$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer File: 804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer (raw, json) Hash identifier: xMbnsu5xYF+l/rYYdzgNIQmTkoNdTVpxubYHpfhQons= Subject key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584998222F390C20592E9DFBE580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Apr 2025 00:45:34 +0000 Certificate not after: Sun 25 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 18903 IP: 208.80.128.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:22:2f:39:0c:20:59:2e:9d:fb:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 21 00:45:34 2025 GMT Not After : Jul 25 00:45:34 2027 GMT Subject: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:02:de:8c:d0:31:6d:90:a3:08:18:68:1c: b9:24:0e:67:0b:74:5b:01:85:33:a4:b8:17:a0:42: 59:70:fd:84:e9:44:cd:1e:7a:00:df:a2:7b:e6:17: 7c:ff:d7:e6:40:80:85:c2:a6:d7:55:0b:d3:e3:fb: af:b5:f2:b2:a0:9d:3e:74:c6:43:5c:ae:0c:5b:fb: f7:c2:a8:c6:20:3d:0e:9e:0f:62:d9:30:17:66:2f: b3:71:51:78:7d:f6:33:36:8c:e0:51:14:53:db:54: 2b:20:04:b2:31:a4:25:d5:a6:4f:97:78:5a:55:fa: 66:7f:53:96:66:5b:fb:16:91:f3:c1:41:ed:75:ea: 26:ee:e7:21:f0:23:b5:ee:59:60:61:00:5c:1f:7d: 5f:dc:20:53:db:7d:69:3d:65:3d:96:26:07:8a:83: 90:96:1c:82:e2:63:34:46:2b:de:e2:9d:aa:19:3a: e8:cf:56:0d:78:f6:79:a5:5c:1b:fe:c2:bf:77:00: 50:f6:73:7c:3a:79:3a:af:60:a9:ad:b0:71:1f:de: 79:41:89:16:57:2c:70:55:23:81:fa:04:77:ad:7e: cf:e2:98:f0:65:e0:81:95:41:91:08:3e:c6:b1:65: 42:a6:a5:d5:f5:ce:bd:8d:2a:fb:76:f2:bb:55:a3: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.80.128.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18903 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:8f:56:87:89:28:5d:aa:16:cd:f2:8f:e1:c8:e6:e5:8a:0e: 8d:72:e0:14:a3:16:fb:ae:69:45:cf:c1:58:72:d8:bf:d4:b8: 25:f5:66:9c:92:d7:75:69:64:f9:6d:bf:76:1a:1f:9f:12:62: c1:65:4a:4f:16:91:58:ce:d1:06:d8:a9:36:fa:f9:ca:7f:c8: 0d:07:03:fd:c5:11:62:f7:27:9b:16:17:a3:aa:67:60:12:bb: 3c:c1:59:f8:35:5f:dd:fa:95:c2:d7:11:25:20:65:cd:13:3a: b3:a3:64:ee:ac:55:60:20:63:81:8b:84:8a:70:87:0e:9a:96: d7:b7:32:2e:0b:e8:a3:fa:2a:7f:2a:1e:79:de:02:4d:27:0b: b7:62:4d:6b:5a:79:bc:ec:b6:d6:f3:cf:3d:6d:c5:2c:12:11: ac:ec:5c:e0:0f:4d:ab:1f:75:a2:9d:76:9a:ca:25:1c:21:ed: 41:a1:b8:aa:9b:87:08:f8:5e:13:5a:6d:71:df:f7:df:f6:7b: 35:4b:d2:bb:ca:39:ad:fa:e5:02:d5:c3:03:e6:26:d9:19:6b: 82:c6:a9:61:46:e1:ad:d4:cb:61:6e:3b:5d:33:a7:21:c4:bb: 72:4d:89:59:96:7d:9c:a4:8d:ab:13:2b:46:d0:1f:2c:f9:c7: 09:73:e0:3f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmYIi85DCBZLp375YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQyMTAwNDUzNFoXDTI3MDcyNTAwNDUzNFowLzEtMCsGA1UEAxMk ODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJiNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxREC3ozQMW2QowgYaBy5JA5nC3RbAYUzpLgX oEJZcP2E6UTNHnoA36J75hd8/9fmQICFwqbXVQvT4/uvtfKyoJ0+dMZDXK4MW/v3 wqjGID0Ong9i2TAXZi+zcVF4ffYzNozgURRT21QrIASyMaQl1aZPl3haVfpmf1OW Zlv7FpHzwUHtdeom7uch8CO17llgYQBcH31f3CBT231pPWU9liYHioOQlhyC4mM0 Rive4p2qGTroz1YNePZ5pVwb/sK/dwBQ9nN8Onk6r2CprbBxH955QYkWVyxwVSOB +gR3rX7P4pjwZeCBlUGRCD7GsWVCpqXV9c69jSr7dvK7VaOTKwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFUDZSr3fwyvUFL6yYfJT2IEL7g6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgwNGIxZTRiLTg5ZDMtNDc2OS1i YWIxLTM4ZGYxZDliYjcyZS84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5 YmI3MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQUIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SdcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAdY9Wh4koXaoWzfKP4cjm5YoOjXLgFKMW+65pRc/BWHLYv9S4 JfVmnJLXdWlk+W2/dhofnxJiwWVKTxaRWM7RBtipNvr5yn/IDQcD/cURYvcnmxYX o6pnYBK7PMFZ+DVf3fqVwtcRJSBlzRM6s6Nk7qxVYCBjgYuEinCHDpqW17cyLgvo o/oqfyoeed4CTScLt2JNa1p5vOy21vPPPW3FLBIRrOxc4A9Nqx91op12msolHCHt QaG4qpuHCPheE1ptcd/33/Z7NUvSu8o5rfrlAtXDA+Ym2RlrgsapYUbhrdTLYW47 XTOnIcS7ck2JWZZ9nKSNqxMrRtAfLPnHCXPgPw== -----END CERTIFICATE-----Generated at Sat Apr 26 19:22:42 2025 by rpki-client