$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb.cer File: 95437874-24a3-4971-a87b-95b645e257bb.cer (raw, json) Hash identifier: CSIBtBP18l77j2xBoH3cHBwW4ihd0D6sza3CgYJzACE= Subject key identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858498653085228EBD6EC0A9F0E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 15:39:27 +0000 Certificate not after: Sun 12 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 36556 IP: 66.148.32.0/19 IP: 96.9.112.0/21 IP: 98.96.128.0/19 IP: 104.151.192.0/19 IP: 170.176.224.0/20 IP: 204.144.160.0/20 IP: 207.22.40.0/21 IP: 2602:fdfc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:53:08:52:28:eb:d6:ec:0a:9f:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 14 15:39:27 2025 GMT Not After : Jul 12 00:45:20 2026 GMT Subject: CN=95437874-24a3-4971-a87b-95b645e257bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fe:f2:09:51:6b:00:5b:f9:1a:71:95:18:b2: da:92:6a:85:cc:a3:cd:1a:1d:40:21:f6:f2:4c:77: f0:c3:de:46:7a:e6:b7:b8:b5:48:c0:9f:ba:de:f5: ea:7d:33:81:4e:b0:20:f3:a4:df:01:5e:b0:67:ea: 4b:67:f3:55:f6:9e:13:ed:54:5a:56:06:62:db:a5: 7f:9f:a5:40:94:62:5f:d8:f8:58:4f:29:0a:49:0d: 66:df:32:83:62:21:c0:6f:8e:07:dd:80:83:00:56: e3:77:69:32:39:3f:e9:26:5f:a3:7b:1f:c9:d3:51: c8:21:8f:d0:df:6f:40:fb:3b:7b:34:34:da:e3:6f: 84:01:2b:b9:cb:5f:18:8d:ff:9e:14:63:96:e6:c1: 95:72:c9:97:de:b0:94:89:54:83:d8:c8:21:03:26: a8:6b:a0:a9:e1:6e:a3:92:68:33:9c:2f:b5:13:e4: c5:9c:df:07:66:ac:7f:5b:61:8b:1d:9d:10:b6:ae: 6f:92:ab:90:b0:a9:8d:f9:96:46:22:11:39:bc:c6: 2e:d0:e1:f0:54:16:c3:c4:ea:db:af:20:43:f6:07: fb:d7:73:2a:10:10:cb:fc:80:5c:70:ad:77:f4:03: 06:49:39:d6:6a:0d:98:27:71:9f:2a:e7:6e:8c:f1: f2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9A:58:69:BC:33:C0:D1:95:9C:3D:00:B9:00:3B:B9:43:8A:4E:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/95437874-24a3-4971-a87b-95b645e257bb/95437874-24a3-4971-a87b-95b645e257bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.148.32.0/19 96.9.112.0/21 98.96.128.0/19 104.151.192.0/19 170.176.224.0/20 204.144.160.0/20 207.22.40.0/21 IPv6: 2602:fdfc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36556 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:92:a7:0c:26:5f:cb:7f:8e:bd:8c:07:de:6f:86:bf:92:e5: 03:48:49:92:5e:48:ee:f8:6f:8c:32:96:5c:1e:aa:ae:10:2c: 05:f3:7f:4f:14:b1:b3:ba:52:67:86:f8:02:d3:96:9a:c5:a9: 83:4d:9a:10:71:a7:60:94:b4:43:18:00:d0:ae:96:cb:e8:7f: 6d:dc:17:ee:80:7e:aa:0e:43:8a:bb:35:09:0e:ea:60:22:dd: b2:d1:b1:10:f9:8e:62:ba:7a:8c:4e:91:57:4f:e9:d4:e9:aa: 42:a8:d0:86:27:07:c1:85:43:b5:f3:eb:94:e3:9d:3a:04:dc: 61:34:bf:ae:85:26:af:1f:a9:39:01:30:8d:81:50:b8:3b:02: 88:42:97:9a:c4:36:3b:24:27:83:35:46:e3:b7:c6:2c:da:d7: a4:50:92:a1:0c:cf:37:da:cb:7e:fc:ac:fc:34:ac:1f:5c:0e: c8:8f:da:d7:98:fd:4f:cc:4d:d2:13:78:85:d8:5b:58:a1:0d: a0:be:4f:29:41:fa:c3:b9:72:df:02:66:c1:37:3d:9c:35:e1: 14:30:62:24:52:9b:78:4f:68:0c:b4:ad:40:ef:d2:e3:16:2a: b5:05:c9:1f:ee:0f:16:ad:c2:89:bc:76:49:62:4f:52:08:69: 25:37:09:33 -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWEmGUwhSKOvW7AqfDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQxNDE1MzkyN1oXDTI2MDcxMjAwNDUyMFowLzEtMCsGA1UEAxMk OTU0Mzc4NzQtMjRhMy00OTcxLWE4N2ItOTViNjQ1ZTI1N2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf7yCVFrAFv5GnGVGLLakmqFzKPNGh1AIfby THfww95Geua3uLVIwJ+63vXqfTOBTrAg86TfAV6wZ+pLZ/NV9p4T7VRaVgZi26V/ n6VAlGJf2PhYTykKSQ1m3zKDYiHAb44H3YCDAFbjd2kyOT/pJl+jex/J01HIIY/Q 329A+zt7NDTa42+EASu5y18Yjf+eFGOW5sGVcsmX3rCUiVSD2MghAyaoa6Cp4W6j kmgznC+1E+TFnN8HZqx/W2GLHZ0Qtq5vkquQsKmN+ZZGIhE5vMYu0OHwVBbDxOrb ryBD9gf713MqEBDL/IBccK139AMGSTnWag2YJ3GfKudujPHy3QIDAQABo4IETzCC BEswHQYDVR0OBBYEFA2aWGm8M8DRlZw9ALkAO7lDik5pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVlMjU3YmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk1NDM3ODc0LTI0YTMtNDk3MS1h ODdiLTk1YjY0NWUyNTdiYi85NTQzNzg3NC0yNGEzLTQ5NzEtYTg3Yi05NWI2NDVl MjU3YmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwUwYIKwYBBQUH AQcBAf8ERDBCMDAEAgABMCoDBAVClCADBANgCXADBAViYIADBAVol8ADBASqsOAD BATMkKADBAPPFigwDgQCAAIwCAMGBCYC/fwAMBoGCCsGAQUFBwEIAQH/BAswCaAH MAUCAwCOzDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQBTkqcMJl/Lf469jAfeb4a/kuUDSEmSXkju+G+MMpZc HqquECwF839PFLGzulJnhvgC05aaxamDTZoQcadglLRDGADQrpbL6H9t3BfugH6q DkOKuzUJDupgIt2y0bEQ+Y5iunqMTpFXT+nU6apCqNCGJwfBhUO18+uU4506BNxh NL+uhSavH6k5ATCNgVC4OwKIQpeaxDY7JCeDNUbjt8Ys2tekUJKhDM832st+/Kz8 NKwfXA7Ij9rXmP1PzE3SE3iF2FtYoQ2gvk8pQfrDuXLfAmbBNz2cNeEUMGIkUpt4 T2gMtK1A79LjFiq1Bckf7g8WrcKJvHZJYk9SCGklNwkz -----END CERTIFICATE-----Generated at Fri May 2 22:42:40 2025 by rpki-client