$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1.cer File: 21536be2-b559-4b5e-9749-413cb6af0bc1.cer (raw, json) Hash identifier: vvPyCBuSytejclxLwEsoFx9sTZwDJGHRHHThT96xNkw= Subject key identifier: D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30 Authority key identifier: 2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 Certificate issuer: /CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Certificate serial: 010D0C9F4328584953F372B919FD5C20AC5459C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 27 Mar 2025 14:36:26 +0000 Certificate not after: Sun 31 Jan 2027 20:11:17 +0000 Subordinate resources: IP: 139.84.0.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:f3:72:b9:19:fd:5c:20:ac:54:59:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fd0156-bb1f-48b6-bf32-c9492286f195 Validity Not Before: Mar 27 14:36:26 2025 GMT Not After : Jan 31 20:11:17 2027 GMT Subject: CN=21536be2-b559-4b5e-9749-413cb6af0bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c9:84:f3:9f:ed:10:54:0c:d9:7d:6d:8d:5e: 7b:c0:48:a6:b1:cd:cb:4f:a7:e5:4c:c0:f1:55:2b: 42:e5:d9:7e:57:08:83:57:dd:05:fd:37:30:59:56: a3:4b:b2:1c:4b:4e:7f:c7:88:75:68:61:2a:d3:43: 78:69:a7:aa:78:be:97:fe:8f:42:64:77:bb:6d:9c: 8d:a1:32:88:ab:07:15:7d:10:43:87:17:a2:04:c9: 85:a2:36:3e:49:15:12:71:db:55:98:d7:2f:ef:ea: 73:f9:19:c3:60:35:00:3f:e8:ba:c2:ac:65:9c:b1: 0f:ac:8b:2b:6b:30:6d:8b:d3:1a:14:64:c8:9f:a5: 33:c8:24:c9:7f:92:22:02:5c:66:bd:8a:97:59:8f: 19:4b:7e:a1:fe:d4:a7:ed:09:97:cc:b6:df:b3:2b: 48:09:e6:ac:f7:4c:f8:d5:aa:0b:94:c2:8c:e3:f0: ee:69:48:20:4c:ff:ce:03:fc:f8:a2:20:34:67:d7: 24:cc:42:23:79:74:72:8c:45:c4:13:7a:9b:00:b6: 7e:18:55:53:39:83:e4:8e:cf:79:2e:4d:68:a0:35: 7b:34:cb:a1:69:2b:0e:27:f0:cd:70:92:82:9d:8c: a1:a6:7b:39:b9:44:db:28:18:4b:8d:99:c0:6e:49: f2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6F:83:DF:E3:4D:6B:F6:09:48:86:48:C7:34:0C:5D:69:74:69:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/21536be2-b559-4b5e-9749-413cb6af0bc1/21536be2-b559-4b5e-9749-413cb6af0bc1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl X509v3 Authority Key Identifier: keyid:2E:7B:48:64:E3:2B:BB:14:CD:9B:04:EB:D9:35:DD:72:8B:98:9E:52 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer sbgp-ipAddrBlock: critical IPv4: 139.84.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e0:e0:50:57:a5:3c:06:4b:6a:4c:b4:80:4b:e3:10:37:58: 10:a4:4f:ad:ee:65:29:0b:16:b5:25:ee:9a:78:c1:01:0a:02: e8:7b:ef:64:15:6f:df:c7:7f:ad:81:f1:7a:29:bf:c4:9d:b5: 5d:96:61:f2:f4:da:68:cf:98:03:b0:37:64:ee:f9:39:fc:31: d0:d2:da:14:f5:33:53:e6:39:20:16:7f:95:72:2a:a8:a9:d7: 80:97:31:8e:c3:b8:1f:c4:06:a3:5e:b0:d3:7c:6a:a2:51:35: 68:26:e7:78:cc:b8:57:0a:86:8a:82:65:f5:9a:a9:fe:b8:ba: 18:10:71:fb:48:7f:21:0a:65:93:cd:29:a8:d0:17:15:40:5f: a2:dc:83:f8:2f:50:8c:ee:6d:a1:3e:33:03:91:3f:28:30:24: dd:6d:0b:f5:88:26:a3:da:2f:62:4e:53:a4:a0:94:1a:74:60: 0a:fc:07:90:f2:37:ad:3e:84:25:e7:4c:b5:6f:76:d0:b4:10: 49:f3:b8:7b:16:96:36:6a:c1:9d:1a:9c:fc:ae:27:c2:3f:36: 4d:9a:b8:c6:d0:1f:95:eb:96:a7:a9:1f:bc:d8:ee:30:08:3d: d8:14:59:90:ac:bc:af:aa:fa:da:61:99:3f:d1:41:7d:3e:a7: 8e:86:2d:b7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWElT83K5Gf1cIKxUWcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIyODZm MTk1MB4XDTI1MDMyNzE0MzYyNloXDTI3MDEzMTIwMTExN1owLzEtMCsGA1UEAxMk MjE1MzZiZTItYjU1OS00YjVlLTk3NDktNDEzY2I2YWYwYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsmE85/tEFQM2X1tjV57wEimsc3LT6flTMDx VStC5dl+VwiDV90F/TcwWVajS7IcS05/x4h1aGEq00N4aaeqeL6X/o9CZHe7bZyN oTKIqwcVfRBDhxeiBMmFojY+SRUScdtVmNcv7+pz+RnDYDUAP+i6wqxlnLEPrIsr azBti9MaFGTIn6UzyCTJf5IiAlxmvYqXWY8ZS36h/tSn7QmXzLbfsytICeas90z4 1aoLlMKM4/DuaUggTP/OA/z4oiA0Z9ckzEIjeXRyjEXEE3qbALZ+GFVTOYPkjs95 Lk1ooDV7NMuhaSsOJ/DNcJKCnYyhpns5uUTbKBhLjZnAbknyFQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNlvg9/jTWv2CUiGSMc0DF1pdGkwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8y MTUzNmJlMi1iNTU5LTRiNWUtOTc0OS00MTNjYjZhZjBiYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYt YmIxZi00OGI2LWJmMzItYzk0OTIyODZmMTk1LzIxNTM2YmUyLWI1NTktNGI1ZS05 NzQ5LTQxM2NiNmFmMGJjMS8yMTUzNmJlMi1iNTU5LTRiNWUtOTc0OS00MTNjYjZh ZjBiYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQw MTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OWZkMDE1Ni1iYjFmLTQ4 YjYtYmYzMi1jOTQ5MjI4NmYxOTUuY3JsMB8GA1UdIwQYMBaAFC57SGTjK7sUzZsE 69k13XKLmJ5SMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5 ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAaLVAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYuDgUFelPAZLaky0gEvj EDdYEKRPre5lKQsWtSXumnjBAQoC6HvvZBVv38d/rYHxeim/xJ21XZZh8vTaaM+Y A7A3ZO75Ofwx0NLaFPUzU+Y5IBZ/lXIqqKnXgJcxjsO4H8QGo16w03xqolE1aCbn eMy4VwqGioJl9Zqp/ri6GBBx+0h/IQplk80pqNAXFUBfotyD+C9QjO5toT4zA5E/ KDAk3W0L9Ygmo9ovYk5TpKCUGnRgCvwHkPI3rT6EJedMtW920LQQSfO4exaWNmrB nRqc/K4nwj82TZq4xtAfleuWp6kfvNjuMAg92BRZkKy8r6r62mGZP9FBfT6njoYt tw== -----END CERTIFICATE-----Generated at Sat Apr 26 20:01:05 2025 by rpki-client