$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7.cer File: 169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7.cer (raw, json) Hash identifier: LIYME9H6Uqv2z5EAeBx2MNEpbLDCUmMjqRAjXxw7LEA= Subject key identifier: 47:84:F0:82:D6:E3:43:A5:65:16:36:FB:2F:DD:4C:CB:5C:64:E0:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849CA627F089FEA4930D6450080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7/169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 09 May 2025 00:45:34 +0000 Certificate not after: Thu 12 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 400307 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ca:62:7f:08:9f:ea:49:30:d6:45:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 9 00:45:34 2025 GMT Not After : Aug 12 00:45:34 2027 GMT Subject: CN=169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:ea:75:a5:f3:ff:79:af:44:cd:bb:e5:a7: dd:81:9c:ba:32:4b:83:8f:66:91:fd:b4:52:07:15: 8c:f6:66:4f:d7:a8:82:a1:68:b3:59:6a:62:85:b6: 95:e3:c1:df:67:d9:fe:43:b5:35:6b:b1:39:12:04: e3:7f:8f:d2:93:e0:ec:ed:a2:b6:75:80:75:c0:0e: 01:57:a1:df:db:c1:93:b7:cc:ed:ef:48:0b:ab:b7: 45:d4:de:e3:6f:eb:20:fc:54:a9:75:3d:8a:02:c1: 48:e0:2b:10:17:32:a0:56:0a:b0:bf:dc:ec:a6:ad: 35:bf:7e:64:f8:4f:3d:45:3a:e9:98:7f:6c:00:2d: c7:ad:35:16:c5:98:81:84:91:1f:34:b0:ef:63:ae: f2:67:5c:8b:f4:71:02:36:a3:7a:e5:ac:c3:eb:43: bf:3e:d2:ee:19:c8:3d:af:a7:59:66:b7:1b:b6:53: 88:a1:41:5b:e7:fe:ae:05:ab:b2:6b:52:4d:37:88: a4:39:db:82:4c:5e:99:f1:22:4b:a2:58:71:66:c5: 4a:a9:0d:e8:69:8c:0e:86:85:08:51:a9:f3:40:c3: 1c:aa:31:01:e9:52:57:f1:b0:59:7e:a1:37:3b:dd: f9:55:ef:f6:9e:d1:61:69:b5:77:4c:73:e5:98:09: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:84:F0:82:D6:E3:43:A5:65:16:36:FB:2F:DD:4C:CB:5C:64:E0:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7/169d6fe1-275d-4d0e-bfee-5d1cfcc4cfb7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 400307 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:7b:b1:b9:ec:34:86:f4:86:db:5a:9f:58:5d:90:b8:ab:a4: cb:df:55:00:ea:d7:88:08:6f:e6:06:08:b1:cc:44:a2:70:af: 25:85:00:60:f8:c4:34:d3:77:db:7e:62:ff:87:a3:b4:6b:5f: 7a:e4:c9:a7:8b:22:4a:72:b1:7a:f8:f9:df:f7:c9:af:80:3b: 51:dc:78:fa:8c:53:43:1c:93:41:38:f7:83:76:a7:9a:5d:ad: 9e:d0:b7:9c:e9:72:0f:cc:50:ca:46:ee:a0:b9:cb:c7:f7:3f: be:01:2c:33:ce:b7:0a:ad:ae:cd:09:9f:1b:fd:d3:a7:c3:ac: ba:21:61:5a:f6:8f:cc:8d:80:96:cc:1f:41:99:12:79:f6:cc: aa:d0:98:fc:ea:00:13:50:9e:76:9b:44:f4:b2:50:01:bd:d7: 2c:f6:1f:58:64:cf:4f:d3:a6:b7:31:60:75:85:d2:09:ba:59: 43:c6:91:5a:10:4a:44:bb:8a:3d:e3:a3:9a:79:ea:9f:fc:57: f9:ca:ca:9d:1d:d1:e6:ff:40:23:61:27:7f:74:a3:d6:91:b2: 52:2b:fd:34:ce:dd:e7:6f:60:6f:df:59:21:96:99:40:28:aa: ed:c2:b6:bb:39:a6:d9:61:3f:fb:ad:b1:96:c5:22:a5:df:f6: 1d:d8:87:0c -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEnKYn8In+pJMNZFAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUwOTAwNDUzNFoXDTI3MDgxMjAwNDUzNFowLzEtMCsGA1UEAxMk MTY5ZDZmZTEtMjc1ZC00ZDBlLWJmZWUtNWQxY2ZjYzRjZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvajqdaXz/3mvRM275afdgZy6MkuDj2aR/bRS BxWM9mZP16iCoWizWWpihbaV48HfZ9n+Q7U1a7E5EgTjf4/Sk+Ds7aK2dYB1wA4B V6Hf28GTt8zt70gLq7dF1N7jb+sg/FSpdT2KAsFI4CsQFzKgVgqwv9zspq01v35k +E89RTrpmH9sAC3HrTUWxZiBhJEfNLDvY67yZ1yL9HECNqN65azD60O/PtLuGcg9 r6dZZrcbtlOIoUFb5/6uBauya1JNN4ikOduCTF6Z8SJLolhxZsVKqQ3oaYwOhoUI UanzQMMcqjEB6VJX8bBZfqE3O935Ve/2ntFhabV3THPlmAnqRQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFEeE8ILW40OlZRY2+y/dTMtcZOB0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x NjlkNmZlMS0yNzVkLTRkMGUtYmZlZS01ZDFjZmNjNGNmYjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzE2OWQ2ZmUxLTI3NWQtNGQwZS1i ZmVlLTVkMWNmY2M0Y2ZiNy8xNjlkNmZlMS0yNzVkLTRkMGUtYmZlZS01ZDFjZmNj NGNmYjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhuzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABN7sbnsNIb0httan1hdkLirpMvf VQDq14gIb+YGCLHMRKJwryWFAGD4xDTTd9t+Yv+Ho7RrX3rkyaeLIkpysXr4+d/3 ya+AO1HcePqMU0Mck0E494N2p5pdrZ7Qt5zpcg/MUMpG7qC5y8f3P74BLDPOtwqt rs0Jnxv906fDrLohYVr2j8yNgJbMH0GZEnn2zKrQmPzqABNQnnabRPSyUAG91yz2 H1hkz0/TprcxYHWF0gm6WUPGkVoQSkS7ij3jo5p56p/8V/nKyp0d0eb/QCNhJ390 o9aRslIr/TTO3edvYG/fWSGWmUAoqu3Ctrs5ptlhP/utsZbFIqXf9h3Yhww= -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:31 2025 by rpki-client