$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303.cer File: e51abfb2-ff55-4866-8f32-d2fc9346d303.cer (raw, json) Hash identifier: cL+nhFDN3fiYWQh1fmBPjgDDTkYyBCw3PMVrjFAqAAQ= Subject key identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AD664165B4355B4BA40B24240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 Aug 2025 00:45:24 +0000 Certificate not after: Tue 16 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 40287 IP: 208.78.4.0/22 IP: 2620:20:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d6:64:16:5b:43:55:b4:ba:40:b2:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 13 00:45:24 2025 GMT Not After : Nov 16 01:45:24 2027 GMT Subject: CN=e51abfb2-ff55-4866-8f32-d2fc9346d303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:aa:c2:8c:ba:05:2d:27:6c:79:c0:2c:d2: d7:86:24:70:ef:b0:dd:88:1a:a2:17:a9:03:52:53: 80:8e:59:f2:e0:2b:37:81:ad:37:98:a1:15:3a:27: 76:e4:9f:53:87:f6:33:e9:d5:af:e0:73:a3:73:67: bc:e5:45:fb:2c:d2:83:2c:6e:79:b6:27:b3:83:db: 3c:27:13:a6:5f:9f:92:a1:40:93:e6:00:57:48:51: 53:b1:6a:ae:de:09:d7:08:0e:81:92:ac:f6:4b:4d: e1:a5:93:8b:e7:77:20:4a:0f:5b:a7:34:48:c5:27: 68:aa:d3:0c:ae:9e:bc:21:13:57:ef:d7:ac:8b:d2: e9:5d:63:08:98:a4:e8:6e:0d:7f:70:e7:ce:c8:89: 43:be:26:9f:ff:f2:df:96:a0:b5:41:37:31:8f:6a: ae:25:de:31:80:9b:64:70:38:5b:24:65:54:7c:6c: a1:00:9c:cf:f9:17:4e:0d:ad:20:4c:7e:84:96:a9: 88:6e:87:6b:4b:cf:21:50:c6:a2:b8:d5:67:d2:c6: 48:c3:91:da:72:c8:5b:35:73:35:94:a7:a0:7b:eb: 49:27:2e:44:33:b2:67:ba:9a:38:df:a2:49:59:48: a3:a6:c7:40:34:29:c0:4a:9d:fe:6c:ff:57:9d:ea: 7b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F4:F9:26:E2:FD:E0:9A:05:E4:95:43:52:A6:26:C3:19:A1:EB:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e51abfb2-ff55-4866-8f32-d2fc9346d303/e51abfb2-ff55-4866-8f32-d2fc9346d303.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.78.4.0/22 IPv6: 2620:20:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40287 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:fb:f3:40:fc:f0:f9:0c:57:e4:67:7d:a2:12:f0:07:ae:41: 70:d5:5e:e1:78:cd:7d:e6:05:bf:5d:c8:6c:2d:ee:74:c5:59: 50:66:c7:56:47:5d:09:e5:f4:81:a7:bd:da:b5:a6:c1:03:47: 56:7d:20:79:9a:8a:79:02:82:26:6f:f6:47:95:97:59:92:b2: 2c:28:25:f9:2d:c5:7e:09:7e:93:09:9c:6e:08:51:d8:fe:2c: b9:db:9c:3c:08:fd:0b:05:8a:97:56:15:0f:04:fb:41:d8:fe: 01:2d:c7:ba:e3:a4:84:5b:11:b7:53:fa:ff:57:b4:d1:2e:b8: 30:05:a0:bf:dc:e4:c4:46:61:e7:6b:95:47:4e:04:ea:c1:1d: 93:24:8a:2b:0d:b1:35:00:3c:ea:59:01:d9:56:1c:13:0d:9c: 15:ca:72:c3:c8:7c:cc:d4:55:e6:37:90:d6:16:63:1f:48:d2: c3:f3:29:80:4a:5e:ef:f1:0a:af:3e:6a:e4:a7:5a:8b:8a:ec: 61:ba:13:34:4d:1a:9d:c6:81:53:d2:94:cf:20:24:75:93:cf: 85:4d:f2:4d:e0:61:e8:78:61:61:b0:8b:9a:9d:9b:86:ad:07: 6d:61:0d:2e:08:75:b6:bb:58:0e:94:e8:71:b0:7b:aa:36:05: 32:50:69:67 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWErWZBZbQ1W0ukCyQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgxMzAwNDUyNFoXDTI3MTExNjAxNDUyNFowLzEtMCsGA1UEAxMk ZTUxYWJmYjItZmY1NS00ODY2LThmMzItZDJmYzkzNDZkMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzSqwoy6BS0nbHnALNLXhiRw77DdiBqiF6kD UlOAjlny4Cs3ga03mKEVOid25J9Th/Yz6dWv4HOjc2e85UX7LNKDLG55tiezg9s8 JxOmX5+SoUCT5gBXSFFTsWqu3gnXCA6Bkqz2S03hpZOL53cgSg9bpzRIxSdoqtMM rp68IRNX79esi9LpXWMImKTobg1/cOfOyIlDviaf//LflqC1QTcxj2quJd4xgJtk cDhbJGVUfGyhAJzP+RdODa0gTH6ElqmIbodrS88hUMaiuNVn0sZIw5HacshbNXM1 lKege+tJJy5EM7Jnupo436JJWUijpsdANCnASp3+bP9Xnep7VwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFA70+Sbi/eCaBeSVQ1KmJsMZoet0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l NTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0NmQzMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U1MWFiZmIyLWZmNTUtNDg2Ni04 ZjMyLWQyZmM5MzQ2ZDMwMy9lNTFhYmZiMi1mZjU1LTQ4NjYtOGYzMi1kMmZjOTM0 NmQzMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALQTgQwDwQCAAIwCQMHACYgACCAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAnV8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIPvzQPzw+QxX5Gd9ohLwB65B cNVe4XjNfeYFv13IbC3udMVZUGbHVkddCeX0gae92rWmwQNHVn0geZqKeQKCJm/2 R5WXWZKyLCgl+S3Ffgl+kwmcbghR2P4suducPAj9CwWKl1YVDwT7Qdj+AS3HuuOk hFsRt1P6/1e00S64MAWgv9zkxEZh52uVR04E6sEdkySKKw2xNQA86lkB2VYcEw2c Fcpyw8h8zNRV5jeQ1hZjH0jSw/MpgEpe7/EKrz5q5Kdai4rsYboTNE0ancaBU9KU zyAkdZPPhU3yTeBh6HhhYbCLmp2bhq0HbWENLgh1trtYDpTocbB7qjYFMlBpZw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:13 2025 by rpki-client