$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.cer File: 0e6f6261-8230-4ca9-ac15-54bf8c7152c0.cer (raw, json) Hash identifier: 6J7N8ako6T57Rgx9/R95u0hlgf98j4N8vTj5FBNuHeI= Subject key identifier: B3:F9:3E:6D:67:CC:AE:97:6A:74:D1:E5:4B:FC:E3:48:06:51:42:6C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B27D07A366399C159232C6200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 04:44:17 +0000 Certificate not after: Wed 15 Dec 2027 05:44:17 +0000 Subordinate resources: AS: 26187 IP: 23.144.188.0/24 IP: 2602:f580::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:27:d0:7a:36:63:99:c1:59:23:2c:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 11 04:44:17 2025 GMT Not After : Dec 15 05:44:17 2027 GMT Subject: CN=0e6f6261-8230-4ca9-ac15-54bf8c7152c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:27:50:29:2d:3f:c8:ac:53:a4:60:92:d4: 5e:61:d7:17:fc:fd:f4:ed:5c:d5:74:0a:34:46:4a: e9:23:0d:74:ca:c5:56:64:dd:e4:c8:02:f2:c2:f2: 23:4d:23:55:7e:42:e8:da:ff:22:35:ac:1e:95:5b: e7:84:45:8c:6b:9c:0f:00:22:05:d9:30:98:7c:a8: 45:d5:87:07:f0:8f:e4:9f:22:8b:ce:c9:8e:23:30: 85:78:68:d9:51:3c:a4:4d:49:7a:f2:bb:bc:08:39: f9:3a:c1:81:23:fd:9f:16:48:29:31:df:a4:7b:59: 0d:86:7b:a4:36:49:66:32:70:74:e6:e6:fe:36:5c: cd:e0:ac:28:53:10:8b:d6:fc:06:c0:77:0b:52:24: 50:9b:50:25:e8:77:75:10:29:1a:a0:14:a2:e0:63: 69:d9:ca:d3:56:7d:c7:22:e1:f4:d9:bc:be:aa:5a: cf:21:b3:ef:ee:a3:7f:10:8a:54:db:27:81:50:8a: 34:89:82:27:13:9e:55:00:ec:7a:6e:39:94:5f:0e: 66:15:36:ac:c8:69:4f:68:66:a8:ea:69:3e:0a:85: 1d:41:83:34:3c:8b:0f:0e:ee:c3:af:60:84:58:5e: 7e:a9:34:ec:83:6c:27:b7:27:bf:53:96:a3:c7:ee: 18:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F9:3E:6D:67:CC:AE:97:6A:74:D1:E5:4B:FC:E3:48:06:51:42:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0e6f6261-8230-4ca9-ac15-54bf8c7152c0/0e6f6261-8230-4ca9-ac15-54bf8c7152c0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.144.188.0/24 IPv6: 2602:f580::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26187 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:16:ea:47:f2:0f:b6:a8:dc:a3:33:24:21:bb:e9:7a:89:03: 86:de:38:be:75:f6:37:49:db:42:3c:71:1f:be:08:f8:a7:71: 69:ad:12:93:66:e8:89:ab:1b:d4:ba:e1:d8:fa:a5:d2:ad:7e: 22:1d:23:d9:3c:9f:99:b9:ae:b7:48:26:23:3e:f2:d6:2f:c8: 9c:7c:54:0a:6b:bf:fb:61:d4:60:2f:a0:fe:d3:13:f9:97:0f: c1:63:7b:77:db:45:24:1c:ce:c5:32:06:3b:69:d6:cb:b9:3a: d0:7d:7f:f9:96:9d:ae:e4:ea:b9:19:53:47:77:cc:91:ff:3b: 0f:25:d6:ac:00:94:51:82:f6:88:1a:1c:c9:6d:a4:45:5e:c5: fb:29:1f:3e:01:3c:54:63:94:59:a5:1c:18:2c:fc:6b:29:7f: d1:67:8f:b2:82:53:e7:c4:14:00:f0:78:ce:a4:53:c2:1e:72: 5a:27:90:7a:69:73:e1:31:0b:51:ed:46:57:ef:59:c3:d8:71: 9a:81:f1:18:67:5a:77:eb:ba:17:90:c1:68:2b:e7:f9:e9:23: e8:4e:68:7e:27:09:aa:3e:e2:d8:be:26:d7:e1:33:58:44:8b: 3d:30:01:41:51:71:e0:c1:d4:60:f9:f4:75:9b:24:cf:9f:68: e0:da:7d:24 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEsn0Ho2Y5nBWSMsYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkxMTA0NDQxN1oXDTI3MTIxNTA1NDQxN1owLzEtMCsGA1UEAxMk MGU2ZjYyNjEtODIzMC00Y2E5LWFjMTUtNTRiZjhjNzE1MmMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc8nUCktP8isU6RgktReYdcX/P307VzVdAo0 RkrpIw10ysVWZN3kyALywvIjTSNVfkLo2v8iNawelVvnhEWMa5wPACIF2TCYfKhF 1YcH8I/knyKLzsmOIzCFeGjZUTykTUl68ru8CDn5OsGBI/2fFkgpMd+ke1kNhnuk NklmMnB05ub+NlzN4KwoUxCL1vwGwHcLUiRQm1Al6Hd1ECkaoBSi4GNp2crTVn3H IuH02by+qlrPIbPv7qN/EIpU2yeBUIo0iYInE55VAOx6bjmUXw5mFTasyGlPaGao 6mk+CoUdQYM0PIsPDu7Dr2CEWF5+qTTsg2wntye/U5ajx+4YkwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFLP5Pm1nzK6XanTR5Uv840gGUUJsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w ZTZmNjI2MS04MjMwLTRjYTktYWMxNS01NGJmOGM3MTUyYzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBlNmY2MjYxLTgyMzAtNGNhOS1h YzE1LTU0YmY4YzcxNTJjMC8wZTZmNjI2MS04MjMwLTRjYTktYWMxNS01NGJmOGM3 MTUyYzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXkLwwDgQCAAIwCAMGACYC9YAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmZLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJAW6kfyD7ao3KMzJCG76XqJA4be OL519jdJ20I8cR++CPincWmtEpNm6ImrG9S64dj6pdKtfiIdI9k8n5m5rrdIJiM+ 8tYvyJx8VAprv/th1GAvoP7TE/mXD8Fje3fbRSQczsUyBjtp1su5OtB9f/mWna7k 6rkZU0d3zJH/Ow8l1qwAlFGC9ogaHMltpEVexfspHz4BPFRjlFmlHBgs/Gspf9Fn j7KCU+fEFADweM6kU8IeclonkHppc+ExC1HtRlfvWcPYcZqB8RhnWnfruheQwWgr 5/npI+hOaH4nCao+4ti+JtfhM1hEiz0wAUFRceDB1GD59HWbJM+faODafSQ= -----END CERTIFICATE-----Generated at Tue Sep 16 05:01:46 2025 by rpki-client