$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer File: 5099b784-b9db-4eb1-bfc6-b20b342c1e2a.cer (raw, json) Hash identifier: 4luweCWz0WvYEdC/2uAEmBybUZigiRUFTRxIZKb7KTw= Subject key identifier: 1B:41:58:90:45:2F:98:34:51:39:C3:A4:83:4A:5C:A8:31:8A:22:4A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584943BDCA865273396633DF7100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 21 Mar 2025 19:15:23 +0000 Certificate not after: Sun 30 May 2027 00:45:33 +0000 Subordinate resources: AS: 22801 IP: 2604:3a40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:bd:ca:86:52:73:39:66:33:df:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 21 19:15:23 2025 GMT Not After : May 30 00:45:33 2027 GMT Subject: CN=5099b784-b9db-4eb1-bfc6-b20b342c1e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:db:95:8b:2c:6a:4d:48:db:34:ec:dd:c4: 42:2f:9c:6d:19:b8:cb:68:17:dd:55:f5:6b:03:62: e9:05:43:7d:04:5a:07:38:18:26:17:01:f1:b2:4a: 65:1f:40:2a:e8:2a:3b:40:16:3c:fa:5b:d7:dd:08: 45:d6:e1:70:ca:e0:72:2a:a7:94:ac:18:31:56:18: 9d:c8:36:1f:12:46:3c:97:cb:85:ed:c7:15:87:f3: a4:bb:50:2f:2a:56:64:59:f1:c0:4c:90:55:c8:30: 8b:5b:3b:13:82:f9:db:75:9f:71:ea:68:be:3d:1c: bd:ac:ca:c9:bf:e7:3a:69:27:22:0b:0f:74:fa:ae: 8e:30:fd:ea:16:f2:cd:9f:03:1b:7f:6e:2b:14:30: c1:03:9d:c3:75:1a:c4:66:cf:cc:34:f3:c8:4a:6f: e4:ed:00:b9:2d:4d:43:4b:e5:a1:07:c8:78:91:66: 6e:2e:0f:3c:1c:c4:b4:f8:82:df:5e:90:ea:97:0b: 8d:f2:9a:b0:03:df:f2:f8:d3:31:8a:2c:03:f9:a5: 3a:a3:c0:25:d6:ad:cb:49:ad:ba:7f:d2:57:18:de: e4:48:64:64:c5:24:fd:22:e8:be:52:42:92:fc:6b: bc:fe:a2:d1:21:ee:fd:a0:2d:b9:60:4d:f6:ff:e1: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:41:58:90:45:2F:98:34:51:39:C3:A4:83:4A:5C:A8:31:8A:22:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5099b784-b9db-4eb1-bfc6-b20b342c1e2a/5099b784-b9db-4eb1-bfc6-b20b342c1e2a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2604:3a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22801 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:04:5a:68:3f:65:d4:bb:5d:d4:86:f5:2b:a9:05:df:3b:8a: f6:fa:54:0b:30:59:1e:89:ed:74:04:5f:19:9b:1d:3a:dd:c8: 0e:60:25:c2:e4:f0:85:bf:26:82:2a:59:34:63:4f:d8:3c:17: fd:87:45:cd:59:14:f0:99:c8:aa:b3:6f:90:d0:66:73:b0:af: 7f:28:08:68:d0:9e:1b:57:2b:fe:52:7b:0a:12:f5:af:20:1c: fb:07:87:ce:6c:d7:0c:49:fe:56:ff:03:ba:37:e3:d4:30:8d: 03:1c:4a:53:f0:1b:7a:20:75:4d:2d:a2:6e:36:69:fc:35:d7: 97:f8:e3:7c:b7:67:fc:94:c4:1f:60:d1:c5:36:77:46:fc:8d: c0:4d:9b:97:ac:f2:14:12:67:28:35:b5:c0:4b:cc:cb:7e:24: 6e:87:20:9e:8d:8b:b7:0a:79:54:ed:70:e1:e8:9f:a0:78:9b: 30:13:f4:9e:22:d1:d1:2d:5c:51:17:62:8a:86:2f:9a:a4:1c: d3:84:08:9b:26:05:6f:77:64:54:8f:60:5e:09:ed:5d:41:30: bc:6b:d7:a3:b1:cb:e2:87:3b:68:4c:d3:6a:61:8c:27:61:6b: 5c:20:06:8c:17:9a:e4:26:77:2c:ca:90:9d:93:de:04:b3:dd: ab:59:40:26 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWElDvcqGUnM5ZjPfcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDMyMTE5MTUyM1oXDTI3MDUzMDAwNDUzM1owLzEtMCsGA1UEAxMk NTA5OWI3ODQtYjlkYi00ZWIxLWJmYzYtYjIwYjM0MmMxZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM/blYssak1I2zTs3cRCL5xtGbjLaBfdVfVr A2LpBUN9BFoHOBgmFwHxskplH0Aq6Co7QBY8+lvX3QhF1uFwyuByKqeUrBgxVhid yDYfEkY8l8uF7ccVh/Oku1AvKlZkWfHATJBVyDCLWzsTgvnbdZ9x6mi+PRy9rMrJ v+c6aSciCw90+q6OMP3qFvLNnwMbf24rFDDBA53DdRrEZs/MNPPISm/k7QC5LU1D S+WhB8h4kWZuLg88HMS0+ILfXpDqlwuN8pqwA9/y+NMxiiwD+aU6o8Al1q3LSa26 f9JXGN7kSGRkxST9Iui+UkKS/Gu8/qLRIe79oC25YE32/+F93QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBtBWJBFL5g0UTnDpINKXKgxiiJKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 MDk5Yjc4NC1iOWRiLTRlYjEtYmZjNi1iMjBiMzQyYzFlMmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzUwOTliNzg0LWI5ZGItNGViMS1i ZmM2LWIyMGIzNDJjMWUyYS81MDk5Yjc4NC1iOWRiLTRlYjEtYmZjNi1iMjBiMzQy YzFlMmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBDpAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC AlkRMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAB8EWmg/ZdS7XdSG9SupBd87ivb6VAswWR6J7XQEXxmbHTrd yA5gJcLk8IW/JoIqWTRjT9g8F/2HRc1ZFPCZyKqzb5DQZnOwr38oCGjQnhtXK/5S ewoS9a8gHPsHh85s1wxJ/lb/A7o349QwjQMcSlPwG3ogdU0tom42afw115f443y3 Z/yUxB9g0cU2d0b8jcBNm5es8hQSZyg1tcBLzMt+JG6HIJ6Ni7cKeVTtcOHon6B4 mzAT9J4i0dEtXFEXYoqGL5qkHNOECJsmBW93ZFSPYF4J7V1BMLxr16Oxy+KHO2hM 02phjCdha1wgBowXmuQmdyzKkJ2T3gSz3atZQCY= -----END CERTIFICATE-----Generated at Sun May 11 08:32:22 2025 by rpki-client