$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db.cer File: 9775324a-f646-4b8e-b5f0-2477c7b3b0db.cer (raw, json) Hash identifier: nFoQk8CKYp+iMOWpxIFZHxbKLbvBoohqpiIQZwdXTxc= Subject key identifier: D5:56:65:C0:12:DB:64:CB:F1:79:F9:47:F0:03:40:B2:C7:70:22:D8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A63EE21FA1AC755EEDC17E2F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/9775324a-f646-4b8e-b5f0-2477c7b3b0db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 03 Jul 2025 00:45:35 +0000 Certificate not after: Wed 06 Oct 2027 00:45:35 +0000 Subordinate resources: AS: 53833 IP: 66.39.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:ee:21:fa:1a:c7:55:ee:dc:17:e2:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 3 00:45:35 2025 GMT Not After : Oct 6 00:45:35 2027 GMT Subject: CN=9775324a-f646-4b8e-b5f0-2477c7b3b0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f6:3e:db:20:08:10:e9:5a:a7:dc:06:12:5a: 09:91:64:f3:46:8f:20:56:47:53:89:54:c9:61:9a: 35:6b:2b:6c:e2:d2:d2:c9:84:e0:09:37:05:f3:68: 01:d3:68:b4:2f:b7:1c:ad:7a:b4:e8:9a:c4:50:86: 58:b7:41:8a:af:74:79:b6:e6:76:6b:c9:cb:fd:0c: 17:e1:96:11:45:2c:2b:7a:72:ad:80:b7:62:c7:0f: 52:a3:8c:03:da:79:a2:77:38:a9:b3:bd:99:c0:ef: 28:32:ee:28:bc:56:04:bb:c4:9d:bb:4a:aa:b7:75: 01:4a:3a:a7:84:e5:7a:9d:2a:b7:3c:5d:c8:e2:b3: 82:31:aa:52:c6:c2:58:ac:f8:e4:17:7f:f3:0d:13: fb:8e:3a:f3:1c:d5:67:60:dd:d8:db:a5:18:73:12: c1:e2:77:30:1a:b6:17:29:f9:a7:39:dc:25:eb:4b: 05:d8:71:b5:a5:d5:32:e5:ab:db:8e:8d:32:f3:70: fc:ed:1a:24:dc:c5:db:4d:c8:6a:78:e3:7e:c5:1f: 40:29:0e:43:c0:df:87:4c:64:69:29:5e:35:ac:05: 2f:cf:4c:27:a5:af:b0:fd:54:be:50:07:12:f7:41: 6e:74:0b:82:77:1a:77:f7:b6:c1:3a:f2:a4:c8:75: 67:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:56:65:C0:12:DB:64:CB:F1:79:F9:47:F0:03:40:B2:C7:70:22:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9775324a-f646-4b8e-b5f0-2477c7b3b0db/9775324a-f646-4b8e-b5f0-2477c7b3b0db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.39.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53833 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:21:8c:f2:81:c3:5e:94:bb:43:c1:b7:f8:4b:bc:e7:e7:0c: 31:5d:cb:34:d5:b9:90:f7:4a:69:7d:79:b8:c5:2b:b2:08:21: 67:c4:1f:31:ec:d7:11:f5:f4:02:9f:e5:01:7a:d4:04:df:4f: 18:9a:02:f0:77:12:9c:df:ea:e8:e1:3a:90:ca:4a:c1:c8:03: 9e:4e:7c:1f:08:37:76:4f:36:27:3d:28:a8:f9:5c:7e:ef:dd: e8:80:d6:9f:77:cb:ac:0f:9b:23:d7:22:0e:88:90:0b:29:e5: 39:34:95:2d:4f:26:85:71:be:14:c8:d1:c1:3e:c2:9b:46:a8: e4:76:72:34:07:0c:98:7c:1c:e0:db:be:f1:ce:cb:fc:2d:53: b6:52:ac:42:7a:b9:c6:71:c5:6a:d2:b5:8a:5b:f0:d3:9f:93: 09:49:3e:63:43:72:84:e6:fe:ca:e6:6f:37:32:a4:16:b0:29: 29:56:48:7b:e3:6b:8e:92:82:b9:eb:29:10:73:90:42:78:1f: 52:83:37:c6:58:a8:ef:a6:c8:5f:e0:45:15:c0:3c:db:a2:5a: d9:2b:86:19:cd:d7:5c:ce:37:52:04:a2:c1:ee:6e:b0:b1:50: ff:41:b3:68:dc:35:75:03:fa:f5:59:9c:17:21:d5:cb:5e:8a: 80:e4:6d:ef -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEpj7iH6GsdV7twX4vAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcwMzAwNDUzNVoXDTI3MTAwNjAwNDUzNVowLzEtMCsGA1UEAxMk OTc3NTMyNGEtZjY0Ni00YjhlLWI1ZjAtMjQ3N2M3YjNiMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvY+2yAIEOlap9wGEloJkWTzRo8gVkdTiVTJ YZo1ayts4tLSyYTgCTcF82gB02i0L7ccrXq06JrEUIZYt0GKr3R5tuZ2a8nL/QwX 4ZYRRSwrenKtgLdixw9So4wD2nmidzips72ZwO8oMu4ovFYEu8Sdu0qqt3UBSjqn hOV6nSq3PF3I4rOCMapSxsJYrPjkF3/zDRP7jjrzHNVnYN3Y26UYcxLB4ncwGrYX KfmnOdwl60sF2HG1pdUy5avbjo0y83D87Rok3MXbTchqeON+xR9AKQ5DwN+HTGRp KV41rAUvz0wnpa+w/VS+UAcS90FudAuCdxp397bBOvKkyHVnrQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNVWZcAS22TL8Xn5R/ADQLLHcCLYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 Nzc1MzI0YS1mNjQ2LTRiOGUtYjVmMC0yNDc3YzdiM2IwZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk3NzUzMjRhLWY2NDYtNGI4ZS1i NWYwLTI0NzdjN2IzYjBkYi85Nzc1MzI0YS1mNjQ2LTRiOGUtYjVmMC0yNDc3Yzdi M2IwZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVCJ+AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANJJMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAohjPKBw16Uu0PBt/hLvOfnDDFdyzTVuZD3Sml9ebjFK7II IWfEHzHs1xH19AKf5QF61ATfTxiaAvB3Epzf6ujhOpDKSsHIA55OfB8IN3ZPNic9 KKj5XH7v3eiA1p93y6wPmyPXIg6IkAsp5Tk0lS1PJoVxvhTI0cE+wptGqOR2cjQH DJh8HODbvvHOy/wtU7ZSrEJ6ucZxxWrStYpb8NOfkwlJPmNDcoTm/srmbzcypBaw KSlWSHvja46SgrnrKRBzkEJ4H1KDN8ZYqO+myF/gRRXAPNuiWtkrhhnN11zON1IE osHubrCxUP9Bs2jcNXUD+vVZnBch1cteioDkbe8= -----END CERTIFICATE-----Generated at Fri Jul 25 17:25:10 2025 by rpki-client