$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer File: d00749ed-70ef-447c-b17c-da6be8d7f312.cer (raw, json) Hash identifier: j+EABCLAmdPGgISryznWwgPLSw5ebAK3oTP5mxeV4dQ= Subject key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A2C18740B91741D59DCE71880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Jun 2025 00:45:36 +0000 Certificate not after: Thu 16 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 16686 IP: 64.68.192.0/20 IP: 2620:49::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2c:18:74:0b:91:74:1d:59:dc:e7:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 13 00:45:36 2025 GMT Not After : Sep 16 00:45:36 2027 GMT Subject: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:80:f5:83:3b:ef:eb:61:96:71:29:64:15: e2:1f:02:32:c8:4e:7c:32:ef:30:88:e6:5b:0e:5d: fc:0f:5f:ac:be:dd:70:ed:7e:7d:32:35:56:a8:68: 0b:99:e0:9f:d6:c9:96:3e:81:98:9d:b9:ae:8f:78: 56:ed:1f:84:68:92:62:76:88:87:9a:30:fb:51:bb: 5e:f2:37:62:c2:8b:16:69:85:5f:a7:30:5a:ce:3d: f5:e4:36:0d:8d:8e:99:f6:43:8a:d4:1f:91:27:dd: 2f:04:0f:1e:99:d4:3c:7a:0b:95:ab:c3:99:bc:b0: bd:ee:bf:fd:8b:d9:ba:c2:4a:b6:9e:76:d1:82:9a: 25:d1:3f:14:a1:8e:05:24:2f:88:9d:11:c8:e5:8c: 7f:be:92:e1:a5:5b:3f:3f:80:4f:5a:35:34:d4:63: 64:da:2d:15:fe:d1:1d:9f:1d:75:d0:4e:ea:18:87: 05:20:d0:54:20:62:27:3a:62:85:b9:bd:97:7e:88: d6:85:1d:c9:98:ab:1b:60:f6:68:33:0a:df:4e:f1: 01:1a:39:bf:cf:78:87:d2:15:1d:b0:65:f4:49:8b: ec:c0:7c:b0:83:de:53:d2:7b:c7:a1:a4:f2:0a:a8: 36:60:b9:2a:4b:c5:0e:0a:2d:05:37:4a:1e:15:59: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.68.192.0/20 IPv6: 2620:49::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ec:d1:6b:48:c9:98:ea:fd:aa:52:42:01:40:40:2f:ba:80: 00:50:6c:e5:c0:11:46:74:ac:80:25:56:0e:1f:db:15:8a:e3: a4:ce:55:65:df:14:d5:85:0b:0c:e1:8e:14:0b:9d:60:f4:0e: ef:6d:f0:95:bc:a7:1a:94:11:5b:0c:5e:99:ed:72:27:ca:bc: 5e:0f:e1:f5:34:a2:72:80:9d:82:98:c7:f0:20:d1:5f:d8:f8: 94:67:40:c5:80:15:b2:82:d6:93:d6:8b:43:e0:2d:d8:c9:49: 90:58:61:cb:d0:43:e8:bd:02:b2:c4:9a:2e:28:7c:1c:83:36: 4f:32:52:ab:ac:f9:0f:d8:dd:78:01:08:37:49:b0:db:f4:75: 45:5b:b3:7f:ad:fa:ba:68:94:7d:23:fd:f7:d6:91:95:fa:5a: 01:3e:f4:49:b3:70:83:94:d8:72:be:88:5a:47:ca:b4:92:e1: e0:b1:bc:c6:89:76:64:54:20:96:ca:1c:3f:1d:da:dd:3d:ed: d6:2d:0b:fc:9c:49:3d:6e:d8:a1:02:89:15:27:15:19:f5:3a: 8b:2d:31:db:33:5c:a5:d9:9d:e0:e5:8d:56:29:52:fa:2e:c0: b7:b9:8c:25:01:1f:73:97:1e:e4:4e:0b:11:3c:e1:24:03:ee: bc:bb:26:32 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEosGHQLkXQdWdznGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYxMzAwNDUzNloXDTI3MDkxNjAwNDUzNlowLzEtMCsGA1UEAxMk ZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdmMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjWA9YM77+thlnEpZBXiHwIyyE58Mu8wiOZb Dl38D1+svt1w7X59MjVWqGgLmeCf1smWPoGYnbmuj3hW7R+EaJJidoiHmjD7Ubte 8jdiwosWaYVfpzBazj315DYNjY6Z9kOK1B+RJ90vBA8emdQ8eguVq8OZvLC97r/9 i9m6wkq2nnbRgpol0T8UoY4FJC+InRHI5Yx/vpLhpVs/P4BPWjU01GNk2i0V/tEd nx110E7qGIcFINBUIGInOmKFub2XfojWhR3JmKsbYPZoMwrfTvEBGjm/z3iH0hUd sGX0SYvswHywg95T0nvHoaTyCqg2YLkqS8UOCi0FN0oeFVnsTQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPUgFYczWMUSeGRm87DjXYr0eHl0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k MDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2QwMDc0OWVkLTcwZWYtNDQ3Yy1i MTdjLWRhNmJlOGQ3ZjMxMi9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThk N2YzMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBARARMAwDwQCAAIwCQMHBCYgAEkAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJBLjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCG7NFrSMmY6v2qUkIBQEAvuoAA UGzlwBFGdKyAJVYOH9sViuOkzlVl3xTVhQsM4Y4UC51g9A7vbfCVvKcalBFbDF6Z 7XInyrxeD+H1NKJygJ2CmMfwINFf2PiUZ0DFgBWygtaT1otD4C3YyUmQWGHL0EPo vQKyxJouKHwcgzZPMlKrrPkP2N14AQg3SbDb9HVFW7N/rfq6aJR9I/331pGV+loB PvRJs3CDlNhyvohaR8q0kuHgsbzGiXZkVCCWyhw/HdrdPe3WLQv8nEk9btihAokV JxUZ9TqLLTHbM1yl2Z3g5Y1WKVL6LsC3uYwlAR9zlx7kTgsRPOEkA+68uyYy -----END CERTIFICATE-----Generated at Mon Jun 16 13:46:26 2025 by rpki-client