$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer File: 7ea21a7b-596c-45f8-899e-6879815f26b1.cer (raw, json) Hash identifier: kyjLuuJagPOXWRVwlou+cVPjw2bZxGG8Z0Xj7wHODoM= Subject key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584843A87FFE5ED46E4C79254700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Dec 2024 01:45:33 +0000 Certificate not after: Thu 25 Mar 2027 00:45:33 +0000 Subordinate resources: IP: 139.64.200.0/24 IP: 2620:85:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:43:a8:7f:fe:5e:d4:6e:4c:79:25:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 20 01:45:33 2024 GMT Not After : Mar 25 00:45:33 2027 GMT Subject: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:9b:ee:aa:c6:20:3d:25:37:b1:8e:39:d6: d1:b0:60:91:f0:bb:9f:c3:d5:8f:ca:c2:f1:b2:29: e0:90:d4:81:b3:1e:2d:11:1d:60:18:a0:8a:e1:be: 0a:bc:18:96:f0:6f:61:3b:3d:98:69:ae:ce:2a:eb: e4:88:f0:24:fb:ab:5d:1c:53:77:17:ef:54:58:75: 93:11:55:22:49:63:12:01:a3:03:7c:c8:fe:b1:63: d4:b0:15:bf:c8:ad:cb:66:61:22:7f:ba:c0:cc:1e: 5e:33:eb:56:bf:7c:18:59:a1:3d:6b:f0:48:14:2d: 9c:b2:d4:ed:64:7d:dd:9c:44:9b:21:8e:17:cc:93: 51:3b:ba:c8:8f:df:e2:88:c8:68:54:28:8f:b7:3b: 3d:35:d2:ed:14:7a:ef:d4:06:89:78:3d:27:67:91: 38:70:07:9e:ef:5b:89:61:73:a9:89:23:0a:06:cc: 41:2f:fa:59:0e:e5:02:1d:c7:20:8f:cb:9c:9f:bf: b0:6d:50:3b:ce:02:8b:02:1c:e3:21:50:d4:b1:e3: 3e:6d:7f:44:c9:8b:26:d0:24:b6:33:24:01:ea:25: 28:eb:a2:c8:81:d9:e5:01:76:a6:dd:11:79:c9:d6: 5e:70:df:67:bf:99:93:3d:a0:93:ca:8f:6f:2a:18: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 139.64.200.0/24 IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:83:82:0e:19:b9:21:2d:40:de:d8:54:0a:9e:a4:e3:2c:82: 69:f1:f9:a4:a6:be:c6:42:87:60:f4:85:f6:3e:d5:14:40:78: 1b:78:54:d9:cc:ae:a4:df:e6:05:e6:6f:5a:5d:59:e8:97:45: 9e:db:47:cb:4f:46:7f:92:11:89:47:f8:dc:b8:6f:dd:85:80: 67:e4:ca:8e:79:98:06:64:d3:9e:6c:25:a2:f0:30:bc:d0:74: ee:17:c6:a8:30:f9:e8:2b:5e:90:33:71:0e:cf:c5:0a:80:cc: 0e:3c:4e:15:c3:9d:cc:76:2a:e5:b1:6a:67:2c:d9:7b:06:46: 12:f9:f6:9b:1d:38:c7:da:cf:d1:6f:3d:8a:bf:4b:6c:3b:09: d7:4a:98:07:d1:a2:98:d5:48:ea:0a:09:50:ba:9e:51:9a:7d: 3b:49:e8:eb:48:fc:14:35:3a:26:22:66:70:7e:47:96:6c:b1: a6:8b:d2:62:91:43:95:27:3c:dc:73:c1:a3:f1:55:cf:a4:13: e2:fa:44:ea:ad:ec:7b:6c:a3:65:80:10:0c:17:fe:71:83:67: 3b:de:23:00:54:0d:fb:ea:d8:02:57:f9:a8:64:3a:b9:e9:b0: 0c:68:8c:4b:99:31:d1:09:75:ab:dc:38:4a:6d:b0:58:a3:e9: 3b:90:96:3b -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEhDqH/+XtRuTHklRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTIyMDAxNDUzM1oXDTI3MDMyNTAwNDUzM1owLzEtMCsGA1UEAxMk N2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYyNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWb7qrGID0lN7GOOdbRsGCR8Lufw9WPysLx singkNSBsx4tER1gGKCK4b4KvBiW8G9hOz2Yaa7OKuvkiPAk+6tdHFN3F+9UWHWT EVUiSWMSAaMDfMj+sWPUsBW/yK3LZmEif7rAzB5eM+tWv3wYWaE9a/BIFC2cstTt ZH3dnESbIY4XzJNRO7rIj9/iiMhoVCiPtzs9NdLtFHrv1AaJeD0nZ5E4cAee71uJ YXOpiSMKBsxBL/pZDuUCHccgj8ucn7+wbVA7zgKLAhzjIVDUseM+bX9EyYsm0CS2 MyQB6iUo66LIgdnlAXam3RF5ydZecN9nv5mTPaCTyo9vKhgOKQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFFjV1TLrEADEv4oZM87qo4Ytd/SpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlYTIxYTdiLTU5NmMtNDVmOC04 OTllLTY4Nzk4MTVmMjZiMS83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1 ZjI2YjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACLQMgwDwQCAAIwCQMHACYgAIWgADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCQg4IOGbkhLUDe2FQKnqTjLIJp8fmkpr7GQodg9IX2PtUUQHgbeFTZzK6k3+YF 5m9aXVnol0We20fLT0Z/khGJR/jcuG/dhYBn5MqOeZgGZNOebCWi8DC80HTuF8ao MPnoK16QM3EOz8UKgMwOPE4Vw53MdirlsWpnLNl7BkYS+fabHTjH2s/Rbz2Kv0ts OwnXSpgH0aKY1UjqCglQup5Rmn07SejrSPwUNTomImZwfkeWbLGmi9JikUOVJzzc c8Gj8VXPpBPi+kTqrex7bKNlgBAMF/5xg2c73iMAVA376tgCV/moZDq56bAMaIxL mTHRCXWr3DhKbbBYo+k7kJY7 -----END CERTIFICATE-----Generated at Sat Apr 26 18:10:22 2025 by rpki-client