$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer File: ee195698-fb60-40ef-a454-85fcbf3381b9.cer (raw, json) Hash identifier: ty2qm9yZlGy0UMnZNM3lXbhy30Be5p+UeNDZAbsAB3M= Subject key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A31ADD4C5560961DB6288C480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Jun 2025 00:45:37 +0000 Certificate not after: Sat 18 Sep 2027 00:45:37 +0000 Subordinate resources: IP: 137.216.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:31:ad:d4:c5:56:09:61:db:62:88:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 15 00:45:37 2025 GMT Not After : Sep 18 00:45:37 2027 GMT Subject: CN=ee195698-fb60-40ef-a454-85fcbf3381b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:9d:47:e8:b0:27:3a:0d:2f:ac:bb:61:35: 5c:e6:a9:85:fc:fd:8e:63:d1:d2:0e:58:24:52:4a: c3:9c:a8:b2:7b:b1:d3:24:11:09:00:77:7c:7d:f6: ab:a3:bb:a9:fc:19:56:33:a8:af:e4:52:2d:0a:45: 72:00:37:5a:61:aa:1f:dc:35:6a:e6:48:f1:d6:bb: c6:94:af:08:28:65:b9:5f:82:b0:47:6a:20:f6:b2: 1b:cc:6b:f4:0f:d8:1d:81:32:71:27:02:2d:50:9b: f8:02:ad:d0:08:f3:5f:72:2d:75:eb:c6:37:79:9a: ca:ad:67:8a:82:0b:68:a1:b6:3c:48:b1:3b:3b:e2: 44:19:8c:15:70:cc:c5:30:76:78:1f:ea:8b:55:68: 04:6e:07:92:52:64:bb:1d:a3:48:0b:48:2a:54:de: d7:06:7e:10:4c:26:cd:80:dc:67:84:2d:8b:03:3c: e2:4f:e0:3d:0c:d3:ee:e7:ba:63:75:c9:f8:54:ad: 55:09:58:d7:87:e3:b2:84:02:a6:56:86:97:42:95: 6d:7a:8c:bf:47:e0:04:46:97:03:ab:ff:10:90:38: b5:14:cd:96:27:85:56:59:23:fd:d4:eb:d2:21:7d: a9:4b:a9:95:d4:08:c4:83:5e:11:b0:1c:3f:db:e5: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 137.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:70:b7:c1:b0:c9:f1:b1:96:f7:e0:02:c9:93:1c:96:ff:23: 04:f6:49:48:5a:4b:d5:37:30:f9:c7:a6:e7:1c:c1:42:e6:f0: 43:62:a7:8c:a6:84:58:5d:0e:b4:85:f6:bf:ce:f4:8d:3f:d4: 49:72:93:c9:09:2a:03:fd:4a:95:7d:26:04:30:20:f6:49:49: 6d:41:43:c8:d2:1e:a1:fa:9f:92:72:df:6c:93:a1:29:c5:76: 8f:72:11:90:6f:ed:23:c6:b3:45:f7:b3:f6:68:4b:b5:bf:a7: 85:cd:27:02:c2:30:cf:e5:3b:40:ba:78:77:c3:ee:d8:20:df: 18:c3:22:4a:ca:47:d1:45:1f:71:55:fa:69:17:56:e6:1d:e1: 9c:b0:64:28:b7:c5:02:95:27:4d:aa:f5:71:b5:c5:73:85:d5: a4:cc:da:7b:57:38:04:9d:7b:6a:a4:b4:a6:4b:18:4e:ba:d4: 3c:1a:df:38:0b:02:fb:93:5c:ac:e4:9b:03:7b:ac:1e:ca:a3: 55:70:f8:8e:bf:e0:b9:0e:3b:70:54:80:d2:f3:8f:86:e4:da: d1:45:cf:9d:24:4b:3e:d7:14:ad:6d:34:19:31:b8:92:bb:0f: 43:78:47:cf:b1:c1:5c:eb:1b:36:46:d5:7a:a4:a2:44:6b:91: 75:59:f0:8d -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEoxrdTFVglh22KIxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYxNTAwNDUzN1oXDTI3MDkxODAwNDUzN1owLzEtMCsGA1UEAxMk ZWUxOTU2OTgtZmI2MC00MGVmLWE0NTQtODVmY2JmMzM4MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCCdR+iwJzoNL6y7YTVc5qmF/P2OY9HSDlgk UkrDnKiye7HTJBEJAHd8ffaro7up/BlWM6iv5FItCkVyADdaYaof3DVq5kjx1rvG lK8IKGW5X4KwR2og9rIbzGv0D9gdgTJxJwItUJv4Aq3QCPNfci1168Y3eZrKrWeK ggtoobY8SLE7O+JEGYwVcMzFMHZ4H+qLVWgEbgeSUmS7HaNIC0gqVN7XBn4QTCbN gNxnhC2LAzziT+A9DNPu57pjdcn4VK1VCVjXh+OyhAKmVoaXQpVteoy/R+AERpcD q/8QkDi1FM2WJ4VWWSP91OvSIX2pS6mV1AjEg14RsBw/2+VHewIDAQABo4ID/jCC A/owHQYDVR0OBBYEFD0XJfHbAqivzHPU4b+BWvb5jAgSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYzMzgxYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VlMTk1Njk4LWZiNjAtNDBlZi1h NDU0LTg1ZmNiZjMzODFiOS9lZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYz MzgxYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJ2DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAtcLfBsMnxsZb34ALJkxyW /yME9klIWkvVNzD5x6bnHMFC5vBDYqeMpoRYXQ60hfa/zvSNP9RJcpPJCSoD/UqV fSYEMCD2SUltQUPI0h6h+p+Sct9sk6EpxXaPchGQb+0jxrNF97P2aEu1v6eFzScC wjDP5TtAunh3w+7YIN8YwyJKykfRRR9xVfppF1bmHeGcsGQot8UClSdNqvVxtcVz hdWkzNp7VzgEnXtqpLSmSxhOutQ8Gt84CwL7k1ys5JsDe6weyqNVcPiOv+C5Djtw VIDS84+G5NrRRc+dJEs+1xStbTQZMbiSuw9DeEfPscFc6xs2RtV6pKJEa5F1WfCN -----END CERTIFICATE-----Generated at Thu Jun 19 05:58:42 2025 by rpki-client