$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer File: 9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer (raw, json) Hash identifier: fwfd4DknpzD+E25uffMrMkIAQFYz34T+r6b6144QMos= Subject key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A54A52C3EE15D67646B31FF20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Jun 2025 13:21:28 +0000 Certificate not after: Tue 31 Aug 2027 13:48:15 +0000 Subordinate resources: AS: 26879 IP: 23.140.172.0/24 IP: 2602:f634::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:54:a5:2c:3e:e1:5d:67:64:6b:31:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 27 13:21:28 2025 GMT Not After : Aug 31 13:48:15 2027 GMT Subject: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:c7:67:73:e6:78:4d:ba:0f:7f:61:f5:6a: b9:dd:fb:cd:0b:76:3c:ac:2b:4d:a0:02:b4:23:f9: f0:99:28:1e:26:bf:01:4c:93:26:f4:15:cc:c2:e4: b4:51:f9:57:99:c6:92:4c:c1:74:2d:42:8b:b8:5b: 5e:ac:97:20:0b:4c:ca:52:5b:bf:c0:41:ec:4d:ae: 36:ab:65:8a:b1:dc:b1:27:78:7c:63:65:05:75:ad: 4c:8c:30:5e:0b:17:89:1d:69:b7:4e:ca:78:d6:d3: 95:dd:53:fc:b4:2d:22:a8:64:3d:07:33:90:c9:e2: b3:77:d7:4f:da:90:c1:7e:12:fa:8f:16:cc:d9:83: ad:61:9c:a9:71:38:55:d2:7f:a5:7e:34:52:d6:73: 4e:e8:62:6d:94:35:d3:7a:cf:e4:36:aa:ed:06:7e: da:4f:39:b0:33:39:b0:d4:7b:6e:ed:29:dd:c7:05: e2:8d:d4:04:61:03:5c:f6:8e:5c:d6:67:19:61:c2: 0d:d0:b4:62:e2:40:a4:b4:57:b1:05:b9:69:83:e4: 49:3a:81:e8:23:fd:a5:f4:0d:ff:21:54:4f:27:a5: dc:22:50:cf:db:86:e8:25:42:b2:69:17:2d:63:63: 55:8c:b2:1f:15:59:7a:e6:6a:f8:db:bd:5c:07:d9: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.140.172.0/24 IPv6: 2602:f634::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26879 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:01:31:ba:68:c5:99:15:f8:fe:2e:ba:e5:a5:fb:2d:71:26: 90:08:ac:6e:a2:f6:4f:98:f8:a3:59:7b:98:3e:37:7c:51:de: 9c:54:c6:34:c9:72:76:49:c6:9c:b2:fe:aa:02:66:43:a2:bf: c4:45:03:ab:95:d8:3d:4b:12:e0:43:30:2f:29:09:c3:be:fa: 93:c8:92:51:a5:f3:33:d4:f6:0d:dd:70:ab:1a:76:37:ad:a5: 12:52:71:bc:d6:cd:c8:7d:36:28:8a:4b:2f:11:c5:05:6d:ba: 7e:4c:45:71:8f:97:c0:a8:5f:8b:dc:e5:35:a2:ac:98:ad:89: e2:4a:8c:46:08:38:d3:b3:14:70:65:ff:b8:a7:cb:63:fe:84: 05:85:02:bd:83:2e:7d:6b:b1:bc:b9:4b:00:34:6f:db:53:9a: 89:00:5d:e1:02:d2:c4:e4:1f:c4:ea:06:7d:d6:4f:da:e7:18: b6:8d:2f:14:05:8d:c3:3e:10:c2:95:f3:f6:dc:74:c5:96:f4: b3:6b:6a:57:df:80:88:5b:20:de:6d:e4:43:6d:97:f1:43:12: af:f6:ba:20:73:b0:e9:5c:17:cf:fe:b5:7f:ae:11:4a:58:b2: bc:ad:d3:26:b7:b0:ac:97:98:8c:f7:ab:77:ff:0b:90:88:3b: 63:9b:e2:3d -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEpUpSw+4V1nZGsx/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYyNzEzMjEyOFoXDTI3MDgzMTEzNDgxNVowLzEtMCsGA1UEAxMk OWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIyNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRjHZ3PmeE26D39h9Wq53fvNC3Y8rCtNoAK0 I/nwmSgeJr8BTJMm9BXMwuS0UflXmcaSTMF0LUKLuFterJcgC0zKUlu/wEHsTa42 q2WKsdyxJ3h8Y2UFda1MjDBeCxeJHWm3Tsp41tOV3VP8tC0iqGQ9BzOQyeKzd9dP 2pDBfhL6jxbM2YOtYZypcThV0n+lfjRS1nNO6GJtlDXTes/kNqrtBn7aTzmwMzmw 1Htu7SndxwXijdQEYQNc9o5c1mcZYcIN0LRi4kCktFexBblpg+RJOoHoI/2l9A3/ IVRPJ6XcIlDP24boJUKyaRctY2NVjLIfFVl65mr4271cB9nVTwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFIqNgJcOk9GOZit7RrAu4kBFbIjuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzllNTZiZDkxLWNjOGQtNGE3My05 NTk3LTE3YWI5NDBiMjZkYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQw YjI2ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjKwwDgQCAAIwCAMGACYC9jQAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAmj/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGkBMbpoxZkV+P4uuuWl+y1xJpAI rG6i9k+Y+KNZe5g+N3xR3pxUxjTJcnZJxpyy/qoCZkOiv8RFA6uV2D1LEuBDMC8p CcO++pPIklGl8zPU9g3dcKsadjetpRJScbzWzch9NiiKSy8RxQVtun5MRXGPl8Co X4vc5TWirJitieJKjEYIONOzFHBl/7iny2P+hAWFAr2DLn1rsby5SwA0b9tTmokA XeEC0sTkH8TqBn3WT9rnGLaNLxQFjcM+EMKV8/bcdMWW9LNralffgIhbIN5t5ENt l/FDEq/2uiBzsOlcF8/+tX+uEUpYsryt0ya3sKyXmIz3q3f/C5CIO2Ob4j0= -----END CERTIFICATE-----Generated at Tue Jul 1 13:23:16 2025 by rpki-client