhm5lw txNTd3EubDuY16QYuSgLYsy4qK7tKn1Z3n6WhMgLwmybttEdsHUx0Ba0rWFaW820 AbjxJFj43Z68kO+pf0GVZfWfikTKBjYlPTktanI8PJV4jHtT3/g6Fz8Bel+zTLza MfH+JRBG2PJGjPvtFsGJZwonsUj8xrAdcyFdxIY/mjSWS9FqnQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFIQbNUkjhA8YKJUVHIPSnNow7eRMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y YzJhZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4NTI1MTUwNTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJjMmFlNDhmLTQ3NWItNDJiMy05 YTU2LWNlODg1MjUxNTA1NS8yYzJhZTQ4Zi00NzViLTQyYjMtOWE1Ni1jZTg4NTI1 MTUwNTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXv7AwDgQCAAIwCAMGBCYC/JkAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYbDjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAz58QWrHECW7YWAUzUmtM3PjiT WmfQ5WpOtQ1orlO7OKPZtdJMx/WDXYwOMxXlkAUS8V2xDbNLBh22EjQv1paFji9/ cXI5uM4JAwb+Va6REwL5ZITUmQ3Blo8LWUFThT52bJ5gCDDokxl9DK5pCkSgZ7xC ZCB8CjQ6wnG4kOJsikDoBZcV7sEqFUX0GXyzNI3aPFO9H+PUChNiX/otpAZvCrsT bl0ydGU+zjXDNGUHCf8VY58fnYLFS8T0pOV21/Ud41O9LdiEx77w4p/bSgt+4OUU l0uHjI3Gwm2hshwn/37LIb+PIIXNmq4yJ7XpY+WkUYBXUDnYzwdoD+DpL4Xj -----END CERTIFICATE-----Generated at Thu May 1 18:13:20 2025 by rpki-client