$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer File: ff8cfb76-d3cf-4da6-bfe0-361d7750c902.cer (raw, json) Hash identifier: gLjyxfwxX62Bb3jgPkwLNivw4CxpEC4m2V8YUT6xXFU= Subject key identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584981CCB67029D7EC468803A300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 13 Apr 2025 00:45:34 +0000 Certificate not after: Sat 17 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 394393 AS: 397026 IP: 96.47.168.0/22 IP: 139.64.168.0/22 IP: 172.102.248.0/22 IP: 2604:f840::/32 IP: 2607:59c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:81:cc:b6:70:29:d7:ec:46:88:03:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 13 00:45:34 2025 GMT Not After : Jul 17 00:45:34 2027 GMT Subject: CN=ff8cfb76-d3cf-4da6-bfe0-361d7750c902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:fb:1b:3d:38:46:51:11:70:32:ea:4a:a6:08: ec:a6:18:31:82:93:29:a3:ba:53:6f:1c:ab:0d:5f: 98:25:53:0e:7c:48:bd:ac:65:70:8f:ed:c4:74:3a: 5a:f5:51:e1:71:6d:30:07:11:4f:e9:88:c2:f3:05: 36:c3:a8:86:73:6f:c9:ac:2f:bb:65:16:4a:18:50: 4a:4c:d9:73:0d:c4:f2:45:54:e1:9f:2c:f5:5a:d9: d6:b2:fc:50:0e:7a:64:ea:eb:fb:9a:51:d7:40:cb: e0:6d:e6:46:ea:96:03:d6:9e:54:39:73:12:a6:31: 63:7c:7e:1c:09:05:c3:27:2d:4e:b5:15:27:49:36: 53:46:9f:8b:a7:ca:cf:d9:74:f0:ec:1d:01:ea:a8: 8a:74:05:4a:c0:01:47:4f:78:71:fb:fe:7d:85:b7: af:3d:2f:1d:c0:63:6a:bb:07:31:f6:04:f8:6d:e5: c9:43:bf:77:4c:6a:2e:b6:a5:d8:18:ec:46:0a:88: 54:8d:17:c4:96:a7:1a:b9:10:02:2d:43:b5:df:8a: f7:30:fb:a0:93:56:3f:65:20:6b:1b:47:cc:44:fe: 42:cd:01:1c:e8:df:74:ed:c7:f5:17:a8:63:8c:d0: c6:bf:6a:05:e3:8b:cb:2d:e7:52:34:e2:98:95:76: d3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:37:FE:CB:C1:74:3F:E3:2B:47:1B:A9:5E:1E:A2:6A:27:0E:48:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff8cfb76-d3cf-4da6-bfe0-361d7750c902/ff8cfb76-d3cf-4da6-bfe0-361d7750c902.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 96.47.168.0/22 139.64.168.0/22 172.102.248.0/22 IPv6: 2604:f840::/32 2607:59c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394393 397026 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:65:b9:30:97:75:70:6a:40:7d:89:1c:80:f0:98:f8:20:55: 3a:fa:d0:44:24:84:5c:90:07:9d:5f:35:a2:6f:95:6a:c3:d8: f5:4e:eb:67:43:80:7e:23:0c:3a:4e:9d:b0:8a:1f:61:e7:34: d4:0a:c9:0a:91:2e:89:e2:bf:61:13:66:ff:2e:c9:b2:73:f9: 7c:12:44:38:16:40:ce:ee:93:98:97:bf:65:4b:22:2d:d0:61: 49:87:f3:76:d3:7b:62:2d:65:38:a1:9d:ed:22:6a:e4:36:75: 14:f3:2a:1a:13:a2:a5:9c:1c:e9:e6:87:3a:18:eb:f8:23:8a: dd:3e:c1:6f:d7:a7:0a:00:ad:10:df:4e:0f:e2:4a:96:9d:cd: f0:d3:07:82:94:26:3d:2d:2b:b1:de:e4:f2:05:8d:57:24:0b: 1d:5b:e9:ae:70:cb:45:44:da:c9:2e:8d:df:bc:8d:8b:7c:13: 70:ff:54:95:6e:f3:1e:32:ec:4a:b4:18:72:8f:7b:4c:c5:23: 47:08:5c:52:c2:1b:e9:70:f9:8a:05:0c:91:73:ce:8e:ff:ec: 8f:4f:eb:a4:fc:cd:c1:b1:f6:f9:54:dc:50:50:7e:33:8f:d4: 41:48:b9:ef:73:4c:f2:50:0c:31:5d:d1:e7:c0:7d:6c:6a:39: b0:9a:3c:1c -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEmBzLZwKdfsRogDowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQxMzAwNDUzNFoXDTI3MDcxNzAwNDUzNFowLzEtMCsGA1UEAxMk ZmY4Y2ZiNzYtZDNjZi00ZGE2LWJmZTAtMzYxZDc3NTBjOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vsbPThGURFwMupKpgjsphgxgpMpo7pTbxyr DV+YJVMOfEi9rGVwj+3EdDpa9VHhcW0wBxFP6YjC8wU2w6iGc2/JrC+7ZRZKGFBK TNlzDcTyRVThnyz1WtnWsvxQDnpk6uv7mlHXQMvgbeZG6pYD1p5UOXMSpjFjfH4c CQXDJy1OtRUnSTZTRp+Lp8rP2XTw7B0B6qiKdAVKwAFHT3hx+/59hbevPS8dwGNq uwcx9gT4beXJQ793TGoutqXYGOxGCohUjRfElqcauRACLUO134r3MPugk1Y/ZSBr G0fMRP5CzQEc6N907cf1F6hjjNDGv2oF44vLLedSNOKYlXbTKwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFHE3/svBdD/jK0cbqV4eomonDkjAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1MGM5MDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZmOGNmYjc2LWQzY2YtNGRhNi1i ZmUwLTM2MWQ3NzUwYzkwMi9mZjhjZmI3Ni1kM2NmLTRkYTYtYmZlMC0zNjFkNzc1 MGM5MDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMBgEAgABMBIDBAJgL6gDBAKLQKgDBAKsZvgwFAQCAAIwDgMFACYE +EADBQAmB1nAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwYEmQIDBg7iMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBACFluTCXdXBqQH2JHIDwmPggVTr60EQkhFyQB51fNaJvlWrD2PVO62dDgH4j DDpOnbCKH2HnNNQKyQqRLoniv2ETZv8uybJz+XwSRDgWQM7uk5iXv2VLIi3QYUmH 83bTe2ItZTihne0iauQ2dRTzKhoToqWcHOnmhzoY6/gjit0+wW/XpwoArRDfTg/i SpadzfDTB4KUJj0tK7He5PIFjVckCx1b6a5wy0VE2skujd+8jYt8E3D/VJVu8x4y 7Eq0GHKPe0zFI0cIXFLCG+lw+YoFDJFzzo7/7I9P66T8zcGx9vlU3FBQfjOP1EFI ue9zTPJQDDFd0efAfWxqObCaPBw= -----END CERTIFICATE-----Generated at Sun Apr 27 00:22:19 2025 by rpki-client