$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer (raw, json) Hash identifier: e89KOdaoDFiYTb4noUByYNXcOnimlYEPlkNs0gfhGO8= Subject key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A4538A14DC9855910D3E01600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Jun 2025 00:45:36 +0000 Certificate not after: Sat 25 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 40867 IP: 74.114.72.0/21 IP: 172.86.240.0/21 IP: 208.90.96.0/21 IP: 2605:3240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:45:38:a1:4d:c9:85:59:10:d3:e0:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 22 00:45:36 2025 GMT Not After : Sep 25 00:45:36 2027 GMT Subject: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:28:37:1b:90:f9:a2:33:3a:0d:43:af:1d: 87:5c:4e:d4:90:47:65:38:13:82:94:10:df:14:f9: 69:e9:b1:d7:7c:3e:3f:80:1c:6b:53:8c:95:1a:97: 72:aa:91:f7:bd:8f:08:84:50:a8:f0:50:05:65:01: 2d:57:c8:32:cf:24:52:c5:90:2b:44:db:9a:ab:11: f6:f6:42:99:42:28:f0:ac:53:4f:58:b0:99:1b:52: 9f:08:8a:c7:1c:35:ae:f4:c3:de:7b:08:a9:5e:8c: 53:a9:e0:08:bc:af:1a:b9:6d:20:47:de:88:d2:cc: 75:da:42:d5:ca:2d:ca:82:0e:15:a9:62:ce:ec:53: e3:d2:18:14:9b:b0:0c:b0:ee:50:cc:7e:68:54:de: 82:86:77:7f:c1:b4:e4:07:05:5b:ca:bc:46:73:3b: e2:8a:3a:d8:cc:f8:4d:66:f8:dd:a9:1e:3d:e0:cd: cb:b1:b0:12:aa:5c:b0:d6:e1:82:00:a9:e4:fe:47: 9e:4c:5e:88:57:9c:53:97:2c:65:67:82:16:f1:30: 6d:3b:37:a0:ba:91:14:b3:d2:23:1f:b9:0c:2e:41: 28:60:26:05:e7:3d:c4:de:d1:65:08:59:24:69:73: 31:80:37:9b:57:bc:cc:bd:53:cb:3b:d0:70:e7:2f: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 IPv6: 2605:3240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40867 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:73:da:c4:89:c2:3a:8b:63:54:51:5d:75:65:3d:f1:43:14: 19:d5:df:40:eb:a4:91:76:6f:c3:d2:39:52:b1:f0:91:86:f0: 12:4b:65:72:66:f9:6f:07:30:2e:fa:6d:ab:ee:85:48:f6:69: fa:69:ee:61:b2:81:88:a7:36:e4:30:7e:8a:cb:2b:e4:00:3e: bd:2f:66:27:09:8a:7c:4b:78:55:cf:f0:fd:6c:0e:0d:a8:72: 85:74:18:e1:1b:76:45:88:6c:04:58:a9:b3:ff:31:25:50:9c: 2c:c2:08:71:de:db:c1:c8:f1:45:6c:92:82:4d:43:5d:b5:1a: 96:c1:46:df:1d:66:66:76:74:4b:ec:dc:d9:53:44:0c:8e:ed: b5:bb:63:2e:a4:d9:54:92:ec:15:2e:c4:c3:24:87:c4:be:0f: 24:f7:38:e9:7e:20:6c:b7:c6:9b:80:14:7d:33:3f:09:93:ce: 7a:ec:cf:62:0e:40:af:04:5b:9f:92:55:4e:a5:fa:1e:e8:8a: de:47:ef:0a:1c:76:9e:7a:0d:fc:e0:d6:18:80:cc:21:d4:5b: b6:a4:dd:c0:95:f8:c6:01:52:01:bf:92:54:72:f8:10:5f:71: 55:aa:c0:95:ef:14:0e:ea:ba:50:44:3b:ba:d0:ab:59:dc:0d: 13:6f:72:ea -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEpFOKFNyYVZENPgFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYyMjAwNDUzNloXDTI3MDkyNTAwNDUzNlowLzEtMCsGA1UEAxMk YmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRlNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEooNxuQ+aIzOg1Drx2HXE7UkEdlOBOClBDf FPlp6bHXfD4/gBxrU4yVGpdyqpH3vY8IhFCo8FAFZQEtV8gyzyRSxZArRNuaqxH2 9kKZQijwrFNPWLCZG1KfCIrHHDWu9MPeewipXoxTqeAIvK8auW0gR96I0sx12kLV yi3Kgg4VqWLO7FPj0hgUm7AMsO5QzH5oVN6Chnd/wbTkBwVbyrxGczviijrYzPhN ZvjdqR494M3LsbASqlyw1uGCAKnk/keeTF6IV5xTlyxlZ4IW8TBtOzegupEUs9Ij H7kMLkEoYCYF5z3E3tFlCFkkaXMxgDebV7zMvVPLO9Bw5y/X2wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFL9u4M20L3SWRgwuzXYMfxZaXIFvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i ZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2JmM2MzYmQ1LTNiOTQtNDdlMi04 MWZjLWY0OTAwODE0ZTQ5NC9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgx NGU0OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANKckgDBAOsVvADBAPQWmAwDQQCAAIwBwMFACYF MkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ+jMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAElz2sSJwjqL Y1RRXXVlPfFDFBnV30DrpJF2b8PSOVKx8JGG8BJLZXJm+W8HMC76bavuhUj2afpp 7mGygYinNuQwforLK+QAPr0vZicJinxLeFXP8P1sDg2ocoV0GOEbdkWIbARYqbP/ MSVQnCzCCHHe28HI8UVskoJNQ121GpbBRt8dZmZ2dEvs3NlTRAyO7bW7Yy6k2VSS 7BUuxMMkh8S+DyT3OOl+IGy3xpuAFH0zPwmTznrsz2IOQK8EW5+SVU6l+h7oit5H 7wocdp56Dfzg1hiAzCHUW7ak3cCV+MYBUgG/klRy+BBfcVWqwJXvFA7qulBEO7rQ q1ncDRNvcuo= -----END CERTIFICATE-----Generated at Tue Jul 1 22:05:48 2025 by rpki-client