$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer File: 53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.cer (raw, json) Hash identifier: tEaVccLtvlH6sLJg8TfgunQ3DFP8JlGJFJMH2/Xl+VY= Subject key identifier: C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B64C4F868F4D2B69D9DD9C880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Oct 2025 00:45:24 +0000 Certificate not after: Thu 06 Jan 2028 01:45:24 +0000 Subordinate resources: IP: 23.191.48.0/24 IP: 2620:9d:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:c4:f8:68:f4:d2:b6:9d:9d:d9:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 3 00:45:24 2025 GMT Not After : Jan 6 01:45:24 2028 GMT Subject: CN=53f9e4fa-8a21-4981-b8c8-6c7eaf79186d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6d:91:d7:ea:c6:4e:cf:16:6e:bd:a1:9c:e9: 6b:a9:70:ec:5b:3e:5b:b0:61:eb:b0:e3:90:a8:b0: 69:15:b1:9c:30:1e:16:65:12:ef:c1:83:87:e4:18: 19:ba:63:fb:1c:02:40:e5:0b:5c:23:12:2e:44:d9: 8d:21:0d:0b:ee:98:1d:92:6c:5f:a4:a3:0a:03:b9: 43:f8:65:59:64:c9:f0:0a:e6:b5:36:6a:f6:ec:8f: 1c:80:0e:df:8b:02:59:a9:43:dc:1a:33:fa:e7:6c: 38:eb:4f:81:be:da:ee:61:e1:d3:a4:1d:61:67:c9: ef:5a:8a:2f:d7:c5:b7:a6:b6:66:ff:7f:ad:d5:bb: bf:30:3d:f9:ee:51:1b:1f:0c:18:94:49:be:2c:22: c2:e3:b1:f3:4e:b2:d3:13:60:28:c8:fc:3a:be:4d: 6b:fe:ed:1e:5c:e3:18:89:c1:55:39:ff:bd:90:11: 4b:88:57:86:2d:9c:70:d8:8d:85:8c:69:91:28:96: a5:ec:9f:5e:7e:73:86:97:7f:e4:f9:97:bd:0a:2f: 17:86:40:ff:85:b3:0d:c7:b6:68:e1:d6:c3:4d:ce: b8:fd:8a:d8:3f:3f:88:5c:6c:63:54:d6:84:7f:93: 5b:11:ff:b3:11:0d:c3:a5:8d:57:b9:59:c0:5e:5c: a8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:C8:8B:AC:CE:CE:96:FD:73:FB:D3:9D:73:C3:AA:C1:42:DD:4C:03 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d/53f9e4fa-8a21-4981-b8c8-6c7eaf79186d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.191.48.0/24 IPv6: 2620:9d:6000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:0d:c6:a4:fb:a2:28:ec:fd:a9:0e:54:1f:be:3c:7b:b6:52: f2:92:1d:64:33:78:5b:bd:f0:8e:8d:60:2b:08:5a:dd:49:92: 1d:5f:b7:39:23:62:7f:aa:e9:d8:8e:e0:c9:53:e3:80:8a:62: 1b:f1:a5:79:23:07:9a:de:2f:8e:29:e9:a8:42:61:c7:ee:d0: 71:76:1d:bb:ae:57:a4:ea:37:14:7c:ab:bd:19:b0:5d:0e:ac: 6f:90:52:ca:cc:ec:18:dd:f9:ef:04:78:37:a9:09:a9:5b:d1: 45:be:c0:b7:0d:eb:b3:45:2a:b0:63:c0:9e:43:6e:68:e9:3f: 9f:03:61:ff:34:54:55:a0:87:5e:16:9f:f5:cb:9c:6e:1d:ff: dc:77:9b:ba:12:96:2a:16:d1:54:94:af:8e:b1:7c:46:20:95: e1:0b:61:bd:af:11:e9:cc:4b:7c:2c:8f:ee:e5:ef:4b:83:50: ea:1f:ed:e7:e1:68:6c:bd:74:75:9f:8d:8c:d6:9a:f2:38:a1: c6:10:0c:7e:8d:d2:da:37:e7:97:f7:6a:b5:b1:ce:20:71:80: a3:33:08:e4:5d:64:ca:40:28:47:13:23:61:f9:2b:b0:0c:b3: 76:52:ba:c2:10:df:07:b1:cd:54:2b:1d:34:d3:89:2b:ec:0b: bc:29:34:5d -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEtkxPho9NK2nZ3ZyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwMzAwNDUyNFoXDTI4MDEwNjAxNDUyNFowLzEtMCsGA1UEAxMk NTNmOWU0ZmEtOGEyMS00OTgxLWI4YzgtNmM3ZWFmNzkxODZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW2R1+rGTs8Wbr2hnOlrqXDsWz5bsGHrsOOQ qLBpFbGcMB4WZRLvwYOH5BgZumP7HAJA5QtcIxIuRNmNIQ0L7pgdkmxfpKMKA7lD +GVZZMnwCua1Nmr27I8cgA7fiwJZqUPcGjP652w460+BvtruYeHTpB1hZ8nvWoov 18W3prZm/3+t1bu/MD357lEbHwwYlEm+LCLC47HzTrLTE2AoyPw6vk1r/u0eXOMY icFVOf+9kBFLiFeGLZxw2I2FjGmRKJal7J9efnOGl3/k+Ze9Ci8XhkD/hbMNx7Zo 4dbDTc64/YrYPz+IXGxjVNaEf5NbEf+zEQ3DpY1XuVnAXlyowQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFMfIi6zOzpb9c/vTnXPDqsFC3UwDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 M2Y5ZTRmYS04YTIxLTQ5ODEtYjhjOC02YzdlYWY3OTE4NmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzUzZjllNGZhLThhMjEtNDk4MS1i OGM4LTZjN2VhZjc5MTg2ZC81M2Y5ZTRmYS04YTIxLTQ5ODEtYjhjOC02YzdlYWY3 OTE4NmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXvzAwDwQCAAIwCQMHACYgAJ1gADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCYDcak+6Io7P2pDlQfvjx7tlLykh1kM3hbvfCOjWArCFrdSZIdX7c5I2J/qunY juDJU+OAimIb8aV5Iwea3i+OKemoQmHH7tBxdh27rlek6jcUfKu9GbBdDqxvkFLK zOwY3fnvBHg3qQmpW9FFvsC3DeuzRSqwY8CeQ25o6T+fA2H/NFRVoIdeFp/1y5xu Hf/cd5u6EpYqFtFUlK+OsXxGIJXhC2G9rxHpzEt8LI/u5e9Lg1DqH+3n4WhsvXR1 n42M1pryOKHGEAx+jdLaN+eX92q1sc4gcYCjMwjkXWTKQChHEyNh+SuwDLN2UrrC EN8Hsc1UKx0004kr7Au8KTRd -----END CERTIFICATE-----Generated at Wed Oct 8 21:32:57 2025 by rpki-client