$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer File: 5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer (raw, json) Hash identifier: NsuTvUuZaDczL1VPgatab258BSq0mxOxantDPW/jlj4= Subject key identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A1B585ABD205FA55CAB1AD6E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Jun 2025 00:45:36 +0000 Certificate not after: Fri 10 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 40860 AS: 53920 IP: 198.186.167.0/24 IP: 208.93.108.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1b:58:5a:bd:20:5f:a5:5c:ab:1a:d6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 7 00:45:36 2025 GMT Not After : Sep 10 00:45:36 2027 GMT Subject: CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:dd:35:57:19:13:a9:4b:f2:09:a6:20:06: a7:6c:b1:29:5a:8d:28:04:03:c6:57:8c:87:a4:eb: fe:ee:b5:cf:b4:84:fc:29:60:10:97:f7:54:25:41: aa:5c:1b:c7:80:56:da:8b:52:99:3c:45:26:a4:9c: d0:07:e5:31:6f:dc:35:8b:c5:00:2a:12:38:b5:18: e3:b1:4c:e6:34:6a:b2:e4:c6:5c:cf:0e:f0:8d:a4: 58:d3:bc:d7:e1:ec:fe:e5:84:35:41:65:75:ea:d4: 7d:f6:ab:d0:4b:6f:de:0f:6c:30:5f:16:b9:53:ad: 26:ea:6e:d6:37:39:82:87:34:8d:fe:84:b8:4f:7f: 2e:13:df:27:86:1f:fb:ff:51:1c:8f:3e:50:f6:90: 02:62:f7:93:fe:e3:a3:28:c7:04:d9:25:01:d4:a5: e9:bb:ac:59:cc:c5:06:85:d1:ad:92:d3:07:f2:d9: 83:e0:a1:dd:0c:c8:4d:9c:4f:12:e0:d8:4f:25:34: 4d:ec:5c:3e:7e:d7:ac:c8:d7:d7:b4:be:7b:84:ab: 89:8a:fc:6e:42:a1:c3:31:c6:be:89:25:9b:3f:51: f4:62:bc:ec:d7:76:55:8e:2a:96:22:c7:58:c3:6d: 90:72:7e:3c:e7:cc:84:e1:9b:51:1b:26:ac:3c:dc: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 198.186.167.0/24 208.93.108.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40860 53920 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5f:30:c5:29:6e:24:2b:c7:1f:f4:76:c9:ea:f1:1c:f9:16: 3b:f5:83:bd:c7:9c:10:7c:da:fa:e7:46:b2:99:5e:2e:8d:c5: 9c:9b:5b:f0:f8:c2:07:77:2d:23:b2:64:03:ed:da:b4:1b:45: b3:0a:9c:a6:da:41:21:2c:a5:c4:9b:a9:e0:7e:8c:28:7f:54: f2:40:f7:0e:43:70:93:0b:b7:53:ed:ff:21:f2:05:3e:fd:9d: 1a:b2:1c:8f:59:7d:5a:cd:9c:b2:89:ca:d8:02:d1:83:85:5e: 22:59:ad:f0:f8:41:0e:72:7f:67:1f:c8:1d:d2:06:74:7e:f1: 42:32:0d:ce:47:75:e4:a9:68:2a:f7:66:68:85:90:65:f7:36: 17:08:26:4e:28:ee:e5:c2:7b:fd:68:06:a2:b4:39:b5:09:3a: cd:7b:09:42:bc:3b:68:14:b1:24:ff:d4:ed:e6:ba:b0:72:30: 78:87:94:be:07:b3:86:7f:1b:a1:05:ea:1c:2f:5e:11:93:7a: 9f:8a:d9:68:b5:73:c0:62:bf:fe:5b:03:a1:9d:52:b1:f4:74: 3f:76:c1:e1:9b:4f:c9:d6:91:85:13:fa:79:67:a2:1f:c9:78: ec:d1:cc:f1:a2:b5:c9:03:9d:8a:9d:ee:1f:fb:f5:ec:be:88: d8:0b:f4:f0 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWEobWFq9IF+lXKsa1uUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYwNzAwNDUzNloXDTI3MDkxMDAwNDUzNlowLzEtMCsGA1UEAxMk NTkzN2EyOWEtMWIzMC00OGEwLWFkM2MtMzdkNGE5N2ZmZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAverdNVcZE6lL8gmmIAanbLEpWo0oBAPGV4yH pOv+7rXPtIT8KWAQl/dUJUGqXBvHgFbai1KZPEUmpJzQB+Uxb9w1i8UAKhI4tRjj sUzmNGqy5MZczw7wjaRY07zX4ez+5YQ1QWV16tR99qvQS2/eD2wwXxa5U60m6m7W NzmChzSN/oS4T38uE98nhh/7/1Ecjz5Q9pACYveT/uOjKMcE2SUB1KXpu6xZzMUG hdGtktMH8tmD4KHdDMhNnE8S4NhPJTRN7Fw+ftesyNfXtL57hKuJivxuQqHDMca+ iSWbP1H0Yrzs13ZVjiqWIsdYw22Qcn4858yE4ZtRGyasPNxwXQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFIOf5VGg0gmrIT6NTbXNYyVssbTXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 OTM3YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0YTk3ZmZlMTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU5MzdhMjlhLTFiMzAtNDhhMC1h ZDNjLTM3ZDRhOTdmZmUxOC81OTM3YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0YTk3 ZmZlMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGuqcDBALQXWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJ+cAgMA0qAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQl8wxSluJCvHH/R2yerxHPkWO/WDvcec EHza+udGspleLo3FnJtb8PjCB3ctI7JkA+3atBtFswqcptpBISylxJup4H6MKH9U 8kD3DkNwkwu3U+3/IfIFPv2dGrIcj1l9Ws2csonK2ALRg4VeIlmt8PhBDnJ/Zx/I HdIGdH7xQjINzkd15KloKvdmaIWQZfc2FwgmTiju5cJ7/WgGorQ5tQk6zXsJQrw7 aBSxJP/U7ea6sHIweIeUvgezhn8boQXqHC9eEZN6n4rZaLVzwGK//lsDoZ1SsfR0 P3bB4ZtPydaRhRP6eWeiH8l47NHM8aK1yQOdip3uH/v17L6I2Av08A== -----END CERTIFICATE-----Generated at Mon Jun 16 14:48:05 2025 by rpki-client