$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer File: cea06048-7bc3-4b65-8443-4c600b73bc11.cer (raw, json) Hash identifier: cm1NfB7HmvzIb/SYqtj5hH4EcAep6+T92lqXdlubOoo= Subject key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849F178156F9A56A4827DF9C100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 May 2025 00:45:35 +0000 Certificate not after: Thu 26 Aug 2027 00:45:35 +0000 Subordinate resources: IP: 159.91.0.0/16 IP: 192.76.179.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:78:15:6f:9a:56:a4:82:7d:f9:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 23 00:45:35 2025 GMT Not After : Aug 26 00:45:35 2027 GMT Subject: CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:cf:3a:26:f9:88:35:24:26:40:11:d2:52: 2c:0e:fe:fa:6f:10:a8:3c:c0:fe:3d:81:83:27:34: f2:ec:87:5c:12:4a:f9:b1:29:ae:23:71:a5:fa:3f: d8:62:77:e2:db:de:b9:06:11:8e:a3:0a:33:87:07: 77:d1:7e:fb:9b:d9:bd:9c:23:2a:92:73:7a:ca:d0: 09:f1:58:f8:1a:fc:15:6b:51:f8:43:fd:d3:f1:d7: 45:d5:88:f4:a4:b1:e4:35:7e:ff:a2:a2:3f:db:8d: 4f:da:24:ea:3e:0b:2f:f5:70:bc:93:d1:7b:7e:c6: 4a:7c:8e:a4:5a:f5:47:a1:1e:e4:3e:f2:2c:9b:7c: 75:fe:03:29:2d:4e:7e:18:b5:dc:90:51:08:ae:34: 30:77:c7:63:ea:a9:e6:7b:d5:54:aa:59:50:9a:d3: 25:51:ca:18:56:7a:b7:58:e8:d2:5b:66:17:0c:8c: 74:f3:57:fe:5c:ef:1b:63:bb:14:61:4d:7b:26:77: 41:38:3e:50:d8:60:f1:18:2e:0f:40:dd:89:e3:27: 2d:18:eb:18:19:44:6e:4b:3b:e3:dc:6b:fb:16:8e: ef:fc:c5:09:16:7a:8a:15:ed:f7:50:11:a3:71:8e: f4:e5:f1:fd:c4:6f:1d:35:b9:1c:d1:ee:3e:81:e4: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 159.91.0.0/16 192.76.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f6:cc:11:5e:fe:68:67:48:00:a5:94:99:13:bd:ff:75:74: 99:b2:d7:17:5e:e9:65:60:72:d2:12:f0:f5:f5:54:a2:5e:8e: 71:fb:70:00:ee:d7:3d:b9:4d:10:4d:2b:db:12:74:4a:35:73: 24:e0:47:76:16:00:80:2b:f8:e6:10:55:e4:28:47:c8:d0:88: 8e:82:ec:df:0c:97:d2:5b:9e:3f:a4:21:e7:99:76:c2:95:40: b4:d0:2b:f2:2e:c4:06:06:02:27:e8:2e:09:b9:ed:76:38:cf: db:21:56:2a:1d:5a:eb:dd:98:aa:c4:98:73:5a:40:a6:1f:4e: 91:3c:8b:9c:0a:4c:5b:f1:7d:4a:3d:09:ee:39:63:13:5f:9e: f8:3e:08:8c:15:95:82:3a:f0:04:42:62:68:02:15:9a:45:c2: 1a:9a:70:f9:78:cb:0c:9f:60:23:df:01:3b:a8:6c:ba:e7:eb: 25:17:1b:f1:9e:af:08:87:b2:c7:bb:ef:2c:f9:a5:31:9c:e1: 0d:f3:c1:d8:10:4a:9a:0b:e7:7b:8e:e7:76:ce:89:0a:2a:fd: ab:85:01:10:ce:7c:92:36:51:df:fc:61:85:36:03:9c:48:5a: a1:02:15:cd:84:07:35:19:43:fe:8f:d2:4a:89:17:6f:f1:d2: fa:0d:fc:4c -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWEnxeBVvmlakgn35wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUyMzAwNDUzNVoXDTI3MDgyNjAwNDUzNVowLzEtMCsGA1UEAxMk Y2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNiYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB/POib5iDUkJkAR0lIsDv76bxCoPMD+PYGD JzTy7IdcEkr5sSmuI3Gl+j/YYnfi2965BhGOowozhwd30X77m9m9nCMqknN6ytAJ 8Vj4GvwVa1H4Q/3T8ddF1Yj0pLHkNX7/oqI/241P2iTqPgsv9XC8k9F7fsZKfI6k WvVHoR7kPvIsm3x1/gMpLU5+GLXckFEIrjQwd8dj6qnme9VUqllQmtMlUcoYVnq3 WOjSW2YXDIx081f+XO8bY7sUYU17JndBOD5Q2GDxGC4PQN2J4yctGOsYGURuSzvj 3Gv7Fo7v/MUJFnqKFe33UBGjcY705fH9xG8dNbkc0e4+geShcQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFHL+fRkLV5re22Fe1djLYF0fUK7ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j ZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2NlYTA2MDQ4LTdiYzMtNGI2NS04 NDQzLTRjNjAwYjczYmMxMS9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3 M2JjMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCfWwMEAMBMszBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAy9swRXv5oZ0gA pZSZE73/dXSZstcXXullYHLSEvD19VSiXo5x+3AA7tc9uU0QTSvbEnRKNXMk4Ed2 FgCAK/jmEFXkKEfI0IiOguzfDJfSW54/pCHnmXbClUC00CvyLsQGBgIn6C4Jue12 OM/bIVYqHVrr3ZiqxJhzWkCmH06RPIucCkxb8X1KPQnuOWMTX574PgiMFZWCOvAE QmJoAhWaRcIamnD5eMsMn2Aj3wE7qGy65+slFxvxnq8Ih7LHu+8s+aUxnOEN88HY EEqaC+d7jud2zokKKv2rhQEQznySNlHf/GGFNgOcSFqhAhXNhAc1GUP+j9JKiRdv 8dL6DfxM -----END CERTIFICATE-----Generated at Wed Jun 18 03:01:29 2025 by rpki-client