$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa.cer File: c94c0914-a172-4fb0-8470-ddd477b64efa.cer (raw, json) Hash identifier: bOW701URtVodtbki9ZatSYNtq3aHEbtghtmOELJdY1c= Subject key identifier: 9C:A3:0E:19:C8:79:B1:73:63:F9:8D:70:BD:4B:34:CB:B2:CE:2A:0A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584978503460DB9DB9D6130C7580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/c94c0914-a172-4fb0-8470-ddd477b64efa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 09 Apr 2025 15:12:26 +0000 Certificate not after: Tue 16 Jun 2026 00:45:20 +0000 Subordinate resources: AS: 53632 IP: 104.37.104.0/22 IP: 149.97.64.0/20 IP: 149.97.84.0 -- 149.97.89.255 IP: 149.97.92.0 -- 149.97.97.255 IP: 149.97.100.0 -- 149.97.115.255 IP: 199.19.64.0/21 IP: 199.189.188.0/22 IP: 208.71.164.0/22 IP: 2605:9500::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:50:34:60:db:9d:b9:d6:13:0c:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 9 15:12:26 2025 GMT Not After : Jun 16 00:45:20 2026 GMT Subject: CN=c94c0914-a172-4fb0-8470-ddd477b64efa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:50:26:ce:8d:62:d8:36:93:a0:08:65:31:32: 14:d4:a7:49:4a:72:ff:74:cf:8e:da:08:7a:a5:5b: ac:27:61:43:43:56:cd:4e:71:86:9f:d6:82:77:60: 56:2c:21:b6:45:72:80:3b:59:2e:c5:44:a1:dc:dd: dd:a6:d9:23:ce:94:54:34:b9:f6:9c:4d:fa:8c:f1: f1:62:d1:06:a9:ec:4f:a7:97:b0:fb:d5:3c:c4:7f: 34:48:f2:25:16:17:85:c9:38:19:c1:3e:0f:48:f8: 39:e6:b1:a2:91:e2:aa:11:e2:15:a3:92:74:3f:5b: 18:64:f7:02:83:b4:27:60:b1:f6:ca:d2:e6:5a:e7: 63:60:b0:f8:44:8e:3d:b7:5e:6c:11:39:76:04:6f: ae:44:fb:0c:81:59:fd:9a:af:5e:fe:b0:03:76:90: f9:64:e4:bd:cc:02:08:ce:76:de:35:b5:e9:19:9a: ff:88:fa:9d:08:c6:52:81:17:76:17:66:01:1f:cd: f7:28:f8:dd:b7:88:76:20:68:21:17:6d:5f:c4:75: 64:94:1a:d1:30:d1:83:ba:74:1c:ca:b3:39:0c:66: d6:f9:b6:b0:74:01:64:01:06:7c:a3:af:86:b5:cf: 45:f3:67:f9:5e:b0:db:97:37:cb:b6:05:09:5c:1d: 0f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A3:0E:19:C8:79:B1:73:63:F9:8D:70:BD:4B:34:CB:B2:CE:2A:0A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c94c0914-a172-4fb0-8470-ddd477b64efa/c94c0914-a172-4fb0-8470-ddd477b64efa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.37.104.0/22 149.97.64.0/20 149.97.84.0-149.97.89.255 149.97.92.0-149.97.97.255 149.97.100.0-149.97.115.255 199.19.64.0/21 199.189.188.0/22 208.71.164.0/22 IPv6: 2605:9500::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53632 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:31:4a:c0:cd:af:d7:a3:f2:35:10:10:58:4b:57:e4:cc: