$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df.cer File: 2cdca715-b3ad-4985-b6fd-0bd7308257df.cer (raw, json) Hash identifier: 7lYTvKmhWnSsgYhCKVooXGerEXqo+9uqR9HU+yD8Q+4= Subject key identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849BF37C45E024955AED37DF180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 May 2025 00:45:34 +0000 Certificate not after: Sun 08 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 19528 IP: 74.209.184.0 -- 74.209.188.255 IP: 2605:14c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:37:c4:5e:02:49:55:ae:d3:7d:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 5 00:45:34 2025 GMT Not After : Aug 8 00:45:34 2027 GMT Subject: CN=2cdca715-b3ad-4985-b6fd-0bd7308257df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:dc:78:54:a7:1c:8e:e4:06:87:71:3c:ca:70: db:91:bd:86:04:20:f3:f2:35:38:da:bc:b7:28:fd: 44:6d:d6:55:ee:24:e7:c9:f6:a0:1e:42:45:d3:31: cc:c5:a4:96:3c:e7:e1:6e:95:15:8d:fa:41:e8:22: 21:e6:73:ac:4e:27:10:be:70:f2:5f:ed:e6:60:7e: dd:53:0f:90:1d:07:85:fa:e1:22:be:93:97:7b:44: aa:be:f8:61:73:55:2f:ad:14:ee:0d:c5:f3:7b:0b: 8d:c1:6e:c0:90:9f:44:f7:5d:3f:55:9d:61:aa:3e: 48:73:79:33:3d:3b:e1:bf:6e:76:bd:d4:b9:df:8e: 3b:04:d4:bc:39:89:06:a9:e9:79:b8:f1:0a:42:df: 01:50:f5:bf:58:aa:70:dd:e7:a0:32:58:0e:7a:5f: 3f:a9:1d:a4:05:37:5d:29:2b:48:e1:0a:77:2e:c5: 1e:41:ab:11:c6:6e:26:ba:9a:6c:b4:25:c8:d1:dd: 77:85:97:a4:8e:f8:48:a7:f3:db:2d:e5:28:ab:e7: 8b:44:ef:db:ce:84:4c:38:00:73:3d:08:8f:62:be: 6a:0c:a7:89:10:48:9d:89:7b:2c:b2:80:e8:24:45: 15:83:12:fd:99:bd:e4:3a:4b:0a:6f:26:c1:fe:48: 4d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4C:25:AF:8A:8B:17:51:21:2B:12:3E:FC:3E:07:12:A7:BA:F9:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2cdca715-b3ad-4985-b6fd-0bd7308257df/2cdca715-b3ad-4985-b6fd-0bd7308257df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.209.184.0-74.209.188.255 IPv6: 2605:14c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19528 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:2d:fb:85:3e:42:3b:27:ab:c1:7e:e2:f3:5e:55:45:a5:8a: f4:d6:67:5e:c0:29:a9:80:c5:7f:17:99:d4:28:60:5c:e3:62: 83:ba:8d:52:31:f4:93:54:81:a1:1e:b0:91:6f:24:ed:c2:84: 73:09:4e:7b:70:aa:6c:3d:6c:99:71:33:aa:3a:d0:5f:6c:86: 1f:99:21:a4:a3:1b:32:d1:d7:2d:3c:ee:76:7e:5f:d3:b8:32: 7d:68:d7:3a:cd:01:03:67:2a:0d:88:57:0e:04:94:29:d6:fa: b8:f2:6f:96:44:64:f7:51:52:2f:0b:83:23:aa:09:95:60:5e: de:da:e4:f1:d2:cc:ad:67:c4:ba:d8:59:36:ea:57:55:5e:1c: 6d:76:7d:96:f8:0d:92:01:ae:0e:f0:77:6f:e0:77:85:91:32: 03:5c:08:f7:ca:5d:e5:6f:78:a8:62:99:24:88:af:aa:4a:06: 8d:ab:4d:d7:61:e5:14:a2:6d:37:08:c1:d3:df:d4:39:2e:66: 88:be:01:b3:b0:85:3b:45:77:dc:48:eb:d4:db:0e:2f:05:74: 61:e0:56:b5:d1:a9:52:a6:c4:9b:31:04:ac:8d:f9:0e:65:08: 38:ff:58:0b:6d:70:5b:91:6c:cf:3a:9a:e5:f5:b9:f2:9a:9b: f1:78:a8:1c -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEm/N8ReAklVrtN98YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUwNTAwNDUzNFoXDTI3MDgwODAwNDUzNFowLzEtMCsGA1UEAxMk MmNkY2E3MTUtYjNhZC00OTg1LWI2ZmQtMGJkNzMwODI1N2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNx4VKccjuQGh3E8ynDbkb2GBCDz8jU42ry3 KP1EbdZV7iTnyfagHkJF0zHMxaSWPOfhbpUVjfpB6CIh5nOsTicQvnDyX+3mYH7d Uw+QHQeF+uEivpOXe0Sqvvhhc1UvrRTuDcXzewuNwW7AkJ9E910/VZ1hqj5Ic3kz PTvhv252vdS53447BNS8OYkGqel5uPEKQt8BUPW/WKpw3eegMlgOel8/qR2kBTdd KStI4Qp3LsUeQasRxm4muppstCXI0d13hZekjvhIp/PbLeUoq+eLRO/bzoRMOABz PQiPYr5qDKeJEEidiXsssoDoJEUVgxL9mb3kOksKbybB/khNMwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFNRMJa+KixdRISsSPvw+BxKnuvl7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y Y2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4MjU3ZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJjZGNhNzE1LWIzYWQtNDk4NS1i NmZkLTBiZDczMDgyNTdkZi8yY2RjYTcxNS1iM2FkLTQ5ODUtYjZmZC0wYmQ3MzA4 MjU3ZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBQEAgABMA4wDAMEA0rRuAMEAErRvDANBAIAAjAHAwUAJgUUwDAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgJMSDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCULfuFPkI7J6vBfuLz XlVFpYr01mdewCmpgMV/F5nUKGBc42KDuo1SMfSTVIGhHrCRbyTtwoRzCU57cKps PWyZcTOqOtBfbIYfmSGkoxsy0dctPO52fl/TuDJ9aNc6zQEDZyoNiFcOBJQp1vq4 8m+WRGT3UVIvC4MjqgmVYF7e2uTx0sytZ8S62Fk26ldVXhxtdn2W+A2SAa4O8Hdv 4HeFkTIDXAj3yl3lb3ioYpkkiK+qSgaNq03XYeUUom03CMHT39Q5LmaIvgGzsIU7 RXfcSOvU2w4vBXRh4Fa10alSpsSbMQSsjfkOZQg4/1gLbXBbkWzPOprl9bnympvx eKgc -----END CERTIFICATE-----Generated at Wed Nov 5 03:50:35 2025 by rpki-client