$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer File: 48e1915e-1132-4c62-a522-0f196fb03c8f.cer (raw, json) Hash identifier: J3JWAIvorcgEQmuvcJ7ZH3//F0Ux8qUbauuuKl0HAus= Subject key identifier: 92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849EEAD6AFD18F26CF41BC66480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 22 May 2025 00:45:37 +0000 Certificate not after: Wed 25 Aug 2027 00:45:37 +0000 Subordinate resources: IP: 141.214.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:ad:6a:fd:18:f2:6c:f4:1b:c6:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 22 00:45:37 2025 GMT Not After : Aug 25 00:45:37 2027 GMT Subject: CN=48e1915e-1132-4c62-a522-0f196fb03c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bd:7c:1b:c4:f3:34:5b:a2:a1:2e:73:8f:32: 85:ce:3a:19:bf:e9:c1:0a:ff:1d:30:24:ed:b7:65: fe:af:62:bc:a7:77:a0:5a:2d:cb:a4:d6:0e:e2:07: 6f:2a:f7:72:db:93:80:b4:b9:5f:ea:cd:25:ea:96: 82:43:67:2b:f9:87:24:17:f0:8f:9c:87:13:1d:c2: c6:89:e6:28:d8:a5:34:f0:98:7c:6a:b5:f5:bf:77: a7:6a:12:da:2e:37:4b:62:99:00:e5:bf:6f:4a:10: 76:a6:f7:d0:43:cb:18:b0:03:22:06:e8:34:5b:50: e1:bf:f8:1f:46:5d:08:7b:37:ca:6d:3f:1d:22:db: b4:94:18:4a:3a:01:52:c4:01:ac:ff:45:e0:f0:72: b2:62:98:f8:1b:62:1d:f5:16:51:85:bb:b9:44:da: 3a:14:4e:7c:e9:dd:e4:c3:1a:d2:71:66:40:ed:95: ac:ab:bf:c9:61:39:c0:82:b0:1c:92:6b:cd:69:69: 58:ee:20:86:49:26:11:e6:02:65:6d:1d:fd:99:2a: b9:41:59:00:3d:e7:ec:2d:84:95:fd:6f:e0:a0:c2: d2:3b:25:38:80:1d:51:26:3a:05:72:3a:36:5e:71: 2b:cc:11:b3:05:2f:b3:32:94:82:f0:64:9a:36:97: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 141.214.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:2b:6b:bf:df:e6:64:27:32:03:00:2d:bc:39:34:c9:29:34: e2:95:eb:4d:49:48:8a:4c:64:0c:c3:33:6e:1b:14:9a:3c:c0: 6e:a8:f2:ce:ff:52:92:9b:c1:38:04:56:14:cf:e5:f4:e5:e3: 92:ed:63:db:af:cb:4d:72:e8:cb:94:e5:b3:38:67:2d:6d:11: 2a:1c:c5:6d:55:db:f8:22:ef:2f:71:e0:74:47:e1:b6:93:f8: f9:a0:dc:84:e5:f9:45:fe:3f:32:df:c9:25:46:96:7f:4a:ad: 57:c4:b4:ac:80:ac:a5:36:59:b2:73:6c:3a:d0:3c:b5:f9:5d: 30:a6:0e:ff:02:d2:cb:3d:2b:38:9a:a8:f0:a0:18:83:dc:fe: ec:45:71:c3:26:2b:42:65:6d:fe:fc:1c:c1:ee:d0:9b:11:1b: f5:23:99:65:64:ea:11:d4:df:08:b9:9a:a5:85:b2:11:f9:14: f5:a9:9c:51:54:cb:0a:9c:a0:3d:93:cc:83:16:4f:40:39:59: 30:78:ec:e4:31:31:18:61:e6:c2:67:d6:c0:96:8d:98:ab:23: c5:19:ad:26:dc:6b:43:95:66:a6:35:28:3b:fd:74:76:33:9a: 04:79:e6:af:d5:3b:8e:2c:c9:3a:25:80:38:58:9d:7b:13:d8: af:33:61:56 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEnurWr9GPJs9BvGZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUyMjAwNDUzN1oXDTI3MDgyNTAwNDUzN1owLzEtMCsGA1UEAxMk NDhlMTkxNWUtMTEzMi00YzYyLWE1MjItMGYxOTZmYjAzYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb18G8TzNFuioS5zjzKFzjoZv+nBCv8dMCTt t2X+r2K8p3egWi3LpNYO4gdvKvdy25OAtLlf6s0l6paCQ2cr+YckF/CPnIcTHcLG ieYo2KU08Jh8arX1v3enahLaLjdLYpkA5b9vShB2pvfQQ8sYsAMiBug0W1Dhv/gf Rl0IezfKbT8dItu0lBhKOgFSxAGs/0Xg8HKyYpj4G2Id9RZRhbu5RNo6FE586d3k wxrScWZA7ZWsq7/JYTnAgrAckmvNaWlY7iCGSSYR5gJlbR39mSq5QVkAPefsLYSV /W/goMLSOyU4gB1RJjoFcjo2XnErzBGzBS+zMpSC8GSaNpdo0QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJJv7O7LCvkDagJi2wvZESoLQ4FXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 OGUxOTE1ZS0xMTMyLTRjNjItYTUyMi0wZjE5NmZiMDNjOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ4ZTE5MTVlLTExMzItNGM2Mi1h NTIyLTBmMTk2ZmIwM2M4Zi80OGUxOTE1ZS0xMTMyLTRjNjItYTUyMi0wZjE5NmZi MDNjOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCN1jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNK2u/3+ZkJzIDAC28OTTJ KTTiletNSUiKTGQMwzNuGxSaPMBuqPLO/1KSm8E4BFYUz+X05eOS7WPbr8tNcujL lOWzOGctbREqHMVtVdv4Iu8vceB0R+G2k/j5oNyE5flF/j8y38klRpZ/Sq1XxLSs gKylNlmyc2w60Dy1+V0wpg7/AtLLPSs4mqjwoBiD3P7sRXHDJitCZW3+/BzB7tCb ERv1I5llZOoR1N8IuZqlhbIR+RT1qZxRVMsKnKA9k8yDFk9AOVkweOzkMTEYYebC Z9bAlo2YqyPFGa0m3GtDlWamNSg7/XR2M5oEeeav1TuOLMk6JYA4WJ17E9ivM2FW -----END CERTIFICATE-----Generated at Sun Nov 2 02:32:37 2025 by rpki-client