$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3.cer File: 687d1923-22fe-4744-9984-8ca387a57cf3.cer (raw, json) Hash identifier: d5Fj829j1VowvXKeucJkSqVs8gec3Cam/smqOSMfxac= Subject key identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858496B773AE236B2F475E54F3C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 05 Apr 2025 00:45:33 +0000 Certificate not after: Fri 09 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 400495 IP: 23.133.104.0/24 IP: 63.141.38.0/24 IP: 2602:fbae::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:77:3a:e2:36:b2:f4:75:e5:4f:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 5 00:45:33 2025 GMT Not After : Jul 9 00:45:33 2027 GMT Subject: CN=687d1923-22fe-4744-9984-8ca387a57cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:c0:26:78:3c:88:f9:99:da:1f:a8:1f:9b: 9d:82:0f:10:26:11:2d:3c:2d:e1:48:4e:8b:a9:c0: c1:40:c5:d3:d8:3d:54:c2:40:3f:57:b4:00:36:f5: ee:18:74:7b:d5:eb:f5:aa:47:ea:5b:c6:9a:8f:fd: 02:59:6e:21:b2:82:a1:67:41:7c:a7:3c:46:33:21: 35:d5:e0:d5:a9:74:e8:e0:39:fc:0a:86:20:b4:97: 13:39:ef:02:e0:4c:62:85:51:f0:40:14:43:1e:4d: 48:17:3b:42:62:04:9a:c1:03:8e:44:39:1e:95:0b: 90:77:ae:37:74:e5:5a:cb:2b:49:20:cd:47:82:bd: ac:21:3b:db:38:2b:b3:41:93:06:7d:c0:dc:bc:e9: ba:72:87:c0:26:4d:67:af:cb:45:72:43:11:72:99: fb:1b:3e:4d:1c:98:60:87:8f:87:5d:73:f5:0c:a9: b5:aa:78:47:8c:ce:16:f6:ba:1e:a0:7c:b9:ef:c1: ec:0a:f9:27:43:a2:d7:ff:03:8d:86:f1:99:9c:97: 95:26:3c:53:ef:69:0c:26:9c:76:d7:4f:e0:32:5d: cc:1f:14:a7:6b:d3:2b:b7:3a:17:01:36:c0:7a:57: d6:13:47:38:5f:73:ea:7c:a2:82:af:32:5a:0d:e0: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:10:F7:66:FC:74:E2:12:13:9F:EC:D5:B8:24:38:8E:23:B6:46:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/687d1923-22fe-4744-9984-8ca387a57cf3/687d1923-22fe-4744-9984-8ca387a57cf3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.133.104.0/24 63.141.38.0/24 IPv6: 2602:fbae::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400495 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:54:ee:4b:1c:8d:0c:26:4c:c0:48:c9:3e:50:22:da:5d:e2: df:af:eb:64:e5:54:bf:0c:66:14:e1:ec:99:b9:98:cd:69:d8: 9e:b8:62:6d:25:6e:68:88:88:55:12:34:3e:6d:1f:c4:69:39: c1:40:ad:6f:4a:e1:9a:c3:cd:59:0f:da:69:6b:5d:52:69:a2: 60:9f:0a:16:a6:68:e4:3d:3b:7b:54:dc:b1:ed:1f:6f:9c:47: b0:da:05:dd:df:7a:02:89:fc:55:49:e8:6b:87:04:9e:2e:58: c8:04:46:51:94:9e:5e:e5:c1:f7:42:74:73:b8:11:0a:95:3e: a5:15:04:0f:fb:93:ef:4d:87:5c:e0:c8:71:bd:2a:b3:b9:0d: 36:33:ae:eb:cc:59:26:68:f6:c9:f4:72:63:b0:c2:ec:e8:cb: fc:5b:82:42:8d:43:68:5b:cf:f0:27:b9:d9:d6:9c:0b:e1:ca: 7e:22:d1:84:b7:1b:af:71:31:6d:4d:2f:2d:1c:0f:f5:8e:9c: 3d:01:b3:81:06:92:66:31:41:3b:f7:ad:2e:13:f7:77:f5:aa: 3a:47:f8:07:56:dc:38:eb:40:97:66:8d:3a:0a:16:c1:6d:29: 3b:3b:79:10:ca:d4:11:31:8a:e8:14:9f:82:dc:a1:8c:86:61: c6:54:eb:fd -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWElrdzriNrL0deVPPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQwNTAwNDUzM1oXDTI3MDcwOTAwNDUzM1owLzEtMCsGA1UEAxMk Njg3ZDE5MjMtMjJmZS00NzQ0LTk5ODQtOGNhMzg3YTU3Y2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJjAJng8iPmZ2h+oH5udgg8QJhEtPC3hSE6L qcDBQMXT2D1UwkA/V7QANvXuGHR71ev1qkfqW8aaj/0CWW4hsoKhZ0F8pzxGMyE1 1eDVqXTo4Dn8CoYgtJcTOe8C4ExihVHwQBRDHk1IFztCYgSawQOORDkelQuQd643 dOVayytJIM1Hgr2sITvbOCuzQZMGfcDcvOm6cofAJk1nr8tFckMRcpn7Gz5NHJhg h4+HXXP1DKm1qnhHjM4W9roeoHy578HsCvknQ6LX/wONhvGZnJeVJjxT72kMJpx2 10/gMl3MHxSna9MrtzoXATbAelfWE0c4X3PqfKKCrzJaDeDKWQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFLoQ92b8dOISE5/s1bgkOI4jtkaRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 ODdkMTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2EzODdhNTdjZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY4N2QxOTIzLTIyZmUtNDc0NC05 OTg0LThjYTM4N2E1N2NmMy82ODdkMTkyMy0yMmZlLTQ3NDQtOTk4NC04Y2EzODdh NTdjZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXhWgDBAA/jSYwDgQCAAIwCAMGACYC+64AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYcbzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADVO5LHI0MJkzASMk+ UCLaXeLfr+tk5VS/DGYU4eyZuZjNadieuGJtJW5oiIhVEjQ+bR/EaTnBQK1vSuGa w81ZD9ppa11SaaJgnwoWpmjkPTt7VNyx7R9vnEew2gXd33oCifxVSehrhwSeLljI BEZRlJ5e5cH3QnRzuBEKlT6lFQQP+5PvTYdc4MhxvSqzuQ02M67rzFkmaPbJ9HJj sMLs6Mv8W4JCjUNoW8/wJ7nZ1pwL4cp+ItGEtxuvcTFtTS8tHA/1jpw9AbOBBpJm MUE7960uE/d39ao6R/gHVtw460CXZo06ChbBbSk7O3kQytQRMYroFJ+C3KGMhmHG VOv9 -----END CERTIFICATE-----Generated at Sun Apr 27 04:19:48 2025 by rpki-client