$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2.cer File: 53a14809-fd74-4e50-a827-e921f11ef1a2.cer (raw, json) Hash identifier: vhYFjZmNdR/BOLoAjGoiiVXxHycsStH1qVuvz+mo6EI= Subject key identifier: 06:1F:00:BD:52:AF:0F:E1:01:15:BB:34:42:7E:B5:D3:82:47:DB:F6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B297ADA07F7904A21262FB280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 11 Sep 2025 19:03:22 +0000 Certificate not after: Wed 15 Dec 2027 14:46:13 +0000 Subordinate resources: AS: 35962 IP: 199.33.135.0/24 IP: 2604:f4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:7a:da:07:f7:90:4a:21:26:2f:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 11 19:03:22 2025 GMT Not After : Dec 15 14:46:13 2027 GMT Subject: CN=53a14809-fd74-4e50-a827-e921f11ef1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:5a:8b:77:69:88:f3:61:cc:02:13:93:65: fc:d6:97:3e:ca:ed:c6:bf:67:8c:a9:d4:62:49:61: b4:52:6d:48:52:6b:a3:50:2c:ac:e4:a1:2d:1f:86: 8e:5a:12:45:d4:21:16:b1:46:49:b3:d2:37:07:3b: e4:c0:62:8e:56:00:12:ec:99:29:a5:4c:92:14:75: ff:09:ab:c5:5c:65:2f:29:66:2b:2e:97:0f:43:e2: d1:33:73:95:6b:dc:54:48:d0:9c:8e:79:e7:ae:29: fe:e1:76:30:0c:f8:55:42:3a:b5:15:51:9a:3f:fe: 8e:bd:7e:a6:9d:69:01:69:54:3f:7a:0a:73:67:60: a6:06:24:7d:80:5b:64:3c:c5:82:eb:11:74:5c:44: b5:0f:0b:76:80:90:dc:9e:7a:de:12:f1:01:b4:29: f3:30:80:3d:84:b6:52:27:56:85:9e:56:b4:4c:a4: 54:8e:d1:ab:c3:ff:66:79:9c:6c:74:1d:94:19:62: e8:85:70:29:d9:31:f5:77:28:79:8e:89:65:bc:ab: cd:d7:5d:0c:92:d7:a1:32:13:ac:73:83:d0:5e:d1: 2a:ea:5d:79:cd:32:48:d8:d7:e5:74:4c:68:a3:90: e9:b6:60:ec:e4:bf:f4:54:99:34:da:62:d9:a5:56: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1F:00:BD:52:AF:0F:E1:01:15:BB:34:42:7E:B5:D3:82:47:DB:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/53a14809-fd74-4e50-a827-e921f11ef1a2/53a14809-fd74-4e50-a827-e921f11ef1a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.33.135.0/24 IPv6: 2604:f4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 35962 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f2:86:20:15:b7:27:3a:7f:33:d1:13:85:54:97:14:7e:bd: 96:1c:6d:ff:f5:41:18:e8:41:73:78:85:60:d7:9c:e3:d3:e7: fb:73:5b:e5:a6:bc:c7:7c:c2:5e:cf:5e:b8:95:c1:f9:dc:6c: a6:e7:b1:a0:7b:33:c5:ee:70:a3:82:05:66:6e:38:25:1a:e9: d5:cd:e7:2c:21:b5:f3:81:6a:76:c8:b0:fb:cd:46:9b:16:79: 21:96:fa:d3:32:e7:8d:c7:95:74:56:2e:38:b7:bd:14:5c:bd: 44:6b:14:f8:87:97:dc:c0:02:bd:cb:31:fe:c1:78:23:6f:1d: f7:d7:85:22:63:ba:2e:8f:ad:50:85:77:79:74:68:30:b0:d2: 63:da:59:1a:0a:82:b2:1e:13:98:00:d5:cb:39:98:a2:84:14: 48:96:9c:ca:ea:55:6c:fc:c0:75:2b:06:e3:64:7c:aa:8a:87: 3a:2f:f3:6d:25:34:9b:2e:ae:4b:a2:e8:cd:92:b8:30:ef:a7: ec:f2:b2:0d:c0:12:48:51:01:31:c1:2b:b6:26:a9:2c:b2:83: 9a:88:2b:bd:9f:8f:26:90:7a:da:42:e4:88:4e:67:88:f2:67: c4:e0:4b:27:ac:be:4a:64:ef:89:47:68:97:cd:20:4e:1f:ee: 2d:d4:33:7f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEspetoH95BKISYvsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkxMTE5MDMyMloXDTI3MTIxNTE0NDYxM1owLzEtMCsGA1UEAxMk NTNhMTQ4MDktZmQ3NC00ZTUwLWE4MjctZTkyMWYxMWVmMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsdai3dpiPNhzAITk2X81pc+yu3Gv2eMqdRi SWG0Um1IUmujUCys5KEtH4aOWhJF1CEWsUZJs9I3BzvkwGKOVgAS7JkppUySFHX/ CavFXGUvKWYrLpcPQ+LRM3OVa9xUSNCcjnnnrin+4XYwDPhVQjq1FVGaP/6OvX6m nWkBaVQ/egpzZ2CmBiR9gFtkPMWC6xF0XES1Dwt2gJDcnnreEvEBtCnzMIA9hLZS J1aFnla0TKRUjtGrw/9meZxsdB2UGWLohXAp2TH1dyh5jollvKvN110MktehMhOs c4PQXtEq6l15zTJI2NfldExoo5DptmDs5L/0VJk02mLZpVau8wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAYfAL1Srw/hARW7NEJ+tdOCR9v2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 M2ExNDgwOS1mZDc0LTRlNTAtYTgyNy1lOTIxZjExZWYxYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzUzYTE0ODA5LWZkNzQtNGU1MC1h ODI3LWU5MjFmMTFlZjFhMi81M2ExNDgwOS1mZDc0LTRlNTAtYTgyNy1lOTIxZjEx ZWYxYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBADHIYcwDQQCAAIwBwMFACYE9MAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAIx6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAfyhiAVtyc6fzPRE4VUlxR+vZYc bf/1QRjoQXN4hWDXnOPT5/tzW+WmvMd8wl7PXriVwfncbKbnsaB7M8XucKOCBWZu OCUa6dXN5ywhtfOBanbIsPvNRpsWeSGW+tMy543HlXRWLji3vRRcvURrFPiHl9zA Ar3LMf7BeCNvHffXhSJjui6PrVCFd3l0aDCw0mPaWRoKgrIeE5gA1cs5mKKEFEiW nMrqVWz8wHUrBuNkfKqKhzov820lNJsurkui6M2SuDDvp+zysg3AEkhRATHBK7Ym qSyyg5qIK72fjyaQetpC5IhOZ4jyZ8TgSyesvkpk74lHaJfNIE4f7i3UM38= -----END CERTIFICATE-----Generated at Tue Sep 16 04:59:44 2025 by rpki-client