$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e.cer File: c22717c6-604d-4453-a20f-3430af557f6e.cer (raw, json) Hash identifier: Hf6QUSzMYhYzNPh+H5/J50KwsRZjkkM6/BPfJOvz5eE= Subject key identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A82A3AA8E1B7D6ACDF37D1F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Jul 2025 00:45:36 +0000 Certificate not after: Sun 17 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 400977 IP: 72.42.251.0/24 IP: 2620:cf:6000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:a3:aa:8e:1b:7d:6a:cd:f3:7d:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 14 00:45:36 2025 GMT Not After : Oct 17 00:45:36 2027 GMT Subject: CN=c22717c6-604d-4453-a20f-3430af557f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ac:3e:1a:06:70:ba:e0:02:33:77:23:c8:49: 71:77:98:94:e6:e5:ef:33:0e:25:18:b7:f9:a3:e7: 3d:3b:cf:c7:72:ef:e2:4e:b4:8d:e3:8c:44:eb:0d: 63:6c:16:32:15:fb:6b:88:6c:08:74:39:e8:f4:a3: 39:16:cc:21:e4:64:d7:1d:8c:39:fb:4d:86:1f:2c: 7d:74:f7:ef:dd:c1:11:95:6e:ad:f6:1b:d0:67:db: 63:7f:48:a0:e9:27:b5:48:34:b7:45:49:9f:95:18: f9:4d:f7:9d:51:64:71:3e:3c:13:2e:34:51:1f:5d: 06:22:88:81:34:c7:63:94:e1:40:b1:49:e3:22:1b: 2d:2e:a3:f4:54:4c:cd:6a:28:a4:b4:04:00:02:d8: 65:b8:fa:e0:6f:ce:28:d0:63:13:2b:2b:45:40:e6: cf:20:b7:cf:7e:d5:ca:10:87:6d:18:30:39:f4:c9: 9a:2a:a8:5b:d5:fe:44:27:9b:64:7c:34:30:f5:14: 13:ef:01:de:ba:e6:5e:be:af:ad:61:43:37:bc:f8: 1d:1a:84:7a:50:9c:91:4e:e6:e3:64:c7:76:f2:34: 8c:0b:56:99:f0:c1:e2:b0:c7:55:9c:69:e6:f1:40: 4f:18:32:98:32:54:c6:e1:04:ef:4f:f7:8f:80:bd: 14:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A3:2B:CF:34:53:AB:3E:F1:A0:11:46:64:77:8B:DE:44:96:56:61 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c22717c6-604d-4453-a20f-3430af557f6e/c22717c6-604d-4453-a20f-3430af557f6e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 72.42.251.0/24 IPv6: 2620:cf:6000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400977 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b9:2a:73:f9:7e:b8:e5:60:40:54:86:7b:fd:be:26:cb:47: 74:51:3b:8f:d8:47:af:aa:b7:4f:0d:4d:79:32:cd:94:24:93: 41:b9:d3:a3:37:36:ec:2c:0b:56:cd:bc:f8:64:76:83:24:6d: de:79:92:5e:fc:fb:f4:cc:e8:f2:9b:4b:b9:45:ca:e0:af:d8: c1:56:71:bf:fc:62:9e:99:03:87:b2:19:a8:a0:93:78:73:c2: 0b:86:92:60:8b:c8:0a:31:20:bc:04:1b:d2:2f:d5:7b:f9:3f: 39:36:6f:e3:ab:f6:bf:72:14:16:9c:24:b9:a1:12:b8:f3:0c: d8:a4:99:d0:40:b6:1b:94:36:90:aa:96:63:09:c9:6a:24:fa: d4:88:2c:54:bb:f2:af:a8:ec:31:14:78:f3:02:7d:a3:b3:3e: e1:1a:e3:97:40:eb:c1:e7:bf:e2:60:27:c0:ca:06:8a:34:c4: 52:19:9c:34:9b:3b:59:07:ad:cb:19:0d:34:34:64:92:9c:4f: 43:12:e8:6c:8f:88:68:e5:de:bc:e7:96:7f:78:d2:e9:4a:59: df:51:76:8f:76:ed:72:38:1f:10:9e:fa:a7:9c:66:2f:8e:f9: 83:0e:61:7c:6d:ff:a4:dd:c2:09:90:9b:8a:99:60:d6:98:29: 92:11:df:5a -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEqCo6qOG31qzfN9H0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcxNDAwNDUzNloXDTI3MTAxNzAwNDUzNlowLzEtMCsGA1UEAxMk YzIyNzE3YzYtNjA0ZC00NDUzLWEyMGYtMzQzMGFmNTU3ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56w+GgZwuuACM3cjyElxd5iU5uXvMw4lGLf5 o+c9O8/Hcu/iTrSN44xE6w1jbBYyFftriGwIdDno9KM5Fswh5GTXHYw5+02GHyx9 dPfv3cERlW6t9hvQZ9tjf0ig6Se1SDS3RUmflRj5TfedUWRxPjwTLjRRH10GIoiB NMdjlOFAsUnjIhstLqP0VEzNaiiktAQAAthluPrgb84o0GMTKytFQObPILfPftXK EIdtGDA59MmaKqhb1f5EJ5tkfDQw9RQT7wHeuuZevq+tYUM3vPgdGoR6UJyRTubj ZMd28jSMC1aZ8MHisMdVnGnm8UBPGDKYMlTG4QTvT/ePgL0UswIDAQABo4IELDCC BCgwHQYDVR0OBBYEFO6jK880U6s+8aARRmR3i95EllZhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j MjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1NTdmNmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2MyMjcxN2M2LTYwNGQtNDQ1My1h MjBmLTM0MzBhZjU1N2Y2ZS9jMjI3MTdjNi02MDRkLTQ0NTMtYTIwZi0zNDMwYWY1 NTdmNmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBABIKvswDwQCAAIwCQMHACYgAM9gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGHlEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOrkqc/l+uOVgQFSGe/2+JstH dFE7j9hHr6q3Tw1NeTLNlCSTQbnTozc27CwLVs28+GR2gyRt3nmSXvz79Mzo8ptL uUXK4K/YwVZxv/xinpkDh7IZqKCTeHPCC4aSYIvICjEgvAQb0i/Ve/k/OTZv46v2 v3IUFpwkuaESuPMM2KSZ0EC2G5Q2kKqWYwnJaiT61IgsVLvyr6jsMRR48wJ9o7M+ 4Rrjl0Drwee/4mAnwMoGijTEUhmcNJs7WQetyxkNNDRkkpxPQxLobI+IaOXevOeW f3jS6UpZ31F2j3btcjgfEJ76p5xmL475gw5hfG3/pN3CCZCbiplg1pgpkhHfWg== -----END CERTIFICATE-----Generated at Mon Aug 4 08:24:12 2025 by rpki-client