$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer File: 64da013d-8ba3-4af5-80ad-7674bd0cc403.cer (raw, json) Hash identifier: gd+7NvrXZejB1cO9z7jot6haamkAfJ4vwi2xGBlrc14= Subject key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BB455762E4981F8A0AE7D2480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Oct 2025 12:45:24 +0000 Certificate not after: Thu 03 Feb 2028 13:45:24 +0000 Subordinate resources: AS: 30316 AS: 399916 IP: 66.118.0.0/22 IP: 2602:f88f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:55:76:2e:49:81:f8:a0:ae:7d:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 31 12:45:24 2025 GMT Not After : Feb 3 13:45:24 2028 GMT Subject: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:cb:ea:66:38:bd:05:cf:79:66:5e:62:43: 81:f6:c4:65:ec:0c:9c:4f:8d:cf:08:d5:a8:33:7d: 17:2c:b8:c9:71:0b:71:59:c7:82:0e:ae:70:94:cd: f7:df:60:75:9b:19:3e:5a:e0:3a:0b:52:0f:04:da: 5d:d9:fe:ef:86:e1:72:17:79:5f:c5:ac:b3:35:f0: d7:b8:a1:9b:a0:15:3a:d6:30:c9:71:f0:ca:b4:45: 6d:6f:80:69:fe:7e:45:98:84:7b:dc:d3:ed:50:a3: 09:b1:dd:a7:da:2c:ea:d0:75:d8:22:94:3a:b5:ae: 90:b0:13:4f:4e:45:1b:37:b5:4a:e0:16:2e:92:77: a9:09:e0:1e:98:4c:17:14:97:90:90:71:37:62:fa: 8c:c4:4c:22:90:d9:12:59:07:5d:7c:72:97:3a:18: b9:d8:88:21:02:7d:f4:92:9b:4f:af:5b:db:42:cc: d1:14:94:82:78:a0:7a:58:0a:85:49:40:5e:c1:7e: d9:48:88:37:ca:c6:49:1d:3f:b4:0d:4c:32:06:8c: ef:7f:e4:d2:37:fa:d4:c2:ba:5c:24:a6:f6:57:02: 7b:aa:82:c6:0b:d2:b8:43:9a:6a:a7:b5:fd:09:82: 40:45:d5:e7:cc:f4:87:77:21:79:41:d9:b3:49:23: fa:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.118.0.0/22 IPv6: 2602:f88f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30316 399916 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:98:ac:d3:f9:68:da:3a:00:c1:f5:02:4d:ef:93:f5:48:de: 20:c8:cd:81:a7:c0:37:03:34:41:90:2f:34:4b:c7:a5:d0:2c: ff:17:f3:fb:9e:75:04:4e:00:65:d6:c0:3c:52:87:36:fb:dc: 40:96:dd:38:ba:52:1b:9c:57:b6:e5:9c:e4:57:1a:4a:75:1a: 79:ea:c7:9b:98:f5:63:3f:33:54:1c:3e:5f:5b:31:62:d8:57: ba:68:15:44:c7:9b:d6:75:fc:ef:81:a2:05:56:c7:86:0f:2f: e4:ad:20:a2:e0:18:38:d4:6a:af:ed:ab:7e:f8:42:88:9d:4c: a2:54:19:18:da:e2:5c:5e:74:2d:0a:df:4e:e4:47:29:84:ab: 7e:a7:84:ab:2d:cd:2c:a0:ee:f1:50:db:0d:22:ba:81:a8:ae: 0a:64:ad:06:5e:6c:98:e1:c6:44:36:1d:40:be:d1:3d:c7:ee: 9e:ab:92:df:9a:86:e8:b9:63:2f:8a:b2:be:24:9d:52:f5:aa: 2b:18:0f:5b:43:c9:5f:6d:f7:eb:80:45:5f:e0:3e:73:74:19: 85:c0:29:44:82:64:38:eb:e8:3c:05:fe:37:1b:42:25:34:69: 0f:67:0f:24:ba:94:2a:ca:ac:38:32:84:2e:47:ef:53:55:ea: 83:e6:9f:2b -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEu0VXYuSYH4oK59JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAzMTEyNDUyNFoXDTI4MDIwMzEzNDUyNFowLzEtMCsGA1UEAxMk NjRkYTAxM2QtOGJhMy00YWY1LTgwYWQtNzY3NGJkMGNjNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMfL6mY4vQXPeWZeYkOB9sRl7AycT43PCNWo M30XLLjJcQtxWceCDq5wlM3332B1mxk+WuA6C1IPBNpd2f7vhuFyF3lfxayzNfDX uKGboBU61jDJcfDKtEVtb4Bp/n5FmIR73NPtUKMJsd2n2izq0HXYIpQ6ta6QsBNP TkUbN7VK4BYuknepCeAemEwXFJeQkHE3YvqMxEwikNkSWQddfHKXOhi52IghAn30 kptPr1vbQszRFJSCeKB6WAqFSUBewX7ZSIg3ysZJHT+0DUwyBozvf+TSN/rUwrpc JKb2VwJ7qoLGC9K4Q5pqp7X9CYJARdXnzPSHdyF5QdmzSSP6bwIDAQABo4IELzCC BCswHQYDVR0OBBYEFC3RAcHbs/VsV4yD5dQVuEAGqZ80MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQwY2M0MDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY0ZGEwMTNkLThiYTMtNGFmNS04 MGFkLTc2NzRiZDBjYzQwMy82NGRhMDEzZC04YmEzLTRhZjUtODBhZC03Njc0YmQw Y2M0MDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAJCdgAwDgQCAAIwCAMGBCYC+I8AMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAnZsAgMGGiwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAW5is0/lo2joAwfUCTe+T 9UjeIMjNgafANwM0QZAvNEvHpdAs/xfz+551BE4AZdbAPFKHNvvcQJbdOLpSG5xX tuWc5FcaSnUaeerHm5j1Yz8zVBw+X1sxYthXumgVRMeb1nX874GiBVbHhg8v5K0g ouAYONRqr+2rfvhCiJ1MolQZGNriXF50LQrfTuRHKYSrfqeEqy3NLKDu8VDbDSK6 gaiuCmStBl5smOHGRDYdQL7RPcfunquS35qG6LljL4qyviSdUvWqKxgPW0PJX233 64BFX+A+c3QZhcApRIJkOOvoPAX+NxtCJTRpD2cPJLqUKsqsODKELkfvU1Xqg+af Kw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:01:09 2025 by rpki-client