$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf.cer File: 35a72605-99bc-4c4b-995e-c01a3684dcbf.cer (raw, json) Hash identifier: plbQQ9ddJ1Hl5WyZMpPwpmgN1SPFY2SQjaSC9DWGD0Y= Subject key identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AE18ED232BEAE3DED166E1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 17 Aug 2025 00:45:24 +0000 Certificate not after: Sat 20 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 965 IP: 23.129.248.0/21 IP: 208.66.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e1:8e:d2:32:be:ae:3d:ed:16:6e:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 17 00:45:24 2025 GMT Not After : Nov 20 01:45:24 2027 GMT Subject: CN=35a72605-99bc-4c4b-995e-c01a3684dcbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:85:0e:6f:27:c2:f7:d8:1f:25:a1:34:cf:00: 23:10:01:f6:f1:9c:17:97:1d:a7:fc:bb:5b:02:0e: 03:33:31:a3:65:54:9b:a9:d6:33:c2:ac:77:b8:47: 32:4a:fc:0f:d4:ee:c5:7a:b9:34:52:72:76:30:e6: 97:7b:fe:8a:64:6c:81:35:ed:72:11:93:f2:b0:4a: 7e:06:fe:2d:d4:c8:24:57:7b:7c:7b:ae:ea:04:44: 31:73:af:99:a5:9f:46:e7:6e:c0:fb:89:88:03:df: ba:a1:41:79:59:58:0f:b1:b7:22:da:d2:f3:f2:08: ea:18:f0:cb:6a:a8:e1:fc:f5:f9:85:27:91:c6:fe: 85:b2:10:21:3d:69:b6:47:4c:6d:43:0b:e8:7b:b2: b3:31:52:fb:f7:62:95:45:8c:ac:b1:35:36:8d:79: 27:e1:bc:c8:78:19:b1:fe:c4:a5:eb:4e:ee:a9:20: 4d:41:0c:5e:77:4f:59:07:95:8b:41:1c:d0:53:c4: bb:71:15:39:77:ec:33:ec:4d:a0:f2:a4:d5:dd:d5: cd:81:37:84:43:79:5f:b7:f6:e7:de:7d:8e:22:bb: 75:ac:16:d8:e7:df:12:b4:28:05:89:80:4d:0c:9b: f1:72:ee:fe:66:a3:19:fe:22:99:04:cd:26:15:b7: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:27:9D:66:57:C4:C6:28:D7:0E:13:BE:95:CD:3A:7F:D7:2B:84:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35a72605-99bc-4c4b-995e-c01a3684dcbf/35a72605-99bc-4c4b-995e-c01a3684dcbf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.129.248.0/21 208.66.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 965 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:79:0e:ed:2a:f3:ec:fd:10:53:55:65:22:5c:9f:78:ab:65: 7b:8a:86:c4:cd:0d:1a:c7:6f:55:b5:63:83:8e:28:01:cf:89: f8:9c:86:ae:0b:18:39:5d:38:de:a3:4d:09:31:74:a2:21:f5: e0:00:b2:66:fc:a5:9f:50:03:cd:cc:8d:e0:6a:63:b5:8e:07: 8e:43:aa:4a:6c:79:24:9b:0d:34:f6:56:73:04:4d:10:2d:e0: 3c:9d:36:cb:f5:3b:c9:1d:39:61:21:05:90:db:2d:29:6e:1e: 0a:6b:9e:34:d8:7e:da:4d:eb:7a:e8:7d:7d:12:a7:66:cc:59: ae:c5:83:19:7d:7d:c1:09:b8:1f:5a:00:c3:23:93:58:28:a3: 4c:77:01:7d:3c:b3:2c:00:39:af:99:4c:8c:02:8f:60:90:1e: 80:d1:6c:aa:fd:6e:62:9e:f5:1a:71:37:df:1a:fb:fb:f6:96: 75:ec:cf:63:f8:54:be:79:ff:93:39:a6:23:4c:e3:da:19:38: 0b:20:39:bc:af:7f:bb:d8:c1:78:80:44:41:d4:59:42:bc:c6: d8:c3:81:10:9a:35:8c:b2:ff:59:36:de:80:07:79:7f:46:e7: 80:1f:7e:1b:d6:57:45:ad:b8:d2:46:4e:f9:53:29:2a:66:b6: cc:e2:6e:ec -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWErhjtIyvq497RZuE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgxNzAwNDUyNFoXDTI3MTEyMDAxNDUyNFowLzEtMCsGA1UEAxMk MzVhNzI2MDUtOTliYy00YzRiLTk5NWUtYzAxYTM2ODRkY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoUObyfC99gfJaE0zwAjEAH28ZwXlx2n/Ltb Ag4DMzGjZVSbqdYzwqx3uEcySvwP1O7Ferk0UnJ2MOaXe/6KZGyBNe1yEZPysEp+ Bv4t1MgkV3t8e67qBEQxc6+ZpZ9G527A+4mIA9+6oUF5WVgPsbci2tLz8gjqGPDL aqjh/PX5hSeRxv6FshAhPWm2R0xtQwvoe7KzMVL792KVRYyssTU2jXkn4bzIeBmx /sSl607uqSBNQQxed09ZB5WLQRzQU8S7cRU5d+wz7E2g8qTV3dXNgTeEQ3lft/bn 3n2OIrt1rBbY598StCgFiYBNDJvxcu7+ZqMZ/iKZBM0mFbfQGQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFJ0nnWZXxMYo1w4TvpXNOn/XK4RQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z NWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4NGRjYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzM1YTcyNjA1LTk5YmMtNGM0Yi05 OTVlLWMwMWEzNjg0ZGNiZi8zNWE3MjYwNS05OWJjLTRjNGItOTk1ZS1jMDFhMzY4 NGRjYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAMXgfgDBALQQlwwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICA8UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAhnkO7Srz7P0QU1VlIlyfeKtle4qGxM0NGsdvVbVj g44oAc+J+JyGrgsYOV043qNNCTF0oiH14ACyZvyln1ADzcyN4GpjtY4HjkOqSmx5 JJsNNPZWcwRNEC3gPJ02y/U7yR05YSEFkNstKW4eCmueNNh+2k3reuh9fRKnZsxZ rsWDGX19wQm4H1oAwyOTWCijTHcBfTyzLAA5r5lMjAKPYJAegNFsqv1uYp71GnE3 3xr7+/aWdezPY/hUvnn/kzmmI0zj2hk4CyA5vK9/u9jBeIBEQdRZQrzG2MOBEJo1 jLL/WTbegAd5f0bngB9+G9ZXRa240kZO+VMpKma2zOJu7A== -----END CERTIFICATE-----Generated at Sat Aug 23 14:27:51 2025 by rpki-client