$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e.cer File: 0dca6695-752f-4d90-822c-1351355a562e.cer (raw, json) Hash identifier: 8TRYpZ4lyd5u/2NFk8bueIVZBjbX33Dl0Yt8YJSDeEo= Subject key identifier: 4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AE45982D17FF0BE0CB6C7F840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 18 Aug 2025 00:45:25 +0000 Certificate not after: Sun 21 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 46189 IP: 208.92.200.0/22 IP: 2620:56:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:59:82:d1:7f:f0:be:0c:b6:c7:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 18 00:45:25 2025 GMT Not After : Nov 21 01:45:25 2027 GMT Subject: CN=0dca6695-752f-4d90-822c-1351355a562e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:33:c5:53:e9:d5:c4:7a:59:45:dd:d7:77:92: 70:82:d4:0f:2e:4f:12:b2:3f:e6:d6:ec:1b:41:70: bb:f8:85:d8:96:7a:31:1b:94:65:67:4b:e5:08:a5: 6b:06:f6:a8:68:c1:3b:21:97:65:d6:f4:6c:c5:7e: 93:e4:1d:3d:5d:f2:1b:b2:51:d7:a7:b9:f0:3c:d6: 2f:14:fe:af:c7:37:bc:4a:46:49:e6:35:56:5e:80: 3e:00:64:7a:ac:f6:f8:93:62:e6:a9:9e:68:5a:73: 64:e9:cc:c7:6a:ca:9e:e3:1a:51:82:54:63:54:6c: 60:ea:37:29:0b:17:a6:e0:cb:0d:a3:40:89:84:e9: 6d:f8:1c:38:d9:99:8e:16:86:9a:69:f9:03:4c:39: 94:bd:0d:47:79:8a:af:54:fc:48:a1:4d:9d:38:f8: f8:97:df:14:16:3b:ad:69:2f:50:cb:37:6d:a4:ef: 4e:ec:a4:3e:a1:44:4b:a0:00:82:50:6d:4a:2c:01: b6:31:7e:48:64:30:ae:c6:2d:0e:4e:ba:e9:99:39: 6d:10:16:8b:39:97:e1:c7:ae:35:cb:c1:ed:73:07: 55:ba:3a:9e:d8:08:ad:db:40:cb:71:d6:81:bb:5a: 9c:a6:8d:17:37:db:5e:fe:14:83:e3:e5:2c:5a:a2: 70:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:DB:D3:45:21:9E:7E:95:81:10:A0:AC:82:EB:5E:D1:9A:46:0C:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0dca6695-752f-4d90-822c-1351355a562e/0dca6695-752f-4d90-822c-1351355a562e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.92.200.0/22 IPv6: 2620:56:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46189 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:34:1e:aa:15:9a:82:e1:4f:60:1f:45:9e:d2:ea:d0:fd:c3: 91:e7:bc:b2:a5:e0:7b:9e:dc:33:6a:5c:ef:82:b9:05:8e:f2: 55:d9:04:13:e7:c2:89:99:67:c6:8e:27:5b:8d:32:3f:b3:37: 8a:63:eb:c5:5a:33:48:ee:9d:17:c6:f7:6b:c3:f1:a1:e5:a2: bf:d8:dc:d3:4f:93:99:b0:19:ca:6a:84:41:a7:b0:36:05:d9: 3f:fa:86:32:e1:d8:f0:e1:66:c2:a3:96:bb:a7:33:8b:48:9a: 2b:4e:12:32:b7:11:3b:e4:7f:ed:f9:18:7b:f8:c8:25:21:46: 18:9c:d8:17:bb:2b:ea:c8:b7:94:71:2d:48:f8:3c:3c:6a:d1: 74:2a:8b:11:46:a3:fb:d6:db:04:f4:d8:45:14:22:6f:be:f6: 60:de:6d:8f:50:d9:05:57:09:ca:e9:79:12:cf:0c:92:b0:2b: 4b:dc:ec:9f:8f:09:2d:f2:96:02:1f:67:94:72:66:9a:b6:49: de:7c:44:18:8a:15:91:81:b3:55:b0:75:a0:46:b1:1f:c3:56: e0:58:35:ac:43:da:ea:9d:17:b0:7f:ba:53:98:4a:99:af:99: 63:89:32:35:dd:6d:8d:c6:60:9e:ea:91:29:24:66:3c:95:8a: ee:7f:e7:47 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWErkWYLRf/C+DLbH+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgxODAwNDUyNVoXDTI3MTEyMTAxNDUyNVowLzEtMCsGA1UEAxMk MGRjYTY2OTUtNzUyZi00ZDkwLTgyMmMtMTM1MTM1NWE1NjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzPFU+nVxHpZRd3Xd5JwgtQPLk8Ssj/m1uwb QXC7+IXYlnoxG5RlZ0vlCKVrBvaoaME7IZdl1vRsxX6T5B09XfIbslHXp7nwPNYv FP6vxze8SkZJ5jVWXoA+AGR6rPb4k2LmqZ5oWnNk6czHasqe4xpRglRjVGxg6jcp Cxem4MsNo0CJhOlt+Bw42ZmOFoaaafkDTDmUvQ1HeYqvVPxIoU2dOPj4l98UFjut aS9QyzdtpO9O7KQ+oURLoACCUG1KLAG2MX5IZDCuxi0OTrrpmTltEBaLOZfhx641 y8HtcwdVujqe2Ait20DLcdaBu1qcpo0XN9te/hSD4+UsWqJw4wIDAQABo4IELDCC BCgwHQYDVR0OBBYEFErb00Uhnn6VgRCgrILrXtGaRgxxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w ZGNhNjY5NS03NTJmLTRkOTAtODIyYy0xMzUxMzU1YTU2MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBkY2E2Njk1LTc1MmYtNGQ5MC04 MjJjLTEzNTEzNTVhNTYyZS8wZGNhNjY5NS03NTJmLTRkOTAtODIyYy0xMzUxMzU1 YTU2MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALQXMgwDwQCAAIwCQMHACYgAFaAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMAtG0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWDQeqhWaguFPYB9FntLq0P3D kee8sqXge57cM2pc74K5BY7yVdkEE+fCiZlnxo4nW40yP7M3imPrxVozSO6dF8b3 a8PxoeWiv9jc00+TmbAZymqEQaewNgXZP/qGMuHY8OFmwqOWu6czi0iaK04SMrcR O+R/7fkYe/jIJSFGGJzYF7sr6si3lHEtSPg8PGrRdCqLEUaj+9bbBPTYRRQib772 YN5tj1DZBVcJyul5Es8MkrArS9zsn48JLfKWAh9nlHJmmrZJ3nxEGIoVkYGzVbB1 oEaxH8NW4Fg1rEPa6p0XsH+6U5hKma+ZY4kyNd1tjcZgnuqRKSRmPJWK7n/nRw== -----END CERTIFICATE-----Generated at Sat Aug 23 15:15:28 2025 by rpki-client