$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer File: 7405a32c-964c-4b30-a008-0f287767e1c1.cer (raw, json) Hash identifier: m3pNqDFu9gfpIJGX8i6FzNDHlF6jI9W3WMoTdAEf/Po= Subject key identifier: E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849FF6D8570C22D25BF916BFA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 28 May 2025 00:45:37 +0000 Certificate not after: Tue 31 Aug 2027 00:45:37 +0000 Subordinate resources: IP: 23.247.212.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:6d:85:70:c2:2d:25:bf:91:6b:fa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 28 00:45:37 2025 GMT Not After : Aug 31 00:45:37 2027 GMT Subject: CN=7405a32c-964c-4b30-a008-0f287767e1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:cf:7f:b1:33:cf:99:98:9e:60:0a:8d:7d:6c: 80:02:c6:e6:bb:65:a5:ff:f7:66:8c:d3:bf:65:8b: a7:ca:c4:a3:19:fd:f5:b7:e0:09:fb:bc:e0:00:3c: 3c:7e:92:14:e7:4b:32:3d:23:02:4a:96:a0:a0:e3: 8c:ea:cc:3f:c7:73:d7:54:b6:da:3e:59:a5:bc:f1: 65:bd:94:7a:fd:ae:65:a3:8b:81:6d:67:97:0c:3a: 58:92:9b:70:e0:b7:34:64:31:c3:84:6c:9a:ed:22: 54:67:64:7b:f9:c8:5d:15:57:f1:77:ca:31:35:f6: 73:20:3c:ac:11:18:aa:42:5c:fb:bd:2a:4b:36:5a: d4:f1:63:68:e7:16:d6:12:7b:26:a9:da:19:ad:ae: ee:8d:54:6d:12:58:30:ac:a0:c2:20:84:44:5f:de: 66:14:43:d8:57:24:36:49:af:0d:44:1e:d7:e6:f4: 4f:b4:95:e0:1e:3d:2b:54:6b:94:bf:04:ed:ed:40: 6e:c5:82:93:83:99:ea:3e:59:7e:68:4f:23:cd:8a: da:cd:e0:19:b2:b4:b5:3b:94:a2:1f:1b:aa:69:c1: 58:58:e4:70:dc:2b:a1:6b:eb:7b:5d:c0:da:ad:5b: 67:4e:3f:41:b8:5e:80:97:13:8c:02:0d:06:f3:24: 72:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.247.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:eb:68:0d:cf:68:90:a6:c1:8c:c8:ce:0e:bd:a4:b0:8b:62: 62:ce:39:09:33:66:35:8c:8e:0e:7c:0a:de:44:49:6a:19:a1: 55:c2:8b:fc:b2:20:9e:24:58:dc:30:a3:8b:c2:13:14:5d:c1: 62:cd:05:fa:ff:1f:82:18:e5:0b:3a:6e:87:9b:94:6a:7c:0b: a1:81:3f:7a:31:12:f5:5e:8e:96:92:2b:cd:28:1a:fe:8a:6c: ad:0e:3c:ab:c2:80:db:26:7c:03:f5:f8:0e:4d:5c:71:0d:2e: cc:85:c4:20:9b:7a:0a:49:c1:84:96:5e:01:ca:f9:fe:a1:3e: 6f:08:25:5d:a3:3d:16:09:81:67:c8:c8:21:aa:28:b5:38:67: 7c:8f:7a:b7:a0:76:4c:54:0e:74:1c:eb:96:04:20:ee:39:b5: af:95:0e:d1:54:79:4f:f4:d6:c9:17:77:2a:d8:4d:7b:e8:a9: e4:df:0c:9e:12:d2:43:84:da:d3:aa:56:20:46:ce:92:45:74: 6c:20:6f:07:29:aa:e1:d6:a0:5e:b8:63:fb:ca:18:99:5c:eb: 70:13:1a:b9:d7:4b:68:98:9f:35:e9:37:e1:01:cd:b1:23:f8: a3:69:e9:af:3b:fb:0b:38:d1:80:ae:66:9b:b9:24:4e:41:48: 00:c9:66:a7 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEn/bYVwwi0lv5Fr+kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUyODAwNDUzN1oXDTI3MDgzMTAwNDUzN1owLzEtMCsGA1UEAxMk NzQwNWEzMmMtOTY0Yy00YjMwLWEwMDgtMGYyODc3NjdlMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn89/sTPPmZieYAqNfWyAAsbmu2Wl//dmjNO/ ZYunysSjGf31t+AJ+7zgADw8fpIU50syPSMCSpagoOOM6sw/x3PXVLbaPlmlvPFl vZR6/a5lo4uBbWeXDDpYkptw4Lc0ZDHDhGya7SJUZ2R7+chdFVfxd8oxNfZzIDys ERiqQlz7vSpLNlrU8WNo5xbWEnsmqdoZra7ujVRtElgwrKDCIIREX95mFEPYVyQ2 Sa8NRB7X5vRPtJXgHj0rVGuUvwTt7UBuxYKTg5nqPll+aE8jzYrazeAZsrS1O5Si HxuqacFYWORw3Cuha+t7XcDarVtnTj9BuF6AlxOMAg0G8yRySQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOlzexXNZu2jC2hmQ3GUUggT99hYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2N2UxYzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc0MDVhMzJjLTk2NGMtNGIzMC1h MDA4LTBmMjg3NzY3ZTFjMS83NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2 N2UxYzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAIX99QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAC+toDc9okKbBjMjODr2k sItiYs45CTNmNYyODnwK3kRJahmhVcKL/LIgniRY3DCji8ITFF3BYs0F+v8fghjl Czpuh5uUanwLoYE/ejES9V6OlpIrzSga/opsrQ48q8KA2yZ8A/X4Dk1ccQ0uzIXE IJt6CknBhJZeAcr5/qE+bwglXaM9FgmBZ8jIIaootThnfI96t6B2TFQOdBzrlgQg 7jm1r5UO0VR5T/TWyRd3KthNe+ip5N8MnhLSQ4Ta06pWIEbOkkV0bCBvBymq4dag Xrhj+8oYmVzrcBMauddLaJifNek34QHNsSP4o2nprzv7CzjRgK5mm7kkTkFIAMlm pw== -----END CERTIFICATE-----Generated at Mon Jun 30 14:11:08 2025 by rpki-client