$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer File: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer (raw, json) Hash identifier: 7UbFaYurlCcD+/GYnSmA8vSSexA13IZhKBX8tHVTsCg= Subject key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849D857EA81251705E145501800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 14 May 2025 00:45:34 +0000 Certificate not after: Tue 17 Aug 2027 00:45:34 +0000 Subordinate resources: IP: 193.149.145.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:57:ea:81:25:17:05:e1:45:50:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 14 00:45:34 2025 GMT Not After : Aug 17 00:45:34 2027 GMT Subject: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:89:05:6a:9a:dd:39:39:e8:fb:0b:34:37: 05:04:c2:0d:74:f5:d2:42:e5:65:b3:75:06:d5:96: 21:9e:f9:aa:d6:58:51:6a:1f:44:d7:4e:fb:9a:bb: 1c:f3:31:e3:19:ee:aa:ce:35:99:e8:47:ce:3c:99: 90:17:a7:17:b0:12:53:69:9d:53:06:c1:1b:b5:52: 36:94:d1:f4:51:ff:92:a7:53:3a:b7:e3:dd:67:ca: 24:e2:a2:4a:08:02:6f:30:81:03:6d:54:9c:b1:25: ba:78:47:02:b8:1a:63:e5:00:fd:e9:15:01:50:50: f0:dc:be:b2:b7:84:78:a9:2b:1a:81:88:08:f9:49: 81:05:49:a3:70:eb:8c:a5:a2:7c:1f:fb:d5:10:fa: c9:2f:dc:eb:50:c4:ef:0a:8d:76:f0:4c:12:be:e0: 03:e6:d4:03:60:9e:43:65:38:4d:69:c4:c2:8a:27: 90:3b:8f:65:94:36:0a:12:cc:ef:c0:69:56:61:5d: 1e:79:fd:82:6b:57:7b:ca:42:8d:ec:47:54:ce:6d: 03:88:f1:7d:6d:ca:eb:21:68:1d:16:28:f8:a9:cd: 11:93:57:81:27:b9:1e:64:59:0e:79:8a:27:f7:cd: 79:91:34:77:6a:d4:c7:43:d8:d5:62:d4:21:1c:bf: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 193.149.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:23:67:ce:20:ae:f7:7a:0c:2e:97:00:e0:62:e2:bc:cf:3b: 57:52:b6:1d:54:6f:28:46:2f:c8:49:dd:87:e6:60:42:cb:ca: 1c:9b:86:df:a3:cd:24:78:45:fb:b9:43:d4:a4:de:0d:4d:45: 70:bb:f4:ae:0e:4c:1d:7a:74:d5:88:b1:df:5b:7e:e1:a7:bd: 0f:c5:af:41:0f:3d:42:8d:e4:85:7b:1c:ff:af:d1:86:5e:11: a6:d7:b5:f9:9f:9e:f2:29:99:e9:5a:00:5d:44:fb:a2:42:12: 6d:a6:dc:f1:d3:b2:9d:08:95:01:2d:2c:54:a9:7f:21:44:04: a8:27:e7:5a:44:be:36:7c:4e:45:32:9b:30:e2:cc:9b:cd:18: 30:f8:fa:d7:c5:a1:81:6f:cf:5a:c8:e8:1c:51:4f:80:79:5a: 09:36:f2:f0:69:ee:a7:40:55:5e:82:a3:b6:99:d6:5b:8f:9f: a7:c6:d7:f3:39:5d:78:01:05:14:bb:d4:7b:ba:7f:00:af:4e: bd:39:28:7c:94:f6:a7:0c:0e:05:c7:fe:81:d1:e1:c9:25:99: fb:e3:55:60:e5:9e:2c:1c:91:9a:ca:e1:12:01:45:1b:76:d6: 28:e6:89:d8:29:2e:ff:36:4b:01:13:f7:2f:17:0c:4f:fa:93: 0d:09:2e:4c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEnYV+qBJRcF4UVQGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUxNDAwNDUzNFoXDTI3MDgxNzAwNDUzNFowLzEtMCsGA1UEAxMk M2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUxMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPiJBWqa3Tk56PsLNDcFBMINdPXSQuVls3UG 1ZYhnvmq1lhRah9E1077mrsc8zHjGe6qzjWZ6EfOPJmQF6cXsBJTaZ1TBsEbtVI2 lNH0Uf+Sp1M6t+PdZ8ok4qJKCAJvMIEDbVScsSW6eEcCuBpj5QD96RUBUFDw3L6y t4R4qSsagYgI+UmBBUmjcOuMpaJ8H/vVEPrJL9zrUMTvCo128EwSvuAD5tQDYJ5D ZThNacTCiieQO49llDYKEszvwGlWYV0eef2Ca1d7ykKN7EdUzm0DiPF9bcrrIWgd Fij4qc0Rk1eBJ7keZFkOeYon9815kTR3atTHQ9jVYtQhHL9h6QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMeNYJEKe7o5In6+bOYvBY7SZv2GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z ZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzNmMjhiNjJjLTdjNTAtNGNjZi1i YWM1LWE2Y2VkOWM1MTBhZS8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDlj NTEwYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADBlZEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAaiNnziCu93oMLpcA4GLi vM87V1K2HVRvKEYvyEndh+ZgQsvKHJuG36PNJHhF+7lD1KTeDU1FcLv0rg5MHXp0 1Yix31t+4ae9D8WvQQ89Qo3khXsc/6/Rhl4Rpte1+Z+e8imZ6VoAXUT7okISbabc 8dOynQiVAS0sVKl/IUQEqCfnWkS+NnxORTKbMOLMm80YMPj618WhgW/PWsjoHFFP gHlaCTby8Gnup0BVXoKjtpnWW4+fp8bX8zldeAEFFLvUe7p/AK9OvTkofJT2pwwO Bcf+gdHhySWZ++NVYOWeLByRmsrhEgFFG3bWKOaJ2Cku/zZLARP3LxcMT/qTDQku TA== -----END CERTIFICATE-----Generated at Sat Jun 14 18:46:16 2025 by rpki-client