$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097.cer File: 1794548d-96a3-4f5c-9451-2571ed4ac097.cer (raw, json) Hash identifier: j9gv22zbQngk8CWuE8ftJbJbQWdYhxM28fJzGs7mqq4= Subject key identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BBB6DF1955113CCEED3AB5580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 03 Nov 2025 01:45:22 +0000 Certificate not after: Sun 06 Feb 2028 01:45:22 +0000 Subordinate resources: AS: 33268 IP: 198.17.20.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:6d:f1:95:51:13:cc:ee:d3:ab:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 3 01:45:22 2025 GMT Not After : Feb 6 01:45:22 2028 GMT Subject: CN=1794548d-96a3-4f5c-9451-2571ed4ac097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7c:de:77:60:fa:0e:9f:39:0a:3c:a4:b3:00: 96:79:4a:b8:4f:4c:4e:27:28:5e:40:bc:3d:13:02: 9f:f9:84:52:50:44:d4:1d:6f:37:84:ee:97:95:d5: 52:f0:c6:a7:df:db:53:ed:f0:34:d7:1b:5d:39:5d: 87:3f:cc:f0:ec:cb:af:f0:a7:c7:0d:73:5f:43:18: 62:9d:3e:2f:f8:46:76:fd:9d:b5:49:d7:b4:4c:0f: 21:ab:ac:0e:67:17:7f:42:9b:30:3c:48:61:ee:bb: d7:48:65:31:00:6a:51:a6:d2:b3:8e:a1:ce:6f:db: 86:5f:f3:ce:eb:ee:cb:08:27:61:b3:e8:df:28:ff: 1a:a0:31:0f:54:9d:b8:93:3e:10:76:59:f8:1a:ea: 8b:e3:2a:80:bd:fb:1e:f5:bf:97:6c:35:29:83:01: 58:76:64:97:c1:ab:20:f0:45:16:fb:16:17:e1:b9: 0a:63:df:e2:a0:cd:e5:f0:e1:ab:39:56:04:a5:f8: 6c:81:bc:3b:a4:a3:10:35:1e:3b:30:b6:bd:e1:05: 76:5d:cc:29:89:cc:7c:22:14:b6:8c:0e:b1:f1:f2: c1:9b:f6:74:2d:56:88:4c:e7:85:1c:d0:ee:b7:ba: f0:fb:2b:11:61:1a:76:66:8c:b5:53:f4:dc:5b:e9: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:09:1D:47:2F:26:26:E8:2E:45:18:34:76:BE:1E:78:CB:4A:D0:45 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1794548d-96a3-4f5c-9451-2571ed4ac097/1794548d-96a3-4f5c-9451-2571ed4ac097.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 198.17.20.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33268 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:33:d8:21:be:4e:65:c9:20:ea:a3:76:a9:fc:ab:61:cd:08: 65:c5:b7:5f:2d:2c:15:ce:87:dc:8d:40:bf:48:12:ce:46:75: 16:a0:d0:54:b7:81:29:39:51:6b:f0:52:75:ec:09:c7:33:b7: 16:ea:db:b8:a8:7d:06:79:7f:ea:55:58:53:83:3c:69:31:c6: 50:63:c3:22:39:5d:f0:5d:e5:35:0a:c9:1c:cc:bc:a6:40:7d: 23:eb:18:dc:f3:a4:96:4b:6d:4a:d2:9d:d8:d8:77:1a:80:8a: 59:83:7e:ff:78:7e:24:85:44:69:93:74:2d:14:fc:18:6b:3a: 5a:40:b8:34:99:4e:79:40:ab:89:77:41:a7:57:52:cd:65:77: f3:1f:61:66:ff:d3:5c:30:d4:4a:d8:8c:c2:9c:9a:12:79:11: ea:cc:ed:39:e6:89:82:8e:43:5b:29:9a:7b:9c:a3:cf:5b:ae: 71:9f:f7:a1:ad:b4:15:eb:e6:d2:f5:06:29:96:a4:ef:96:68: bc:29:28:50:4d:26:ad:d9:8f:90:e1:b3:7a:2a:00:ef:3c:4b: 59:56:99:d9:c2:37:39:25:fd:49:56:06:a6:4b:74:50:27:29: a4:85:37:30:ed:17:4f:1a:2a:fe:ba:c3:96:1b:ee:b0:10:ab: 3d:ba:36:ba -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEu7bfGVURPM7tOrVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTEwMzAxNDUyMloXDTI4MDIwNjAxNDUyMlowLzEtMCsGA1UEAxMk MTc5NDU0OGQtOTZhMy00ZjVjLTk0NTEtMjU3MWVkNGFjMDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXzed2D6Dp85CjykswCWeUq4T0xOJyheQLw9 EwKf+YRSUETUHW83hO6XldVS8Man39tT7fA01xtdOV2HP8zw7Muv8KfHDXNfQxhi nT4v+EZ2/Z21Sde0TA8hq6wOZxd/QpswPEhh7rvXSGUxAGpRptKzjqHOb9uGX/PO 6+7LCCdhs+jfKP8aoDEPVJ24kz4Qdln4GuqL4yqAvfse9b+XbDUpgwFYdmSXwasg 8EUW+xYX4bkKY9/ioM3l8OGrOVYEpfhsgbw7pKMQNR47MLa94QV2Xcwpicx8IhS2 jA6x8fLBm/Z0LVaITOeFHNDut7rw+ysRYRp2Zoy1U/TcW+kUvQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFLQJHUcvJiboLkUYNHa+HnjLStBFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x Nzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0YWMwOTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzE3OTQ1NDhkLTk2YTMtNGY1Yy05 NDUxLTI1NzFlZDRhYzA5Ny8xNzk0NTQ4ZC05NmEzLTRmNWMtOTQ1MS0yNTcxZWQ0 YWMwOTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALGERQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AIH0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABIz2CG+TmXJIOqjdqn8q2HNCGXFt18tLBXOh9yNQL9IEs5G dRag0FS3gSk5UWvwUnXsCccztxbq27iofQZ5f+pVWFODPGkxxlBjwyI5XfBd5TUK yRzMvKZAfSPrGNzzpJZLbUrSndjYdxqAilmDfv94fiSFRGmTdC0U/BhrOlpAuDSZ TnlAq4l3QadXUs1ld/MfYWb/01ww1ErYjMKcmhJ5EerM7TnmiYKOQ1spmnuco89b rnGf96GttBXr5tL1BimWpO+WaLwpKFBNJq3Zj5Dhs3oqAO88S1lWmdnCNzkl/UlW BqZLdFAnKaSFNzDtF08aKv66w5Yb7rAQqz26Nro= -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:54 2025 by rpki-client