$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669.cer File: d87bb806-e83b-438e-bf0b-6c487902c669.cer (raw, json) Hash identifier: gMvxua5As00ci6Et+Bjt7Lh/SoxG96lPvyARQdDVlJA= Subject key identifier: B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AC00E9C0E4AAEB5379D3E9A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 05 Aug 2025 00:45:24 +0000 Certificate not after: Mon 08 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 53361 IP: 74.121.56.0/21 IP: 2620:d3:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c0:0e:9c:0e:4a:ae:b5:37:9d:3e:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 5 00:45:24 2025 GMT Not After : Nov 8 01:45:24 2027 GMT Subject: CN=d87bb806-e83b-438e-bf0b-6c487902c669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:24:31:9d:c9:c7:1d:59:69:4b:11:33:40:a0: f8:3e:f0:00:d3:8a:d6:44:33:77:f5:d4:f9:03:e1: 85:2d:2f:c0:ba:75:e8:f2:7b:b1:3a:92:e2:39:70: 5c:85:9c:e8:b8:18:46:fc:78:6b:2f:34:f1:2b:5c: 92:b7:7f:d4:15:8a:e2:f8:d6:ad:bb:fc:0b:a1:a1: 30:9e:de:86:5f:24:21:2d:99:25:28:cf:66:2a:5a: a4:42:d4:c0:e9:3b:ec:87:57:87:37:b5:1c:2a:26: 16:9d:5b:3c:e1:19:64:61:b2:58:17:d8:42:96:49: 1f:9e:51:c0:d8:b1:76:00:8f:4b:cf:52:bc:71:09: 52:7e:8f:91:62:a8:6d:17:ce:f4:b9:1a:19:6d:8e: f1:0b:5d:9f:92:90:1b:34:87:81:00:c1:b0:6a:23: 3f:46:d2:4b:13:e9:a1:84:43:c8:f5:88:23:08:2c: c4:1e:2a:71:4b:40:f4:7d:11:33:0b:03:c2:f2:20: 73:22:78:bd:93:fb:59:b1:6c:4d:b7:f2:67:dd:1a: 8b:4a:51:e0:d2:8c:eb:0d:c1:0e:2b:e0:49:47:3d: 14:82:72:34:73:a9:02:88:a9:a0:ce:8d:e5:3a:13: eb:be:74:e5:02:68:0a:5f:94:96:9e:c2:df:47:25: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9D:15:21:E2:67:F3:38:89:29:E3:83:55:12:E1:CD:1A:4C:9F:56 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d87bb806-e83b-438e-bf0b-6c487902c669/d87bb806-e83b-438e-bf0b-6c487902c669.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.121.56.0/21 IPv6: 2620:d3:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53361 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:96:9c:b4:1a:56:97:de:19:32:d2:81:0d:63:6f:52:ed:ba: ac:b1:10:f8:87:07:8b:16:9e:40:5b:a8:5e:7a:97:79:5d:b7: 8d:89:71:9f:4f:8d:5c:34:4e:81:6b:2a:72:52:a2:2b:59:1e: f9:c8:0d:b5:2f:29:ab:2b:aa:8c:ac:0c:78:df:e0:7d:59:b0: 73:3d:37:c0:f9:f3:78:f2:91:52:44:de:6a:ea:d3:93:50:2b: b7:40:1c:0b:af:0c:67:bb:e4:90:93:ed:6e:1b:73:76:b1:32: e4:5b:51:7c:66:a5:88:c1:c7:b5:df:de:37:d8:0b:52:f2:e1: 58:0c:ec:d5:60:d7:08:09:55:ca:f0:34:ec:7c:3c:53:8f:22: 0e:ea:13:60:ca:77:da:7d:59:aa:79:65:4e:6b:3d:c2:38:aa: 05:b3:b3:90:72:3e:98:96:2b:f2:91:85:91:92:7c:bd:31:3b: e7:ff:99:2e:3c:da:da:d4:c8:39:3b:b1:a9:69:77:d3:b0:ad: 91:df:b4:20:77:43:4b:d6:61:0c:da:ff:28:d7:db:b8:32:a7: 66:05:16:03:49:5a:73:2c:cc:67:fe:bb:8d:89:95:92:89:9b: 7b:c0:13:94:fd:44:17:a3:77:9d:d2:bd:69:aa:ba:e3:48:01: d1:f7:3f:19 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWErADpwOSq61N50+mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgwNTAwNDUyNFoXDTI3MTEwODAxNDUyNFowLzEtMCsGA1UEAxMk ZDg3YmI4MDYtZTgzYi00MzhlLWJmMGItNmM0ODc5MDJjNjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CQxncnHHVlpSxEzQKD4PvAA04rWRDN39dT5 A+GFLS/AunXo8nuxOpLiOXBchZzouBhG/HhrLzTxK1ySt3/UFYri+Natu/wLoaEw nt6GXyQhLZklKM9mKlqkQtTA6Tvsh1eHN7UcKiYWnVs84RlkYbJYF9hClkkfnlHA 2LF2AI9Lz1K8cQlSfo+RYqhtF870uRoZbY7xC12fkpAbNIeBAMGwaiM/RtJLE+mh hEPI9YgjCCzEHipxS0D0fREzCwPC8iBzIni9k/tZsWxNt/Jn3RqLSlHg0ozrDcEO K+BJRz0UgnI0c6kCiKmgzo3lOhPrvnTlAmgKX5SWnsLfRyVZswIDAQABo4IELDCC BCgwHQYDVR0OBBYEFLadFSHiZ/M4iSnjg1US4c0aTJ9WMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k ODdiYjgwNi1lODNiLTQzOGUtYmYwYi02YzQ4NzkwMmM2NjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q4N2JiODA2LWU4M2ItNDM4ZS1i ZjBiLTZjNDg3OTAyYzY2OS9kODdiYjgwNi1lODNiLTQzOGUtYmYwYi02YzQ4Nzkw MmM2NjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBANKeTgwDwQCAAIwCQMHACYgANNAADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA0HEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAIZactBpWl94ZMtKBDWNvUu26 rLEQ+IcHixaeQFuoXnqXeV23jYlxn0+NXDROgWsqclKiK1ke+cgNtS8pqyuqjKwM eN/gfVmwcz03wPnzePKRUkTeaurTk1Art0AcC68MZ7vkkJPtbhtzdrEy5FtRfGal iMHHtd/eN9gLUvLhWAzs1WDXCAlVyvA07Hw8U48iDuoTYMp32n1ZqnllTms9wjiq BbOzkHI+mJYr8pGFkZJ8vTE75/+ZLjza2tTIOTuxqWl307Ctkd+0IHdDS9ZhDNr/ KNfbuDKnZgUWA0lacyzMZ/67jYmVkombe8ATlP1EF6N3ndK9aaq640gB0fc/GQ== -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:42 2025 by rpki-client