$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer File: f0ba84c0-5d44-4547-a368-e574b20611e4.cer (raw, json) Hash identifier: kEAMnLgB1RFif6B9m+NxVH1K28eOQpCLTBhqMlhQ/rM= Subject key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285848CF3EB4CD581486469025AEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 08 Feb 2025 01:45:33 +0000 Certificate not after: Fri 14 May 2027 00:45:33 +0000 Subordinate resources: AS: 33040 IP: 199.48.216.0/21 IP: 2605:3d40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cf:3e:b4:cd:58:14:86:46:90:25:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 8 01:45:33 2025 GMT Not After : May 14 00:45:33 2027 GMT Subject: CN=f0ba84c0-5d44-4547-a368-e574b20611e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:69:5e:40:62:f1:15:20:a2:0a:9a:a8:d6: 56:5b:f7:61:26:f6:a8:59:d9:e4:c2:72:a8:46:ad: 68:83:28:51:83:e0:33:ca:41:ce:42:b4:ac:d0:a4: cb:e3:41:d1:b4:c9:9c:03:aa:3b:53:69:1e:f2:b7: ef:1d:d9:09:ae:4d:7f:6f:6b:c8:56:f6:40:3c:34: 63:e2:f4:71:fd:11:31:0e:b4:a5:21:55:81:69:25: ad:14:52:40:7d:ac:36:ed:2c:bc:35:96:7b:a7:fc: f6:b0:2c:7f:06:c9:0e:b8:ea:9d:bb:66:22:98:02: ff:bb:9b:5a:dd:73:67:0f:71:9a:4b:0d:48:5d:1c: 0e:a2:39:7e:d8:d1:63:4a:96:25:4a:9b:be:f0:d8: 23:2e:db:00:fc:18:44:df:8c:58:23:ea:1a:9a:3e: 5d:45:48:f4:11:bb:61:b4:e6:11:68:6a:77:40:a5: 75:03:3b:d2:d5:cb:01:a9:17:27:17:b8:01:b0:91: 1e:22:e6:ca:1b:ce:bf:ad:cf:d7:5d:cb:95:dc:66: 38:be:8b:34:e4:10:dd:f5:21:69:19:a8:89:23:19: f1:22:35:40:ff:01:84:5d:80:3a:6c:ec:89:43:be: 30:1e:cb:23:50:50:b0:67:26:e0:b7:88:cd:6f:db: 12:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.48.216.0/21 IPv6: 2605:3d40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33040 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fc:44:dd:05:90:5a:e1:10:cb:12:57:07:68:ee:ab:4d:c5: 8c:b5:c6:3c:fa:74:e7:fb:72:0d:ca:b7:40:90:28:df:b5:75: 6d:89:8b:33:fc:3b:87:f2:7a:f5:30:e7:2e:f5:2d:5d:27:b1: 07:60:49:1a:4f:21:7c:16:92:a9:f3:cd:10:29:d1:5c:70:20: 3f:93:ad:c0:88:67:d0:3b:b3:65:0f:63:8b:61:c9:38:41:3a: a7:db:23:17:0c:49:9f:3f:ae:a5:9e:97:fd:dd:34:fb:f1:92: 13:51:8c:f9:72:a3:2e:8e:74:fb:b3:3f:53:9c:5a:c3:ef:a6: 7b:2b:aa:f8:6e:2d:ad:4c:00:b8:3b:fb:c6:ab:88:3f:69:11: 6f:9f:7e:5d:34:d3:17:1d:d2:17:68:72:00:f4:f3:a9:ca:87: 55:b2:d1:84:5e:1f:32:22:c6:18:42:44:38:3e:e1:a1:a2:1b: 0c:43:e8:36:dd:e7:40:ce:ce:84:bf:60:34:db:15:fc:ed:51: 96:47:41:78:66:e8:7c:e0:1d:31:e4:a1:bd:fa:68:20:88:93: 0e:52:3e:f0:0c:60:24:cf:c7:50:78:f3:81:b3:af:66:fd:2b: c8:85:71:36:55:06:07:93:f7:72:9f:03:3e:a4:c2:35:be:72: 76:74:a9:cc -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEjPPrTNWBSGRpAlrsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIwODAxNDUzM1oXDTI3MDUxNDAwNDUzM1owLzEtMCsGA1UEAxMk ZjBiYTg0YzAtNWQ0NC00NTQ3LWEzNjgtZTU3NGIyMDYxMWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaZpXkBi8RUgogqaqNZWW/dhJvaoWdnkwnKo Rq1ogyhRg+AzykHOQrSs0KTL40HRtMmcA6o7U2ke8rfvHdkJrk1/b2vIVvZAPDRj 4vRx/RExDrSlIVWBaSWtFFJAfaw27Sy8NZZ7p/z2sCx/BskOuOqdu2YimAL/u5ta 3XNnD3GaSw1IXRwOojl+2NFjSpYlSpu+8NgjLtsA/BhE34xYI+oamj5dRUj0Ebth tOYRaGp3QKV1AzvS1csBqRcnF7gBsJEeIubKG86/rc/XXcuV3GY4vos05BDd9SFp GaiJIxnxIjVA/wGEXYA6bOyJQ74wHssjUFCwZybgt4jNb9sSbQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKC7Gc7n2NeqTXzlkDgPShnYe3ojMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m MGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIwNjExZTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2YwYmE4NGMwLTVkNDQtNDU0Ny1h MzY4LWU1NzRiMjA2MTFlNC9mMGJhODRjMC01ZDQ0LTQ1NDctYTM2OC1lNTc0YjIw NjExZTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPHMNgwDQQCAAIwBwMFACYFPUAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIEQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA78RN0FkFrhEMsSVwdo7qtNxYy1 xjz6dOf7cg3Kt0CQKN+1dW2JizP8O4fyevUw5y71LV0nsQdgSRpPIXwWkqnzzRAp 0VxwID+TrcCIZ9A7s2UPY4thyThBOqfbIxcMSZ8/rqWel/3dNPvxkhNRjPlyoy6O dPuzP1OcWsPvpnsrqvhuLa1MALg7+8ariD9pEW+ffl000xcd0hdocgD086nKh1Wy 0YReHzIixhhCRDg+4aGiGwxD6Dbd50DOzoS/YDTbFfztUZZHQXhm6HzgHTHkob36 aCCIkw5SPvAMYCTPx1B484Gzr2b9K8iFcTZVBgeT93KfAz6kwjW+cnZ0qcw= -----END CERTIFICATE-----Generated at Sat Apr 26 22:55:33 2025 by rpki-client