$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b.cer File: 1a8794d9-eb16-4b3c-b869-96971b72a93b.cer (raw, json) Hash identifier: xw5xiy7fRAKw+4CBodC1l5zolej6RqCXErqrMIe3j4I= Subject key identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B72BA5E903AD5459F57AA6C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Oct 2025 00:45:22 +0000 Certificate not after: Tue 11 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 27217 AS: 32140 IP: 52.119.10.0/24 IP: 206.225.28.0/24 IP: 2602:806:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:ba:5e:90:3a:d5:45:9f:57:aa:6c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 8 00:45:22 2025 GMT Not After : Jan 11 01:45:22 2028 GMT Subject: CN=1a8794d9-eb16-4b3c-b869-96971b72a93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:f8:64:4c:92:b1:49:44:74:31:d0:8c:3f: 5e:36:c8:21:05:58:43:91:12:39:b6:ea:74:2c:2f: f6:92:4d:18:ba:d1:14:d9:9c:3b:46:37:6a:bd:4d: 44:2f:ea:00:0c:e0:4e:81:db:54:e2:4f:c2:09:7b: d1:cd:f8:3c:6e:6f:a9:42:02:fb:75:52:e4:40:e4: 3b:ac:37:b1:fd:37:d3:48:89:fa:e7:ec:13:11:2a: 82:bd:b2:08:7d:c4:80:4a:9e:93:9f:40:69:49:ee: 03:01:ae:41:58:9d:03:cb:10:a9:da:21:a3:be:4c: 51:3c:b5:37:f9:93:53:bb:d4:62:44:2f:89:f6:5e: 92:6b:b0:c0:c1:09:d1:83:54:ab:e7:25:33:8d:86: 94:36:17:e0:ad:36:54:ce:50:89:91:6b:36:43:6d: 8b:fc:6c:c5:59:c7:c1:29:2f:2b:cc:8a:50:d9:79: 0c:59:e9:95:67:a2:38:cc:66:41:87:e9:44:0c:ce: eb:b5:24:24:43:ac:bc:0e:b9:53:74:5b:34:cd:15: 0f:54:4b:6e:f5:2f:9b:3c:aa:d4:4a:61:5e:ff:41: cc:28:b7:bd:69:58:ad:1a:7c:c3:18:c5:5b:1f:4b: 5b:2a:6d:85:dd:fb:a5:a5:34:7e:e7:17:e4:25:39: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:64:AB:A8:B6:C6:F4:68:6F:87:CE:88:5F:F1:87:CC:7B:DF:DB:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1a8794d9-eb16-4b3c-b869-96971b72a93b/1a8794d9-eb16-4b3c-b869-96971b72a93b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 52.119.10.0/24 206.225.28.0/24 IPv6: 2602:806:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27217 32140 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:9a:ab:f9:d0:01:d3:22:26:fd:d0:4b:d9:85:82:e5:05:99: 62:b9:ad:33:73:98:50:a2:37:53:67:45:d7:7e:b7:bf:8c:63: 2d:ed:88:e8:e4:46:22:08:58:4b:99:cf:c2:59:e4:cf:45:b4: 80:a3:dd:66:26:7d:f1:6b:3c:c4:23:0e:40:08:30:4f:f6:17: 57:b9:25:ca:36:73:16:82:ca:56:51:b0:55:4e:07:ff:a6:92: c1:1f:8d:bc:3e:85:34:4f:3b:9e:bf:d3:74:aa:cf:46:59:fc: bc:21:1c:1d:92:db:ef:6b:b0:25:62:11:64:27:c2:72:2f:55: 16:7e:96:84:51:3a:28:d1:95:1d:db:2a:c3:cf:03:59:b0:87: 0d:e9:08:71:19:e0:a7:df:87:02:32:18:43:01:0f:3b:93:49: c9:5b:f2:4e:36:70:28:70:f9:2d:c0:7d:3c:00:50:f5:c9:68: e3:14:58:e0:5d:b2:43:54:cb:62:53:ae:d9:9b:b7:68:d1:f4: 7e:25:5c:80:cf:d5:70:2c:0f:59:39:bd:8a:6e:31:bb:89:ef: da:48:e5:a0:59:c9:75:31:3c:14:29:b3:40:bc:b7:cc:d9:d0: a0:c2:14:68:2e:75:26:79:f4:84:a6:1f:86:14:3f:52:b9:ae: b4:19:f9:bc -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEtyul6QOtVFn1eqbEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwODAwNDUyMloXDTI4MDExMTAxNDUyMlowLzEtMCsGA1UEAxMk MWE4Nzk0ZDktZWIxNi00YjNjLWI4NjktOTY5NzFiNzJhOTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlT4ZEySsUlEdDHQjD9eNsghBVhDkRI5tup0 LC/2kk0YutEU2Zw7RjdqvU1EL+oADOBOgdtU4k/CCXvRzfg8bm+pQgL7dVLkQOQ7 rDex/TfTSIn65+wTESqCvbIIfcSASp6Tn0BpSe4DAa5BWJ0DyxCp2iGjvkxRPLU3 +ZNTu9RiRC+J9l6Sa7DAwQnRg1Sr5yUzjYaUNhfgrTZUzlCJkWs2Q22L/GzFWcfB KS8rzIpQ2XkMWemVZ6I4zGZBh+lEDM7rtSQkQ6y8DrlTdFs0zRUPVEtu9S+bPKrU SmFe/0HMKLe9aVitGnzDGMVbH0tbKm2F3fulpTR+5xfkJTlY1QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFFhkq6i2xvRob4fOiF/xh8x739stMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x YTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3MmE5M2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzFhODc5NGQ5LWViMTYtNGIzYy1i ODY5LTk2OTcxYjcyYTkzYi8xYTg3OTRkOS1lYjE2LTRiM2MtYjg2OS05Njk3MWI3 MmE5M2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAA0dwoDBADO4RwwDwQCAAIwCQMHBCYCCAbwADAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgJqUQICfYwwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAV5qr+dAB0yIm /dBL2YWC5QWZYrmtM3OYUKI3U2dF1363v4xjLe2I6ORGIghYS5nPwlnkz0W0gKPd ZiZ98Ws8xCMOQAgwT/YXV7klyjZzFoLKVlGwVU4H/6aSwR+NvD6FNE87nr/TdKrP Rln8vCEcHZLb72uwJWIRZCfCci9VFn6WhFE6KNGVHdsqw88DWbCHDekIcRngp9+H AjIYQwEPO5NJyVvyTjZwKHD5LcB9PABQ9clo4xRY4F2yQ1TLYlOu2Zu3aNH0fiVc gM/VcCwPWTm9im4xu4nv2kjloFnJdTE8FCmzQLy3zNnQoMIUaC51Jnn0hKYfhhQ/ UrmutBn5vA== -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:49 2025 by rpki-client