$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer File: 6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.cer (raw, json) Hash identifier: jGxHCIX1SYJqd5hzVEMW7VeM1g++3dkyGz6JwHKv7O4= Subject key identifier: D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A023834D1D3CAE64ED65BC660 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 May 2025 00:45:37 +0000 Certificate not after: Wed 01 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 74.80.252.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:02:38:34:d1:d3:ca:e6:4e:d6:5b:c6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 29 00:45:37 2025 GMT Not After : Sep 1 00:45:37 2027 GMT Subject: CN=6b2c5d67-bf55-4550-be59-c1aa5e63fd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:77:1a:27:0c:83:db:68:41:d2:d9:18:09:59: 05:d3:29:3f:c4:54:73:89:97:d1:49:44:80:08:4b: 34:f3:2e:00:44:54:57:44:be:2a:00:cb:ae:0e:e2: 9e:0c:0f:9b:df:9d:00:5f:56:47:79:6d:2c:c7:fa: f5:f0:17:c5:32:b9:c0:a5:14:44:5d:92:3d:d1:ea: 62:81:60:36:b5:d9:1f:72:1b:d2:6f:60:c1:35:30: 50:c2:dd:01:9d:74:7c:e7:10:e4:f4:67:d3:f0:9a: 11:1d:f1:9c:35:4b:9e:d9:3b:c8:98:86:f6:0b:c6: 0b:cd:ce:a6:23:bf:c8:31:a5:04:91:ff:ce:ce:d2: 2a:dc:3d:97:f1:24:35:63:6f:f4:9e:5b:c5:07:4f: 37:ad:94:9e:28:64:82:07:af:dc:0d:44:6b:d8:42: 77:78:ef:e4:cf:ae:df:7d:59:e3:f2:1b:be:a3:e5: b6:0f:75:aa:a3:97:9b:fb:f1:6d:95:7e:f8:76:a8: d6:ed:60:35:50:9c:61:f5:b3:8a:9b:92:5d:64:de: 17:08:b1:5a:ce:33:f0:60:a6:69:c2:ce:8d:aa:2c: 3e:3a:4c:b3:4b:c3:3b:eb:2b:1c:0f:9c:6b:c4:37: 74:c5:5a:e5:7a:8c:3b:64:30:aa:0f:f6:9c:84:ae: c3:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:25:E0:AA:7A:6B:B8:F3:EC:C6:09:8F:45:E5:3E:D0:BB:9A:B4:3C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f/6b2c5d67-bf55-4550-be59-c1aa5e63fd2f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.80.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8d:9d:7d:7e:20:00:f0:89:b3:7b:b0:e8:7f:35:b0:04:30: 57:38:ea:6c:67:8e:8b:c9:95:10:7c:a9:c5:29:6f:21:67:df: 1e:83:38:e0:a9:b8:9d:c5:9f:69:4b:24:5c:09:c0:0f:bc:a1: 86:b4:e4:fe:f8:4c:5d:e9:94:27:49:64:e0:ee:6c:59:16:19: e4:98:ef:d6:e6:57:67:4c:47:1a:9e:53:7a:00:20:dd:7f:0b: 61:1e:b0:2c:af:72:a0:50:37:77:da:62:cf:f3:66:c9:46:f9: 65:17:37:56:32:51:94:55:7c:57:1f:ba:60:75:a1:80:61:a3: 45:20:93:2f:a0:82:6e:73:b8:67:e8:02:78:21:8b:2c:b5:15: 17:33:11:da:99:56:be:8c:ef:c3:14:15:f5:0e:85:28:97:1a: f2:1d:9c:2b:fe:18:09:c2:c8:56:0d:46:37:6f:a1:69:ea:4a: ba:79:fd:8b:99:b4:37:9d:65:16:e2:d9:ff:22:97:7e:be:93: 80:db:2b:3b:b2:96:ba:d9:a0:bc:ea:a8:37:ac:85:94:8d:39: 6a:f0:90:fe:3e:16:76:28:0b:be:4a:74:47:d9:de:fc:27:07: 41:4d:f2:0c:9e:3e:54:04:01:a2:7a:1d:b9:d4:9d:31:34:e2: 10:d7:f6:3d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEoCODTR08rmTtZbxmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUyOTAwNDUzN1oXDTI3MDkwMTAwNDUzN1owLzEtMCsGA1UEAxMk NmIyYzVkNjctYmY1NS00NTUwLWJlNTktYzFhYTVlNjNmZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XcaJwyD22hB0tkYCVkF0yk/xFRziZfRSUSA CEs08y4ARFRXRL4qAMuuDuKeDA+b350AX1ZHeW0sx/r18BfFMrnApRREXZI90epi gWA2tdkfchvSb2DBNTBQwt0BnXR85xDk9GfT8JoRHfGcNUue2TvImIb2C8YLzc6m I7/IMaUEkf/OztIq3D2X8SQ1Y2/0nlvFB083rZSeKGSCB6/cDURr2EJ3eO/kz67f fVnj8hu+o+W2D3Wqo5eb+/FtlX74dqjW7WA1UJxh9bOKm5JdZN4XCLFazjPwYKZp ws6Nqiw+OkyzS8M76yscD5xrxDd0xVrleow7ZDCqD/achK7DpwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNEl4Kp6a7jz7MYJj0XlPtC7mrQ8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 YjJjNWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFhNWU2M2ZkMmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZiMmM1ZDY3LWJmNTUtNDU1MC1i ZTU5LWMxYWE1ZTYzZmQyZi82YjJjNWQ2Ny1iZjU1LTQ1NTAtYmU1OS1jMWFhNWU2 M2ZkMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKUPwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQI2dfX4gAPCJs3uw6H81 sAQwVzjqbGeOi8mVEHypxSlvIWffHoM44Km4ncWfaUskXAnAD7yhhrTk/vhMXemU J0lk4O5sWRYZ5Jjv1uZXZ0xHGp5TegAg3X8LYR6wLK9yoFA3d9piz/NmyUb5ZRc3 VjJRlFV8Vx+6YHWhgGGjRSCTL6CCbnO4Z+gCeCGLLLUVFzMR2plWvozvwxQV9Q6F KJca8h2cK/4YCcLIVg1GN2+haepKunn9i5m0N51lFuLZ/yKXfr6TgNsrO7KWutmg vOqoN6yFlI05avCQ/j4WdigLvkp0R9ne/CcHQU3yDJ4+VAQBonodudSdMTTiENf2 PQ== -----END CERTIFICATE-----Generated at Sun Jun 15 17:54:32 2025 by rpki-client