$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer File: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer (raw, json) Hash identifier: JT04kATtZj30h65XbLtDAn9Oqm9WRQ1LoUzHGCQViQM= Subject key identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A58C368B91BFE786358944A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 29 Jun 2025 00:45:37 +0000 Certificate not after: Sat 02 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 20149 IP: 69.72.16.0/21 IP: 98.97.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:c3:68:b9:1b:fe:78:63:58:94:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 29 00:45:37 2025 GMT Not After : Oct 2 00:45:37 2027 GMT Subject: CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:91:51:20:6f:34:42:ab:3b:a7:aa:52:66: 63:b7:b1:f0:4e:b5:77:f9:b2:93:34:10:a3:9a:78: 50:a3:03:fb:8d:22:ef:b5:67:9e:96:86:8f:a0:72: 04:2b:54:49:98:fb:e1:56:16:65:4d:01:be:34:58: 8a:3e:ac:f3:98:16:bd:84:1a:73:34:ee:e6:c7:bd: 69:b6:4e:73:64:15:91:db:90:43:99:bc:e7:12:7f: 86:de:cc:70:f4:67:ec:1a:68:06:d9:6a:2b:96:5c: 6f:25:ec:72:c7:02:92:3a:0b:e0:33:59:62:40:4e: 8f:5d:1b:f9:7e:e8:8d:8a:14:ff:00:d1:ca:d3:35: d4:18:7c:df:00:d5:33:c1:c8:7b:a9:a8:93:5c:e7: 61:c2:fa:f8:b0:da:7f:1f:43:29:d0:d8:0b:f3:7d: b6:e6:5c:9e:02:c7:b7:ac:ae:0d:42:86:56:10:f1: 55:d9:96:b2:a5:51:7b:e2:d3:ee:8a:19:bb:8c:72: be:f0:63:b1:9d:86:ec:95:57:b5:0f:f7:e5:13:5d: 8a:a7:f5:6b:1e:e0:18:7d:a2:69:7c:ec:9f:60:8c: 33:63:89:78:5c:fa:9f:ad:8f:4e:2d:bf:4b:ff:2d: c9:75:c5:3e:3f:aa:d6:86:92:7d:9b:e5:94:c7:01: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 69.72.16.0/21 98.97.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20149 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:40:84:d4:58:bd:25:52:67:c5:3e:39:a9:94:82:04:38:f2: 65:ef:a8:02:af:6c:53:8f:04:ba:ca:38:d8:b9:ba:18:0c:97: cf:58:8a:28:be:46:24:1d:78:d1:49:08:34:b3:26:4b:6a:59: 6b:a6:5b:f8:8c:57:25:81:bf:08:3f:1f:da:1c:d5:0d:49:a3: e3:30:0a:49:a8:4f:4d:b7:0f:0a:3d:66:2c:1d:09:b8:cb:27: 86:05:1b:01:34:8a:a8:3e:23:8a:79:a3:d0:e4:33:12:1f:14: ed:8b:a2:5a:3e:30:93:9e:dd:fc:54:3e:8b:db:ab:c3:43:c3: c9:78:b5:ea:9a:7d:87:1f:4b:53:d2:d8:ad:7f:c9:79:d7:95: 4b:42:62:ab:5d:d4:8c:d2:03:c3:77:8a:ea:37:c0:f5:e7:42: 6a:5c:a3:a0:73:d2:84:b0:27:4c:0c:91:15:f5:20:66:76:98: 2c:69:4b:cf:91:aa:45:e8:2c:1f:2b:40:e4:63:76:a5:33:9f: 4b:75:93:df:42:56:76:c7:87:78:9c:27:90:af:b0:af:52:62: cd:74:45:63:88:6d:fe:90:0c:ec:33:2d:90:31:aa:55:2b:5c: ea:49:bf:22:f3:86:c6:e8:89:44:72:cd:eb:db:41:57:60:da: d5:0f:12:d1 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEpYw2i5G/54Y1iUSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYyOTAwNDUzN1oXDTI3MTAwMjAwNDUzN1owLzEtMCsGA1UEAxMk NDk5NDUwYmQtNjQzMi00ZTVkLWEyOWYtMWMzOGMxZWExNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofqRUSBvNEKrO6eqUmZjt7HwTrV3+bKTNBCj mnhQowP7jSLvtWeeloaPoHIEK1RJmPvhVhZlTQG+NFiKPqzzmBa9hBpzNO7mx71p tk5zZBWR25BDmbznEn+G3sxw9GfsGmgG2WorllxvJexyxwKSOgvgM1liQE6PXRv5 fuiNihT/ANHK0zXUGHzfANUzwch7qaiTXOdhwvr4sNp/H0Mp0NgL83225lyeAse3 rK4NQoZWEPFV2ZaypVF74tPuihm7jHK+8GOxnYbslVe1D/flE12Kp/VrHuAYfaJp fOyfYIwzY4l4XPqfrY9OLb9L/y3JdcU+P6rWhpJ9m+WUxwFnTQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFFecff2HMAS3tEeNAzBZEF2Uk3nxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFlYTE0YzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ5OTQ1MGJkLTY0MzItNGU1ZC1h MjlmLTFjMzhjMWVhMTRjNi80OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFl YTE0YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANFSBADBAViYcAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICTrUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAaECE1Fi9JVJnxT45qZSCBDjyZe+oAq9sU48Euso4 2Lm6GAyXz1iKKL5GJB140UkINLMmS2pZa6Zb+IxXJYG/CD8f2hzVDUmj4zAKSahP TbcPCj1mLB0JuMsnhgUbATSKqD4jinmj0OQzEh8U7YuiWj4wk57d/FQ+i9urw0PD yXi16pp9hx9LU9LYrX/JedeVS0Jiq13UjNIDw3eK6jfA9edCalyjoHPShLAnTAyR FfUgZnaYLGlLz5GqRegsHytA5GN2pTOfS3WT30JWdseHeJwnkK+wr1JizXRFY4ht /pAM7DMtkDGqVStc6km/IvOGxuiJRHLN69tBV2Da1Q8S0Q== -----END CERTIFICATE-----Generated at Tue Jul 1 09:15:51 2025 by rpki-client