$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer File: add35f11-0294-4be9-94b7-49cac2bcb001.cer (raw, json) Hash identifier: xCKsScHFsFCvz33amWSlggtfoGDJ/ugz+gePPuXGrRU= Subject key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B716CD74436A8997A55E7D700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 13:33:21 +0000 Certificate not after: Sat 16 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 923 AS: 396171 AS: 401032 IP: 23.144.156.0/24 IP: 131.143.204.0/22 IP: 207.167.121.0/24 IP: 2602:fbf5::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:6c:d7:44:36:a8:99:7a:55:e7:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 7 13:33:21 2025 GMT Not After : Oct 16 00:45:36 2027 GMT Subject: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:cf:7f:f3:47:77:62:0e:bc:e5:47:d5:4b: 5e:7f:4a:b5:da:e9:ba:04:bf:60:e1:86:b7:17:d4: aa:10:1e:b4:51:89:b1:47:a9:bf:97:45:b7:9e:89: fa:20:f0:61:7c:54:d7:b3:74:b7:46:59:f4:fa:c2: 14:4f:c1:18:65:c1:b3:db:e5:fa:e2:32:65:50:0d: 43:2c:81:cf:d5:ec:36:b8:0e:d8:1a:40:da:b0:ac: 2b:87:20:dd:28:ae:19:13:d3:66:07:aa:fe:f2:c8: de:22:76:31:6e:4a:fb:5a:2a:e0:d9:b5:5f:7b:2d: 97:c3:4f:70:4b:1b:1c:3c:3a:fb:49:64:bf:a7:00: e2:a7:da:18:ef:48:9c:58:be:84:36:01:6d:79:72: 8b:3d:50:2b:d4:a4:a4:e9:3c:c9:f6:81:b2:55:3f: 5d:2c:14:44:1c:06:63:19:09:05:2e:e1:2b:c5:93: 4f:b9:41:61:45:b3:0d:cb:d4:73:e5:7a:c9:5e:25: 94:3a:a3:34:ab:3b:9c:10:ad:77:c0:f4:c1:fc:6b: 97:8b:22:28:7d:65:a5:0e:9e:9f:2f:2e:fd:d7:20: cd:d8:98:43:3e:41:e2:24:8d:30:31:92:30:02:33: d6:a4:88:2b:b9:19:cc:f9:08:de:20:13:40:3e:89: be:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.144.156.0/24 131.143.204.0/22 207.167.121.0/24 IPv6: 2602:fbf5::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 923 396171 401032 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f6:7a:15:2c:34:e0:8e:3e:df:2c:b5:cd:a2:50:78:ac:54: c9:80:81:48:0a:f7:19:5e:c8:6f:7a:39:ce:13:91:1b:3e:91: b2:dd:35:56:5b:33:b1:a6:e2:63:37:5c:07:3f:d2:7e:92:54: 93:1f:ba:9a:00:40:f7:db:f8:e7:19:93:e0:98:d7:20:55:2d: f5:fb:9f:03:e4:c4:e3:b7:e2:b5:ea:8f:2b:21:a4:24:fd:67: 0e:4c:3c:65:1a:4a:fa:78:f9:50:5a:05:e2:5c:73:82:5a:b9: 4e:38:7a:c0:ad:12:d7:41:c2:d3:60:49:9a:ac:cb:eb:ff:fd: 63:74:a5:39:f4:98:ec:60:90:d5:a1:e1:1a:5d:bb:94:c1:93: 15:01:58:7c:15:ff:97:d3:cf:0a:05:67:eb:74:47:16:45:0a: b5:c6:93:30:97:15:97:af:e4:09:4d:fc:2a:9f:a8:e1:5f:d4: d9:af:bb:96:42:41:e2:f2:15:52:95:24:77:43:fe:e9:bc:de: 46:62:b2:2c:3c:9e:5f:ff:ad:7f:ea:92:31:45:e3:4c:51:cb: ea:13:58:e2:26:4a:fd:b5:0b:ea:d2:a8:10:e4:2e:79:58:08: 42:d8:09:f6:fc:d6:b8:8e:57:4a:8f:37:59:d3:ae:15:c4:2b: 4d:0d:12:78 -----BEGIN CERTIFICATE----- MIIHLjCCBhagAwIBAgIUAQ0Mn0MoWEtxbNdENqiZelXn1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwNzEzMzMyMVoXDTI3MTAxNjAwNDUzNlowLzEtMCsGA1UEAxMk YWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNiMDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS3Pf/NHd2IOvOVH1Utef0q12um6BL9g4Ya3 F9SqEB60UYmxR6m/l0W3non6IPBhfFTXs3S3Rln0+sIUT8EYZcGz2+X64jJlUA1D LIHP1ew2uA7YGkDasKwrhyDdKK4ZE9NmB6r+8sjeInYxbkr7Wirg2bVfey2Xw09w SxscPDr7SWS/pwDip9oY70icWL6ENgFteXKLPVAr1KSk6TzJ9oGyVT9dLBREHAZj GQkFLuErxZNPuUFhRbMNy9Rz5XrJXiWUOqM0qzucEK13wPTB/GuXiyIofWWlDp6f Ly791yDN2JhDPkHiJI0wMZIwAjPWpIgruRnM+QjeIBNAPom+TQIDAQABo4IEQDCC BDwwHQYDVR0OBBYEFKV6YSywSSg8HwmdDV4M8465WPjKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h ZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FkZDM1ZjExLTAyOTQtNGJlOS05 NGI3LTQ5Y2FjMmJjYjAwMS9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJi Y2IwMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAAXkJwDBAKDj8wDBADPp3kwDgQCAAIwCAMGBCYC +/UAMCMGCCsGAQUFBwEIAQH/BBQwEqAQMA4CAgObAgMGC4sCAwYeiDBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQAi9noVLDTgjj7fLLXNolB4rFTJgIFICvcZXshvejnOE5EbPpGy3TVWWzOxpuJj N1wHP9J+klSTH7qaAED32/jnGZPgmNcgVS31+58D5MTjt+K16o8rIaQk/WcOTDxl Gkr6ePlQWgXiXHOCWrlOOHrArRLXQcLTYEmarMvr//1jdKU59JjsYJDVoeEaXbuU wZMVAVh8Ff+X088KBWfrdEcWRQq1xpMwlxWXr+QJTfwqn6jhX9TZr7uWQkHi8hVS lSR3Q/7pvN5GYrIsPJ5f/61/6pIxReNMUcvqE1jiJkr9tQvq0qgQ5C55WAhC2An2 /Na4jldKjzdZ064VxCtNDRJ4 -----END CERTIFICATE-----Generated at Mon Oct 27 07:25:41 2025 by rpki-client