$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467.cer File: 81fb7701-7454-4b9b-810d-3d604f504467.cer (raw, json) Hash identifier: FhEmZkQbzTq82mJLlkPsasEUGPvFJy6VVDOlWANjuBo= Subject key identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B030F0859F5B42257A8CBF600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 29 Aug 2025 00:45:25 +0000 Certificate not after: Thu 02 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 148.177.0.0/16 IP: 199.65.0.0 -- 199.65.191.255 IP: 199.65.200.0 -- 199.65.239.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:0f:08:59:f5:b4:22:57:a8:cb:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 29 00:45:25 2025 GMT Not After : Dec 2 01:45:25 2027 GMT Subject: CN=81fb7701-7454-4b9b-810d-3d604f504467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:37:82:4f:3c:19:25:cb:e1:8b:85:48:02: 43:90:0b:06:54:ee:a0:e0:ea:ee:35:0e:96:ed:e0: 6a:d5:1a:cc:a7:03:95:26:49:f2:b1:83:2b:0b:58: 74:93:ed:9e:be:a9:aa:b1:8b:86:c4:a1:37:94:2b: e6:b0:1c:f3:ce:dd:5c:0a:9e:6d:d0:12:59:6a:78: 56:b0:66:80:5a:99:fb:95:1e:15:c4:cb:e2:d6:82: ca:e8:ea:08:8d:fc:f4:40:fb:ad:83:e8:b9:b3:de: fb:af:ec:1a:b7:71:f6:bc:c6:06:04:da:f9:2d:6a: 4f:6d:91:f2:52:bb:1b:85:80:4c:67:bf:64:46:75: 4a:c5:9f:b9:e7:af:45:80:34:ca:86:39:40:38:21: 7c:3a:df:85:2b:9c:63:9d:26:e6:29:d1:19:c1:a5: 95:52:52:a4:dc:c5:e1:da:41:c0:7f:a4:ae:ea:0f: 0d:7c:85:03:33:18:24:ec:72:f6:ff:fc:43:ad:84: 09:5e:81:f9:08:fe:9a:0c:a9:4a:21:02:f4:80:19: 6e:90:29:2b:00:0a:b6:8f:4c:96:17:96:1e:03:39: d2:c9:c9:f2:c6:96:b9:9e:a8:19:5a:a9:db:4e:88: d5:b4:f9:95:53:9b:2e:2b:cb:7b:a6:c0:d4:76:9a: 55:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:DA:10:10:BB:03:C2:50:43:1B:D3:31:D6:D6:A6:9A:5C:15:0A:CE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/81fb7701-7454-4b9b-810d-3d604f504467/81fb7701-7454-4b9b-810d-3d604f504467.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 148.177.0.0/16 199.65.0.0-199.65.191.255 199.65.200.0-199.65.239.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:21:f0:50:3e:31:c6:84:5c:d2:ee:e5:4f:21:1c:04:ee:0d: 9e:9c:00:c6:29:fb:51:fa:45:61:e0:ea:d8:5a:1b:66:fb:a4: b8:80:2e:47:9e:d3:81:39:fa:9b:3c:ea:d1:f4:35:c7:ef:90: c0:fe:59:54:62:fc:43:68:18:86:bb:58:f9:f0:09:13:87:57: ff:33:6b:c9:fc:a2:f1:59:73:18:0d:b4:9f:0b:e5:43:f2:21: b6:77:62:76:8e:21:c3:c3:4b:de:d8:12:44:3d:30:e2:1d:cb: 5b:f5:0a:72:5c:b5:b5:b5:50:41:ca:06:ca:82:c1:56:42:87: c3:fe:0a:61:c8:d9:21:4f:90:77:ca:11:2b:c7:4b:ad:25:1b: d8:d6:2f:8e:c0:d0:4d:6d:62:d3:5b:f7:22:9d:b6:f0:e5:09: f8:ea:46:c9:49:80:2f:75:ea:96:43:da:1a:95:ed:79:b5:96: 45:29:7b:d6:01:71:70:10:31:d4:0e:c9:c6:0b:97:62:3b:55: a1:37:13:1c:37:86:0c:73:39:98:9a:63:0b:8d:27:eb:a2:1e: 70:b0:87:18:5c:8a:f1:04:2c:fe:a4:bd:68:4e:1d:77:ad:a4: 7c:12:8b:e4:d2:98:8f:db:bf:ca:79:9c:6f:60:cf:17:81:8f: 29:2c:52:85 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEsDDwhZ9bQiV6jL9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgyOTAwNDUyNVoXDTI3MTIwMjAxNDUyNVowLzEtMCsGA1UEAxMk ODFmYjc3MDEtNzQ1NC00YjliLTgxMGQtM2Q2MDRmNTA0NDY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnU3gk88GSXL4YuFSAJDkAsGVO6g4OruNQ6W 7eBq1RrMpwOVJknysYMrC1h0k+2evqmqsYuGxKE3lCvmsBzzzt1cCp5t0BJZanhW sGaAWpn7lR4VxMvi1oLK6OoIjfz0QPutg+i5s977r+wat3H2vMYGBNr5LWpPbZHy UrsbhYBMZ79kRnVKxZ+5569FgDTKhjlAOCF8Ot+FK5xjnSbmKdEZwaWVUlKk3MXh 2kHAf6Su6g8NfIUDMxgk7HL2//xDrYQJXoH5CP6aDKlKIQL0gBlukCkrAAq2j0yW F5YeAznSycnyxpa5nqgZWqnbTojVtPmVU5suK8t7psDUdppVYQIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFEbaEBC7A8JQQxvTMdbWpppcFQrOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1MDQ0NjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgxZmI3NzAxLTc0NTQtNGI5Yi04 MTBkLTNkNjA0ZjUwNDQ2Ny84MWZiNzcwMS03NDU0LTRiOWItODEwZC0zZDYwNGY1 MDQ0NjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADAwCUsTALAwMAx0EDBAbHQYAwDAMEA8dByAMEBMdB 4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA2IfBQPjHGhFzS7uVPIRwE7g2enADGKftR+kVh4OrYWhtm+6S4 gC5HntOBOfqbPOrR9DXH75DA/llUYvxDaBiGu1j58AkTh1f/M2vJ/KLxWXMYDbSf C+VD8iG2d2J2jiHDw0ve2BJEPTDiHctb9QpyXLW1tVBBygbKgsFWQofD/gphyNkh T5B3yhErx0utJRvY1i+OwNBNbWLTW/cinbbw5Qn46kbJSYAvdeqWQ9oale15tZZF KXvWAXFwEDHUDsnGC5diO1WhNxMcN4YMczmYmmMLjSfroh5wsIcYXIrxBCz+pL1o Th13raR8Eovk0piP27/KeZxvYM8XgY8pLFKF -----END CERTIFICATE-----Generated at Sun Nov 2 02:34:29 2025 by rpki-client