$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer File: 6cd2f18c-1d13-461a-a03c-b991220bb55a.cer (raw, json) Hash identifier: 7dTv6mEoQllVktMm9jJofTyab9UICNhiZjfoksCkRrg= Subject key identifier: AA:1C:09:2B:18:03:8E:42:40:B0:35:72:E0:89:CE:07:4D:63:5E:D8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584ACE040A6557D1257B76BBFFC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 10 Aug 2025 00:45:25 +0000 Certificate not after: Sat 13 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 1657 IP: 136.165.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ce:04:0a:65:57:d1:25:7b:76:bb:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 10 00:45:25 2025 GMT Not After : Nov 13 01:45:25 2027 GMT Subject: CN=6cd2f18c-1d13-461a-a03c-b991220bb55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e8:77:e8:19:75:c0:71:ae:d6:8d:6c:b4:f0: d6:fa:21:17:0c:e1:7a:20:e7:95:ee:23:08:f6:28: 33:08:3f:c4:56:aa:b7:43:7d:fe:a4:32:38:e2:37: 3f:c2:e6:6a:0b:37:6b:0f:6a:a6:f0:9d:52:27:59: a5:bb:6b:ce:4c:29:f6:37:40:da:60:ba:a1:9c:5b: b4:aa:a8:f2:89:0f:d7:ae:64:61:13:c2:91:2f:e7: 94:a4:e0:3e:1f:2a:53:fc:40:95:e0:3a:f9:d9:36: bd:85:d4:e2:a9:a6:b9:88:e0:fb:fa:bf:10:cf:7f: ef:73:8e:91:e3:d5:9f:30:a8:32:9c:70:e5:89:20: 2e:e5:3c:af:a3:9a:40:6a:5e:64:7f:2c:35:8d:86: 60:78:da:19:19:fe:10:af:4f:e7:06:de:ca:8b:b5: 90:62:f3:a2:56:5c:aa:e4:be:07:d2:64:51:f7:9c: c5:c5:92:3d:4c:e6:7e:5d:7d:06:89:cf:fb:54:b5: 21:fd:53:7a:bb:73:fb:80:11:45:4a:20:19:b0:2b: 0b:b6:8d:e3:f8:36:e5:36:fa:ec:2f:20:0c:40:b7: 3a:6d:2e:9b:95:2b:5e:de:c2:73:0a:01:f5:2d:b7: 5d:02:d0:6f:c0:2b:96:5d:71:1c:08:76:4b:2e:0f: d7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:1C:09:2B:18:03:8E:42:40:B0:35:72:E0:89:CE:07:4D:63:5E:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 136.165.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1657 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:fe:71:31:98:5f:50:36:d0:10:b8:6f:5b:e7:07:d6:de:81: b7:95:46:60:fd:e3:49:21:4b:a9:f8:b1:08:29:63:4a:c9:63: 07:02:eb:e5:b0:26:3a:b9:46:df:aa:4f:4c:b4:89:59:2e:21: 2e:08:72:3b:40:99:82:6a:9d:f2:4c:59:bc:7d:16:ab:b7:72: 07:5e:5c:35:fe:ec:37:10:9f:a4:16:6f:35:52:8f:d3:f7:77: b3:89:65:70:5c:d9:ed:e5:c9:c5:b0:b2:bb:b2:0b:a1:a7:fc: c2:eb:7c:17:be:95:09:bd:c2:b8:e8:7d:a9:64:75:c0:29:53: 02:17:d0:82:39:9a:96:ed:cd:32:e5:e2:d5:44:d0:07:9a:51: e4:10:89:72:5a:cc:61:6f:d4:60:36:fb:c2:10:09:37:f5:1d: ce:31:7a:b6:a0:2f:a6:8b:32:7b:35:8a:62:0b:ca:32:07:d3: a8:37:dc:fc:98:44:47:2f:0e:00:26:d0:76:4d:92:d3:12:48: 96:34:59:c5:08:ad:3a:3a:a2:9f:77:60:56:58:f1:2b:0c:a7: f2:9f:02:c4:22:0d:a8:70:f1:26:81:ab:d5:83:2c:1a:fc:0e: c0:14:89:b7:73:e7:1a:a7:14:9a:9e:10:58:80:51:8e:5d:e6: 99:65:8e:b1 -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWErOBAplV9Ele3a7/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgxMDAwNDUyNVoXDTI3MTExMzAxNDUyNVowLzEtMCsGA1UEAxMk NmNkMmYxOGMtMWQxMy00NjFhLWEwM2MtYjk5MTIyMGJiNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluh36Bl1wHGu1o1stPDW+iEXDOF6IOeV7iMI 9igzCD/EVqq3Q33+pDI44jc/wuZqCzdrD2qm8J1SJ1mlu2vOTCn2N0DaYLqhnFu0 qqjyiQ/XrmRhE8KRL+eUpOA+HypT/ECV4Dr52Ta9hdTiqaa5iOD7+r8Qz3/vc46R 49WfMKgynHDliSAu5Tyvo5pAal5kfyw1jYZgeNoZGf4Qr0/nBt7Ki7WQYvOiVlyq 5L4H0mRR95zFxZI9TOZ+XX0Gic/7VLUh/VN6u3P7gBFFSiAZsCsLto3j+DblNvrs LyAMQLc6bS6blSte3sJzCgH1LbddAtBvwCuWXXEcCHZLLg/XuwIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFKocCSsYA45CQLA1cuCJzgdNY17YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 Y2QyZjE4Yy0xZDEzLTQ2MWEtYTAzYy1iOTkxMjIwYmI1NWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZjZDJmMThjLTFkMTMtNDYxYS1h MDNjLWI5OTEyMjBiYjU1YS82Y2QyZjE4Yy0xZDEzLTQ2MWEtYTAzYy1iOTkxMjIw YmI1NWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCIpTAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIG eTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCU/nExmF9QNtAQuG9b5wfW3oG3lUZg/eNJIUup+LEIKWNKyWMH AuvlsCY6uUbfqk9MtIlZLiEuCHI7QJmCap3yTFm8fRart3IHXlw1/uw3EJ+kFm81 Uo/T93eziWVwXNnt5cnFsLK7sguhp/zC63wXvpUJvcK46H2pZHXAKVMCF9CCOZqW 7c0y5eLVRNAHmlHkEIlyWsxhb9RgNvvCEAk39R3OMXq2oC+mizJ7NYpiC8oyB9Oo N9z8mERHLw4AJtB2TZLTEkiWNFnFCK06OqKfd2BWWPErDKfynwLEIg2ocPEmgavV gywa/A7AFIm3c+capxSanhBYgFGOXeaZZY6x -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:11 2025 by rpki-client