$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer File: 5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer (raw, json) Hash identifier: 8ZspS0egjWfb8n+ICpOuk/GmqvGKDr+xUdiYQ7nWW/0= Subject key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849D2C28CE559CB474E1DE80E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 May 2025 00:45:34 +0000 Certificate not after: Sun 15 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 394087 IP: 45.74.0.0/18 IP: 104.37.0.0/21 IP: 104.243.240.0/20 IP: 104.250.160.0/19 IP: 162.246.184.0/22 IP: 172.94.0.0/17 IP: 172.111.128.0/17 IP: 192.253.240.0/20 IP: 206.123.128.0/19 IP: 2602:ff84::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:c2:8c:e5:59:cb:47:4e:1d:e8:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 12 00:45:34 2025 GMT Not After : Aug 15 00:45:34 2027 GMT Subject: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6f:8a:73:35:af:18:1d:c7:08:4b:13:db:27: 47:27:72:73:71:7d:f3:64:6a:f4:b7:a6:7c:42:59: a4:e7:22:ce:d7:1a:22:24:49:1a:6b:9c:f3:cf:48: 01:a4:8b:2d:0c:df:58:df:9a:3a:dc:14:b3:70:2f: 8b:3e:ad:84:29:07:b4:8c:54:49:ab:e1:7d:b8:2e: be:8e:40:ea:f0:4d:ee:20:1f:9a:0f:cc:57:44:18: 1c:fa:0c:04:03:d5:f4:26:a2:e4:6f:ff:fe:58:60: 23:fa:17:e2:89:3b:50:24:58:ba:42:0f:b4:c6:f0: 1c:c1:10:2a:a6:dc:9e:a9:cc:b7:41:03:bf:99:c9: f1:81:f5:81:f8:f5:cb:ac:fa:c5:11:e9:51:72:ab: 9c:d6:b1:f1:c6:3f:98:36:34:28:e4:bb:1e:7a:fb: 38:b9:d8:e9:1a:99:21:68:25:e0:91:c4:08:14:a6: 5c:84:c5:50:f2:c9:62:1c:23:67:1b:29:74:5e:3e: 72:e4:48:0a:2a:9a:6d:8d:c3:05:a4:a8:d7:86:f1: c4:c1:f2:d2:52:d0:4d:ad:7d:3d:e4:4f:d2:55:27: 70:6d:6c:3c:38:63:ef:8e:3d:f3:ea:20:52:fb:4b: 75:73:5e:c2:b5:40:5f:04:85:f2:6d:a9:7c:e7:66: f1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.74.0.0/18 104.37.0.0/21 104.243.240.0/20 104.250.160.0/19 162.246.184.0/22 172.94.0.0/17 172.111.128.0/17 192.253.240.0/20 206.123.128.0/19 IPv6: 2602:ff84::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394087 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ce:9e:26:21:7c:37:0b:a4:54:fc:80:1b:c1:b1:c6:45:81: bd:87:2a:24:ea:d1:0e:e3:b6:c7:27:e7:f4:d0:23:ec:5b:71: 1f:84:2b:09:a6:c2:b6:b2:a1:73:59:63:56:23:10:34:f9:b4: 44:a3:da:8f:c0:6e:c9:a4:83:34:14:da:cc:ed:fc:b6:10:37: e7:89:62:92:2b:4c:cb:b1:02:68:a7:80:03:f1:1f:ac:20:b8: b6:b3:07:e0:a8:9f:eb:2b:84:2b:5f:b5:01:e9:25:86:4b:02: 39:9a:95:21:d6:04:40:ce:5e:4f:7b:8d:98:5a:3a:47:d1:89: 18:f2:8a:02:ac:bd:df:2e:33:49:42:0f:d0:7c:49:c5:90:17: 35:2c:7f:fa:e7:e8:c3:94:71:b0:b4:9a:a6:86:7a:2d:ed:34: 66:f8:15:73:74:bc:2d:04:1c:34:fe:81:4d:27:8d:03:12:6d: 4a:d8:d0:b3:d3:4b:f7:c2:de:e7:05:93:5f:cd:29:24:17:a5: 79:90:25:d6:bf:91:a9:42:5d:d3:36:32:0f:4f:a0:11:09:28: c5:d6:b5:84:3d:b2:dc:a4:c5:c2:53:18:79:e5:a5:cf:af:a6: 20:45:cb:fc:67:2f:b5:e7:94:e9:60:ca:6c:73:eb:d2:f1:b6: 69:b6:52:2a -----BEGIN CERTIFICATE----- MIIHSTCCBjGgAwIBAgIUAQ0Mn0MoWEnSwozlWctHTh3oDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUxMjAwNDUzNFoXDTI3MDgxNTAwNDUzNFowLzEtMCsGA1UEAxMk NWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNiMWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2+KczWvGB3HCEsT2ydHJ3JzcX3zZGr0t6Z8 Qlmk5yLO1xoiJEkaa5zzz0gBpIstDN9Y35o63BSzcC+LPq2EKQe0jFRJq+F9uC6+ jkDq8E3uIB+aD8xXRBgc+gwEA9X0JqLkb//+WGAj+hfiiTtQJFi6Qg+0xvAcwRAq ptyeqcy3QQO/mcnxgfWB+PXLrPrFEelRcquc1rHxxj+YNjQo5Lseevs4udjpGpkh aCXgkcQIFKZchMVQ8sliHCNnGyl0Xj5y5EgKKpptjcMFpKjXhvHEwfLSUtBNrX09 5E/SVSdwbWw8OGPvjj3z6iBS+0t1c17CtUBfBIXybal852bxUwIDAQABo4IEWzCC BFcwHQYDVR0OBBYEFHk/CVoxoyWkQJFuUU3Nrdl1C6i0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVjNWFhNGI0LWUzMGQtNDY4Zi1i YjY4LWJmN2ZlMTMzYjFiOC81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEz M2IxYjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwXwYIKwYBBQUH AQcBAf8EUDBOMDwEAgABMDYDBAYtSgADBANoJQADBARo8/ADBAVo+qADBAKi9rgD BAesXgADBAesb4ADBATA/fADBAXOe4AwDgQCAAIwCAMGBCYC/4QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYDZzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBczp4mIXw3C6RU/IAbwbHGRYG9 hyok6tEO47bHJ+f00CPsW3EfhCsJpsK2sqFzWWNWIxA0+bREo9qPwG7JpIM0FNrM 7fy2EDfniWKSK0zLsQJop4AD8R+sILi2swfgqJ/rK4QrX7UB6SWGSwI5mpUh1gRA zl5Pe42YWjpH0YkY8ooCrL3fLjNJQg/QfEnFkBc1LH/65+jDlHGwtJqmhnot7TRm +BVzdLwtBBw0/oFNJ40DEm1K2NCz00v3wt7nBZNfzSkkF6V5kCXWv5GpQl3TNjIP T6ARCSjF1rWEPbLcpMXCUxh55aXPr6YgRcv8Zy+155TpYMpsc+vS8bZptlIq -----END CERTIFICATE-----Generated at Tue Nov 4 16:38:33 2025 by rpki-client