$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer File: 2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer (raw, json) Hash identifier: Z4vFIhlWp3wQ4QYQac26qu42ef1her4m5vdP7CsLJzc= Subject key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849DA32D1546B15D7499924D680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 May 2025 16:42:26 +0000 Certificate not after: Wed 08 Jul 2026 00:45:21 +0000 Subordinate resources: AS: 400427 IP: 66.33.58.0/23 IP: 206.225.0.0/22 IP: 216.120.144.0/23 IP: 2606:ad40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:da:32:d1:54:6b:15:d7:49:99:24:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 14 16:42:26 2025 GMT Not After : Jul 8 00:45:21 2026 GMT Subject: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:38:b1:f2:f5:cd:fc:96:e2:0f:d1:4a:6a: b5:89:7f:aa:07:71:8e:1f:b8:89:2e:bd:b2:e9:21: b8:ab:09:18:6a:12:2a:90:64:ff:07:e4:0d:6a:2c: fe:74:24:f8:ce:2f:85:93:4d:20:01:f8:36:e3:fe: 2d:3c:95:d2:89:14:1c:1d:71:d7:88:a8:27:61:f2: 5e:9b:a9:70:8e:93:2f:25:29:50:9e:cf:f5:b6:65: 4b:83:13:c1:45:a0:05:32:f7:80:8f:aa:7e:8b:f3: a3:b8:2c:4e:11:5a:f6:d8:2e:64:77:1d:1f:42:18: 2b:75:7d:5a:22:33:f0:1d:86:36:86:59:28:12:cf: 9e:c2:de:05:49:87:fd:c2:3d:83:eb:c3:4f:41:66: 33:1e:f2:9b:94:65:65:ea:d7:92:8c:12:b8:7d:3e: 93:a3:e5:9c:46:41:c2:31:28:97:27:99:e9:7f:f2: e7:a7:b3:64:2b:6c:e5:ed:5c:83:fd:4e:0e:1f:33: 93:1c:33:a6:45:36:0a:f8:c4:b5:7d:28:77:a8:ae: f2:0c:36:ca:55:81:a5:15:68:17:0c:69:11:bf:cb: f0:61:81:65:19:8f:e3:0e:ad:79:6d:23:1d:42:7f: 39:ae:1e:9c:f1:08:82:69:cf:88:35:74:c9:ca:a7: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.33.58.0/23 206.225.0.0/22 216.120.144.0/23 IPv6: 2606:ad40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0b:b4:54:fa:a1:9a:9e:28:58:88:9e:cf:66:72:ab:15:9a: 75:67:dc:e6:b6:3d:1a:31:8b:83:86:fa:77:47:32:42:af:c1: b7:78:08:f1:e3:9b:c0:aa:0a:cf:d4:d0:b0:fc:83:54:96:00: 18:7d:5f:d7:b3:50:d9:0e:7b:ed:fd:8a:62:72:c1:ef:78:39: fb:2c:4a:70:b0:a4:a8:85:0f:2e:6b:11:d4:af:db:9f:d8:29: ca:00:12:d8:1d:d4:3e:dd:8d:fa:28:b2:8f:7b:c4:54:06:0b: fd:66:45:97:a5:c4:bb:7b:dd:72:26:67:ca:b8:b1:c5:a2:6f: 58:3a:71:b4:03:f9:cf:9e:04:ce:28:8d:f2:82:38:94:89:50: b0:7a:93:c5:29:ee:b4:73:ed:94:00:c5:dd:9d:ab:f2:ff:f8: b6:04:23:8e:68:ef:1f:00:6e:14:75:79:cd:d7:05:9e:37:c7: a1:b9:29:2f:45:8c:5d:2e:a3:94:39:60:93:b2:75:ce:c3:2f: fa:5e:a2:31:c7:13:bd:0a:28:b4:61:0d:01:f5:c4:89:31:51: 84:8a:c4:5b:84:a3:cf:77:cf:ff:9a:e4:22:3f:e6:d0:e9:68: 7f:ee:3a:1d:f6:02:75:64:ab:66:38:ca:69:e9:c1:46:62:bb: 25:f9:3d:15 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEnaMtFUaxXXSZkk1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUxNDE2NDIyNloXDTI2MDcwODAwNDUyMVowLzEtMCsGA1UEAxMk MmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW84sfL1zfyW4g/RSmq1iX+qB3GOH7iJLr2y 6SG4qwkYahIqkGT/B+QNaiz+dCT4zi+Fk00gAfg24/4tPJXSiRQcHXHXiKgnYfJe m6lwjpMvJSlQns/1tmVLgxPBRaAFMveAj6p+i/OjuCxOEVr22C5kdx0fQhgrdX1a IjPwHYY2hlkoEs+ewt4FSYf9wj2D68NPQWYzHvKblGVl6teSjBK4fT6To+WcRkHC MSiXJ5npf/Lnp7NkK2zl7VyD/U4OHzOTHDOmRTYK+MS1fSh3qK7yDDbKVYGlFWgX DGkRv8vwYYFlGY/jDq15bSMdQn85rh6c8QiCac+INXTJyqdTcQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFOBGlZEoEy/VjmO4jypDUsTDoTmOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y ZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJlNjdhMzc0LWRiZDMtNGJmYS1i ODJjLTZkYmZkNjRlNTc4Zi8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0 ZTU3OGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAFCIToDBALO4QADBAHYeJAwDQQCAAIwBwMFACYG rUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwrMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGcLtFT6oZqe KFiIns9mcqsVmnVn3Oa2PRoxi4OG+ndHMkKvwbd4CPHjm8CqCs/U0LD8g1SWABh9 X9ezUNkOe+39imJywe94OfssSnCwpKiFDy5rEdSv25/YKcoAEtgd1D7djfooso97 xFQGC/1mRZelxLt73XImZ8q4scWib1g6cbQD+c+eBM4ojfKCOJSJULB6k8Up7rRz 7ZQAxd2dq/L/+LYEI45o7x8AbhR1ec3XBZ43x6G5KS9FjF0uo5Q5YJOydc7DL/pe ojHHE70KKLRhDQH1xIkxUYSKxFuEo893z/+a5CI/5tDpaH/uOh32AnVkq2Y4ymnp wUZiuyX5PRU= -----END CERTIFICATE-----Generated at Sun Jun 15 13:49:19 2025 by rpki-client