$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer File: e1029eed-2e88-4036-a7d9-ea093001f5cc.cer (raw, json) Hash identifier: 3rVi3hGjeNMbUfX/JPAcUntawUVFWZiuFl+/9MWVAUc= Subject key identifier: 05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584ABA793BFC93D76DFB17B7A700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 03 Aug 2025 00:45:23 +0000 Certificate not after: Sat 06 Nov 2027 00:45:23 +0000 Subordinate resources: AS: 400148 IP: 23.190.16.0/24 IP: 2602:fc0f::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:79:3b:fc:93:d7:6d:fb:17:b7:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 3 00:45:23 2025 GMT Not After : Nov 6 00:45:23 2027 GMT Subject: CN=e1029eed-2e88-4036-a7d9-ea093001f5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2b:28:b1:cb:d9:0b:92:cb:7e:f3:4e:a8:5e: 0c:51:39:a4:75:ac:04:63:0c:cc:20:6b:e2:7e:dd: 6b:3a:21:00:a9:de:32:3b:dc:7e:87:1f:a1:78:a5: a3:f3:1b:ad:4f:2e:8b:09:db:58:43:2e:41:b8:52: c6:61:02:7f:6d:2a:84:46:dd:f7:a4:d5:83:56:b6: 8f:af:51:7d:dd:b6:81:4c:10:32:79:f9:c0:44:d2: e2:37:cf:a5:b4:86:80:27:fa:a3:c5:3c:54:8e:ff: 3b:df:48:48:56:9e:b4:dc:ae:86:d5:e2:d3:da:2d: 4a:ec:00:ed:f1:77:51:f9:6b:2c:d3:c0:d7:22:33: 9d:79:4c:04:8e:39:56:92:fb:5e:17:c6:ef:d2:91: ec:5b:ce:0f:af:45:94:ae:aa:bb:7a:4a:96:b0:fd: b3:1c:65:ef:5f:cd:59:d1:17:dc:28:55:9e:f4:46: f5:4e:d2:e9:78:aa:1a:e8:00:9d:05:1c:df:7f:14: 56:9d:06:04:1b:c0:2a:77:ae:e6:77:7c:74:c6:47: 98:bc:55:d2:10:bd:d4:24:17:32:66:fa:7d:0d:4a: d9:bc:95:7b:e8:ec:97:16:33:97:b7:65:33:82:32: aa:35:f0:a4:49:f1:2c:0f:bd:0c:06:4f:12:54:e3: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.190.16.0/24 IPv6: 2602:fc0f::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400148 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:df:83:7a:c2:9f:f4:45:fa:42:4f:a3:fd:39:d4:ad:1e:63: 51:f1:cc:32:fe:b9:6e:99:e2:10:14:8f:c2:bb:57:36:8d:2d: 16:0c:b5:c5:ab:0b:ad:a5:c0:e7:e1:c2:78:57:78:43:cf:24: 32:45:9a:99:1e:aa:f9:28:0e:60:6d:3d:1a:98:33:a9:7d:c0: ed:5a:a5:ba:08:74:b7:71:8f:97:23:35:1a:b4:57:c7:ac:e3: 97:72:91:fa:5e:1f:6c:72:4c:1b:63:ca:b8:ff:6c:66:ba:cb: 27:f0:60:3b:02:6b:48:11:94:32:5d:ff:f3:fb:8d:8a:06:8c: cc:e1:7e:e9:79:2f:6c:83:9d:bd:69:ef:9e:ad:e9:2f:39:a0: 38:bd:42:1c:69:6e:e9:3c:f1:d7:d4:61:f4:a8:1a:53:17:bf: 6e:ee:92:a7:99:4a:94:8e:9a:7c:04:a1:e7:54:93:2e:83:6f: 6d:16:b4:dc:1d:40:e7:b6:32:86:98:72:d3:f1:ce:ff:00:fd: 27:95:88:b9:57:b4:e3:7a:0f:bc:37:12:94:8e:fb:ed:2e:79: 5e:d6:0f:0d:ee:87:88:44:9b:a9:69:db:6b:ee:52:ba:39:67: 24:6d:d3:19:52:a7:8a:dc:d1:36:e3:59:48:ed:81:99:1f:25: c1:76:93:bc -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEq6eTv8k9dt+xe3pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgwMzAwNDUyM1oXDTI3MTEwNjAwNDUyM1owLzEtMCsGA1UEAxMk ZTEwMjllZWQtMmU4OC00MDM2LWE3ZDktZWEwOTMwMDFmNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjisoscvZC5LLfvNOqF4MUTmkdawEYwzMIGvi ft1rOiEAqd4yO9x+hx+heKWj8xutTy6LCdtYQy5BuFLGYQJ/bSqERt33pNWDVraP r1F93baBTBAyefnARNLiN8+ltIaAJ/qjxTxUjv8730hIVp603K6G1eLT2i1K7ADt 8XdR+Wss08DXIjOdeUwEjjlWkvteF8bv0pHsW84Pr0WUrqq7ekqWsP2zHGXvX81Z 0RfcKFWe9Eb1TtLpeKoa6ACdBRzffxRWnQYEG8Aqd67md3x0xkeYvFXSEL3UJBcy Zvp9DUrZvJV76OyXFjOXt2UzgjKqNfCkSfEsD70MBk8SVOP6IQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAWEMcDH692TSoKZtwRYS0wG/VRuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l MTAyOWVlZC0yZTg4LTQwMzYtYTdkOS1lYTA5MzAwMWY1Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2UxMDI5ZWVkLTJlODgtNDAzNi1h N2Q5LWVhMDkzMDAxZjVjYy9lMTAyOWVlZC0yZTg4LTQwMzYtYTdkOS1lYTA5MzAw MWY1Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXvhAwDgQCAAIwCAMGACYC/A8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYbFDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf34N6wp/0RfpCT6P9OdStHmNR 8cwy/rlumeIQFI/Cu1c2jS0WDLXFqwutpcDn4cJ4V3hDzyQyRZqZHqr5KA5gbT0a mDOpfcDtWqW6CHS3cY+XIzUatFfHrOOXcpH6Xh9sckwbY8q4/2xmussn8GA7AmtI EZQyXf/z+42KBozM4X7peS9sg529ae+erekvOaA4vUIcaW7pPPHX1GH0qBpTF79u 7pKnmUqUjpp8BKHnVJMug29tFrTcHUDntjKGmHLT8c7/AP0nlYi5V7Tjeg+8NxKU jvvtLnle1g8N7oeIRJupadtr7lK6OWckbdMZUqeK3NE241lI7YGZHyXBdpO8 -----END CERTIFICATE-----Generated at Sat Aug 9 05:39:26 2025 by rpki-client