$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5600f87-5525-4ee6-96b1-aaebb3a53f08.cer File: b5600f87-5525-4ee6-96b1-aaebb3a53f08.cer (raw, json) Hash identifier: yqxpFlHG/VC5mPp/7D9eiAAw2V4nI6fer8ipQpCOyQ0= Subject key identifier: 0F:9C:3E:94:60:64:5A:1A:3F:67:D8:C2:6A:05:7C:95:54:47:C7:43 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849B9A2667CD206610CAF913D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5600f87-5525-4ee6-96b1-aaebb3a53f08/b5600f87-5525-4ee6-96b1-aaebb3a53f08.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5600f87-5525-4ee6-96b1-aaebb3a53f08/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 03 May 2025 00:45:35 +0000 Certificate not after: Fri 06 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 54621 IP: 23.151.64.0/24 IP: 2602:feaf::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:a2:66:7c:d2:06:61:0c:af:91:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 3 00:45:35 2025 GMT Not After : Aug 6 00:45:35 2027 GMT Subject: CN=b5600f87-5525-4ee6-96b1-aaebb3a53f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:69:bf:5f:3a:17:2a:30:da:d5:16:cd:72:00: 26:fa:45:3f:04:c0:12:58:b9:3e:d3:12:87:49:18: b6:eb:4d:14:a4:1c:ad:1c:46:60:73:a9:14:c4:2e: 47:75:57:9d:df:37:7c:89:4a:95:e9:c9:04:21:91: 2c:44:c0:4b:1f:91:05:39:6c:85:19:9d:51:ae:9d: 77:9d:98:e6:5b:cf:1c:5a:b0:3c:d9:f6:6e:38:30: c5:5c:41:2c:1f:62:fb:9a:36:5e:23:e6:b6:ac:08: 56:e2:f2:3a:0e:7b:6d:9e:b8:46:41:45:4a:c7:0f: f5:6e:c1:a4:cc:20:7c:1a:4c:bd:8f:e1:db:4d:0b: 81:cd:27:e0:42:33:9f:ef:75:37:ac:99:61:be:5f: f1:d0:99:91:85:da:e2:d7:1e:70:93:9b:40:b9:1b: ed:3a:cb:79:c2:0d:41:f5:4c:e4:05:1d:40:99:e5: 19:7d:30:27:b4:f4:7b:76:8c:e2:f3:04:c5:72:a9: d7:dc:07:fb:c1:56:28:d7:20:22:16:39:3d:ff:15: ce:64:cd:d0:2a:db:3c:9c:a7:e5:a6:fb:35:06:c8: 6f:27:5e:61:1d:5c:cf:eb:6c:28:c2:61:33:38:86: 7b:d1:21:5e:f5:a6:6a:08:4b:9f:5a:f3:51:0d:83: 1f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9C:3E:94:60:64:5A:1A:3F:67:D8:C2:6A:05:7C:95:54:47:C7:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5600f87-5525-4ee6-96b1-aaebb3a53f08/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5600f87-5525-4ee6-96b1-aaebb3a53f08/b5600f87-5525-4ee6-96b1-aaebb3a53f08.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.151.64.0/24 IPv6: 2602:feaf::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54621 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:1e:52:3a:91:76:38:56:aa:f0:0e:0c:13:62:db:f4:3d:ad: 1c:9d:10:31:c2:dd:a6:3f:07:6c:3b:ec:4b:52:50:9d:53:88: 33:64:5f:a5:a1:3c:46:7c:11:27:b1:c6:c9:95:ff:67:00:c1: c1:5d:24:7a:75:b1:bd:ff:de:bd:d4:76:da:33:bb:71:c5:35: b6:ab:be:2a:16:1f:8b:5e:71:c7:10:ba:07:58:38:f7:98:fc: 3d:46:d8:37:0d:fb:13:8c:66:28:9f:90:a6:ee:0e:51:5a:54: 48:4b:cf:1f:7f:64:80:7c:ca:b2:af:46:1e:14:f0:72:fa:a1: 0a:5a:eb:58:74:c1:47:24:08:61:0b:23:29:ec:f5:fc:19:18: ce:68:64:e2:87:22:2d:7f:eb:df:27:52:31:f1:ce:f9:ea:a5: 9c:7c:e4:c8:94:3a:d1:18:63:d6:77:b9:bc:c1:6b:af:4b:d8: 8c:67:20:1a:60:ed:41:de:11:0d:4f:b5:54:7b:aa:71:13:94: 99:1b:dc:5b:dd:b0:19:4d:10:8a:ac:7a:fb:57:f0:cf:9f:d4: 6a:b7:dc:49:67:69:79:a8:42:a9:c7:a1:4c:96:ea:c8:ad:00: 5b:77:a1:4c:ba:72:74:a1:cf:6a:58:7a:f3:4c:4e:85:b8:3b: e3:a9:43:c5 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEm5omZ80gZhDK+RPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUwMzAwNDUzNVoXDTI3MDgwNjAwNDUzNVowLzEtMCsGA1UEAxMk YjU2MDBmODctNTUyNS00ZWU2LTk2YjEtYWFlYmIzYTUzZjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2m/XzoXKjDa1RbNcgAm+kU/BMASWLk+0xKH SRi2600UpBytHEZgc6kUxC5HdVed3zd8iUqV6ckEIZEsRMBLH5EFOWyFGZ1Rrp13 nZjmW88cWrA82fZuODDFXEEsH2L7mjZeI+a2rAhW4vI6DnttnrhGQUVKxw/1bsGk zCB8Gky9j+HbTQuBzSfgQjOf73U3rJlhvl/x0JmRhdri1x5wk5tAuRvtOst5wg1B 9UzkBR1AmeUZfTAntPR7dozi8wTFcqnX3Af7wVYo1yAiFjk9/xXOZM3QKts8nKfl pvs1BshvJ15hHVzP62wowmEzOIZ70SFe9aZqCEufWvNRDYMfLQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFA+cPpRgZFoaP2fYwmoFfJVUR8dDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i NTYwMGY4Ny01NTI1LTRlZTYtOTZiMS1hYWViYjNhNTNmMDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2I1NjAwZjg3LTU1MjUtNGVlNi05 NmIxLWFhZWJiM2E1M2YwOC9iNTYwMGY4Ny01NTI1LTRlZTYtOTZiMS1hYWViYjNh NTNmMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXl0AwDgQCAAIwCAMGBCYC/q8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDVXTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFHlI6kXY4VqrwDgwTYtv0Pa0c nRAxwt2mPwdsO+xLUlCdU4gzZF+loTxGfBEnscbJlf9nAMHBXSR6dbG9/9691Hba M7txxTW2q74qFh+LXnHHELoHWDj3mPw9Rtg3DfsTjGYon5Cm7g5RWlRIS88ff2SA fMqyr0YeFPBy+qEKWutYdMFHJAhhCyMp7PX8GRjOaGTihyItf+vfJ1Ix8c756qWc fOTIlDrRGGPWd7m8wWuvS9iMZyAaYO1B3hENT7VUe6pxE5SZG9xb3bAZTRCKrHr7 V/DPn9Rqt9xJZ2l5qEKpx6FMlurIrQBbd6FMunJ0oc9qWHrzTE6FuDvjqUPF -----END CERTIFICATE-----Generated at Sun May 11 04:05:13 2025 by rpki-client