$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer File: ec23d019-d079-49df-94b6-ad79d138e90f.cer (raw, json) Hash identifier: PbSIax9q2VhwwYaCtyX3LGMq/MQSdGuZOmCYpLmQicQ= Subject key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B9C9AA60B947AD8231D4E471E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Oct 2025 00:45:24 +0000 Certificate not after: Wed 26 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 46978 IP: 23.187.144.0/22 IP: 66.118.40.0/22 IP: 2606:7540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9c:9a:a6:0b:94:7a:d8:23:1d:4e:47:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 23 00:45:24 2025 GMT Not After : Jan 26 01:45:24 2028 GMT Subject: CN=ec23d019-d079-49df-94b6-ad79d138e90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:01:88:11:70:88:68:c4:04:04:f4:2c:66: de:d2:19:d6:15:a5:a8:3d:0d:a7:ba:ef:d7:bd:6e: 89:9d:91:15:05:e7:a5:84:00:2b:f0:29:92:8a:05: 76:e8:0b:fe:c2:1d:33:f7:f6:40:5d:63:ff:d7:d8: e6:f6:2b:ee:bd:1a:d9:82:40:6f:2f:36:02:64:7f: 0e:c4:72:36:e5:c6:21:13:1a:34:bf:10:5d:94:47: f2:2b:ef:2e:3a:b8:84:c8:b0:ba:e0:c6:bc:ac:62: f3:f9:3a:f4:c3:8b:8c:9a:e9:67:6e:c9:26:31:48: 40:96:90:a5:d1:38:dd:01:1c:ee:34:e2:da:a8:c0: 02:2a:e2:84:90:bd:98:fd:08:6d:78:dc:22:12:65: eb:df:21:5e:83:69:34:ef:21:e3:e2:d4:e9:85:6c: c5:47:d4:ad:55:81:78:fc:92:38:60:d5:09:73:63: 07:a1:5b:e0:68:4c:3b:26:2d:1a:ea:63:bc:dc:7e: 8f:78:16:10:62:c7:87:8a:03:97:c1:b2:fc:9c:eb: b5:28:35:43:06:b0:5f:c6:e9:b5:a7:85:b0:2c:82: b2:6b:ac:cc:b8:40:a7:eb:9b:a7:94:20:02:cd:12: 6b:d8:c2:1b:ad:85:e4:74:1d:20:e7:32:44:6f:55: 94:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.187.144.0/22 66.118.40.0/22 IPv6: 2606:7540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46978 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:03:ff:50:97:e7:e3:25:20:61:f0:3e:b4:6f:78:17:21:3b: 3a:ee:57:f0:ee:97:3e:24:2d:d9:d8:09:85:2d:4c:2c:96:4d: dc:36:66:56:29:b6:f5:40:8c:f1:e7:6b:77:a6:f6:0f:47:b3: 86:a3:9b:8b:a7:ec:cc:cb:57:30:7f:61:c8:c9:16:17:42:f8: c0:c4:be:09:e7:cb:da:24:2c:3d:d3:75:ba:ab:0a:af:64:bc: fc:7a:0f:5d:2f:a6:40:81:73:71:81:cf:82:d4:18:ef:ee:dc: d5:2a:4a:92:57:bd:bd:2c:54:90:51:2a:8f:c1:6f:ce:3e:91: e6:fc:e5:98:ff:0f:dc:53:8f:a7:fc:65:83:bd:44:63:17:49: 47:9d:16:ec:79:f9:38:82:d2:71:18:8b:bf:62:59:20:8e:96: 02:22:22:e2:eb:80:a2:76:61:27:e0:cf:9f:0f:7c:6a:48:da: df:1c:cc:2d:2f:d5:84:81:8e:4b:de:91:b2:80:98:3c:0a:12: 88:c2:3c:67:08:a8:fe:cb:0f:11:90:73:d0:fb:9d:a5:7d:28: ed:4d:22:91:f6:87:fb:b5:0d:a6:a9:97:ce:bf:c7:50:84:9c: 60:4f:7f:12:cc:a0:1e:91:db:71:e5:d4:35:c3:eb:aa:0e:2c: d3:be:6c:31 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEucmqYLlHrYIx1ORx4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAyMzAwNDUyNFoXDTI4MDEyNjAxNDUyNFowLzEtMCsGA1UEAxMk ZWMyM2QwMTktZDA3OS00OWRmLTk0YjYtYWQ3OWQxMzhlOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo50BiBFwiGjEBAT0LGbe0hnWFaWoPQ2nuu/X vW6JnZEVBeelhAAr8CmSigV26Av+wh0z9/ZAXWP/19jm9ivuvRrZgkBvLzYCZH8O xHI25cYhExo0vxBdlEfyK+8uOriEyLC64Ma8rGLz+Tr0w4uMmulnbskmMUhAlpCl 0TjdARzuNOLaqMACKuKEkL2Y/QhteNwiEmXr3yFeg2k07yHj4tTphWzFR9StVYF4 /JI4YNUJc2MHoVvgaEw7Ji0a6mO83H6PeBYQYseHigOXwbL8nOu1KDVDBrBfxum1 p4WwLIKya6zMuECn65unlCACzRJr2MIbrYXkdB0g5zJEb1WUfwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFHtFGQpncQfOmrxLpk9j3YF1pLrAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l YzIzZDAxOS1kMDc5LTQ5ZGYtOTRiNi1hZDc5ZDEzOGU5MGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VjMjNkMDE5LWQwNzktNDlkZi05 NGI2LWFkNzlkMTM4ZTkwZi9lYzIzZDAxOS1kMDc5LTQ5ZGYtOTRiNi1hZDc5ZDEz OGU5MGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAIXu5ADBAJCdigwDQQCAAIwBwMFACYGdUAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDALeCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIQD/1CX5+MlIGHwPrRv eBchOzruV/Dulz4kLdnYCYUtTCyWTdw2ZlYptvVAjPHna3em9g9Hs4ajm4un7MzL VzB/YcjJFhdC+MDEvgnny9okLD3TdbqrCq9kvPx6D10vpkCBc3GBz4LUGO/u3NUq SpJXvb0sVJBRKo/Bb84+keb85Zj/D9xTj6f8ZYO9RGMXSUedFux5+TiC0nEYi79i WSCOlgIiIuLrgKJ2YSfgz58PfGpI2t8czC0v1YSBjkvekbKAmDwKEojCPGcIqP7L DxGQc9D7naV9KO1NIpH2h/u1Daapl86/x1CEnGBPfxLMoB6R23Hl1DXD66oOLNO+ bDE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:09 2025 by rpki-client