$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer File: 265b0641-047d-4787-a12d-159370bfcdb1.cer (raw, json) Hash identifier: YnJbUZt43369PvEXlvKmTNfOCxoH0nm1JlIi+EJ7Dlg= Subject key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584824F2FAA731FA05E6010AF220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Dec 2024 01:45:33 +0000 Certificate not after: Sun 14 Mar 2027 01:45:33 +0000 Subordinate resources: IP: 104.171.16.0/20 IP: 2620:94:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:24:f2:fa:a7:31:fa:05:e6:01:0a:f2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Dec 9 01:45:33 2024 GMT Not After : Mar 14 01:45:33 2027 GMT Subject: CN=265b0641-047d-4787-a12d-159370bfcdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ef:77:3f:aa:09:77:fb:7c:9a:b5:d2:9c:0b: e4:df:df:b4:f7:80:4f:f8:a0:9e:f1:47:b5:cd:09: 18:21:04:a8:73:93:44:19:1d:a2:5f:7d:22:8f:c3: 2c:25:3c:b8:89:17:65:56:e5:ce:88:06:af:83:56: 3a:43:78:b7:50:ad:b5:bf:bb:f2:33:0a:a5:b0:d6: b2:62:7a:b1:bf:be:21:fe:c8:9a:7a:86:02:7b:a1: 98:29:9c:d3:35:e4:0e:b3:9f:28:d7:cd:13:88:33: 02:01:51:ae:79:33:84:93:a6:77:8e:51:d3:85:ba: f8:0a:c0:6c:9e:80:11:4b:80:5a:4f:ee:48:ef:84: e3:77:97:86:81:8f:5d:6c:72:85:a2:9e:f3:83:fa: e0:b6:62:86:49:ab:e6:c1:c0:1d:2d:a8:26:62:3a: 41:6a:e6:1c:08:a8:f2:5f:68:cd:d3:9b:33:cb:20: 59:39:d3:56:13:02:23:87:7a:a3:27:99:4b:a9:fc: 67:03:cb:81:c3:6a:3d:c0:67:77:5b:9e:28:bc:10: 2a:51:e9:ee:e2:72:0a:aa:cd:c9:6e:a7:23:5e:2d: 4e:82:79:93:74:e1:b0:7f:e1:30:82:14:5b:dc:ca: 62:b6:ae:4d:a4:f7:d7:8e:fc:63:c7:1a:9c:d4:af: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.171.16.0/20 IPv6: 2620:94:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e3:4a:43:5c:79:ef:ea:87:be:11:a9:d8:44:d8:93:76:3c: 03:ce:dc:ce:99:e5:7a:c8:f0:a5:64:29:2a:d2:06:41:b1:ee: f2:4d:57:86:66:9f:08:a5:53:d8:6f:73:6d:d2:13:67:93:48: 9b:c4:fe:df:30:05:70:73:ca:b5:07:5f:fb:08:16:65:3b:4a: 57:2e:c0:10:c4:67:cb:a7:d6:1a:0c:f0:f5:d8:b3:a9:a3:81: f2:aa:78:2f:16:2f:94:f4:33:d7:6c:0b:4f:ef:23:61:a7:b9: c3:0d:1d:e3:6c:ae:09:87:46:5a:27:52:b6:b1:aa:77:14:a5: 27:3c:ef:19:79:6c:10:b8:fe:0b:01:f4:53:fa:5a:f4:ea:a9: c1:0c:ed:9f:fc:73:71:9e:ce:d5:a6:df:71:b7:4c:c3:26:27: 6d:d6:10:b0:4e:e7:8c:a3:5f:53:d9:d6:df:ff:da:71:2d:70: b4:bc:b2:04:06:7e:0a:9f:ef:0f:fe:e0:f4:9d:d9:7a:ab:99: 8b:05:03:80:b1:9f:a1:44:0d:d4:2a:a0:64:46:7f:9e:44:73: ec:e7:4d:54:b9:2d:ab:b8:bb:92:a0:ca:82:17:75:17:db:7e: e4:36:54:c1:3d:ca:d9:45:e5:68:6b:40:80:5f:8a:1f:9f:4d: 21:08:6b:03 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEgk8vqnMfoF5gEK8iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI0MTIwOTAxNDUzM1oXDTI3MDMxNDAxNDUzM1owLzEtMCsGA1UEAxMk MjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZjZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge93P6oJd/t8mrXSnAvk39+094BP+KCe8Ue1 zQkYIQSoc5NEGR2iX30ij8MsJTy4iRdlVuXOiAavg1Y6Q3i3UK21v7vyMwqlsNay Ynqxv74h/siaeoYCe6GYKZzTNeQOs58o180TiDMCAVGueTOEk6Z3jlHThbr4CsBs noARS4BaT+5I74Tjd5eGgY9dbHKFop7zg/rgtmKGSavmwcAdLagmYjpBauYcCKjy X2jN05szyyBZOdNWEwIjh3qjJ5lLqfxnA8uBw2o9wGd3W54ovBAqUenu4nIKqs3J bqcjXi1OgnmTdOGwf+EwghRb3Mpitq5NpPfXjvxjxxqc1K/vmQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFCZsRzmnc6gjGKC3z5r7Y3KRVAslMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y NjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzI2NWIwNjQxLTA0N2QtNDc4Ny1h MTJkLTE1OTM3MGJmY2RiMS8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBi ZmNkYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBARoqxAwDwQCAAIwCQMHACYgAJTAADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAJ40pDXHnv6oe+EanYRNiTdjwDztzOmeV6yPClZCkq0gZBse7yTVeGZp8IpVPY b3Nt0hNnk0ibxP7fMAVwc8q1B1/7CBZlO0pXLsAQxGfLp9YaDPD12LOpo4Hyqngv Fi+U9DPXbAtP7yNhp7nDDR3jbK4Jh0ZaJ1K2sap3FKUnPO8ZeWwQuP4LAfRT+lr0 6qnBDO2f/HNxns7Vpt9xt0zDJidt1hCwTueMo19T2dbf/9pxLXC0vLIEBn4Kn+8P /uD0ndl6q5mLBQOAsZ+hRA3UKqBkRn+eRHPs501UuS2ruLuSoMqCF3UX237kNlTB PcrZReVoa0CAX4ofn00hCGsD -----END CERTIFICATE-----Generated at Tue May 13 11:17:05 2025 by rpki-client