$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer File: 6887c8ea-d5ac-4f59-94cd-5de7a5c51600.cer (raw, json) Hash identifier: 9F26JHRL3LzgGdx4EO6AFds6lBunOFc55uzxko7bF2c= Subject key identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858499DB795014B670764939F3570 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 23 Apr 2025 00:45:37 +0000 Certificate not after: Tue 27 Jul 2027 00:45:37 +0000 Subordinate resources: AS: 46446 IP: 69.71.192.0/20 IP: 74.116.240.0/21 IP: 158.247.66.0/23 IP: 162.210.144.0/22 IP: 170.199.222.0/23 IP: 192.67.253.0/24 IP: 192.78.0.0/24 IP: 2606:5c00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:b7:95:01:4b:67:07:64:93:9f:35:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 23 00:45:37 2025 GMT Not After : Jul 27 00:45:37 2027 GMT Subject: CN=6887c8ea-d5ac-4f59-94cd-5de7a5c51600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4e:25:a4:21:06:eb:75:44:d7:13:cb:b5:d9: b8:04:30:b4:75:5d:5f:1f:3b:81:72:90:6a:92:33: fb:d5:cd:00:ac:59:de:0a:07:8d:6f:90:68:44:c4: 77:bd:66:30:80:34:28:ca:0c:ad:f5:70:a9:f9:d7: 04:d8:db:22:df:a5:30:ae:3d:cc:c5:a4:f6:a3:2a: 63:36:57:e9:e3:f1:3a:7b:36:54:23:91:e0:16:50: 80:a1:f0:3f:6f:8d:97:d3:bf:cd:49:dd:46:51:29: 0a:2f:d1:c5:6d:f9:2f:2e:87:8d:b2:e2:25:ee:02: c6:c2:84:07:19:14:da:57:75:06:9d:34:3a:0b:5d: 6a:90:b3:a3:da:cc:1d:e1:6c:97:27:8c:1f:0d:fa: 00:9a:61:28:a7:49:ca:93:de:f9:3b:03:46:2d:00: 47:06:08:ce:db:ee:d8:94:99:9b:99:f5:e9:c9:49: 86:9c:29:50:1e:3f:1b:e3:b0:15:37:05:9d:1e:31: b6:2d:25:aa:af:4c:3c:10:5c:46:34:d9:d6:6e:e7: 95:04:42:17:c4:2f:7b:20:df:56:e8:51:15:a0:a4: a2:33:f7:e0:ab:47:23:5d:a4:90:bd:af:7c:cd:20: 50:94:68:a2:97:9f:28:84:c5:33:aa:a1:d8:d9:5a: 53:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:F2:4C:FB:BE:57:79:1F:55:18:17:18:74:91:DC:1F:43:32:07:18 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6887c8ea-d5ac-4f59-94cd-5de7a5c51600/6887c8ea-d5ac-4f59-94cd-5de7a5c51600.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 69.71.192.0/20 74.116.240.0/21 158.247.66.0/23 162.210.144.0/22 170.199.222.0/23 192.67.253.0/24 192.78.0.0/24 IPv6: 2606:5c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46446 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4b:fa:d0:e2:16:0e:1c:48:f1:dd:a0:36:0a:f7:36:f6:26: 83:66:40:9d:c2:2d:c5:c4:a1:39:c5:15:7f:f2:9d:10:d1:23: b5:3b:37:e9:39:df:74:85:20:44:f3:46:a4:d8:f7:45:66:5e: 9f:23:0f:b7:e2:55:40:f8:8b:55:b3:12:31:4e:af:68:75:ee: 24:96:ea:20:90:85:62:ec:36:b7:a6:2a:43:89:a8:76:5e:72: aa:ed:a7:80:25:dc:e1:e3:26:31:b1:d2:c5:43:44:fe:8a:3d: ff:1f:af:4d:9a:f2:ef:22:9e:4a:36:e4:99:68:17:5f:30:70: 45:0b:e4:2c:8d:9d:be:a1:cd:fa:46:28:60:2a:f1:be:5a:2f: e4:7e:48:86:8a:7b:b9:f7:fa:76:24:da:e1:dd:64:50:66:e9: 83:4b:4c:f0:f4:a2:e2:f0:e6:f9:9d:aa:a1:f1:64:5a:ca:a3: 55:74:b3:c0:51:b9:b3:5e:ab:6d:ee:66:37:ad:a2:50:87:79: 9f:98:a8:16:71:19:91:26:88:24:ab:8e:57:76:13:fa:a9:e3: 12:b1:be:2b:df:6f:b6:72:23:3b:fe:4d:40:75:2b:59:40:d6: 03:75:b5:eb:5d:16:f2:b1:49:05:78:cf:58:1e:51:57:f1:ec: 12:27:8f:bc -----BEGIN CERTIFICATE----- MIIHPDCCBiSgAwIBAgIUAQ0Mn0MoWEmdt5UBS2cHZJOfNXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQyMzAwNDUzN1oXDTI3MDcyNzAwNDUzN1owLzEtMCsGA1UEAxMk Njg4N2M4ZWEtZDVhYy00ZjU5LTk0Y2QtNWRlN2E1YzUxNjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl04lpCEG63VE1xPLtdm4BDC0dV1fHzuBcpBq kjP71c0ArFneCgeNb5BoRMR3vWYwgDQoygyt9XCp+dcE2Nsi36Uwrj3MxaT2oypj Nlfp4/E6ezZUI5HgFlCAofA/b42X07/NSd1GUSkKL9HFbfkvLoeNsuIl7gLGwoQH GRTaV3UGnTQ6C11qkLOj2swd4WyXJ4wfDfoAmmEop0nKk975OwNGLQBHBgjO2+7Y lJmbmfXpyUmGnClQHj8b47AVNwWdHjG2LSWqr0w8EFxGNNnWbueVBEIXxC97IN9W 6FEVoKSiM/fgq0cjXaSQva98zSBQlGiil58ohMUzqqHY2VpTrQIDAQABo4IETjCC BEowHQYDVR0OBBYEFOLyTPu+V3kfVRgXGHSR3B9DMgcYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 ODg3YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3YTVjNTE2MDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY4ODdjOGVhLWQ1YWMtNGY1OS05 NGNkLTVkZTdhNWM1MTYwMC82ODg3YzhlYS1kNWFjLTRmNTktOTRjZC01ZGU3YTVj NTE2MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBARFR8ADBANKdPADBAGe90IDBAKi0pADBAGqx94D BADAQ/0DBADATgAwDQQCAAIwBwMFACYGXAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDALVuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAJJL+tDiFg4cSPHdoDYK9zb2JoNmQJ3CLcXEoTnFFX/y nRDRI7U7N+k533SFIETzRqTY90VmXp8jD7fiVUD4i1WzEjFOr2h17iSW6iCQhWLs NremKkOJqHZecqrtp4Al3OHjJjGx0sVDRP6KPf8fr02a8u8inko25JloF18wcEUL 5CyNnb6hzfpGKGAq8b5aL+R+SIaKe7n3+nYk2uHdZFBm6YNLTPD0ouLw5vmdqqHx ZFrKo1V0s8BRubNeq23uZjetolCHeZ+YqBZxGZEmiCSrjld2E/qp4xKxvivfb7Zy Izv+TUB1K1lA1gN1tetdFvKxSQV4z1geUVfx7BInj7w= -----END CERTIFICATE-----Generated at Sat Apr 26 23:12:01 2025 by rpki-client