$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer File: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer (raw, json) Hash identifier: Qb7+dOSQWCopR7RRLupEkLtQKkfT0flVsb1hKUW6WmQ= Subject key identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A629A1C21D818A9B09B149D40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 02 Jul 2025 13:20:30 +0000 Certificate not after: Tue 05 Oct 2027 13:20:30 +0000 Subordinate resources: AS: 27022 IP: 66.81.136.0/21 IP: 158.62.192.0/22 IP: 162.221.178.0/23 IP: 174.34.236.0/22 IP: 216.122.108.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:9a:1c:21:d8:18:a9:b0:9b:14:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 2 13:20:30 2025 GMT Not After : Oct 5 13:20:30 2027 GMT Subject: CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:42:54:3a:94:b0:31:de:5c:bd:ec:be:bb:b7: 87:94:31:a4:4b:52:68:11:be:1e:73:e9:43:e5:00: 16:af:eb:4c:c2:a2:75:c1:9c:fb:09:4f:6e:dd:01: 4b:e2:ad:45:6c:07:92:77:0d:f3:6c:4c:63:aa:17: 50:c7:42:42:24:7b:3c:56:e3:5f:86:8b:a5:51:79: 64:1b:b0:38:a5:c4:a2:02:36:f1:96:23:b9:e6:7f: 0e:1d:dc:0b:d8:1d:b3:ab:36:17:7b:0c:6d:ab:e3: 9d:e7:d0:69:90:70:91:7c:b9:1b:8f:11:2c:b0:33: 1e:27:bc:38:bc:64:8b:ab:0d:2d:a3:31:33:ff:6a: a4:d9:29:85:50:ad:96:e8:31:15:bb:04:d1:60:97: e0:4f:64:51:84:c3:5b:6a:d5:3b:dc:bf:f9:de:12: 08:c6:d8:8a:b4:83:5e:04:d8:b7:09:5d:d9:55:72: 7e:bd:b7:c9:c5:e1:ea:b0:c4:50:7b:2e:9e:63:00: d6:65:c6:3e:36:61:7e:08:46:e5:f9:29:5b:97:ee: 63:8e:00:80:67:83:40:a0:2b:a3:c8:98:32:16:0e: 5b:76:d9:ba:4b:86:66:d0:21:f9:9c:7b:04:8b:a3: 74:24:71:48:44:d5:3b:3a:47:1f:93:f8:dc:c0:89: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.81.136.0/21 158.62.192.0/22 162.221.178.0/23 174.34.236.0/22 216.122.108.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27022 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:78:c9:15:a8:01:f2:63:e8:8c:2c:e1:14:75:ff:de:af:84: 36:88:3b:a6:8e:61:99:3d:35:04:a7:e8:e7:1e:14:12:32:be: d3:c1:e7:9c:54:06:92:3a:de:c0:93:c6:44:b6:0f:a6:6a:ae: f3:75:cc:d0:e1:44:fc:5a:44:9d:48:d0:88:1b:96:5c:51:90: 5a:4b:92:00:2e:81:5a:a9:d4:50:7e:df:01:38:a7:03:f2:d0: a2:34:4a:7c:29:19:1a:04:78:f1:00:79:e1:0d:48:b7:4a:94: 2a:68:d1:8d:1e:fe:32:96:e6:ff:11:23:95:c9:75:bf:0d:d6: 95:39:7b:de:95:27:c3:86:bf:2a:43:06:7b:87:5e:f0:af:01: fe:10:22:db:65:58:f3:e3:ad:d6:96:01:63:fc:39:90:ac:0c: 2c:20:54:94:02:b9:b9:2f:76:17:d6:86:12:1a:a2:ff:a5:ed: 0b:f9:e5:1a:b3:f0:09:12:b4:4a:99:30:ca:6a:e2:b0:c6:43: cf:93:70:6b:5b:75:36:57:c1:08:33:13:8f:68:05:e3:30:6c: 02:9a:a2:84:fc:9a:06:4d:03:1b:c3:32:9c:a0:1c:47:8a:6f: d1:03:11:a6:4a:75:83:27:8b:8c:3d:a7:07:4a:d7:f0:2d:a0: cc:d0:e1:f4 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEpimhwh2BipsJsUnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcwMjEzMjAzMFoXDTI3MTAwNTEzMjAzMFowLzEtMCsGA1UEAxMk ODAyMGEzOTktN2U4My00YmI1LThkOGQtZTQyNGUyZWRhYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kJUOpSwMd5cvey+u7eHlDGkS1JoEb4ec+lD 5QAWr+tMwqJ1wZz7CU9u3QFL4q1FbAeSdw3zbExjqhdQx0JCJHs8VuNfhoulUXlk G7A4pcSiAjbxliO55n8OHdwL2B2zqzYXewxtq+Od59BpkHCRfLkbjxEssDMeJ7w4 vGSLqw0tozEz/2qk2SmFUK2W6DEVuwTRYJfgT2RRhMNbatU73L/53hIIxtiKtINe BNi3CV3ZVXJ+vbfJxeHqsMRQey6eYwDWZcY+NmF+CEbl+Slbl+5jjgCAZ4NAoCuj yJgyFg5bdtm6S4Zm0CH5nHsEi6N0JHFIRNU7Okcfk/jcwIlfwwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFHgcUxJyzjAwSS1Qa5mpf+n2TOV9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJlZGFjMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgwMjBhMzk5LTdlODMtNGJiNS04 ZDhkLWU0MjRlMmVkYWMyYi84MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJl ZGFjMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBANCUYgDBAKePsADBAGi3bIDBAKuIuwDBALYemww GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICaY4wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAHjJFagB8mPojCzh FHX/3q+ENog7po5hmT01BKfo5x4UEjK+08HnnFQGkjrewJPGRLYPpmqu83XM0OFE /FpEnUjQiBuWXFGQWkuSAC6BWqnUUH7fATinA/LQojRKfCkZGgR48QB54Q1It0qU KmjRjR7+Mpbm/xEjlcl1vw3WlTl73pUnw4a/KkMGe4de8K8B/hAi22VY8+Ot1pYB Y/w5kKwMLCBUlAK5uS92F9aGEhqi/6XtC/nlGrPwCRK0SpkwymrisMZDz5Nwa1t1 NlfBCDMTj2gF4zBsApqihPyaBk0DG8MynKAcR4pv0QMRpkp1gyeLjD2nB0rX8C2g zNDh9A== -----END CERTIFICATE-----Generated at Wed Nov 5 00:06:07 2025 by rpki-client