$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc.cer File: 5ef4d5f1-c1e2-4799-9868-866a263537cc.cer (raw, json) Hash identifier: 6y49CiMGyiozICpFOnQiWfW//oiwuk5bhpTc3lzzyh8= Subject key identifier: F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A709EE6C48C517A3E32D8D880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 07 Jul 2025 13:51:28 +0000 Certificate not after: Tue 04 May 2027 00:45:33 +0000 Subordinate resources: AS: 401808 IP: 2602:fcde::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:9e:e6:c4:8c:51:7a:3e:32:d8:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 7 13:51:28 2025 GMT Not After : May 4 00:45:33 2027 GMT Subject: CN=5ef4d5f1-c1e2-4799-9868-866a263537cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a1:f4:e6:f8:e0:bf:97:45:e7:eb:2c:52:03: e2:6a:92:b2:d1:c6:97:20:f0:23:22:1a:b9:09:d0: a2:2d:34:17:4a:33:33:e0:85:0b:cc:82:3b:39:a6: 5b:6d:0e:d5:f7:37:ec:e9:df:67:1c:09:12:ad:96: 36:8d:66:14:d7:bb:6b:f7:70:69:27:9e:03:2a:a7: 02:5c:80:4f:7b:a9:d4:f7:4f:ed:ec:56:46:b2:d8: 2f:e5:2f:28:f4:8c:d9:f2:e6:a2:d6:e6:39:20:22: 36:ed:86:d3:e6:fe:68:2c:34:55:c7:c1:ed:5a:43: 4f:dd:c3:fe:56:5b:71:84:ca:ad:a5:7e:f0:d6:da: ec:4b:39:22:0a:29:2c:77:24:a9:1d:66:c4:38:56: fa:9e:62:e7:73:2c:76:cf:c6:06:8a:15:1b:43:f0: dd:a4:ab:df:2b:56:cd:2c:4a:b5:0f:c6:ad:b9:cb: fb:8d:cf:ef:2d:3b:51:ad:78:76:6a:5c:d5:dc:9a: e7:a3:0e:22:05:76:e8:7b:53:08:7e:d9:df:9c:ba: f8:98:12:e4:b3:a0:83:3a:fa:1e:0a:79:e2:fb:04: 94:9c:eb:db:5e:f4:18:c2:c1:ca:11:32:b4:fc:cd: ad:b2:70:66:49:71:b9:e2:b5:04:76:13:9e:c3:52: 2c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C0:D1:DE:57:83:26:71:CD:9B:A6:65:85:13:E5:4A:D9:D6:92:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5ef4d5f1-c1e2-4799-9868-866a263537cc/5ef4d5f1-c1e2-4799-9868-866a263537cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2602:fcde::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401808 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:1f:99:9a:11:cb:bc:5b:f4:9d:90:d0:cf:98:33:0e:88:d8: 61:ad:bd:71:19:6a:ef:59:54:73:b9:ba:64:75:da:b9:a6:52: 31:16:77:47:60:d3:fe:05:90:48:7f:c6:2d:4d:fc:3d:31:0f: 86:bb:de:1b:a4:fb:3d:81:52:4f:ab:da:b3:5f:10:1a:26:6f: ae:7b:e4:d0:98:e7:19:44:47:9c:37:02:13:0c:ef:80:fb:a0: ff:8d:95:e8:35:3a:b5:bf:4d:51:1e:28:93:cc:23:ef:3e:ac: 3e:84:6d:0b:7f:9f:da:29:26:4d:68:f0:4f:4a:7b:a9:ba:ae: 72:73:ed:7f:f3:e8:e8:7c:f6:6b:ad:46:e7:41:d2:b9:a8:ad: 50:82:92:9d:d7:10:6c:e0:80:11:4c:f6:ca:71:08:fd:43:42: 70:9e:b0:88:6c:00:52:f7:ea:56:a9:c2:59:20:1f:a1:92:06: 7f:de:03:08:75:b9:24:bf:48:74:c8:46:66:55:7b:91:d9:a4: 44:9e:3c:17:6b:53:66:bc:f6:ba:74:88:42:50:ef:f0:2b:34: 6f:d1:0d:33:dd:0b:6a:2f:b9:93:5b:8a:cf:25:30:6e:2a:4d: de:ee:38:c9:e0:ba:ea:3c:63:8b:fb:36:39:a3:d7:31:2a:b9: 1c:d0:ee:63 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEpwnubEjFF6PjLY2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcwNzEzNTEyOFoXDTI3MDUwNDAwNDUzM1owLzEtMCsGA1UEAxMk NWVmNGQ1ZjEtYzFlMi00Nzk5LTk4NjgtODY2YTI2MzUzN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaH05vjgv5dF5+ssUgPiapKy0caXIPAjIhq5 CdCiLTQXSjMz4IULzII7OaZbbQ7V9zfs6d9nHAkSrZY2jWYU17tr93BpJ54DKqcC XIBPe6nU90/t7FZGstgv5S8o9IzZ8uai1uY5ICI27YbT5v5oLDRVx8HtWkNP3cP+ VltxhMqtpX7w1trsSzkiCiksdySpHWbEOFb6nmLncyx2z8YGihUbQ/DdpKvfK1bN LEq1D8atucv7jc/vLTtRrXh2alzV3Jrnow4iBXboe1MIftnfnLr4mBLks6CDOvoe Cnni+wSUnOvbXvQYwsHKETK0/M2tsnBmSXG54rUEdhOew1IsFQIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFPfA0d5XgyZxzZumZYUT5UrZ1pKVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 ZWY0ZDVmMS1jMWUyLTQ3OTktOTg2OC04NjZhMjYzNTM3Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVlZjRkNWYxLWMxZTItNDc5OS05 ODY4LTg2NmEyNjM1MzdjYy81ZWY0ZDVmMS1jMWUyLTQ3OTktOTg2OC04NjZhMjYz NTM3Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvzeADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGIZAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAFR+ZmhHLvFv0nZDQz5gzDojYYa29cRlq71lUc7m6ZHXa uaZSMRZ3R2DT/gWQSH/GLU38PTEPhrveG6T7PYFST6vas18QGiZvrnvk0JjnGURH nDcCEwzvgPug/42V6DU6tb9NUR4ok8wj7z6sPoRtC3+f2ikmTWjwT0p7qbqucnPt f/Po6Hz2a61G50HSuaitUIKSndcQbOCAEUz2ynEI/UNCcJ6wiGwAUvfqVqnCWSAf oZIGf94DCHW5JL9IdMhGZlV7kdmkRJ48F2tTZrz2unSIQlDv8Cs0b9ENM90Lai+5 k1uKzyUwbipN3u44yeC66jxji/s2OaPXMSq5HNDuYw== -----END CERTIFICATE-----Generated at Mon Aug 4 08:30:20 2025 by rpki-client