$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116.cer File: 7e50977e-3e40-4150-b9bd-c9bdff374116.cer (raw, json) Hash identifier: RfiSrh4DEThgWdIZV/719Ef2yfprB74beL62nKMH+0Y= Subject key identifier: 39:74:F0:F3:9E:E6:A1:66:E4:88:BE:F5:90:BE:B2:EC:91:81:5D:97 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858490714634B12B00DEBAE546200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/7e50977e-3e40-4150-b9bd-c9bdff374116.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Feb 2025 01:45:33 +0000 Certificate not after: Thu 03 Jun 2027 00:45:33 +0000 Subordinate resources: AS: 549 IP: 205.211.94.0/23 IP: 2606:b340::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:14:63:4b:12:b0:0d:eb:ae:54:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 28 01:45:33 2025 GMT Not After : Jun 3 00:45:33 2027 GMT Subject: CN=7e50977e-3e40-4150-b9bd-c9bdff374116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:61:b5:be:4f:04:c7:eb:05:12:f3:b7:e3:eb: 18:fa:63:2f:7a:01:5e:1b:ec:0d:47:9e:06:ce:47: 13:00:3a:69:79:cf:85:09:f3:49:8f:6a:c0:93:15: c8:ef:63:54:4e:fd:fc:46:90:45:37:a5:f8:84:68: f7:bc:af:8e:11:f4:78:43:da:c1:94:de:f7:b0:00: 08:76:b9:5e:d1:7f:58:82:3e:7e:80:fe:03:28:a3: 6b:05:24:5a:fd:1c:f3:5a:ff:4a:10:1a:97:71:2f: 05:6d:5d:77:da:a5:12:46:66:ac:cf:bb:3b:dd:82: 98:30:9a:56:02:27:ed:94:cf:72:b4:08:ec:65:7c: f9:8f:27:39:b6:87:9d:14:fd:4e:87:39:5d:ef:45: 8c:68:d9:3f:08:e7:33:b2:5e:cc:99:6b:82:30:a2: 67:6d:f0:fc:f7:2c:6c:8e:de:ea:09:70:0a:2d:14: 77:6b:e9:ca:6b:b5:5a:93:60:bb:88:9b:24:46:21: 20:ba:da:6d:d9:a1:d7:09:05:0a:a4:d2:52:e3:4f: ee:53:d6:c5:a7:ea:87:de:33:a7:6a:be:ce:d2:f8: 27:8d:29:9d:aa:a4:a4:b1:37:c7:02:50:1e:16:63: 38:d3:47:92:97:f4:ab:5c:c9:3f:ca:22:44:c0:56: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:74:F0:F3:9E:E6:A1:66:E4:88:BE:F5:90:BE:B2:EC:91:81:5D:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e50977e-3e40-4150-b9bd-c9bdff374116/7e50977e-3e40-4150-b9bd-c9bdff374116.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 205.211.94.0/23 IPv6: 2606:b340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 549 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b1:ff:e7:e5:55:23:12:dd:8d:0a:7a:3a:9b:f5:fd:cd:6b: 08:21:5e:58:8e:1b:78:01:d9:55:66:17:5b:49:dc:c9:a6:56: 8c:e5:29:13:d2:f9:a3:29:fa:3a:70:cc:77:3c:07:85:1c:e1: 5c:f5:9c:26:e8:1d:fe:89:4a:87:c2:40:20:9b:eb:e8:fb:67: 8b:df:88:e2:43:d8:8d:ee:e3:9a:a4:1d:1d:87:60:fd:05:4f: 9e:6b:fc:1b:c0:e5:bb:33:6e:38:6b:f0:bf:88:83:87:56:74: ca:99:e5:ba:62:56:6d:70:d8:d7:b1:76:2f:5b:4e:b6:2a:12: ff:0b:9f:c4:9b:46:ff:f3:69:fc:b5:a9:cf:29:ae:bd:6c:ef: 83:11:6c:ac:73:d1:76:65:ab:02:09:58:9c:b1:0d:83:a2:5e: e4:5a:ab:6e:e7:46:e0:db:1b:f1:f1:74:37:58:3f:d9:33:e4: ee:25:1f:32:cf:d1:bd:71:93:92:ee:40:13:c3:01:e3:cd:c2: d3:9d:e9:37:9e:5c:e2:17:39:03:b1:a5:f7:26:25:f9:4d:46: e7:73:78:b1:ff:df:6e:fa:0c:fa:ba:72:53:f9:c2:73:08:51: 9c:2c:a2:7e:9b:47:54:7c:be:57:96:dc:65:9f:40:d8:7b:0e: 28:8f:d6:4f -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEkHFGNLErAN665UYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIyODAxNDUzM1oXDTI3MDYwMzAwNDUzM1owLzEtMCsGA1UEAxMk N2U1MDk3N2UtM2U0MC00MTUwLWI5YmQtYzliZGZmMzc0MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGG1vk8Ex+sFEvO34+sY+mMvegFeG+wNR54G zkcTADppec+FCfNJj2rAkxXI72NUTv38RpBFN6X4hGj3vK+OEfR4Q9rBlN73sAAI drle0X9Ygj5+gP4DKKNrBSRa/RzzWv9KEBqXcS8FbV132qUSRmasz7s73YKYMJpW AiftlM9ytAjsZXz5jyc5toedFP1Ohzld70WMaNk/COczsl7MmWuCMKJnbfD89yxs jt7qCXAKLRR3a+nKa7Vak2C7iJskRiEgutpt2aHXCQUKpNJS40/uU9bFp+qH3jOn ar7O0vgnjSmdqqSksTfHAlAeFmM400eSl/SrXMk/yiJEwFboCwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDl08POe5qFm5Ii+9ZC+suyRgV2XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZTUwOTc3ZS0zZTQwLTQxNTAtYjliZC1jOWJkZmYzNzQxMTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlNTA5NzdlLTNlNDAtNDE1MC1i OWJkLWM5YmRmZjM3NDExNi83ZTUwOTc3ZS0zZTQwLTQxNTAtYjliZC1jOWJkZmYz NzQxMTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAHN014wDQQCAAIwBwMFACYGs0AwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICAiUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbbH/5+VVIxLdjQp6Opv1/c1rCCFe WI4beAHZVWYXW0ncyaZWjOUpE9L5oyn6OnDMdzwHhRzhXPWcJugd/olKh8JAIJvr 6Ptni9+I4kPYje7jmqQdHYdg/QVPnmv8G8DluzNuOGvwv4iDh1Z0ypnlumJWbXDY 17F2L1tOtioS/wufxJtG//Np/LWpzymuvWzvgxFsrHPRdmWrAglYnLENg6Je5Fqr budG4Nsb8fF0N1g/2TPk7iUfMs/RvXGTku5AE8MB483C053pN55c4hc5A7Gl9yYl +U1G53N4sf/fbvoM+rpyU/nCcwhRnCyifptHVHy+V5bcZZ9A2HsOKI/WTw== -----END CERTIFICATE-----Generated at Sun May 11 04:03:58 2025 by rpki-client