$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5.cer File: 42b6e093-f636-4e25-936b-6fc6232f50c5.cer (raw, json) Hash identifier: W45j6e6CtViZoaPYHr2P+ne7bCf4Or4z6uwSJtuZgeU= Subject key identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849E0B7FA2313DCBFFC4976BBC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 17 May 2025 00:45:35 +0000 Certificate not after: Fri 20 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 955 AS: 32167 IP: 66.118.228.0/22 IP: 2606:82c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e0:b7:fa:23:13:dc:bf:fc:49:76:bb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 17 00:45:35 2025 GMT Not After : Aug 20 00:45:35 2027 GMT Subject: CN=42b6e093-f636-4e25-936b-6fc6232f50c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:be:82:5d:32:d0:10:7c:d0:f5:95:a2:ac:cc: e6:55:bf:4e:d5:cd:a6:27:61:50:7c:c2:3d:a8:68: b1:30:d0:bd:c9:8c:19:7b:67:24:14:d6:eb:5f:43: 98:2d:eb:73:4b:8e:7b:a6:86:46:ce:03:3a:03:1e: cf:89:36:2d:2a:6b:04:9e:0e:53:34:3f:34:fa:67: 96:25:95:db:03:c9:97:40:75:26:94:56:0f:29:f2: ac:f4:31:73:0e:9a:5a:9d:0a:ce:e0:63:ab:f8:dc: c2:ee:81:1d:79:e0:5b:8d:0c:5b:12:5c:28:e8:54: 99:34:af:02:d8:36:e4:76:a0:a1:8c:cb:38:73:49: a6:2e:b2:46:cf:27:8d:9c:d7:f7:73:4d:0a:2b:ad: c2:80:49:58:d8:a6:fb:61:62:18:ee:b7:ca:33:46: 06:be:e5:67:98:02:b4:d9:3c:2b:33:9a:50:2e:e4: f1:14:40:6e:cf:6c:1b:25:7d:27:66:2e:7a:1c:fa: 6e:9f:3f:70:6e:a8:6a:8c:69:01:de:23:bf:bf:fe: 98:d0:c6:22:45:32:8a:e5:06:62:45:44:50:73:ae: 36:cb:29:b4:68:90:d5:fd:9e:bd:d8:ac:e5:44:98: bd:f0:94:67:8c:70:cc:8d:25:10:91:72:e9:4a:0c: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:25:1D:13:0F:4C:E6:2B:9C:69:A3:4E:C0:E6:AA:14:9E:58:1E:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/42b6e093-f636-4e25-936b-6fc6232f50c5/42b6e093-f636-4e25-936b-6fc6232f50c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.118.228.0/22 IPv6: 2606:82c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 955 32167 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:89:fc:77:c7:cd:cb:9b:89:01:39:36:19:58:c8:e5:c2:16: 8a:26:a4:0c:62:bc:c4:5e:18:97:a8:a4:2e:0b:a7:42:48:b5: 71:c4:5b:b3:ca:f9:55:3b:c4:86:ee:f7:fc:e4:43:7f:00:4a: 1e:f9:43:d0:c5:e8:b3:94:14:e3:a0:74:00:e2:77:40:bc:e4: 37:4a:fa:f2:65:68:e5:53:0b:ad:c2:92:e7:e5:43:29:82:f6: 67:26:4c:fe:5c:5d:bf:45:25:10:ab:94:f8:dd:21:09:84:05: 6f:7b:b4:d3:36:9f:88:56:08:72:f9:4c:5f:46:a2:9c:a1:3d: 93:0f:1c:a4:3b:c0:08:5e:b5:3a:02:c0:0e:c4:b8:5b:d8:07: fa:25:5a:6e:2a:f9:89:0b:6f:a8:39:96:49:29:3d:58:5b:06: 80:4d:c9:fb:ce:be:d2:6a:27:80:b1:1d:d3:ad:65:f4:42:a3: 5e:6f:dd:d2:08:c0:57:a6:0f:7a:e2:c4:29:0c:ce:f7:0b:27: d6:bf:7c:67:8c:37:c5:87:0d:34:c6:7c:2f:f8:ab:89:31:7d: a9:3b:d9:26:48:03:c6:9e:d1:56:33:1b:08:fd:73:05:03:e0: fb:d4:fb:0c:d9:04:52:3f:05:6d:9f:38:8a:c1:57:06:90:76: c6:20:b8:11 -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEngt/ojE9y//El2u8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUxNzAwNDUzNVoXDTI3MDgyMDAwNDUzNVowLzEtMCsGA1UEAxMk NDJiNmUwOTMtZjYzNi00ZTI1LTkzNmItNmZjNjIzMmY1MGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL6CXTLQEHzQ9ZWirMzmVb9O1c2mJ2FQfMI9 qGixMNC9yYwZe2ckFNbrX0OYLetzS457poZGzgM6Ax7PiTYtKmsEng5TND80+meW JZXbA8mXQHUmlFYPKfKs9DFzDppanQrO4GOr+NzC7oEdeeBbjQxbElwo6FSZNK8C 2DbkdqChjMs4c0mmLrJGzyeNnNf3c00KK63CgElY2Kb7YWIY7rfKM0YGvuVnmAK0 2TwrM5pQLuTxFEBuz2wbJX0nZi56HPpunz9wbqhqjGkB3iO/v/6Y0MYiRTKK5QZi RURQc642yym0aJDV/Z692KzlRJi98JRnjHDMjSUQkXLpSgw4SQIDAQABo4IELTCC BCkwHQYDVR0OBBYEFN8lHRMPTOYrnGmjTsDmqhSeWB47MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMyZjUwYzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQyYjZlMDkzLWY2MzYtNGUyNS05 MzZiLTZmYzYyMzJmNTBjNS80MmI2ZTA5My1mNjM2LTRlMjUtOTM2Yi02ZmM2MjMy ZjUwYzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAJCduQwDQQCAAIwBwMFACYGgsAwHQYIKwYBBQUH AQgBAf8EDjAMoAowCAICA7sCAn2nMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGWJ/HfHzcubiQE5NhlYyOXC FoompAxivMReGJeopC4Lp0JItXHEW7PK+VU7xIbu9/zkQ38ASh75Q9DF6LOUFOOg dADid0C85DdK+vJlaOVTC63CkuflQymC9mcmTP5cXb9FJRCrlPjdIQmEBW97tNM2 n4hWCHL5TF9GopyhPZMPHKQ7wAhetToCwA7EuFvYB/olWm4q+YkLb6g5lkkpPVhb BoBNyfvOvtJqJ4CxHdOtZfRCo15v3dIIwFemD3rixCkMzvcLJ9a/fGeMN8WHDTTG fC/4q4kxfak72SZIA8ae0VYzGwj9cwUD4PvU+wzZBFI/BW2fOIrBVwaQdsYguBE= -----END CERTIFICATE-----Generated at Mon Jun 16 15:13:24 2025 by rpki-client