$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer File: 5e6c5242-5ff7-40a8-b144-1f151915227e.cer (raw, json) Hash identifier: vU2kI5Xnu0eWs4L356mqSsrILLRCtZqsF0lQoJV5UV4= Subject key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AC2D94AAB14DF2FDAB1171980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 Aug 2025 00:45:23 +0000 Certificate not after: Tue 09 Nov 2027 01:45:23 +0000 Subordinate resources: AS: 16491 IP: 2601:4000::/24 IP: 2602:fd3a::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c2:d9:4a:ab:14:df:2f:da:b1:17:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 6 00:45:23 2025 GMT Not After : Nov 9 01:45:23 2027 GMT Subject: CN=5e6c5242-5ff7-40a8-b144-1f151915227e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:38:28:74:23:1f:71:0d:55:5c:9e:84:12: 81:9d:b9:5d:79:57:61:b1:68:82:06:67:3b:49:fe: e6:02:fe:f5:76:03:cf:67:44:5f:e6:fb:dc:be:e1: 0b:5c:7b:40:1a:00:55:21:c9:d6:73:65:80:bf:7f: 76:45:9a:43:9c:69:d6:f5:23:d0:88:2c:83:96:d7: af:67:ad:72:49:36:08:a2:75:4f:67:de:49:5e:5e: 99:e1:ee:7d:e7:83:0a:63:31:6e:67:90:b9:63:b7: e9:50:fc:4b:b0:84:b6:58:39:27:3e:e2:51:26:97: 03:6c:30:02:f5:ba:8d:39:f7:33:fe:6e:b0:8d:22: 45:fd:1a:55:ac:94:40:d7:c4:9b:39:af:56:21:3c: 05:04:ad:46:42:3e:13:f6:ec:fe:19:fd:84:89:09: 98:08:fd:b2:cc:bc:25:fc:42:58:c9:a6:5f:9a:56: a3:1a:4b:81:8b:74:97:0d:29:2d:ca:5a:0f:c0:4d: b8:68:db:1f:09:05:ed:c7:15:c4:07:95:51:b1:b5: 05:f7:15:11:82:39:02:57:64:bf:8a:91:9f:20:e1: 97:6a:e2:54:15:62:f2:26:2a:1b:2f:c5:cb:7d:c8: b5:3b:26:6d:ed:75:73:cc:4e:04:cd:ad:b5:3c:ee: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2601:4000::/24 2602:fd3a::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16491 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:22:43:6f:9b:34:0c:63:53:51:43:5b:8c:d7:1a:9d:a3:b6: 13:50:b8:fd:3f:92:2a:1d:a4:20:0a:37:9f:9a:a4:c4:04:e1: 61:3f:5a:32:5d:a1:62:28:37:b3:26:25:48:1b:1b:24:39:82: 0d:09:fc:5b:a3:b7:50:57:99:dc:ca:c0:5e:66:1d:7a:3a:cd: 4c:35:31:a9:6e:b1:bf:b2:2a:3f:48:70:37:62:7e:de:a4:18: 40:ed:23:5e:ff:33:3e:9c:15:6a:82:81:83:34:0d:c4:6b:dc: 9b:b6:8e:7e:7e:4d:ee:61:af:93:0b:dd:3d:b3:88:79:9d:8e: ac:73:53:04:a6:38:7e:19:77:f6:bf:e6:3e:b9:5b:f4:37:dc: 60:5d:16:1a:ef:b4:76:7e:9e:a7:57:e6:fa:a1:6d:90:44:b2: 55:9c:34:41:c5:b8:a0:9f:ce:74:94:5c:a5:7e:bb:36:51:b2: 1f:ba:88:c2:29:7a:50:8e:85:b5:62:1c:8e:5f:ee:b1:2b:bb: 95:17:b9:46:e4:62:b7:07:4e:a4:56:1d:bb:55:ba:50:9b:1e: 4a:d2:5d:1a:42:a9:da:a9:b8:0e:1a:6a:80:05:f5:1f:f5:00: eb:f0:dd:13:b3:5a:f8:83:db:a9:7a:88:bd:87:5a:d9:2b:90: 6e:16:e2:6d -----BEGIN CERTIFICATE----- MIIHEDCCBfigAwIBAgIUAQ0Mn0MoWErC2UqrFN8v2rEXGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgwNjAwNDUyM1oXDTI3MTEwOTAxNDUyM1owLzEtMCsGA1UEAxMk NWU2YzUyNDItNWZmNy00MGE4LWIxNDQtMWYxNTE5MTUyMjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklI4KHQjH3ENVVyehBKBnbldeVdhsWiCBmc7 Sf7mAv71dgPPZ0Rf5vvcvuELXHtAGgBVIcnWc2WAv392RZpDnGnW9SPQiCyDltev Z61ySTYIonVPZ95JXl6Z4e5954MKYzFuZ5C5Y7fpUPxLsIS2WDknPuJRJpcDbDAC 9bqNOfcz/m6wjSJF/RpVrJRA18SbOa9WITwFBK1GQj4T9uz+Gf2EiQmYCP2yzLwl /EJYyaZfmlajGkuBi3SXDSktyloPwE24aNsfCQXtxxXEB5VRsbUF9xURgjkCV2S/ ipGfIOGXauJUFWLyJiobL8XLfci1OyZt7XVzzE4Eza21PO7WoQIDAQABo4IEIjCC BB4wHQYDVR0OBBYEFL9+CwjQHCL44MXUfmPXO1bVuNfhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkxNTIyN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVlNmM1MjQyLTVmZjctNDBhOC1i MTQ0LTFmMTUxOTE1MjI3ZS81ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkx NTIyN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgACMA4DBAAmAUADBgQmAv06ADAZBggrBgEFBQcBCAEB/wQK MAigBjAEAgJAazBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQAYIkNvmzQMY1NRQ1uM1xqdo7YTULj9P5IqHaQg CjefmqTEBOFhP1oyXaFiKDezJiVIGxskOYINCfxbo7dQV5ncysBeZh16Os1MNTGp brG/sio/SHA3Yn7epBhA7SNe/zM+nBVqgoGDNA3Ea9ybto5+fk3uYa+TC909s4h5 nY6sc1MEpjh+GXf2v+Y+uVv0N9xgXRYa77R2fp6nV+b6oW2QRLJVnDRBxbign850 lFylfrs2UbIfuojCKXpQjoW1YhyOX+6xK7uVF7lG5GK3B06kVh27VbpQmx5K0l0a QqnaqbgOGmqABfUf9QDr8N0Ts1r4g9upeoi9h1rZK5BuFuJt -----END CERTIFICATE-----Generated at Sat Aug 23 09:48:55 2025 by rpki-client