$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675.cer File: eb3726d7-0f8c-4949-99b6-eecda94a0675.cer (raw, json) Hash identifier: maXatZXrpGu01Sj5sFW8Cic/2Pg1yXiUDhyDA8K63yQ= Subject key identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849017F039DA5EFE195EE23F980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Feb 2025 01:45:33 +0000 Certificate not after: Tue 01 Jun 2027 00:45:33 +0000 Subordinate resources: IP: 2620:117:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:01:7f:03:9d:a5:ef:e1:95:ee:23:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 26 01:45:33 2025 GMT Not After : Jun 1 00:45:33 2027 GMT Subject: CN=eb3726d7-0f8c-4949-99b6-eecda94a0675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d4:61:bc:fd:13:f8:0d:cd:fa:03:03:03:7f: e4:e6:60:8b:d3:b8:94:c5:81:71:c8:32:5e:4d:db: 85:30:32:2c:c7:c2:e6:e6:40:ed:13:23:f8:8b:9f: 7e:f8:ab:ab:48:43:29:79:09:38:c0:31:60:e8:6b: e2:0e:9e:7d:36:41:92:74:7e:d0:25:b9:6c:24:e0: 62:c3:31:72:7a:ec:1e:ce:2b:29:55:41:de:31:fa: 29:d8:95:8a:b5:3b:52:4d:9a:94:6e:13:67:f7:3c: ef:07:97:d9:67:63:b5:2a:dd:c8:eb:a8:c8:0a:52: 74:28:4f:82:ee:75:25:42:77:c5:1c:c6:2b:33:8e: 36:e8:8b:ec:e7:4a:db:f8:30:28:ba:a1:51:ff:10: 5e:7f:f4:ba:a7:9c:08:e6:30:77:85:5a:90:36:4d: 49:cf:bb:0c:8e:e8:1a:f3:bf:ef:43:cb:d2:b3:b6: b3:78:b2:dd:ce:ba:94:12:17:82:f0:9e:5e:1c:2b: 13:68:fb:89:8c:07:a3:d9:9b:cd:73:79:49:94:5a: 8f:72:46:4c:40:e6:6f:59:94:3b:1c:f0:69:59:5a: a2:ba:eb:7a:a4:2f:5e:8c:bc:81:6c:82:6f:40:5a: fa:a7:13:ef:b2:da:3b:17:d2:e4:c0:67:3f:c9:05: 06:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:F0:8D:44:A7:A6:26:F4:A9:17:81:5E:EA:26:57:FC:D8:00:89:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eb3726d7-0f8c-4949-99b6-eecda94a0675/eb3726d7-0f8c-4949-99b6-eecda94a0675.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:2000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:09:a8:24:1f:2a:c4:e7:c5:47:39:5f:3e:20:8b:ee:50:a4: ec:cb:48:9b:8e:bc:53:43:bc:aa:12:df:fa:6a:96:1d:f4:97: db:b3:c0:9f:10:c9:2f:18:63:2e:88:49:19:59:db:b6:45:62: 1c:47:8e:a2:10:79:79:7b:8f:a1:5f:41:29:b6:ba:11:78:e1: c0:71:3f:d5:d6:f8:e8:1d:a7:1c:9d:6a:42:74:8e:c8:44:aa: fb:f9:bc:8d:5b:7c:24:dc:93:42:18:3c:9c:9d:73:49:fe:e6: cc:7e:e9:8c:f4:f9:1f:6e:91:5b:20:e2:a0:e8:1f:08:79:f2: fb:d5:b6:9f:f6:27:65:1c:85:4d:02:4f:64:b4:d6:97:82:f6: 62:42:71:28:9d:cb:2d:31:e1:bb:f9:df:89:aa:cf:6b:9c:14: 19:9b:50:11:ce:6e:69:7b:a9:69:c5:12:0a:f1:70:2f:50:51: 23:b9:35:33:c7:db:a3:2e:4e:db:43:39:05:c7:e3:03:ac:72: 06:e9:eb:38:ce:08:73:ff:1c:d4:e5:56:3f:88:49:bc:72:be: ea:fe:be:d5:2c:0d:56:da:52:1f:8f:e3:15:c5:63:8c:58:f8: 23:59:55:bd:ee:1e:5a:cb:c7:8b:54:33:d0:4a:3e:88:c7:3c: 64:1b:b3:c6 -----BEGIN CERTIFICATE----- MIIG7zCCBdegAwIBAgIUAQ0Mn0MoWEkBfwOdpe/hle4j+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDIyNjAxNDUzM1oXDTI3MDYwMTAwNDUzM1owLzEtMCsGA1UEAxMk ZWIzNzI2ZDctMGY4Yy00OTQ5LTk5YjYtZWVjZGE5NGEwNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktRhvP0T+A3N+gMDA3/k5mCL07iUxYFxyDJe TduFMDIsx8Lm5kDtEyP4i59++KurSEMpeQk4wDFg6GviDp59NkGSdH7QJblsJOBi wzFyeuwezispVUHeMfop2JWKtTtSTZqUbhNn9zzvB5fZZ2O1Kt3I66jIClJ0KE+C 7nUlQnfFHMYrM4426Ivs50rb+DAouqFR/xBef/S6p5wI5jB3hVqQNk1Jz7sMjuga 87/vQ8vSs7azeLLdzrqUEheC8J5eHCsTaPuJjAej2ZvNc3lJlFqPckZMQOZvWZQ7 HPBpWVqiuut6pC9ejLyBbIJvQFr6pxPvsto7F9LkwGc/yQUGDwIDAQABo4IEATCC A/0wHQYDVR0OBBYEFJ7wjUSnpib0qReBXuomV/zYAInhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l YjM3MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNkYTk0YTA2NzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ViMzcyNmQ3LTBmOGMtNDk0OS05 OWI2LWVlY2RhOTRhMDY3NS9lYjM3MjZkNy0wZjhjLTQ5NDktOTliNi1lZWNkYTk0 YTA2NzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAEXIDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCNCagkHyrE58VHOV8+ IIvuUKTsy0ibjrxTQ7yqEt/6apYd9Jfbs8CfEMkvGGMuiEkZWdu2RWIcR46iEHl5 e4+hX0EptroReOHAcT/V1vjoHaccnWpCdI7IRKr7+byNW3wk3JNCGDycnXNJ/ubM fumM9PkfbpFbIOKg6B8IefL71baf9idlHIVNAk9ktNaXgvZiQnEoncstMeG7+d+J qs9rnBQZm1ARzm5pe6lpxRIK8XAvUFEjuTUzx9ujLk7bQzkFx+MDrHIG6es4zghz /xzU5VY/iEm8cr7q/r7VLA1W2lIfj+MVxWOMWPgjWVW97h5ay8eLVDPQSj6Ixzxk G7PG -----END CERTIFICATE-----Generated at Sun Nov 2 02:32:41 2025 by rpki-client