$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer File: 74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer (raw, json) Hash identifier: qRpg6A5ioeoGixf4aOwBS+zh3OodnRa0+S9YToJFFzM= Subject key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AA423DFC3893463FAF8AC6788 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 26 Jul 2025 00:45:36 +0000 Certificate not after: Fri 29 Oct 2027 00:45:36 +0000 Subordinate resources: IP: 23.247.160.0/22 IP: 2602:80c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:23:df:c3:89:34:63:fa:f8:ac:67:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 26 00:45:36 2025 GMT Not After : Oct 29 00:45:36 2027 GMT Subject: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:b7:7e:24:68:e6:cc:ba:f1:81:f7:68:59: b0:96:66:16:54:73:1f:56:6b:f3:35:25:27:2e:8e: 5a:15:73:d7:ba:b0:12:54:6e:dd:80:4d:98:4a:f0: ed:39:52:09:0a:43:e9:6d:7e:68:9f:98:3e:c8:93: 8f:99:66:03:d9:28:82:b5:c2:e7:98:0e:b6:26:fa: ae:7c:37:ff:38:f0:74:03:79:0a:fe:23:2c:94:ce: e5:04:fd:23:ff:b3:59:65:93:76:45:e0:88:bd:95: a4:c2:14:0c:80:21:ac:11:f6:51:f3:03:79:47:89: 00:57:8c:c9:3f:39:4a:be:cf:16:53:6d:e3:69:32: a5:13:38:7d:fb:34:57:a8:5b:2e:14:e7:c4:2d:ed: 60:d9:a2:d7:44:03:48:17:cf:e7:ba:0a:7a:7a:45: f3:ea:2e:ee:3c:bf:7c:af:ab:66:ab:02:a6:4f:3b: d5:5a:a7:3e:52:fe:07:36:d6:46:e9:2d:55:f3:33: b7:20:05:35:09:23:4c:ec:1f:d9:b8:d3:b7:2b:a2: a7:f7:8b:a8:62:25:ce:c6:9e:9a:5b:48:91:0c:fe: a6:f0:65:84:c0:db:bd:da:ad:42:19:56:48:8d:3c: 08:2d:b4:af:c8:62:42:e6:79:b9:59:d3:e2:0a:4b: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.247.160.0/22 IPv6: 2602:80c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:46:00:84:76:da:95:13:b3:4d:3e:61:cc:0c:63:f0:1c:cc: e2:18:0b:98:f9:52:8c:e4:47:62:5a:fe:87:20:e9:3d:c0:38: bc:f7:b3:17:da:93:04:52:9a:71:3e:8c:40:69:af:9e:1f:7f: b1:67:98:2e:88:40:e6:7e:21:37:2e:7e:a0:04:e6:a6:8f:eb: 56:33:b8:34:09:be:8e:b3:c8:8f:5c:1e:14:ac:fc:d9:d9:39: 0a:c6:15:64:e3:e7:f9:17:90:ec:57:2b:64:1c:83:01:65:e6: bf:2d:bc:0b:df:b7:a8:a6:30:0c:a8:bb:d4:b9:c7:86:b7:d9: 9b:20:54:7b:98:87:1d:b7:61:f8:07:ca:6c:21:ef:6d:d2:d3: 49:55:6a:08:04:93:ba:5a:16:0b:07:05:6c:ba:9e:7d:6a:7b: ad:9b:32:13:b3:e7:60:8c:f9:a6:89:cd:7f:a6:2f:66:b0:ea: 4c:02:36:f2:55:8c:e6:ef:48:50:1b:a1:76:32:82:18:38:44: f9:b3:89:f0:48:29:82:29:f9:31:41:75:10:e1:ee:92:27:93: fb:12:fb:a5:8d:ef:d6:d4:b8:b4:25:e2:21:08:1d:bc:56:81: 14:44:21:01:ee:1b:65:b8:23:f7:d6:4f:8c:f2:5a:66:3f:b3: c9:29:b3:24 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEqkI9/DiTRj+visZ4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcyNjAwNDUzNloXDTI3MTAyOTAwNDUzNlowLzEtMCsGA1UEAxMk NzRjN2YzMGUtNzBiZS00ZjhjLWJjOGYtNjBiODVkMWI2OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bm3fiRo5sy68YH3aFmwlmYWVHMfVmvzNSUn Lo5aFXPXurASVG7dgE2YSvDtOVIJCkPpbX5on5g+yJOPmWYD2SiCtcLnmA62Jvqu fDf/OPB0A3kK/iMslM7lBP0j/7NZZZN2ReCIvZWkwhQMgCGsEfZR8wN5R4kAV4zJ PzlKvs8WU23jaTKlEzh9+zRXqFsuFOfELe1g2aLXRANIF8/nugp6ekXz6i7uPL98 r6tmqwKmTzvVWqc+Uv4HNtZG6S1V8zO3IAU1CSNM7B/ZuNO3K6Kn94uoYiXOxp6a W0iRDP6m8GWEwNu92q1CGVZIjTwILbSvyGJC5nm5WdPiCkuEcQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFL0/Hd8u8E7vH141RoF8VBPhpe1DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQxYjY4ZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc0YzdmMzBlLTcwYmUtNGY4Yy1i YzhmLTYwYjg1ZDFiNjhmNy83NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQx YjY4ZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAIX96AwDgQCAAIwCAMGACYCCAwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AApGAIR22pUTs00+YcwMY/AczOIYC5j5UozkR2Ja/ocg6T3AOLz3sxfakwRSmnE+ jEBpr54ff7FnmC6IQOZ+ITcufqAE5qaP61YzuDQJvo6zyI9cHhSs/NnZOQrGFWTj 5/kXkOxXK2QcgwFl5r8tvAvft6imMAyou9S5x4a32ZsgVHuYhx23YfgHymwh723S 00lVaggEk7paFgsHBWy6nn1qe62bMhOz52CM+aaJzX+mL2aw6kwCNvJVjObvSFAb oXYyghg4RPmzifBIKYIp+TFBdRDh7pInk/sS+6WN79bUuLQl4iEIHbxWgRREIQHu G2W4I/fWT4zyWmY/s8kpsyQ= -----END CERTIFICATE-----Generated at Thu Jul 31 19:42:57 2025 by rpki-client