$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer File: dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.cer (raw, json) Hash identifier: xCZMrKw7M6QvcAxwBzO5M53xsmfiyRgxQCjY+U20aCk= Subject key identifier: C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AAF4E8292DED9FD737D83B0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Jul 2025 00:45:24 +0000 Certificate not after: Tue 02 Nov 2027 00:45:24 +0000 Subordinate resources: AS: 10972 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:af:4e:82:92:de:d9:fd:73:7d:83:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 30 00:45:24 2025 GMT Not After : Nov 2 00:45:24 2027 GMT Subject: CN=dcd1edec-c385-49a8-822f-d4dcbe5e0e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e1:74:4e:cf:77:43:b3:11:34:12:af:21:d3: 0c:0d:fd:8f:45:49:90:10:ba:0d:5b:43:f4:d2:a0: 88:59:9f:cc:4d:7d:d6:c0:63:2f:a6:24:3f:a5:7a: 3c:bc:14:a1:84:55:ea:db:0f:a6:57:b9:56:44:48: f2:f0:9b:44:c5:d6:f1:10:88:5c:41:18:d2:d5:82: 2d:e0:3b:28:67:1d:fc:84:14:6a:40:0b:e6:90:c3: f2:02:b8:12:44:4a:a1:cb:48:16:f5:e4:34:18:1d: bd:df:55:c0:f9:a0:40:a1:1c:f7:ec:7e:8c:ab:2f: 5b:a4:38:f5:af:61:a8:19:ab:bc:b4:d6:af:0d:cb: a4:3c:74:0a:eb:da:bb:70:20:7b:21:b0:cb:58:f0: 86:09:4a:25:cc:ea:36:d0:86:64:f4:ba:1b:f1:5f: 89:be:3d:d9:ce:40:31:87:7e:89:8a:e8:00:5e:23: 5b:c6:f9:a3:34:88:85:df:03:47:b8:44:4e:07:27: c9:57:8f:d3:b0:e8:42:ad:bb:f8:bd:65:c9:b3:55: c6:2e:17:1d:66:91:a6:32:d6:24:79:0e:c0:da:b6: 66:60:e3:09:d3:70:7b:2d:47:2a:7c:bb:fb:94:74: 6b:78:62:85:ae:19:a4:e3:41:5a:71:43:ba:ca:26: 4c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0C:F4:BD:06:6F:5D:05:D9:66:A6:DC:28:B9:AC:BC:BD:AB:92:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d/dcd1edec-c385-49a8-822f-d4dcbe5e0e4d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 10972 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:55:00:f5:aa:4c:96:90:e6:58:a3:2c:c7:34:a0:16:f3:ad: 7a:d9:6e:28:49:f4:67:e2:45:4f:1b:d9:5e:17:41:9f:ae:b0: 23:84:f8:94:79:3e:0b:8b:f9:47:15:00:a5:84:b5:89:17:00: ca:e2:5b:1e:2d:df:47:a0:74:39:f2:84:a5:fb:b5:b8:d7:67: 26:68:f2:f1:8e:81:77:c6:43:75:ca:da:8e:d1:af:b2:37:cc: 89:bf:c5:95:58:93:90:e0:d4:98:ee:cf:a5:45:7a:5d:29:6d: 05:4b:ff:fb:54:15:5e:d4:7b:a8:cc:d2:6e:9f:2a:8d:b7:0e: 7b:02:70:fd:8d:17:f2:53:ab:04:44:4a:d9:9e:f5:bb:2f:fb: 76:85:6b:e6:6c:9a:da:b2:fd:86:60:f4:e4:fa:1f:07:29:03: 74:29:25:a2:ca:e0:14:d1:d9:4d:02:50:29:f5:f1:11:09:0c: ec:08:f5:59:6e:89:fa:81:4d:3a:46:e9:9e:67:fc:44:65:9f: 6a:e4:68:72:f5:1f:4d:70:cd:1b:a0:85:7f:fa:47:fd:bb:61: f0:32:dd:0c:a5:8b:44:75:7f:ad:0f:be:54:45:25:16:8e:4f: f4:b5:de:fa:15:59:a7:0f:88:00:0e:ff:71:78:94:a5:b5:1b: 8c:08:68:7e -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEqvToKS3tn9c32DsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDczMDAwNDUyNFoXDTI3MTEwMjAwNDUyNFowLzEtMCsGA1UEAxMk ZGNkMWVkZWMtYzM4NS00OWE4LTgyMmYtZDRkY2JlNWUwZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+F0Ts93Q7MRNBKvIdMMDf2PRUmQELoNW0P0 0qCIWZ/MTX3WwGMvpiQ/pXo8vBShhFXq2w+mV7lWREjy8JtExdbxEIhcQRjS1YIt 4DsoZx38hBRqQAvmkMPyArgSREqhy0gW9eQ0GB2931XA+aBAoRz37H6Mqy9bpDj1 r2GoGau8tNavDcukPHQK69q7cCB7IbDLWPCGCUolzOo20IZk9Lob8V+Jvj3ZzkAx h36JiugAXiNbxvmjNIiF3wNHuEROByfJV4/TsOhCrbv4vWXJs1XGLhcdZpGmMtYk eQ7A2rZmYOMJ03B7LUcqfLv7lHRreGKFrhmk40FacUO6yiZMCwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFMAM9L0Gb10F2Wam3Ci5rLy9q5KRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k Y2QxZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRjYmU1ZTBlNGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RjZDFlZGVjLWMzODUtNDlhOC04 MjJmLWQ0ZGNiZTVlMGU0ZC9kY2QxZWRlYy1jMzg1LTQ5YTgtODIyZi1kNGRjYmU1 ZTBlNGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKtwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAklUA9apMlpDmWKMsxzSgFvOtetlu KEn0Z+JFTxvZXhdBn66wI4T4lHk+C4v5RxUApYS1iRcAyuJbHi3fR6B0OfKEpfu1 uNdnJmjy8Y6Bd8ZDdcrajtGvsjfMib/FlViTkODUmO7PpUV6XSltBUv/+1QVXtR7 qMzSbp8qjbcOewJw/Y0X8lOrBERK2Z71uy/7doVr5mya2rL9hmD05PofBykDdCkl osrgFNHZTQJQKfXxEQkM7Aj1WW6J+oFNOkbpnmf8RGWfauRocvUfTXDNG6CFf/pH /bth8DLdDKWLRHV/rQ++VEUlFo5P9LXe+hVZpw+IAA7/cXiUpbUbjAhofg== -----END CERTIFICATE-----Generated at Mon Aug 4 08:24:07 2025 by rpki-client