$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747.cer File: 12e662f6-4810-4bf7-8722-8635fb0c7747.cer (raw, json) Hash identifier: l9/RLgSlr8JraTQgt+UvNg49cbcFQqvQlks/Lby+qLw= Subject key identifier: 60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A612375511806CF827F90BE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 00:45:37 +0000 Certificate not after: Tue 05 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 33403 IP: 128.254.240.0/22 IP: 2602:fb97::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:61:23:75:51:18:06:cf:82:7f:90:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 2 00:45:37 2025 GMT Not After : Oct 5 00:45:37 2027 GMT Subject: CN=12e662f6-4810-4bf7-8722-8635fb0c7747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:7b:43:40:d3:24:fe:20:5f:cf:ab:94:81: 59:c9:83:85:95:68:80:71:35:a3:2b:5b:37:1f:84: 08:b4:b2:e9:ef:ad:64:a5:38:62:3a:0d:a6:08:62: 06:3a:98:34:75:b4:c6:0c:88:02:01:8f:e0:20:3d: 99:65:2e:46:71:76:a5:a8:05:47:c0:db:dc:62:67: 66:ce:b5:af:ef:ff:f4:32:5b:a1:fe:10:3b:37:2b: 17:87:ee:3c:65:19:82:f2:51:54:be:77:5c:26:c1: 70:8e:e5:f2:c0:56:91:dd:9a:24:7d:1e:83:53:cb: 0f:e1:4b:f4:27:ba:e0:a3:49:a8:6a:46:3e:62:ea: f2:f5:6f:c5:7d:82:cb:d5:db:58:68:35:0b:8b:f6: ff:f3:1f:3f:51:9f:ff:0d:11:84:20:46:e9:5f:82: 6a:53:30:da:32:f1:52:9c:78:fb:9a:e0:e4:3c:94: e1:fa:a6:49:13:3d:bf:df:8b:ac:36:f8:2c:78:11: ea:f6:a5:ad:5f:19:09:91:67:73:fd:c3:31:77:37: 88:a2:85:83:92:67:89:9d:db:7a:be:fb:86:b2:7e: c4:63:60:d0:56:6d:d0:f6:f8:f9:4a:cd:5f:40:6b: 6e:40:0f:c9:51:f1:6b:ea:01:f9:7a:e3:c8:86:10: bd:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DC:22:41:09:D3:E6:9D:BA:A4:51:A9:4E:F3:C6:25:9B:0E:12:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12e662f6-4810-4bf7-8722-8635fb0c7747/12e662f6-4810-4bf7-8722-8635fb0c7747.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 128.254.240.0/22 IPv6: 2602:fb97::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33403 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:bc:ae:cf:a6:6e:b1:9e:4f:0c:42:96:ae:dd:37:23:19:1c: 4b:ff:a7:85:31:10:40:b4:9f:46:0b:be:ce:30:ac:f4:42:35: ec:f6:39:28:0a:e6:72:ea:49:fa:39:d8:38:aa:0c:ce:82:d3: a1:98:db:37:5d:a6:2b:11:0b:71:cb:28:33:5c:cc:c0:74:9f: 76:84:5f:e3:9d:f8:02:c4:9a:69:27:58:4c:07:7f:c8:32:11: 48:d5:bb:2b:f4:3e:0f:31:ca:cb:22:0c:8f:cb:ac:d7:30:ba: 1f:0e:7a:79:dd:fe:2b:37:33:6e:d5:80:a1:f8:5e:fc:f7:31: 53:3b:7d:31:9b:51:70:db:ed:a7:a9:45:9d:4d:db:51:36:a7: d4:1f:da:6c:c2:89:ad:25:c9:73:29:5a:22:9c:e1:c6:f6:40: 11:5b:ab:13:4e:29:6c:65:45:7d:bf:9f:ff:84:b6:d0:86:27: bc:62:24:dc:92:7c:c8:c5:28:28:fd:08:17:d3:43:3b:2a:89: ae:20:81:d9:6d:99:59:5b:a1:da:95:d7:e1:63:3e:2e:3c:da: 2b:7e:6d:d5:3c:c2:74:19:62:56:64:f8:be:82:b5:3c:85:44: 9e:8a:9c:52:bf:b4:f5:93:54:06:b2:34:42:c6:02:2c:39:be: 5a:06:c1:3f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEphI3VRGAbPgn+QvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcwMjAwNDUzN1oXDTI3MTAwNTAwNDUzN1owLzEtMCsGA1UEAxMk MTJlNjYyZjYtNDgxMC00YmY3LTg3MjItODYzNWZiMGM3NzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYh7Q0DTJP4gX8+rlIFZyYOFlWiAcTWjK1s3 H4QItLLp761kpThiOg2mCGIGOpg0dbTGDIgCAY/gID2ZZS5GcXalqAVHwNvcYmdm zrWv7//0Mluh/hA7NysXh+48ZRmC8lFUvndcJsFwjuXywFaR3ZokfR6DU8sP4Uv0 J7rgo0moakY+Yury9W/FfYLL1dtYaDULi/b/8x8/UZ//DRGEIEbpX4JqUzDaMvFS nHj7muDkPJTh+qZJEz2/34usNvgseBHq9qWtXxkJkWdz/cMxdzeIooWDkmeJndt6 vvuGsn7EY2DQVm3Q9vj5Ss1fQGtuQA/JUfFr6gH5euPIhhC9+QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFGDcIkEJ0+aduqRRqU7zxiWbDhKoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x MmU2NjJmNi00ODEwLTRiZjctODcyMi04NjM1ZmIwYzc3NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzEyZTY2MmY2LTQ4MTAtNGJmNy04 NzIyLTg2MzVmYjBjNzc0Ny8xMmU2NjJmNi00ODEwLTRiZjctODcyMi04NjM1ZmIw Yzc3NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAKA/vAwDgQCAAIwCAMGBCYC+5cAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwCCezBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIvK7Ppm6xnk8MQpau3TcjGRxL /6eFMRBAtJ9GC77OMKz0QjXs9jkoCuZy6kn6Odg4qgzOgtOhmNs3XaYrEQtxyygz XMzAdJ92hF/jnfgCxJppJ1hMB3/IMhFI1bsr9D4PMcrLIgyPy6zXMLofDnp53f4r NzNu1YCh+F789zFTO30xm1Fw2+2nqUWdTdtRNqfUH9pswomtJclzKVoinOHG9kAR W6sTTilsZUV9v5//hLbQhie8YiTcknzIxSgo/QgX00M7KomuIIHZbZlZW6Haldfh Yz4uPNorfm3VPMJ0GWJWZPi+grU8hUSeipxSv7T1k1QGsjRCxgIsOb5aBsE/ -----END CERTIFICATE-----Generated at Fri Aug 8 19:26:23 2025 by rpki-client