$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer File: 9ac09e11-24a9-4451-9633-b772a7a11960.cer (raw, json) Hash identifier: s4b58uzaJ/5EaQMBwTkJjBbrcr/FH28gzn68dyZpZz4= Subject key identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858498FC222A66517BE95EA120F38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 00:45:34 +0000 Certificate not after: Thu 22 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 14041 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8f:c2:22:a6:65:17:be:95:ea:12:0f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 18 00:45:34 2025 GMT Not After : Jul 22 00:45:34 2027 GMT Subject: CN=9ac09e11-24a9-4451-9633-b772a7a11960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:e3:f4:bd:9b:9b:5e:7b:ea:c9:6a:ad:bb: 38:e7:d7:b5:4c:90:c5:03:34:57:de:c0:22:29:73: 59:fc:a0:fb:5e:15:85:19:46:2c:81:3d:3f:42:f7: 57:fc:a3:b5:aa:ed:36:cf:df:2c:12:1c:c1:b1:0b: 94:8c:9b:63:a7:e3:1b:0e:3e:de:e7:3b:1b:a9:4a: f5:e2:e1:e5:8d:08:e3:6b:31:55:ca:ad:48:d6:34: 9c:cd:fb:20:41:a3:9e:c4:ef:ab:a7:5c:7d:d6:9d: 3b:7d:d7:ba:6e:ec:a2:d0:fc:60:5f:5f:8d:ba:c2: 04:23:7f:97:96:97:3f:3a:43:62:1d:b9:00:3e:e6: 5e:2d:2f:7a:3a:14:9f:d6:57:70:26:72:84:43:3a: a6:54:22:88:e0:75:39:09:47:86:65:5d:19:9c:a8: 1b:c9:fd:a5:1a:6d:83:d8:38:cb:e3:6c:e8:f3:1a: f1:d1:60:63:d8:5a:35:e8:24:47:7d:3c:df:9a:fc: 80:d7:b2:dd:4d:ec:bd:39:6c:66:2c:97:e2:7b:1a: 61:6b:ca:68:7c:ca:b1:a4:2a:7b:c6:01:43:0f:fa: 3a:59:68:5e:97:5b:b0:b0:f0:c7:47:0c:cc:f8:e9: 56:24:df:0d:9a:fc:24:42:e1:52:b3:f4:48:00:3c: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 14041 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7a:72:9f:23:31:19:e9:81:8f:bb:06:9c:1f:88:41:47:b8: 0f:02:02:44:ff:34:85:7b:c5:61:d4:7b:1d:11:23:ff:8d:3c: a2:20:82:86:cf:62:3d:fd:6b:e3:74:a3:34:f4:ce:97:5b:84: 20:ea:ee:2f:d6:9b:12:82:2f:96:6c:fa:45:88:ee:78:ed:8a: de:1e:4e:7e:db:76:22:e4:a2:6a:84:9d:2c:16:8c:c1:a5:b3: a9:c8:85:01:28:d3:a5:dd:da:d1:37:95:35:b8:86:9f:23:be: 69:90:24:29:3a:30:f3:56:28:24:5a:1f:ed:5b:64:40:d0:9f: c2:c2:c1:67:ca:a0:9d:53:7e:94:d8:95:03:d9:56:48:ba:12: 97:de:26:1d:8b:22:1a:26:d0:a0:20:3b:2c:4d:3a:08:f5:61: 97:96:62:55:b0:b5:51:98:b7:7d:78:2b:16:87:17:54:6b:33: b3:bd:92:9b:18:ec:50:13:ff:1b:cd:92:da:72:12:08:dc:c3: 1f:61:1a:66:00:a2:90:78:4c:f8:2b:aa:30:86:d4:45:d5:8d: 1b:14:fb:64:16:5f:7d:ee:65:94:01:92:7d:2e:5e:85:3e:5c: 73:c6:0a:08:d3:16:f4:8a:9b:b3:d8:6d:61:3e:54:3e:00:14: e0:18:42:8f -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEmPwiKmZRe+leoSDzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQxODAwNDUzNFoXDTI3MDcyMjAwNDUzNFowLzEtMCsGA1UEAxMk OWFjMDllMTEtMjRhOS00NDUxLTk2MzMtYjc3MmE3YTExOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gbj9L2bm1576slqrbs459e1TJDFAzRX3sAi KXNZ/KD7XhWFGUYsgT0/QvdX/KO1qu02z98sEhzBsQuUjJtjp+MbDj7e5zsbqUr1 4uHljQjjazFVyq1I1jSczfsgQaOexO+rp1x91p07fde6buyi0PxgX1+NusIEI3+X lpc/OkNiHbkAPuZeLS96OhSf1ldwJnKEQzqmVCKI4HU5CUeGZV0ZnKgbyf2lGm2D 2DjL42zo8xrx0WBj2Fo16CRHfTzfmvyA17LdTey9OWxmLJfiexpha8pofMqxpCp7 xgFDD/o6WWhel1uwsPDHRwzM+OlWJN8NmvwkQuFSs/RIADwnHwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFDc7i8Wntvby80LSqh5Dnpk/W4TmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdhMTE5NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzlhYzA5ZTExLTI0YTktNDQ1MS05 NjMzLWI3NzJhN2ExMTk2MC85YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdh MTE5NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNtkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKnpynyMxGemBj7sGnB+IQUe4DwIC RP80hXvFYdR7HREj/408oiCChs9iPf1r43SjNPTOl1uEIOruL9abEoIvlmz6RYju eO2K3h5Oftt2IuSiaoSdLBaMwaWzqciFASjTpd3a0TeVNbiGnyO+aZAkKTow81Yo JFof7VtkQNCfwsLBZ8qgnVN+lNiVA9lWSLoSl94mHYsiGibQoCA7LE06CPVhl5Zi VbC1UZi3fXgrFocXVGszs72SmxjsUBP/G82S2nISCNzDH2EaZgCikHhM+CuqMIbU RdWNGxT7ZBZffe5llAGSfS5ehT5cc8YKCNMW9Iqbs9htYT5UPgAU4BhCjw== -----END CERTIFICATE-----Generated at Tue Apr 29 05:26:10 2025 by rpki-client