$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer File: b3f53674-93ef-439e-9019-e6308b1c1738.cer (raw, json) Hash identifier: sOeIU0Sww6ewi9MGHKGmkJxI/Z4+XMsuBQTWrNmFORY= Subject key identifier: 16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584909071DA03CBC4E360638F400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Feb 2025 18:30:26 +0000 Certificate not after: Sun 05 Jul 2026 00:45:20 +0000 Subordinate resources: AS: 397156 IP: 141.193.239.0/24 IP: 148.59.73.0/24 IP: 216.116.134.0/24 IP: 2602:fe24::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:07:1d:a0:3c:bc:4e:36:06:38:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 28 18:30:26 2025 GMT Not After : Jul 5 00:45:20 2026 GMT Subject: CN=b3f53674-93ef-439e-9019-e6308b1c1738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:6e:8e:78:34:0a:ee:0f:32:73:3b:a9:cc: 78:a4:77:77:e3:be:47:8a:32:34:df:0a:37:80:d8: b9:31:e1:99:a5:13:40:ef:ea:71:b7:dc:ef:a8:f3: 69:5b:24:f0:5b:8c:2f:82:ba:6b:a3:55:49:9b:a6: f8:d8:09:b9:0a:60:a5:25:61:93:dc:f1:0a:9d:c1: ae:43:7c:cd:b9:d2:79:f9:ec:78:5a:b9:13:a0:00: a3:c8:05:29:d0:a6:15:92:78:ff:6f:48:4b:32:7f: b8:8b:25:43:85:7d:1f:df:32:da:0a:35:46:83:ed: 31:f9:cc:d3:4a:43:b2:31:20:14:7d:52:3a:c3:af: 30:65:ca:fa:e2:2f:8f:7d:57:92:f0:78:93:57:01: 81:6a:07:ce:73:8c:df:00:32:0d:41:1b:72:9f:47: c2:a5:df:e0:51:1d:e7:0b:65:81:dd:b5:9e:ed:00: 3d:ae:88:33:95:37:b7:eb:8f:ac:53:e8:27:3e:84: 34:53:92:db:84:6d:13:c6:b7:8c:e4:36:61:85:6b: 37:98:0b:57:82:64:b9:0e:4b:c1:b0:54:0a:95:bc: 5b:74:55:94:a7:aa:86:59:3f:2a:97:82:ad:e3:fd: 7e:4a:88:2a:d0:a4:2e:ce:23:5a:2a:41:cf:1d:67: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 141.193.239.0/24 148.59.73.0/24 216.116.134.0/24 IPv6: 2602:fe24::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397156 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:a3:65:0d:ae:44:f5:e4:d1:9a:28:5c:aa:01:b8:f1:2a:88: 35:ce:39:6d:45:44:bd:a5:94:65:ac:9c:f8:31:f1:c5:d9:9c: 7f:46:eb:06:a9:bd:06:71:14:f4:e2:d3:e7:63:41:24:ca:22: 62:2f:f1:ba:e9:b6:73:89:24:80:73:e3:14:8a:b4:92:22:b4: 48:cc:53:f9:0b:16:eb:40:33:20:d5:18:a0:ad:5d:c8:d6:44: 56:77:1f:fe:36:bb:e9:bc:f6:65:90:19:89:0d:69:28:b4:f1: 32:03:78:69:6d:86:4c:0e:7e:96:51:c0:bc:81:13:e5:0b:f3: 25:bb:bd:98:d2:16:bd:8e:75:8a:f0:2d:1c:1d:d5:51:21:af: f4:8d:b3:a2:76:b6:4b:de:50:cd:1b:ad:8e:ed:5a:9b:6c:57: 6b:c0:ba:5f:15:2d:ae:cd:de:b5:d6:36:5b:82:a5:8d:fd:78: 3f:76:00:4f:b3:9b:a9:47:ff:35:72:6b:2c:2d:9b:1d:34:2a: 4b:50:35:d1:5a:84:f9:ff:e7:dd:70:13:b5:90:fc:0d:d3:d6: 03:67:58:c9:61:67:35:68:b8:7c:f7:72:17:40:c0:ef:4e:12: e6:10:48:96:b8:6a:19:fb:9f:e9:a3:6d:cb:63:b0:22:98:e1: 70:8a:b0:85 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEkJBx2gPLxONgY49AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIyODE4MzAyNloXDTI2MDcwNTAwNDUyMFowLzEtMCsGA1UEAxMk YjNmNTM2NzQtOTNlZi00MzllLTkwMTktZTYzMDhiMWMxNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kpujng0Cu4PMnM7qcx4pHd3475HijI03wo3 gNi5MeGZpRNA7+pxt9zvqPNpWyTwW4wvgrpro1VJm6b42Am5CmClJWGT3PEKncGu Q3zNudJ5+ex4WrkToACjyAUp0KYVknj/b0hLMn+4iyVDhX0f3zLaCjVGg+0x+czT SkOyMSAUfVI6w68wZcr64i+PfVeS8HiTVwGBagfOc4zfADINQRtyn0fCpd/gUR3n C2WB3bWe7QA9rogzlTe364+sU+gnPoQ0U5LbhG0TxreM5DZhhWs3mAtXgmS5DkvB sFQKlbxbdFWUp6qGWT8ql4Kt4/1+Sogq0KQuziNaKkHPHWeciQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFBZCnfjfuZZOpaQU5rZCca6b/yzGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i M2Y1MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMwOGIxYzE3MzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2IzZjUzNjc0LTkzZWYtNDM5ZS05 MDE5LWU2MzA4YjFjMTczOC9iM2Y1MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMwOGIx YzE3MzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBACNwe8DBACUO0kDBADYdIYwDgQCAAIwCAMGBCYC /iQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYPZDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwo2UNrkT1 5NGaKFyqAbjxKog1zjltRUS9pZRlrJz4MfHF2Zx/RusGqb0GcRT04tPnY0EkyiJi L/G66bZziSSAc+MUirSSIrRIzFP5CxbrQDMg1RigrV3I1kRWdx/+NrvpvPZlkBmJ DWkotPEyA3hpbYZMDn6WUcC8gRPlC/Mlu72Y0ha9jnWK8C0cHdVRIa/0jbOidrZL 3lDNG62O7VqbbFdrwLpfFS2uzd611jZbgqWN/Xg/dgBPs5upR/81cmssLZsdNCpL UDXRWoT5/+fdcBO1kPwN09YDZ1jJYWc1aLh893IXQMDvThLmEEiWuGoZ+5/po23L Y7AimOFwirCF -----END CERTIFICATE-----Generated at Sun Apr 27 04:20:27 2025 by rpki-client