$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa.cer File: c94c0914-a172-4fb0-8470-ddd477b64efa.cer (raw, json) Hash identifier: tfs4mnPlB7vn+vk+RUxTsuXPOMGqFb8jynlujWIzAfY= Subject key identifier: 9C:A3:0E:19:C8:79:B1:73:63:F9:8D:70:BD:4B:34:CB:B2:CE:2A:0A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A3478808F881F43C3255E7580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/c94c0914-a172-4fb0-8470-ddd477b64efa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 00:45:35 +0000 Certificate not after: Sun 19 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 53632 IP: 104.37.104.0/22 IP: 149.97.64.0/20 IP: 149.97.84.0 -- 149.97.89.255 IP: 149.97.92.0 -- 149.97.97.255 IP: 149.97.100.0 -- 149.97.115.255 IP: 199.19.64.0/21 IP: 199.189.188.0/22 IP: 208.71.164.0/22 IP: 2605:9500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:78:80:8f:88:1f:43:c3:25:5e:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 16 00:45:35 2025 GMT Not After : Sep 19 00:45:35 2027 GMT Subject: CN=c94c0914-a172-4fb0-8470-ddd477b64efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:50:26:ce:8d:62:d8:36:93:a0:08:65:31:32: 14:d4:a7:49:4a:72:ff:74:cf:8e:da:08:7a:a5:5b: ac:27:61:43:43:56:cd:4e:71:86:9f:d6:82:77:60: 56:2c:21:b6:45:72:80:3b:59:2e:c5:44:a1:dc:dd: dd:a6:d9:23:ce:94:54:34:b9:f6:9c:4d:fa:8c:f1: f1:62:d1:06:a9:ec:4f:a7:97:b0:fb:d5:3c:c4:7f: 34:48:f2:25:16:17:85:c9:38:19:c1:3e:0f:48:f8: 39:e6:b1:a2:91:e2:aa:11:e2:15:a3:92:74:3f:5b: 18:64:f7:02:83:b4:27:60:b1:f6:ca:d2:e6:5a:e7: 63:60:b0:f8:44:8e:3d:b7:5e:6c:11:39:76:04:6f: ae:44:fb:0c:81:59:fd:9a:af:5e:fe:b0:03:76:90: f9:64:e4:bd:cc:02:08:ce:76:de:35:b5:e9:19:9a: ff:88:fa:9d:08:c6:52:81:17:76:17:66:01:1f:cd: f7:28:f8:dd:b7:88:76:20:68:21:17:6d:5f:c4:75: 64:94:1a:d1:30:d1:83:ba:74:1c:ca:b3:39:0c:66: d6:f9:b6:b0:74:01:64:01:06:7c:a3:af:86:b5:cf: 45:f3:67:f9:5e:b0:db:97:37:cb:b6:05:09:5c:1d: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A3:0E:19:C8:79:B1:73:63:F9:8D:70:BD:4B:34:CB:B2:CE:2A:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/c94c0914-a172-4fb0-8470-ddd477b64efa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.37.104.0/22 149.97.64.0/20 149.97.84.0-149.97.89.255 149.97.92.0-149.97.97.255 149.97.100.0-149.97.115.255 199.19.64.0/21 199.189.188.0/22 208.71.164.0/22 IPv6: 2605:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53632 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:66:e6:69:0a:9e:46:e3:c3:90:06:66:4a:61:b5:17:1b:85: 72:11:49:91:e7:47:fd:fb:c0:74:04:cf:46:34:34:cb:fa:1f: 7b:58:61:b8:b9:b6:c2:df:5b:0c:7c:3d:9a:51:98:d1:f1:9a: 2e:35:8f:4d:c2:be:07:cc:c3:eb:b3:d6:4a:65:9f:89:05:b9: 81:5d:32:f1:d3:78:e2:4e:11:fd:59:bc:27:be:8a:19:38:38: 9f:96:31:a6:41:2b:3f:3b:46:53:59:95:8d:f2:9c:e1:46:f6: f1:a1:ca:b3:ad:b5:65:2f:84:2e:89:a2:4a:92:fe:e0:30:86: df:ee:7c:3f:f3:40:08:21:f7:44:0d:ec:c9:68:f6:c7:85:3a: 5a:38:7d:02:a1:fc:71:37:61:5e:7d:4a:67:2e:5e:41:d8:ca: 11:02:39:12:28:10:d7:8a:dd:2e:01:9a:10:06:da:92:e0:37: dd:4f:56:fc:b0:1c:34:0e:1e:24:dc:47:ff:c2:40:d7:cb:16: 7a:01:16:50:44:97:b2:e9:18:2e:5d:40:d6:f8:58:fd:57:d5: f1:fb:8d:86:ee:47:61:5d:f9:fc:ed:cc:54:89:92:0e:97:ab: 1e:8e:d2:41:98:64:e3:28:62:3b:14:c6:12:31:e2:35:46:b3: 91:e2:c6:7f -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEo0eICPiB9DwyVedYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYxNjAwNDUzNVoXDTI3MDkxOTAwNDUzNVowLzEtMCsGA1UEAxMk Yzk0YzA5MTQtYTE3Mi00ZmIwLTg0NzAtZGRkNDc3YjY0ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFAmzo1i2DaToAhlMTIU1KdJSnL/dM+O2gh6 pVusJ2FDQ1bNTnGGn9aCd2BWLCG2RXKAO1kuxUSh3N3dptkjzpRUNLn2nE36jPHx YtEGqexPp5ew+9U8xH80SPIlFheFyTgZwT4PSPg55rGikeKqEeIVo5J0P1sYZPcC g7QnYLH2ytLmWudjYLD4RI49t15sETl2BG+uRPsMgVn9mq9e/rADdpD5ZOS9zAII znbeNbXpGZr/iPqdCMZSgRd2F2YBH833KPjdt4h2IGghF21fxHVklBrRMNGDunQc yrM5DGbW+bawdAFkAQZ8o6+Gtc9F82f5XrDblzfLtgUJXB0P7wIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFJyjDhnIebFzY/mNcL1LNMuyzioKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j OTRjMDkxNC1hMTcyLTRmYjAtODQ3MC1kZGQ0NzdiNjRlZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2M5NGMwOTE0LWExNzItNGZiMC04 NDcwLWRkZDQ3N2I2NGVmYS9jOTRjMDkxNC1hMTcyLTRmYjAtODQ3MC1kZGQ0Nzdi NjRlZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBAJoJWgDBASVYUAwDAMEApVhVAMEAZVhWDAMAwQC lWFcAwQBlWFgMAwDBAKVYWQDBAKVYXADBAPHE0ADBALHvbwDBALQR6QwDQQCAAIw BwMFACYFlQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANGAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACxm 5mkKnkbjw5AGZkphtRcbhXIRSZHnR/37wHQEz0Y0NMv6H3tYYbi5tsLfWwx8PZpR mNHxmi41j03CvgfMw+uz1kpln4kFuYFdMvHTeOJOEf1ZvCe+ihk4OJ+WMaZBKz87 RlNZlY3ynOFG9vGhyrOttWUvhC6JokqS/uAwht/ufD/zQAgh90QN7Mlo9seFOlo4 fQKh/HE3YV59SmcuXkHYyhECORIoENeK3S4BmhAG2pLgN91PVvywHDQOHiTcR//C QNfLFnoBFlBEl7LpGC5dQNb4WP1X1fH7jYbuR2Fd+fztzFSJkg6Xqx6O0kGYZOMo YjsUxhIx4jVGs5Hixn8= -----END CERTIFICATE-----Generated at Tue Jul 1 11:58:32 2025 by rpki-client