$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer File: 4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer (raw, json) Hash identifier: Dt28KabTYREg3a0N/oV0Yon4bLc/fA25STw1NuN8wPw= Subject key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A426DF0A0F5B01ADC05E34980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Jun 2025 00:45:37 +0000 Certificate not after: Fri 24 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 14749 IP: 162.212.136.0/21 IP: 199.242.223.0/24 IP: 2606:fbc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:42:6d:f0:a0:f5:b0:1a:dc:05:e3:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 21 00:45:37 2025 GMT Not After : Sep 24 00:45:37 2027 GMT Subject: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:fd:7f:1e:0c:aa:f9:54:24:4d:1f:b7:6f: 38:f7:a9:e8:1f:2a:dd:e8:a9:64:64:3a:13:b8:47: 69:ef:22:34:3f:b4:57:68:83:b9:79:c2:df:54:9d: b7:0e:7e:d7:6a:b9:70:d6:89:7d:f5:98:32:a0:21: b9:ed:21:45:a0:3c:01:45:62:8d:01:cd:92:30:1c: 51:e7:98:4d:03:61:0d:55:6e:21:16:0b:f9:1c:0b: 0a:bb:35:d9:63:f6:c7:39:e9:ae:c1:8f:3c:46:54: 6b:b4:d5:af:3c:6b:53:32:f3:4a:6d:e4:f7:23:cb: 43:45:96:dd:98:85:9b:82:c9:4d:b0:d2:99:bf:82: 6e:74:a1:9b:e6:0a:2e:16:7f:6f:3a:c8:96:eb:5b: 6d:d9:cd:1c:5a:05:c0:e2:12:ed:b6:f8:91:60:08: d4:91:d8:6a:e7:84:b9:55:0a:eb:0e:ba:17:7f:b4: 42:17:ae:cb:85:20:d7:bc:1d:e9:39:ed:38:ab:ae: 17:37:fe:da:7d:0e:9d:d5:4b:f6:3d:25:ba:07:d4: 8e:3e:50:26:e1:47:00:c2:ab:17:77:1b:fa:e2:d8: 83:03:a3:48:7c:70:42:51:be:02:35:a2:5b:fc:2c: e4:15:3d:e1:f8:19:2d:c7:5f:d5:ac:07:fe:62:5b: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 162.212.136.0/21 199.242.223.0/24 IPv6: 2606:fbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14749 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:bc:d5:5b:e0:6b:a4:a3:05:f1:63:9e:86:cc:3f:4a:37:c6: d6:05:20:75:15:e8:d0:b3:b0:72:6a:a9:fa:fb:88:91:9b:a4: 64:0e:7c:87:34:35:e1:65:e8:a4:58:3b:4e:f2:10:fc:00:e4: a8:76:6f:45:08:a7:28:6d:2a:85:cc:38:57:24:9a:4a:8c:4a: ae:2f:76:92:9d:dd:8a:57:95:64:4a:70:53:53:6b:ee:46:af: b2:5b:ab:72:02:65:ae:99:d4:15:e4:86:e5:3a:a5:d6:14:49: 6b:64:99:b8:2b:93:dc:b9:13:d7:85:a8:e7:26:b2:3d:39:9f: b3:70:25:61:90:0f:aa:10:3d:c2:32:dc:bf:a6:8a:cb:c3:b9: cf:c5:fb:33:04:95:ae:0b:83:89:50:90:ba:b8:57:28:39:66: 45:72:d7:5a:2a:fe:a9:8e:b2:1b:fd:96:fa:d3:f4:11:5f:af: 4f:1a:e3:42:4e:f2:f1:d1:59:45:19:03:dc:04:41:d9:f3:33: 4f:15:88:fb:f1:ef:85:87:4e:69:0d:cb:9b:32:14:6a:1b:a4: 16:60:e8:03:1e:80:f7:0c:3b:6f:f4:b8:7c:d7:7d:4f:db:46: 49:78:e9:fe:c5:15:83:2b:e9:2e:66:d1:88:3d:01:96:97:b0: 2e:ea:32:4f -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEpCbfCg9bAa3AXjSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYyMTAwNDUzN1oXDTI3MDkyNDAwNDUzN1owLzEtMCsGA1UEAxMk NDQ1OTQxMmMtNmJmNS00ZTJkLTkwZDktNGQ4ZWM1Y2QzZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s39fx4MqvlUJE0ft28496noHyrd6KlkZDoT uEdp7yI0P7RXaIO5ecLfVJ23Dn7Xarlw1ol99ZgyoCG57SFFoDwBRWKNAc2SMBxR 55hNA2ENVW4hFgv5HAsKuzXZY/bHOemuwY88RlRrtNWvPGtTMvNKbeT3I8tDRZbd mIWbgslNsNKZv4JudKGb5gouFn9vOsiW61tt2c0cWgXA4hLttviRYAjUkdhq54S5 VQrrDroXf7RCF67LhSDXvB3pOe04q64XN/7afQ6d1Uv2PSW6B9SOPlAm4UcAwqsX dxv64tiDA6NIfHBCUb4CNaJb/CzkFT3h+Bktx1/VrAf+YlsOhwIDAQABo4IELzCC BCswHQYDVR0OBBYEFNUqDdxV94BWGHFumhMq6UvtJZM0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 NDU5NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhlYzVjZDNkMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ0NTk0MTJjLTZiZjUtNGUyZC05 MGQ5LTRkOGVjNWNkM2QwZS80NDU5NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhlYzVj ZDNkMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAOi1IgDBADH8t8wDQQCAAIwBwMFACYG+8AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICOZ0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE7zVW+BrpKMF8WOehsw/ SjfG1gUgdRXo0LOwcmqp+vuIkZukZA58hzQ14WXopFg7TvIQ/ADkqHZvRQinKG0q hcw4VySaSoxKri92kp3dileVZEpwU1Nr7kavslurcgJlrpnUFeSG5Tql1hRJa2SZ uCuT3LkT14Wo5yayPTmfs3AlYZAPqhA9wjLcv6aKy8O5z8X7MwSVrguDiVCQurhX KDlmRXLXWir+qY6yG/2W+tP0EV+vTxrjQk7y8dFZRRkD3ARB2fMzTxWI+/HvhYdO aQ3LmzIUahukFmDoAx6A9ww7b/S4fNd9T9tGSXjp/sUVgyvpLmbRiD0BlpewLuoy Tw== -----END CERTIFICATE-----Generated at Tue Jul 1 02:39:37 2025 by rpki-client