$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804.cer File: eec25392-c529-41f4-b3b9-7577f6660804.cer (raw, json) Hash identifier: ZyjtfupQKvmUb92pnWlruDYhPgQmLW9A/iI2gMKL86s= Subject key identifier: 22:94:14:B8:8F:7F:A6:BB:D5:59:7C:A9:09:9C:DD:83:DD:59:DD:DC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B7B1A6D27FC61F138B7AEA1A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/eec25392-c529-41f4-b3b9-7577f6660804.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 11 Oct 2025 00:45:22 +0000 Certificate not after: Fri 14 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 207.90.224.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:1a:6d:27:fc:61:f1:38:b7:ae:a1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 11 00:45:22 2025 GMT Not After : Jan 14 01:45:22 2028 GMT Subject: CN=eec25392-c529-41f4-b3b9-7577f6660804 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:eb:94:3d:0b:58:1d:ff:de:7b:37:d0:d8:52: a3:cd:05:db:5b:68:7a:b7:76:0b:f4:33:d0:ac:b1: a9:b0:eb:5a:7c:f6:5a:ed:b1:5f:a0:52:c5:de:e4: 51:cf:9f:2c:ce:c1:05:d8:a8:37:4b:1c:be:ea:25: 27:1c:75:24:e5:ed:b3:79:28:68:af:70:d1:53:57: b9:36:38:2d:0d:63:3f:5b:f7:29:23:21:0c:20:17: 03:5a:dc:b2:71:83:35:c5:a1:bc:ac:10:1c:ca:ef: 45:27:fd:88:90:8e:a6:e8:12:47:b1:72:54:64:2c: 5d:c3:f2:c2:d8:ea:e0:89:b6:63:18:f4:f3:00:16: 2c:b1:05:bd:d9:71:86:2a:1e:2d:27:07:19:6f:63: 2d:28:ce:89:31:09:97:72:9c:f8:f9:6b:95:96:5b: 13:c1:f0:57:d4:ce:0b:c9:fc:0b:1b:38:02:76:99: a6:92:02:97:29:67:e0:52:f9:8d:3f:67:77:2e:40: ce:cc:b9:b0:7f:75:2a:09:a8:28:73:8e:42:4f:e6: 0e:0d:18:62:b6:e5:5d:23:89:f6:76:f7:56:79:e2: 17:1a:62:f5:56:b3:e4:07:65:15:30:7d:d1:3d:34: de:39:2e:f4:d2:20:d7:f4:9e:fa:fc:24:4b:92:1e: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:94:14:B8:8F:7F:A6:BB:D5:59:7C:A9:09:9C:DD:83:DD:59:DD:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eec25392-c529-41f4-b3b9-7577f6660804/eec25392-c529-41f4-b3b9-7577f6660804.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 207.90.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:dc:61:b7:28:03:b9:36:80:b7:d8:f5:04:75:43:3b:49:b6: cc:0b:ae:af:56:35:14:65:14:b1:ef:d5:29:6c:65:c4:10:1f: 83:b0:2d:9e:82:34:91:e8:32:43:e0:4c:84:30:a0:06:16:32: cd:ac:60:f6:f3:9f:7a:f5:c0:a0:61:2a:11:7e:aa:aa:20:d5: 21:38:5c:de:83:43:84:53:6b:e8:86:83:b6:e7:ab:da:94:2e: 45:99:67:e5:95:35:71:2b:32:90:59:d0:2f:11:17:63:6a:04: 15:ab:fb:dd:02:47:f9:f1:c5:49:1d:07:ab:ee:93:84:5a:78: 29:48:48:48:26:52:26:4f:6c:9b:f0:90:8c:99:65:5f:8d:33: e0:e9:1c:57:51:a6:6c:dc:24:05:6b:2a:65:ba:a8:20:a4:a3: 67:02:f8:b6:f0:cd:e1:8e:33:f2:eb:9b:04:36:d6:62:1e:8e: 9e:1d:8c:21:07:b8:8b:2d:f9:a8:62:f7:75:3b:05:f8:8c:63: 67:b5:91:e3:21:a3:b9:94:dd:c7:f8:dd:d1:b1:dc:f6:07:04: a7:11:bb:a7:5f:33:81:c3:e0:f4:e5:48:6f:2a:e0:54:65:8d: e2:6a:bc:be:ce:22:f3:ab:b7:3e:86:34:7a:fa:f5:5b:d1:b2: c2:ee:89:bf -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEt7Gm0n/GHxOLeuoaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAxMTAwNDUyMloXDTI4MDExNDAxNDUyMlowLzEtMCsGA1UEAxMk ZWVjMjUzOTItYzUyOS00MWY0LWIzYjktNzU3N2Y2NjYwODA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweuUPQtYHf/eezfQ2FKjzQXbW2h6t3YL9DPQ rLGpsOtafPZa7bFfoFLF3uRRz58szsEF2Kg3Sxy+6iUnHHUk5e2zeShor3DRU1e5 NjgtDWM/W/cpIyEMIBcDWtyycYM1xaG8rBAcyu9FJ/2IkI6m6BJHsXJUZCxdw/LC 2OrgibZjGPTzABYssQW92XGGKh4tJwcZb2MtKM6JMQmXcpz4+WuVllsTwfBX1M4L yfwLGzgCdpmmkgKXKWfgUvmNP2d3LkDOzLmwf3UqCagoc45CT+YODRhituVdI4n2 dvdWeeIXGmL1VrPkB2UVMH3RPTTeOS700iDX9J76/CRLkh4VNwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFCKUFLiPf6a71Vl8qQmc3YPdWd3cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ZWMyNTM5Mi1jNTI5LTQxZjQtYjNiOS03NTc3ZjY2NjA4MDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VlYzI1MzkyLWM1MjktNDFmNC1i M2I5LTc1NzdmNjY2MDgwNC9lZWMyNTM5Mi1jNTI5LTQxZjQtYjNiOS03NTc3ZjY2 NjA4MDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALPWuAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ9xhtygDuTaAt9j1BHVD O0m2zAuur1Y1FGUUse/VKWxlxBAfg7AtnoI0kegyQ+BMhDCgBhYyzaxg9vOfevXA oGEqEX6qqiDVIThc3oNDhFNr6IaDtuer2pQuRZln5ZU1cSsykFnQLxEXY2oEFav7 3QJH+fHFSR0Hq+6ThFp4KUhISCZSJk9sm/CQjJllX40z4OkcV1GmbNwkBWsqZbqo IKSjZwL4tvDN4Y4z8uubBDbWYh6Onh2MIQe4iy35qGL3dTsF+IxjZ7WR4yGjuZTd x/jd0bHc9gcEpxG7p18zgcPg9OVIbyrgVGWN4mq8vs4i86u3PoY0evr1W9Gywu6J vw== -----END CERTIFICATE-----Generated at Mon Oct 20 01:27:58 2025 by rpki-client