$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe.cer File: 22d0498f-1d90-48ff-92de-ab62b685b2fe.cer (raw, json) Hash identifier: wntg1aO3v/mWsX325kWnz665pE0uUG/rcXFINQrwyx4= Subject key identifier: E0:91:0D:33:6F:BF:04:E7:9A:3A:C6:9C:CA:1D:37:77:32:03:B7:25 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B460F7459CA917BE202281600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 22 Sep 2025 00:45:25 +0000 Certificate not after: Sun 26 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 30535 IP: 134.195.56.0/22 IP: 158.51.36.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:46:0f:74:59:ca:91:7b:e2:02:28:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 22 00:45:25 2025 GMT Not After : Dec 26 01:45:25 2027 GMT Subject: CN=22d0498f-1d90-48ff-92de-ab62b685b2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9e:6e:db:6e:12:5d:a5:a9:c3:28:00:da:a4: cf:4a:56:04:fd:d1:8b:b6:85:20:65:72:91:b3:d5: 81:e4:0c:6f:59:77:35:e6:ff:9f:30:01:a1:67:fc: 8e:3d:cd:fb:53:e7:1b:9c:53:f4:0a:48:9f:d0:ec: f8:8a:10:61:33:90:12:86:1b:a8:f8:ac:8c:d1:ad: 63:62:59:c2:5b:fa:f3:cf:ce:a5:10:39:4d:ec:bc: ce:61:8a:c6:44:34:00:f3:51:be:32:fd:34:86:83: 3e:22:d8:00:ca:b5:9d:b6:e0:e6:27:f6:4f:65:c4: 7f:ad:c8:bc:1b:cf:d5:79:7d:69:1e:f1:87:2d:8c: e1:53:d7:48:a3:3f:e1:4e:df:fe:95:1c:13:8c:1c: 19:52:00:a0:9c:2d:0f:a4:71:05:c2:ec:09:5c:06: 3a:ae:5f:04:99:00:f0:75:e0:de:ad:11:7c:5b:de: b9:71:a5:84:8b:eb:b8:39:0e:ce:a6:7f:11:d8:e8: a7:b3:85:5f:8a:87:f4:02:52:c3:06:09:12:41:91: a1:6f:df:6b:74:ed:f9:e4:c7:cf:66:1f:1b:dd:7e: 5d:49:b2:28:e7:6e:93:c4:c7:14:6d:d1:4f:18:79: 88:2b:39:0a:90:db:8e:fd:3a:43:e6:9d:1b:7d:75: b9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:91:0D:33:6F:BF:04:E7:9A:3A:C6:9C:CA:1D:37:77:32:03:B7:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/22d0498f-1d90-48ff-92de-ab62b685b2fe/22d0498f-1d90-48ff-92de-ab62b685b2fe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 134.195.56.0/22 158.51.36.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30535 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:25:a8:48:e5:a7:eb:1b:06:3d:33:7b:b3:81:cf:76:89:89: 52:e3:da:99:2b:30:37:81:85:15:43:43:cb:75:1d:bf:21:48: e7:32:34:88:f3:46:a1:24:18:e7:6e:67:90:b2:c7:36:cb:5d: 89:06:06:05:f5:02:ba:87:9b:4b:b4:85:2e:63:81:84:d2:83: d2:30:37:c6:7b:b9:53:2a:5b:db:d3:b9:b4:a2:5c:04:e6:6f: d5:02:f6:b6:a4:2e:7a:57:38:69:2b:20:55:1e:62:df:c7:32: 16:82:0e:76:d0:f5:77:51:60:af:0a:9f:92:be:53:c4:8b:49: eb:f4:4d:37:78:cf:95:75:ce:ec:84:67:67:34:d0:07:b7:89: 70:46:e6:1f:38:e2:ad:ce:5a:9f:74:d6:74:58:1a:81:1b:b7: 99:be:45:f7:f1:1d:fe:d1:ac:71:23:73:b3:be:42:aa:b7:82: 92:22:2c:3d:e5:b1:8d:ba:52:06:6d:e8:a5:a9:5e:12:c0:86: a1:7d:2f:0d:05:67:4b:2a:b8:4d:a3:51:27:4b:b7:6f:c4:67: 9d:00:1a:b4:8f:85:c1:eb:a3:39:fd:7c:93:8c:64:a8:4b:ae: da:42:19:67:3b:46:a0:80:62:b0:0c:44:7f:3e:73:54:1a:a6: 6e:27:3f:51 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEtGD3RZypF74gIoFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkyMjAwNDUyNVoXDTI3MTIyNjAxNDUyNVowLzEtMCsGA1UEAxMk MjJkMDQ5OGYtMWQ5MC00OGZmLTkyZGUtYWI2MmI2ODViMmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4J5u224SXaWpwygA2qTPSlYE/dGLtoUgZXKR s9WB5AxvWXc15v+fMAGhZ/yOPc37U+cbnFP0Ckif0Oz4ihBhM5AShhuo+KyM0a1j YlnCW/rzz86lEDlN7LzOYYrGRDQA81G+Mv00hoM+ItgAyrWdtuDmJ/ZPZcR/rci8 G8/VeX1pHvGHLYzhU9dIoz/hTt/+lRwTjBwZUgCgnC0PpHEFwuwJXAY6rl8EmQDw deDerRF8W965caWEi+u4OQ7Opn8R2Oins4Vfiof0AlLDBgkSQZGhb99rdO355MfP Zh8b3X5dSbIo526TxMcUbdFPGHmIKzkKkNuO/TpD5p0bfXW59QIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFOCRDTNvvwTnmjrGnModN3cyA7clMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y MmQwNDk4Zi0xZDkwLTQ4ZmYtOTJkZS1hYjYyYjY4NWIyZmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzIyZDA0OThmLTFkOTAtNDhmZi05 MmRlLWFiNjJiNjg1YjJmZS8yMmQwNDk4Zi0xZDkwLTQ4ZmYtOTJkZS1hYjYyYjY4 NWIyZmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKGwzgDBAKeMyQwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICd0cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAHiWoSOWn6xsGPTN7s4HPdomJUuPamSswN4GFFUND y3UdvyFI5zI0iPNGoSQY525nkLLHNstdiQYGBfUCuoebS7SFLmOBhNKD0jA3xnu5 Uypb29O5tKJcBOZv1QL2tqQuelc4aSsgVR5i38cyFoIOdtD1d1Fgrwqfkr5TxItJ 6/RNN3jPlXXO7IRnZzTQB7eJcEbmHzjirc5an3TWdFgagRu3mb5F9/Ed/tGscSNz s75CqreCkiIsPeWxjbpSBm3opaleEsCGoX0vDQVnSyq4TaNRJ0u3b8RnnQAatI+F weujOf18k4xkqEuu2kIZZztGoIBisAxEfz5zVBqmbic/UQ== -----END CERTIFICATE-----Generated at Sun Nov 2 02:31:25 2025 by rpki-client