$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326.cer File: ff1c0ef1-dcbc-46a8-9061-fc92af670326.cer (raw, json) Hash identifier: AiseBW4NtzX7UXEc3BXSGwXkakVS7P8CN2nIjMmIzGo= Subject key identifier: 73:CE:0E:42:99:CC:77:4B:A7:6D:98:F2:86:49:D8:C8:E3:D7:05:BA Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AB4E3DF1DF4BB7282E5D603A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ff1c0ef1-dcbc-46a8-9061-fc92af670326.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 01 Aug 2025 00:45:24 +0000 Certificate not after: Thu 04 Nov 2027 00:45:24 +0000 Subordinate resources: AS: 399546 IP: 45.59.167.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:e3:df:1d:f4:bb:72:82:e5:d6:03:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 1 00:45:24 2025 GMT Not After : Nov 4 00:45:24 2027 GMT Subject: CN=ff1c0ef1-dcbc-46a8-9061-fc92af670326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:43:98:3d:ce:98:01:94:61:97:77:7f:5e: 93:83:1b:1a:b9:7b:28:82:8b:0b:e8:49:60:55:90: 5d:65:60:b1:65:cb:bc:6d:ce:e4:26:d8:0a:46:3c: 52:93:de:01:6e:67:3c:57:58:85:c2:04:cc:25:df: 42:47:1c:a3:07:e1:2f:b3:24:88:14:bc:be:5e:ac: b5:9a:04:f2:dc:b2:e9:14:59:68:27:2d:56:a9:21: e2:66:0a:71:19:1c:b1:40:b2:26:06:f3:91:4b:5f: 0a:38:bf:25:6b:6a:f4:87:43:a8:e3:c0:a8:fd:86: b0:29:b8:12:60:8e:18:e7:ea:fa:45:90:6c:9c:28: 9c:6d:b9:12:9f:ce:81:5d:f3:76:6e:68:f7:da:e2: c8:0d:f8:8c:03:36:93:87:12:dd:01:74:f6:53:e3: b6:04:2a:52:81:9b:7f:1f:fd:dd:ba:82:88:0d:63: 69:48:c6:c9:d6:79:70:9b:fc:9b:34:a4:ec:a8:e5: 5e:39:0d:a9:f0:bd:d4:f5:76:a7:b0:3b:fc:9d:5a: 72:3e:4a:68:a5:a4:d5:69:10:d6:f1:18:29:1e:2f: f1:52:d5:cf:6e:b6:f3:cf:f0:b5:c4:79:20:96:6b: 84:e7:be:6f:1e:a1:18:ad:70:5b:cf:54:b1:bd:f1: 0f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CE:0E:42:99:CC:77:4B:A7:6D:98:F2:86:49:D8:C8:E3:D7:05:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff1c0ef1-dcbc-46a8-9061-fc92af670326/ff1c0ef1-dcbc-46a8-9061-fc92af670326.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.59.167.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399546 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:05:16:32:13:92:24:3e:c2:9a:f6:a7:f0:cf:0a:b1:68:63: d8:0a:b6:1c:93:18:61:9f:b5:1f:79:ff:7f:2e:de:26:49:52: 2f:6f:f2:c3:ee:42:08:84:30:48:57:08:58:0f:35:a6:15:30: b5:50:10:6f:c5:97:d4:7b:23:00:b2:47:17:b4:37:b7:22:fc: 22:d6:32:5c:c8:0f:a8:dd:c3:32:01:80:83:ed:a7:f6:17:c9: d0:d9:28:30:6f:8a:91:a2:7e:35:4f:9d:00:00:c4:30:15:fc: af:bc:6e:2e:8f:af:f5:f9:85:4f:8a:ee:fb:50:46:e9:db:2b: 65:d2:3f:fb:d4:c1:1c:03:9d:33:a2:1e:d3:cd:a7:47:ab:fb: 75:84:b3:41:cc:d0:d0:53:6c:9a:3c:1b:2a:f5:37:55:72:05: 49:e8:23:70:d3:b9:6e:4b:88:a8:89:b4:99:39:8f:c6:3c:ab: ff:9f:e3:95:97:8f:69:05:a1:ff:4f:19:89:db:bf:a6:b6:d1: 92:b0:f3:42:49:a0:db:a8:5b:07:dc:ec:d8:f1:06:64:64:08: cb:3d:31:f5:3c:66:41:f1:51:70:15:1f:38:7b:23:cd:8d:cd: 15:b3:9e:d5:84:94:ba:10:5e:2c:a5:74:f9:2b:13:40:35:21: fb:6e:e3:5d -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEq0498d9LtyguXWA6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgwMTAwNDUyNFoXDTI3MTEwNDAwNDUyNFowLzEtMCsGA1UEAxMk ZmYxYzBlZjEtZGNiYy00NmE4LTkwNjEtZmM5MmFmNjcwMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPJDmD3OmAGUYZd3f16TgxsauXsogosL6Elg VZBdZWCxZcu8bc7kJtgKRjxSk94Bbmc8V1iFwgTMJd9CRxyjB+EvsySIFLy+Xqy1 mgTy3LLpFFloJy1WqSHiZgpxGRyxQLImBvORS18KOL8la2r0h0Oo48Co/YawKbgS YI4Y5+r6RZBsnCicbbkSn86BXfN2bmj32uLIDfiMAzaThxLdAXT2U+O2BCpSgZt/ H/3duoKIDWNpSMbJ1nlwm/ybNKTsqOVeOQ2p8L3U9XansDv8nVpyPkpopaTVaRDW 8RgpHi/xUtXPbrbzz/C1xHkglmuE575vHqEYrXBbz1SxvfEPXwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFHPODkKZzHdLp22Y8oZJ2Mjj1wW6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZjFjMGVmMS1kY2JjLTQ2YTgtOTA2MS1mYzkyYWY2NzAzMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZmMWMwZWYxLWRjYmMtNDZhOC05 MDYxLWZjOTJhZjY3MDMyNi9mZjFjMGVmMS1kY2JjLTQ2YTgtOTA2MS1mYzkyYWY2 NzAzMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAtO6cwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID Bhi6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIoFFjITkiQ+wpr2p/DPCrFoY9gKthyTGGGftR95/38u3iZJ Ui9v8sPuQgiEMEhXCFgPNaYVMLVQEG/Fl9R7IwCyRxe0N7ci/CLWMlzID6jdwzIB gIPtp/YXydDZKDBvipGifjVPnQAAxDAV/K+8bi6Pr/X5hU+K7vtQRunbK2XSP/vU wRwDnTOiHtPNp0er+3WEs0HM0NBTbJo8Gyr1N1VyBUnoI3DTuW5LiKiJtJk5j8Y8 q/+f45WXj2kFof9PGYnbv6a20ZKw80JJoNuoWwfc7NjxBmRkCMs9MfU8ZkHxUXAV Hzh7I82NzRWzntWElLoQXiyldPkrE0A1Iftu410= -----END CERTIFICATE-----Generated at Sat Aug 9 02:54:12 2025 by rpki-client