$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186.cer File: d4cafeea-cee5-442f-9f6c-530abebc6186.cer (raw, json) Hash identifier: RvWPvkVtFYi+/eL9vO59/5y6Q2ugbpy3ptksebfT/1k= Subject key identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B6A5A56ECB70FBAFABB6BEE20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Oct 2025 00:45:24 +0000 Certificate not after: Sat 08 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 396328 IP: 2607:c0c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:5a:56:ec:b7:0f:ba:fa:bb:6b:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 5 00:45:24 2025 GMT Not After : Jan 8 01:45:24 2028 GMT Subject: CN=d4cafeea-cee5-442f-9f6c-530abebc6186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:80:c3:d6:de:b8:c9:b3:dd:0f:e6:fb:76:86: 70:02:d1:cc:64:2b:45:35:f2:1e:e5:e9:09:b2:4c: 2d:74:cd:d5:44:67:57:e8:2d:45:32:88:d5:fb:13: 3f:10:5a:66:d4:78:e4:cc:ad:38:87:89:06:3e:c9: 06:ac:57:3a:8a:3d:cf:85:8a:8c:70:65:af:1d:01: 78:39:20:cf:a2:5c:a6:43:d9:07:f6:c7:8f:6d:08: 16:c4:77:6e:b9:09:f7:ef:6d:af:3b:11:19:8c:30: 73:66:69:84:ba:fc:20:b0:4c:5b:26:c3:a3:a5:58: d2:4c:50:d9:9e:53:3f:90:ff:f3:c8:c4:01:46:05: 35:78:58:32:7c:8a:30:81:ad:ca:51:a4:db:37:5a: 89:16:af:39:99:f2:f1:61:60:ef:0e:99:ef:ac:4a: 5e:44:a9:ca:f1:13:3d:f8:62:96:d0:bc:33:ff:f3: a5:68:b5:17:16:d2:79:4d:4e:39:29:6b:10:e0:2b: e7:86:39:d9:4a:12:5d:f2:e5:84:48:2c:b3:73:2e: 8d:4a:75:17:a2:0d:93:de:19:77:bb:66:4f:9a:16: e5:0f:d8:a5:4d:c8:53:1f:35:38:82:64:3d:ce:3d: a3:fd:7c:c6:f9:fd:6b:c5:b8:14:0b:e5:cd:7b:24: 96:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5F:57:F1:E4:CF:8F:31:36:A2:0B:43:76:7E:4A:AD:D7:8E:89:E2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4cafeea-cee5-442f-9f6c-530abebc6186/d4cafeea-cee5-442f-9f6c-530abebc6186.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2607:c0c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 396328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:15:f8:89:ae:bb:ca:38:a7:e3:90:4b:e4:e5:1a:d8:a6:84: 5f:a1:10:68:7e:c9:1a:77:5b:3f:39:6b:05:3b:21:d1:f6:6a: 26:9c:a8:5e:bf:79:d2:f9:3c:9a:1d:1c:e9:91:5c:fa:07:85: ac:5e:d0:4c:2e:6e:da:b0:80:b4:ef:f0:16:68:db:8a:5f:a4: 97:f8:87:2c:16:d0:e2:92:f9:99:51:3e:21:6f:3e:f1:63:ee: c2:ff:76:fb:97:e0:e9:15:8d:65:62:7f:f1:9c:40:20:31:ee: 7e:67:a3:b2:db:b5:10:84:79:b8:25:0d:21:11:64:14:7c:bb: 7e:e4:60:1a:f4:5b:95:59:a9:9d:80:98:1b:4a:72:ca:63:0d: 77:2b:7c:c5:94:64:b0:2d:a2:81:0f:17:65:26:71:6d:70:38: 94:de:fe:51:b2:35:2b:cf:19:b7:e7:60:93:e0:c8:4a:54:d5: 59:07:f7:56:0e:15:4c:6e:62:a0:eb:cd:87:c7:17:64:97:ad: c4:24:47:a0:32:2c:c0:6c:00:dd:a9:2b:6f:0a:b2:66:66:ca: e1:10:cb:c7:66:b2:5f:7e:c3:b3:d6:dc:b0:88:6f:5e:e4:7e: 1f:89:0f:84:c8:80:fc:bf:3f:e9:dd:2d:d4:06:95:a0:56:d7: 7e:c7:47:6f -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEtqWlbstw+6+rtr7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwNTAwNDUyNFoXDTI4MDEwODAxNDUyNFowLzEtMCsGA1UEAxMk ZDRjYWZlZWEtY2VlNS00NDJmLTlmNmMtNTMwYWJlYmM2MTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoDD1t64ybPdD+b7doZwAtHMZCtFNfIe5ekJ skwtdM3VRGdX6C1FMojV+xM/EFpm1HjkzK04h4kGPskGrFc6ij3PhYqMcGWvHQF4 OSDPolymQ9kH9sePbQgWxHduuQn3722vOxEZjDBzZmmEuvwgsExbJsOjpVjSTFDZ nlM/kP/zyMQBRgU1eFgyfIowga3KUaTbN1qJFq85mfLxYWDvDpnvrEpeRKnK8RM9 +GKW0Lwz//OlaLUXFtJ5TU45KWsQ4CvnhjnZShJd8uWESCyzcy6NSnUXog2T3hl3 u2ZPmhblD9ilTchTHzU4gmQ9zj2j/XzG+f1rxbgUC+XNeySWjQIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFFlfV/Hkz48xNqILQ3Z+Sq3XjoniMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k NGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmViYzYxODYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q0Y2FmZWVhLWNlZTUtNDQyZi05 ZjZjLTUzMGFiZWJjNjE4Ni9kNGNhZmVlYS1jZWU1LTQ0MmYtOWY2Yy01MzBhYmVi YzYxODYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmB8DAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYMKDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCMFfiJrrvKOKfjkEvk5RrYpoRfoRBofskad1s/OWsFOyHR 9momnKhev3nS+TyaHRzpkVz6B4WsXtBMLm7asIC07/AWaNuKX6SX+IcsFtDikvmZ UT4hbz7xY+7C/3b7l+DpFY1lYn/xnEAgMe5+Z6Oy27UQhHm4JQ0hEWQUfLt+5GAa 9FuVWamdgJgbSnLKYw13K3zFlGSwLaKBDxdlJnFtcDiU3v5RsjUrzxm352CT4MhK VNVZB/dWDhVMbmKg682Hxxdkl63EJEegMizAbADdqStvCrJmZsrhEMvHZrJffsOz 1tywiG9e5H4fiQ+EyID8vz/p3S3UBpWgVtd+x0dv -----END CERTIFICATE-----Generated at Fri Oct 17 07:33:54 2025 by rpki-client