b2:52:15:bf:2f:da:78:98:8c:08:74:7f:70:45:3f:03:bc:8e: e3:99:b2:1d:a6:00:32:d3:f2:27:24:ba:1a:34:a5:ba:4a:de: 50:0e:b1:9d:37:56:3a:19:d8:5a:2b:d5:2b:32:cc:eb:08:a0: a4:f8:8e:cf:84:1c:9a:82:14:1e:20:02:53:40:f1:6a:9b:e9: 8f:79:6a:e8:7e:56:e3:0b:b8:d8:48:d6:dc:b5:98:80:49:92: 45:39:fc:0e:1f:15:d1:07:b1:49:f6:fb:47:67:fd:40:f2:de: 04:60:98:ee:2b:51:57:64:f7:a7:ce:33:81:dd:53:7f:ed:a9: ef:8a:da:28:f3:b2:be:8d:3a:ba:4a:52:f6:56:bb:6d:2b:50: 4c:c5:06:99:31:80:a8:10:28:6a:d3:c8:3f:07:dc:51:19:92: ae:29:67:54:b3:55:c4:e9:6f:29:56:3e:d9:e4:0f:7d:38:19: ef:07:35:ef:cb:70:e4:5f:07:0a:3f:af:05:bd:72:bd:8d:c2: 59:eb:1c:3a:21:dd:ae:1b:b4:a5:74:ff:d2:38:f8:8b:69:ea: 33:6a:61:c7:66:b1:4f:55:0a:ab:ab:1a:a1:c4:06:c1:71:21: f9:b0:0d:3a -----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIUAQ0Mn0MoWEl4UDRg25251hMMdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQwOTE1MTIyNloXDTI2MDYxNjAwNDUyMFowLzEtMCsGA1UEAxMk Yzk0YzA5MTQtYTE3Mi00ZmIwLTg0NzAtZGRkNDc3YjY0ZWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFAmzo1i2DaToAhlMTIU1KdJSnL/dM+O2gh6 pVusJ2FDQ1bNTnGGn9aCd2BWLCG2RXKAO1kuxUSh3N3dptkjzpRUNLn2nE36jPHx YtEGqexPp5ew+9U8xH80SPIlFheFyTgZwT4PSPg55rGikeKqEeIVo5J0P1sYZPcC g7QnYLH2ytLmWudjYLD4RI49t15sETl2BG+uRPsMgVn9mq9e/rADdpD5ZOS9zAII znbeNbXpGZr/iPqdCMZSgRd2F2YBH833KPjdt4h2IGghF21fxHVklBrRMNGDunQc yrM5DGbW+bawdAFkAQZ8o6+Gtc9F82f5XrDblzfLtgUJXB0P7wIDAQABo4IEbDCC BGgwHQYDVR0OBBYEFJyjDhnIebFzY/mNcL1LNMuyzioKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j OTRjMDkxNC1hMTcyLTRmYjAtODQ3MC1kZGQ0NzdiNjRlZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2M5NGMwOTE0LWExNzItNGZiMC04 NDcwLWRkZDQ3N2I2NGVmYS9jOTRjMDkxNC1hMTcyLTRmYjAtODQ3MC1kZGQ0Nzdi NjRlZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwcAYIKwYBBQUH AQcBAf8EYTBfME4EAgABMEgDBAJoJWgDBASVYUAwDAMEApVhVAMEAZVhWDAMAwQC lWFcAwQBlWFgMAwDBAKVYWQDBAKVYXADBAPHE0ADBALHvbwDBALQR6QwDQQCAAIw BwMFACYFlQAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANGAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAE9u MUrAza/Xo/I1EBBYS1fkzLJSFb8v2niYjAh0f3BFPwO8juOZsh2mADLT8ickuho0 pbpK3lAOsZ03VjoZ2For1SsyzOsIoKT4js+EHJqCFB4gAlNA8Wqb6Y95auh+VuML uNhI1ty1mIBJkkU5/A4fFdEHsUn2+0dn/UDy3gRgmO4rUVdk96fOM4HdU3/tqe+K 2ijzsr6NOrpKUvZWu20rUEzFBpkxgKgQKGrTyD8H3FEZkq4pZ1SzVcTpbylWPtnk D304Ge8HNe/LcORfBwo/rwW9cr2NwlnrHDoh3a4btKV0/9I4+Itp6jNqYcdmsU9V CqurGqHEBsFxIfmwDTo= -----END CERTIFICATE-----Generated at Sun May 11 08:34:27 2025 by rpki-client