$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer File: 417c06d0-3203-44fd-b164-0aed50f5638b.cer (raw, json) Hash identifier: qzYshpcid/94jn5CswJG2Vb4Z8iwZQD4boeHiosXAlc= Subject key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858490904239C15D183EC79BAAF40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Feb 2025 18:24:26 +0000 Certificate not after: Tue 28 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 11728 IP: 69.7.79.0/24 IP: 2605:fc40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:04:23:9c:15:d1:83:ec:79:ba:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 28 18:24:26 2025 GMT Not After : Jul 28 00:45:20 2026 GMT Subject: CN=417c06d0-3203-44fd-b164-0aed50f5638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:b0:b6:ef:90:86:54:fa:f3:01:20:a4:fa: 2e:ef:2b:39:92:20:85:f8:98:bf:99:32:5c:95:47: 1e:d9:38:2d:96:84:d3:18:eb:f3:ca:b0:25:f3:e7: f0:5c:35:47:ec:4c:6f:bf:0a:6a:b1:04:bd:fe:78: 18:f3:83:17:db:cd:79:c8:f2:d0:f6:a4:de:06:ee: f4:d9:2c:b7:a0:66:27:6e:3b:f7:f4:1e:dc:26:4c: d6:c8:99:ee:05:7e:cb:30:a3:71:e3:bd:11:a1:05: 5d:e8:2f:6f:a2:6b:b0:db:06:11:cc:75:56:bd:fb: a1:58:b5:25:49:31:18:0a:1f:91:51:e1:4a:2f:47: 10:5c:e3:9b:4c:6c:15:51:02:76:39:cd:f0:43:e6: 0a:c4:2e:64:36:ef:4c:1f:56:5e:07:bc:0e:53:f4: 71:59:f1:d4:b0:59:d1:0e:f6:22:64:18:1e:cd:44: 61:2f:71:96:7a:cf:d4:7e:96:31:1f:dd:42:07:79: 77:db:ab:65:fd:a9:ba:a6:3f:d3:b9:fd:5e:a5:fd: 02:97:da:99:78:90:f7:f5:55:70:4b:4d:8d:73:bf: fb:2d:b8:ba:8e:f9:7c:09:d6:69:81:9f:4a:58:bb: 5c:b9:94:10:88:3d:28:05:9b:cd:48:b8:bc:a2:ff: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 69.7.79.0/24 IPv6: 2605:fc40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11728 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:88:32:a6:36:bc:68:f5:fd:9a:8f:66:e6:ff:55:c1:e4:05: 73:3b:bf:d7:c0:bc:cb:53:6f:60:12:36:5d:39:f8:b0:d1:b1: df:5d:7c:30:ac:07:84:b0:aa:d9:3a:90:45:f4:ff:26:ca:a0: 6d:05:3b:84:4c:b9:56:79:79:82:5f:a5:0f:52:4b:97:27:25: 9f:95:92:4d:7b:f2:bc:e6:ec:60:a2:93:73:d1:be:91:aa:5f: 09:ba:c2:de:b0:ee:78:50:a2:10:64:4c:62:c9:dc:c3:46:0e: e4:6c:3f:fc:46:24:1f:1b:d2:eb:1b:b5:57:46:31:c5:fc:4a: af:44:e9:46:1b:b0:ef:55:8f:f1:13:75:0c:32:2c:31:32:07: 84:b4:7f:18:45:03:5a:d8:54:63:6f:7d:47:42:cc:f5:95:3d: 84:08:9f:8c:3f:ee:1a:c8:78:86:c0:e3:2c:3e:d5:3e:72:8a: cc:c5:8b:38:72:7b:98:a0:22:0c:24:25:7e:70:24:1c:a5:a7: 37:a6:f2:a6:e3:84:1e:08:87:4a:5a:e5:c0:de:44:70:3c:bf: 05:b9:72:bf:c6:19:38:f5:4b:2f:a9:8e:a0:54:3b:b9:7e:ab: 5a:4b:f8:52:af:36:06:d7:17:15:d8:51:63:d1:f0:16:e4:aa: 48:cd:aa:bd -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEkJBCOcFdGD7Hm6r0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIyODE4MjQyNloXDTI2MDcyODAwNDUyMFowLzEtMCsGA1UEAxMk NDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Oiwtu+QhlT68wEgpPou7ys5kiCF+Ji/mTJc lUce2TgtloTTGOvzyrAl8+fwXDVH7ExvvwpqsQS9/ngY84MX2815yPLQ9qTeBu70 2Sy3oGYnbjv39B7cJkzWyJnuBX7LMKNx470RoQVd6C9vomuw2wYRzHVWvfuhWLUl STEYCh+RUeFKL0cQXOObTGwVUQJ2Oc3wQ+YKxC5kNu9MH1ZeB7wOU/RxWfHUsFnR DvYiZBgezURhL3GWes/UfpYxH91CB3l326tl/am6pj/Tuf1epf0Cl9qZeJD39VVw S02Nc7/7Lbi6jvl8CdZpgZ9KWLtcuZQQiD0oBZvNSLi8ov8jfQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFADOoMVMWmiz0QkqZnjzg8lCB8X9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQxN2MwNmQwLTMyMDMtNDRmZC1i MTY0LTBhZWQ1MGY1NjM4Yi80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBm NTYzOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBABFB08wDQQCAAIwBwMFACYF/EAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLdAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhIgypja8aPX9mo9m5v9VweQFczu/ 18C8y1NvYBI2XTn4sNGx3118MKwHhLCq2TqQRfT/JsqgbQU7hEy5Vnl5gl+lD1JL lycln5WSTXvyvObsYKKTc9G+kapfCbrC3rDueFCiEGRMYsncw0YO5Gw//EYkHxvS 6xu1V0YxxfxKr0TpRhuw71WP8RN1DDIsMTIHhLR/GEUDWthUY299R0LM9ZU9hAif jD/uGsh4hsDjLD7VPnKKzMWLOHJ7mKAiDCQlfnAkHKWnN6bypuOEHgiHSlrlwN5E cDy/Bblyv8YZOPVLL6mOoFQ7uX6rWkv4Uq82BtcXFdhRY9HwFuSqSM2qvQ== -----END CERTIFICATE-----Generated at Sun Apr 27 04:26:17 2025 by rpki-client