$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f.cer File: 7d31536a-f667-4473-abbf-040b249fa39f.cer (raw, json) Hash identifier: rWmGMybMHYAOjrzTXGinpnBvJbP0nG47mJJQRlAuuAU= Subject key identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AB2192FCFE4EDA79D4243DD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 31 Jul 2025 00:45:23 +0000 Certificate not after: Wed 03 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 399892 IP: 216.73.152.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b2:19:2f:cf:e4:ed:a7:9d:42:43:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 31 00:45:23 2025 GMT Not After : Nov 3 00:45:23 2027 GMT Subject: CN=7d31536a-f667-4473-abbf-040b249fa39f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:d5:3c:07:23:c7:39:7e:b0:56:ac:e1:ce: 3a:aa:35:c2:2c:ba:0f:c7:9e:bd:70:a5:4c:b8:0f: 59:4f:44:35:53:18:d1:42:93:5f:91:ba:53:18:3d: ac:9b:e7:4f:db:3c:0b:6b:8a:9b:1e:13:bd:64:0e: 58:29:08:cd:14:86:da:16:e7:9b:2a:c6:36:aa:5a: 70:04:9f:96:14:78:21:79:e3:8d:51:6d:f3:54:bc: 3d:fc:c4:1c:06:90:f7:84:9b:47:4a:76:63:42:ad: 2e:c4:fc:aa:a4:9b:eb:fc:29:5e:5d:e0:85:ab:9e: fd:dd:b9:1a:74:dd:f7:13:06:ba:db:6c:65:38:5b: 04:e9:f5:79:25:40:33:76:63:9d:27:22:8c:8d:a8: 50:8a:39:39:25:94:94:fa:75:28:85:c3:a9:9c:be: d4:05:10:85:1a:76:b1:a4:90:8e:79:35:fd:24:31: e6:4c:06:84:a7:06:bf:f9:16:75:66:30:40:7d:1c: c6:61:ad:ce:4b:80:77:d7:09:cb:a1:fd:2c:34:c3: 90:7f:ea:35:49:6f:a1:c8:8a:9f:00:ba:8a:35:31: 6c:84:16:2b:cd:df:af:7c:2f:f6:b0:42:d2:eb:14: c4:65:67:b6:f5:ef:8a:57:b7:0c:dc:d3:87:1d:46: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D2:00:A7:29:86:9C:37:D7:2A:F5:13:59:1F:54:88:E7:E8:65:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7d31536a-f667-4473-abbf-040b249fa39f/7d31536a-f667-4473-abbf-040b249fa39f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 216.73.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399892 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:5c:38:81:bb:ba:21:e3:4e:bd:8e:18:21:e7:e3:eb:d6:50: bd:75:1b:86:fc:61:aa:c3:f3:3a:23:52:6d:ba:6e:e1:b4:41: 1c:0c:a3:bf:ad:53:6d:cf:ba:b6:2b:a5:b6:1b:56:74:1e:05: 29:3e:67:8a:b0:fe:88:62:38:90:d4:2c:f0:8a:d0:e5:93:d1: 54:45:72:a6:57:31:2d:4d:df:78:fa:0f:28:55:12:14:ae:af: e1:2f:95:46:73:89:66:42:91:50:1b:2d:c0:f3:5e:8b:cb:36: d0:23:a4:93:62:76:1b:ac:59:69:5a:6d:1b:f5:d4:92:01:c4: 43:83:a6:93:33:5b:42:33:1b:a8:71:54:cf:45:09:17:cb:85: 80:10:b5:94:d3:25:02:34:41:9f:a0:48:8c:7a:74:b6:ad:18: fa:ba:9d:a0:f6:dc:3c:74:8b:b6:9c:68:c0:a9:4d:4c:96:86: 61:8d:e6:9f:6e:11:b8:fc:33:7c:fd:cf:da:ff:c4:3e:d7:79: 9e:4c:c3:0d:dc:de:0e:91:41:83:cb:37:aa:0d:98:55:67:f6: 60:a5:98:68:5a:b8:74:8a:f0:cb:60:f8:d1:6d:20:03:43:de: 5b:8f:9e:12:07:cb:c1:36:0e:91:5d:c3:2c:3e:e9:b4:a0:89: e7:4e:b7:9a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEqyGS/P5O2nnUJD3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDczMTAwNDUyM1oXDTI3MTEwMzAwNDUyM1owLzEtMCsGA1UEAxMk N2QzMTUzNmEtZjY2Ny00NDczLWFiYmYtMDQwYjI0OWZhMzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8zVPAcjxzl+sFas4c46qjXCLLoPx569cKVM uA9ZT0Q1UxjRQpNfkbpTGD2sm+dP2zwLa4qbHhO9ZA5YKQjNFIbaFuebKsY2qlpw BJ+WFHgheeONUW3zVLw9/MQcBpD3hJtHSnZjQq0uxPyqpJvr/CleXeCFq5793bka dN33Ewa622xlOFsE6fV5JUAzdmOdJyKMjahQijk5JZSU+nUohcOpnL7UBRCFGnax pJCOeTX9JDHmTAaEpwa/+RZ1ZjBAfRzGYa3OS4B31wnLof0sNMOQf+o1SW+hyIqf ALqKNTFshBYrzd+vfC/2sELS6xTEZWe29e+KV7cM3NOHHUZbQQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNLSAKcphpw31yr1E1kfVIjn6GW2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZDMxNTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBiMjQ5ZmEzOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdkMzE1MzZhLWY2NjctNDQ3My1h YmJmLTA0MGIyNDlmYTM5Zi83ZDMxNTM2YS1mNjY3LTQ0NzMtYWJiZi0wNDBiMjQ5 ZmEzOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALYSZgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhoUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGRcOIG7uiHjTr2OGCHn4+vWUL11G4b8YarD8zojUm26buG0 QRwMo7+tU23PurYrpbYbVnQeBSk+Z4qw/ohiOJDULPCK0OWT0VRFcqZXMS1N33j6 DyhVEhSur+EvlUZziWZCkVAbLcDzXovLNtAjpJNidhusWWlabRv11JIBxEODppMz W0IzG6hxVM9FCRfLhYAQtZTTJQI0QZ+gSIx6dLatGPq6naD23Dx0i7acaMCpTUyW hmGN5p9uEbj8M3z9z9r/xD7XeZ5Mww3c3g6RQYPLN6oNmFVn9mClmGhauHSK8Mtg +NFtIAND3luPnhIHy8E2DpFdwyw+6bSgiedOt5o= -----END CERTIFICATE-----Generated at Mon Aug 4 08:30:18 2025 by rpki-client