$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b.cer File: 417c06d0-3203-44fd-b164-0aed50f5638b.cer (raw, json) Hash identifier: JskVWtdKlk0VuLCueQg9PFLKsSyK812chfkR7fL6dCA= Subject key identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AA9B93FB9A3E2D8EA9F7FDB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Jul 2025 00:45:37 +0000 Certificate not after: Sun 31 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 11728 IP: 69.7.79.0/24 IP: 2605:fc40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a9:b9:3f:b9:a3:e2:d8:ea:9f:7f:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 28 00:45:37 2025 GMT Not After : Oct 31 00:45:37 2027 GMT Subject: CN=417c06d0-3203-44fd-b164-0aed50f5638b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:e8:b0:b6:ef:90:86:54:fa:f3:01:20:a4:fa: 2e:ef:2b:39:92:20:85:f8:98:bf:99:32:5c:95:47: 1e:d9:38:2d:96:84:d3:18:eb:f3:ca:b0:25:f3:e7: f0:5c:35:47:ec:4c:6f:bf:0a:6a:b1:04:bd:fe:78: 18:f3:83:17:db:cd:79:c8:f2:d0:f6:a4:de:06:ee: f4:d9:2c:b7:a0:66:27:6e:3b:f7:f4:1e:dc:26:4c: d6:c8:99:ee:05:7e:cb:30:a3:71:e3:bd:11:a1:05: 5d:e8:2f:6f:a2:6b:b0:db:06:11:cc:75:56:bd:fb: a1:58:b5:25:49:31:18:0a:1f:91:51:e1:4a:2f:47: 10:5c:e3:9b:4c:6c:15:51:02:76:39:cd:f0:43:e6: 0a:c4:2e:64:36:ef:4c:1f:56:5e:07:bc:0e:53:f4: 71:59:f1:d4:b0:59:d1:0e:f6:22:64:18:1e:cd:44: 61:2f:71:96:7a:cf:d4:7e:96:31:1f:dd:42:07:79: 77:db:ab:65:fd:a9:ba:a6:3f:d3:b9:fd:5e:a5:fd: 02:97:da:99:78:90:f7:f5:55:70:4b:4d:8d:73:bf: fb:2d:b8:ba:8e:f9:7c:09:d6:69:81:9f:4a:58:bb: 5c:b9:94:10:88:3d:28:05:9b:cd:48:b8:bc:a2:ff: 23:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CE:A0:C5:4C:5A:68:B3:D1:09:2A:66:78:F3:83:C9:42:07:C5:FD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/417c06d0-3203-44fd-b164-0aed50f5638b/417c06d0-3203-44fd-b164-0aed50f5638b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 69.7.79.0/24 IPv6: 2605:fc40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11728 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:15:e1:3d:70:e4:b5:42:7e:9b:b9:6e:2b:e0:a4:48:81:38: b7:6b:4d:6d:35:09:8c:d1:b2:f7:76:b8:5b:47:c3:f3:74:11: 69:a6:eb:c6:30:ea:e7:0e:fc:09:26:b1:34:2e:08:0c:d3:55: 11:c0:96:2f:97:83:a6:49:9d:97:20:a4:c2:b5:d8:56:3e:bf: 33:7e:7b:fa:77:e0:4f:c1:cc:18:46:c4:0f:72:6f:b1:87:41: e8:71:02:38:d7:40:62:18:03:27:97:25:68:a4:ff:9a:81:3f: ee:da:1b:15:d4:57:21:ed:12:73:a9:a4:2b:29:35:00:4e:a1: dc:47:a0:04:7f:ce:96:f4:e7:f4:f5:27:04:93:e3:45:20:f7: de:15:12:1e:f6:f0:cc:7f:7a:b7:34:ec:5e:7e:78:e9:e9:3a: 8a:9a:b3:da:2c:6d:91:d9:9d:30:f4:17:e6:e6:45:11:aa:14: 9c:aa:21:13:c0:52:c5:43:b5:d9:47:f1:e4:0e:81:ee:a4:22: 37:9a:e3:b7:2e:8b:b6:52:6e:80:90:78:ce:c5:f6:3a:43:63: be:80:bc:28:7e:89:87:d9:34:10:2c:65:6d:70:75:2d:66:c7: 76:fb:ad:68:76:fc:8d:87:af:99:a4:61:9a:19:fc:5b:3e:f9: bd:6d:65:9b -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEqpuT+5o+LY6p9/2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcyODAwNDUzN1oXDTI3MTAzMTAwNDUzN1owLzEtMCsGA1UEAxMk NDE3YzA2ZDAtMzIwMy00NGZkLWIxNjQtMGFlZDUwZjU2MzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Oiwtu+QhlT68wEgpPou7ys5kiCF+Ji/mTJc lUce2TgtloTTGOvzyrAl8+fwXDVH7ExvvwpqsQS9/ngY84MX2815yPLQ9qTeBu70 2Sy3oGYnbjv39B7cJkzWyJnuBX7LMKNx470RoQVd6C9vomuw2wYRzHVWvfuhWLUl STEYCh+RUeFKL0cQXOObTGwVUQJ2Oc3wQ+YKxC5kNu9MH1ZeB7wOU/RxWfHUsFnR DvYiZBgezURhL3GWes/UfpYxH91CB3l326tl/am6pj/Tuf1epf0Cl9qZeJD39VVw S02Nc7/7Lbi6jvl8CdZpgZ9KWLtcuZQQiD0oBZvNSLi8ov8jfQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFADOoMVMWmiz0QkqZnjzg8lCB8X9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBmNTYzOGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQxN2MwNmQwLTMyMDMtNDRmZC1i MTY0LTBhZWQ1MGY1NjM4Yi80MTdjMDZkMC0zMjAzLTQ0ZmQtYjE2NC0wYWVkNTBm NTYzOGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBABFB08wDQQCAAIwBwMFACYF/EAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICLdAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJBXhPXDktUJ+m7luK+CkSIE4t2tN bTUJjNGy93a4W0fD83QRaabrxjDq5w78CSaxNC4IDNNVEcCWL5eDpkmdlyCkwrXY Vj6/M357+nfgT8HMGEbED3JvsYdB6HECONdAYhgDJ5claKT/moE/7tobFdRXIe0S c6mkKyk1AE6h3EegBH/OlvTn9PUnBJPjRSD33hUSHvbwzH96tzTsXn546ek6ipqz 2ixtkdmdMPQX5uZFEaoUnKohE8BSxUO12Ufx5A6B7qQiN5rjty6LtlJugJB4zsX2 OkNjvoC8KH6Jh9k0ECxlbXB1LWbHdvutaHb8jYevmaRhmhn8Wz75vW1lmw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:00:55 2025 by rpki-client