$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer File: 604dd155-d846-413d-9d18-9c6d0f03ee8c.cer (raw, json) Hash identifier: deKXsHoUXFLAASc/1JYWQZ/TQrQwvsIz7CI7zqJq4qQ= Subject key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849F70D75171642708A36F4FD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 May 2025 00:45:36 +0000 Certificate not after: Sat 28 Aug 2027 00:45:36 +0000 Subordinate resources: AS: 14098 IP: 209.205.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:0d:75:17:16:42:70:8a:36:f4:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 25 00:45:36 2025 GMT Not After : Aug 28 00:45:36 2027 GMT Subject: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:3a:0f:8f:6f:43:8c:22:68:5c:bd:74:5b: 07:7f:9b:7c:60:c3:fb:a2:cc:29:6a:ec:95:e7:c7: ed:6c:51:45:93:13:6c:4e:24:35:44:32:c3:1e:04: b2:a1:0e:0d:bd:f8:ac:ad:80:a4:5c:9e:8c:7b:22: 35:46:ac:03:b2:ac:a6:92:44:2a:1e:40:c5:ed:0b: e9:89:0d:ee:b0:3d:7c:e9:3f:17:34:0e:dd:b7:e5: 3a:87:7a:06:64:d9:d2:6f:aa:eb:9b:0b:24:14:ba: 8a:81:bf:2d:34:df:82:16:18:ec:58:4c:54:d8:c3: 3e:8a:63:fe:82:f0:0f:af:df:c4:58:40:4e:42:0b: e3:95:54:a2:f0:64:7f:e6:e9:6b:95:38:c4:b8:f5: ca:86:74:b7:f7:e9:d3:0f:17:1c:8e:ac:42:f4:c7: 91:08:8f:cc:1c:b4:86:01:1d:ad:81:e8:bc:7c:40: 3a:72:f3:80:59:80:86:9e:5c:db:04:d4:43:66:20: 99:10:84:07:49:18:82:60:66:65:dd:7f:53:b7:67: db:d9:41:12:47:56:4d:6c:8f:fb:9b:e1:f9:89:9e: fe:64:e4:c6:3a:26:cb:e4:73:48:b2:7b:37:60:b1: 95:e7:4f:6f:3c:0c:4e:04:8e:bd:0d:28:58:39:09: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 209.205.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14098 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:4d:69:04:2e:1e:31:1f:c5:f4:ad:bb:f7:e5:a4:4d:b4:c3: 86:02:13:c7:e0:6c:a0:b3:45:02:e4:c4:b8:1e:d2:d9:04:37: 69:06:db:a7:e4:bf:9c:94:f1:6e:5f:6a:f2:82:96:d3:1c:cb: 9f:dc:82:50:72:c8:80:5a:1c:89:c0:a8:ba:fd:13:b9:11:71: 75:f0:9c:e8:f0:c2:92:95:11:94:f7:f5:ed:88:fa:d7:85:01: d4:c4:e0:74:55:c9:94:25:a5:9a:6d:1c:25:1d:d1:19:41:81: e1:97:6a:4a:29:65:e7:96:62:86:45:f4:3b:74:a3:33:d4:3c: 08:32:86:ed:a7:5a:89:c1:fa:e2:d1:a3:df:76:75:46:d4:00: 0b:ae:3f:eb:5d:82:93:d5:43:dd:31:9d:69:c2:3e:20:7d:eb: 58:40:0a:3d:02:b1:60:da:46:0d:f1:3d:75:cf:6e:96:4e:8a: 1a:1b:3a:43:93:64:8b:38:11:39:69:98:af:2f:b0:ad:8c:9a: 96:2b:fc:af:fe:76:1c:1d:ac:29:eb:2d:07:97:a8:1b:66:45: 0b:b6:fe:3b:09:c2:ba:8b:94:a1:9d:d1:d5:72:65:fb:17:12: 84:b7:77:e6:0b:d9:60:87:bc:b9:b8:6b:9b:9d:99:34:50:2e: 37:c2:c1:bb -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEn3DXUXFkJwijb0/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUyNTAwNDUzNloXDTI3MDgyODAwNDUzNlowLzEtMCsGA1UEAxMk NjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNlZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgo6D49vQ4wiaFy9dFsHf5t8YMP7oswpauyV 58ftbFFFkxNsTiQ1RDLDHgSyoQ4NvfisrYCkXJ6MeyI1RqwDsqymkkQqHkDF7Qvp iQ3usD186T8XNA7dt+U6h3oGZNnSb6rrmwskFLqKgb8tNN+CFhjsWExU2MM+imP+ gvAPr9/EWEBOQgvjlVSi8GR/5ulrlTjEuPXKhnS39+nTDxccjqxC9MeRCI/MHLSG AR2tgei8fEA6cvOAWYCGnlzbBNRDZiCZEIQHSRiCYGZl3X9Tt2fb2UESR1ZNbI/7 m+H5iZ7+ZOTGOibL5HNIsns3YLGV509vPAxOBI69DShYOQm7RwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFABRUOtkLc8UOEJkJHX7GA4OQ7HXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzYwNGRkMTU1LWQ4NDYtNDEzZC05 ZDE4LTljNmQwZjAzZWU4Yy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYw M2VlOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATRzfAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC NxIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAb01pBC4eMR/F9K279+WkTbTDhgITx+BsoLNFAuTEuB7S2QQ3 aQbbp+S/nJTxbl9q8oKW0xzLn9yCUHLIgFocicCouv0TuRFxdfCc6PDCkpURlPf1 7Yj614UB1MTgdFXJlCWlmm0cJR3RGUGB4ZdqSill55ZihkX0O3SjM9Q8CDKG7ada icH64tGj33Z1RtQAC64/612Ck9VD3TGdacI+IH3rWEAKPQKxYNpGDfE9dc9ulk6K Ghs6Q5NkizgROWmYry+wrYyaliv8r/52HB2sKestB5eoG2ZFC7b+OwnCuouUoZ3R 1XJl+xcShLd35gvZYIe8ubhrm52ZNFAuN8LBuw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:29:33 2025 by rpki-client