$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74.cer File: 47727e8f-5ea0-4ad7-a853-5cade93acd74.cer (raw, json) Hash identifier: mKHl19QVE80gRYKSs+QGt08ySiI28zb28Ubn1GwugSs= Subject key identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A6C4E316806D0DF790AE3DB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 06 Jul 2025 00:45:36 +0000 Certificate not after: Sat 09 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 64272 IP: 23.134.64.0/24 IP: 2602:fecb::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6c:4e:31:68:06:d0:df:79:0a:e3:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 6 00:45:36 2025 GMT Not After : Oct 9 00:45:36 2027 GMT Subject: CN=47727e8f-5ea0-4ad7-a853-5cade93acd74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4b:f8:2d:2e:fb:63:3d:ed:73:41:46:7f:ef: 34:cc:64:26:da:67:4b:2e:52:33:a3:72:d0:08:65: 60:ea:0a:5d:f7:5b:da:6b:f3:76:3d:7e:21:6c:ec: 6a:26:b5:54:11:c2:33:2e:79:40:85:41:67:81:c2: 69:3c:d5:83:95:f6:bd:9a:b3:c2:c2:ae:40:43:f5: 47:5f:63:60:8d:f0:77:6e:83:32:93:cf:09:d6:bd: 0f:b2:91:ae:69:36:55:d0:78:9a:8f:c1:6c:2a:d5: 92:04:ee:b7:9f:5a:1d:7b:e2:de:5f:16:58:73:0b: c3:8d:18:73:5b:5a:99:e5:78:d7:eb:98:2c:ac:74: 6f:1d:a7:39:66:d0:27:d4:3f:75:8c:84:91:d2:ec: 0c:78:ba:58:d5:7a:2e:6a:f7:d1:44:88:f4:c5:f4: 5d:5c:d1:21:bf:21:4c:a1:f9:97:53:70:de:e6:72: 87:b7:81:85:9a:aa:78:04:e4:46:ee:f5:3f:d1:9b: 3c:ab:f0:c0:1b:c4:b0:d4:9b:51:d5:32:61:25:e1: c3:a6:19:82:12:56:fe:95:34:07:a1:52:e2:0d:b2: 4c:b8:2a:38:3f:0c:d1:45:72:84:60:6d:97:de:d9: 9a:ff:36:90:ad:ad:5d:f5:69:4b:f6:9c:0c:37:24: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CC:1E:F4:90:EF:01:06:87:7F:DD:36:B9:49:CF:70:A3:A2:F7:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47727e8f-5ea0-4ad7-a853-5cade93acd74/47727e8f-5ea0-4ad7-a853-5cade93acd74.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.134.64.0/24 IPv6: 2602:fecb::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 64272 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:4a:51:d9:08:51:4c:c6:91:14:48:37:fe:33:dd:ce:af:19: a9:c2:84:6b:e4:0b:e2:30:93:ff:20:b7:89:a0:2b:06:1a:c6: f9:fc:cc:5f:3d:23:f7:df:d7:df:66:a2:fc:ab:2f:78:53:81: db:c9:ed:18:0d:8f:44:ad:1f:0d:36:2e:46:65:45:19:6f:ef: da:5e:36:84:9c:5c:00:a5:8c:e8:22:f4:38:b1:94:7a:ec:48: 34:97:81:79:fd:55:7e:bc:ad:55:4f:2f:e9:32:95:ec:43:8e: 04:0e:54:68:29:dc:cc:02:20:72:92:65:41:26:5b:bc:b1:c9: 04:b7:f9:e6:d8:7c:30:a9:1d:26:bb:4d:bd:59:6d:61:26:2d: da:44:67:6c:d8:57:99:5d:db:32:60:1c:50:d7:33:b7:9b:fd: 36:05:0d:b6:2b:23:09:a7:c0:2f:d0:bd:da:6a:b8:b2:9d:83: 63:ba:3f:51:b3:de:8a:2d:c7:b8:22:ad:c5:b1:2b:40:61:ea: 4a:b8:a9:40:66:07:f0:6c:ec:17:45:26:9d:41:92:bc:7a:95: e5:3d:68:70:2d:22:eb:93:2d:a9:42:53:a0:bb:90:90:59:ea: 17:c5:fa:07:57:6e:05:7b:59:5c:69:8b:b2:14:54:18:e6:97: f1:a4:41:72 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEpsTjFoBtDfeQrj24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcwNjAwNDUzNloXDTI3MTAwOTAwNDUzNlowLzEtMCsGA1UEAxMk NDc3MjdlOGYtNWVhMC00YWQ3LWE4NTMtNWNhZGU5M2FjZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ev4LS77Yz3tc0FGf+80zGQm2mdLLlIzo3LQ CGVg6gpd91vaa/N2PX4hbOxqJrVUEcIzLnlAhUFngcJpPNWDlfa9mrPCwq5AQ/VH X2NgjfB3boMyk88J1r0PspGuaTZV0Hiaj8FsKtWSBO63n1ode+LeXxZYcwvDjRhz W1qZ5XjX65gsrHRvHac5ZtAn1D91jISR0uwMeLpY1XouavfRRIj0xfRdXNEhvyFM ofmXU3De5nKHt4GFmqp4BORG7vU/0Zs8q/DAG8Sw1JtR1TJhJeHDphmCElb+lTQH oVLiDbJMuCo4PwzRRXKEYG2X3tma/zaQra1d9WlL9pwMNyTNRQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCPMHvSQ7wEGh3/dNrlJz3CjoveTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkzYWNkNzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ3NzI3ZThmLTVlYTAtNGFkNy1h ODUzLTVjYWRlOTNhY2Q3NC80NzcyN2U4Zi01ZWEwLTRhZDctYTg1My01Y2FkZTkz YWNkNzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhkAwDgQCAAIwCAMGBCYC/ssAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwD7EDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrSlHZCFFMxpEUSDf+M93Orxmp woRr5AviMJP/ILeJoCsGGsb5/MxfPSP339ffZqL8qy94U4Hbye0YDY9ErR8NNi5G ZUUZb+/aXjaEnFwApYzoIvQ4sZR67Eg0l4F5/VV+vK1VTy/pMpXsQ44EDlRoKdzM AiBykmVBJlu8sckEt/nm2HwwqR0mu029WW1hJi3aRGds2FeZXdsyYBxQ1zO3m/02 BQ22KyMJp8Av0L3aariynYNjuj9Rs96KLce4Iq3FsStAYepKuKlAZgfwbOwXRSad QZK8epXlPWhwLSLrky2pQlOgu5CQWeoXxfoHV24Fe1lcaYuyFFQY5pfxpEFy -----END CERTIFICATE-----Generated at Wed Aug 6 11:16:08 2025 by rpki-client