$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3.cer File: f30a83fc-5753-4d94-85d1-26924afa8ea3.cer (raw, json) Hash identifier: q1EbWfmLCIOG998bIlS3MQ0otkve+y5P/kG2TORfvoU= Subject key identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AEF843E60E719B52CCA0B4E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Aug 2025 00:45:24 +0000 Certificate not after: Thu 25 Nov 2027 01:45:24 +0000 Subordinate resources: IP: 198.252.153.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:84:3e:60:e7:19:b5:2c:ca:0b:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 22 00:45:24 2025 GMT Not After : Nov 25 01:45:24 2027 GMT Subject: CN=f30a83fc-5753-4d94-85d1-26924afa8ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bc:e1:bf:f9:b6:dc:33:70:ee:5b:2d:be:b5: 03:d2:56:ea:d3:ed:cc:18:4f:0a:c6:07:a3:7f:47: 46:ca:6a:63:9f:0a:79:4c:ed:85:79:a1:e2:81:51: eb:82:c2:81:1f:e0:25:88:40:b8:87:9c:40:c8:85: 95:d7:c4:5c:f9:e2:82:a2:f8:c9:6a:60:ea:00:d8: 17:67:33:b5:7a:01:1a:5d:6e:30:37:58:74:dd:ae: 43:28:ac:de:ff:b4:d1:f0:8b:fc:a6:e5:52:70:37: 32:71:2e:f3:d0:a4:2c:78:a2:89:27:12:9d:ad:b0: 57:57:0e:89:6e:f1:ca:21:81:ea:90:1b:c5:93:97: b7:8c:e9:7b:21:d6:bb:39:58:66:f7:83:2b:1e:93: ff:99:d7:3e:19:82:a3:5b:74:21:e5:b4:b4:08:07: 53:0a:5d:28:ab:70:bb:0f:03:7b:8c:d4:14:69:c5: fc:b4:76:6a:a9:db:50:70:a4:74:f6:1d:6d:61:63: bc:48:d2:ac:ec:6a:cc:27:39:d3:7c:9c:3d:98:95: e8:be:61:52:7f:5c:83:e5:e9:19:8f:c7:42:57:f4: 4f:f0:dd:f5:36:75:8a:26:3c:7e:38:1a:cc:0a:c8: 7b:ac:6c:59:39:c2:a2:08:28:9d:be:64:7d:4b:ba: f2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:50:4C:16:74:72:8A:AD:BA:BF:BB:67:EA:1F:69:54:42:D9:5F:3E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f30a83fc-5753-4d94-85d1-26924afa8ea3/f30a83fc-5753-4d94-85d1-26924afa8ea3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 198.252.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ca:28:e5:62:6e:8a:d0:ea:4a:e8:21:90:db:3a:ae:66:b4: 3e:86:07:2b:f7:54:b7:d2:55:e9:ac:87:07:b4:ef:71:77:0c: c9:ef:bd:35:ba:0a:df:e0:ee:81:e4:8c:8a:ae:d3:65:77:2a: 30:8b:62:0d:b2:cb:da:ad:72:f5:e1:c4:09:40:f0:60:9d:56: 5f:8c:11:42:e2:db:4d:f3:7f:f8:69:30:30:0e:d1:b5:9b:53: ac:4e:48:73:f7:79:2a:bd:5e:21:65:d7:f9:c6:49:a9:90:e3: ba:fd:2d:7b:b6:81:0b:d4:a2:ae:84:5a:1b:fc:a3:83:d5:11: 78:7a:0b:bf:47:eb:4b:03:d3:08:7d:12:3a:2e:39:d9:e1:1b: e4:50:4d:14:1f:f0:ff:2c:71:b9:81:c7:59:af:4d:7d:aa:bb: b1:a7:65:0b:d2:7a:fa:7c:50:2b:7d:31:11:37:4b:de:f3:97: 51:31:5e:9e:f0:49:a9:c1:7f:5f:7a:1f:ab:69:db:f5:50:ed: 91:39:ec:0e:17:b2:94:df:a5:9b:a1:65:84:16:ca:dc:9a:90: 42:ac:1e:01:66:52:69:a8:f1:7a:c2:42:c7:13:ae:06:a0:ff: 31:37:79:52:78:ce:a4:eb:79:53:f7:bb:e3:ea:9f:86:90:69: 68:43:a1:45 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWErvhD5g5xm1LMoLTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgyMjAwNDUyNFoXDTI3MTEyNTAxNDUyNFowLzEtMCsGA1UEAxMk ZjMwYTgzZmMtNTc1My00ZDk0LTg1ZDEtMjY5MjRhZmE4ZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLzhv/m23DNw7lstvrUD0lbq0+3MGE8Kxgej f0dGympjnwp5TO2FeaHigVHrgsKBH+AliEC4h5xAyIWV18Rc+eKCovjJamDqANgX ZzO1egEaXW4wN1h03a5DKKze/7TR8Iv8puVScDcycS7z0KQseKKJJxKdrbBXVw6J bvHKIYHqkBvFk5e3jOl7Ida7OVhm94MrHpP/mdc+GYKjW3Qh5bS0CAdTCl0oq3C7 DwN7jNQUacX8tHZqqdtQcKR09h1tYWO8SNKs7GrMJznTfJw9mJXovmFSf1yD5ekZ j8dCV/RP8N31NnWKJjx+OBrMCsh7rGxZOcKiCCidvmR9S7ryewIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPBQTBZ0coqtur+7Z+ofaVRC2V8+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m MzBhODNmYy01NzUzLTRkOTQtODVkMS0yNjkyNGFmYThlYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2YzMGE4M2ZjLTU3NTMtNGQ5NC04 NWQxLTI2OTI0YWZhOGVhMy9mMzBhODNmYy01NzUzLTRkOTQtODVkMS0yNjkyNGFm YThlYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADG/JkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAK8oo5WJuitDqSughkNs6 rma0PoYHK/dUt9JV6ayHB7TvcXcMye+9NboK3+DugeSMiq7TZXcqMItiDbLL2q1y 9eHECUDwYJ1WX4wRQuLbTfN/+GkwMA7RtZtTrE5Ic/d5Kr1eIWXX+cZJqZDjuv0t e7aBC9SiroRaG/yjg9UReHoLv0frSwPTCH0SOi452eEb5FBNFB/w/yxxuYHHWa9N faq7sadlC9J6+nxQK30xETdL3vOXUTFenvBJqcF/X3ofq2nb9VDtkTnsDheylN+l m6FlhBbK3JqQQqweAWZSaajxesJCxxOuBqD/MTd5UnjOpOt5U/e74+qfhpBpaEOh RQ== -----END CERTIFICATE-----Generated at Sat Aug 23 14:18:37 2025 by rpki-client