$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer File: 1ff3f61c-87f6-48c2-84e0-26403bc47959.cer (raw, json) Hash identifier: WT1FKOlbgXf8gmMdImoPpudfqk4T9QNfT/fxddEGy74= Subject key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A849AD7F9D47FB2EF2EE73800 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Jul 2025 17:39:27 +0000 Certificate not after: Wed 28 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 398420 IP: 74.115.80.0/22 IP: 74.126.160.0/20 IP: 74.207.200.0/21 IP: 206.71.144.0/22 IP: 208.89.52.0/22 IP: 216.246.216.0/21 IP: 2605:e940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:9a:d7:f9:d4:7f:b2:ef:2e:e7:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 14 17:39:27 2025 GMT Not After : Jul 28 00:45:34 2027 GMT Subject: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:df:94:1e:33:98:ea:d2:24:c1:2b:03:ad: b9:75:a6:eb:c0:a2:5b:c9:eb:63:ff:04:35:e9:da: 27:59:9b:63:a7:47:62:3f:fd:29:ae:b8:44:51:f5: 9a:dd:05:c4:7e:83:e1:79:cb:d8:ef:74:ab:83:df: ab:11:9d:47:5c:2e:1f:ad:f6:6c:14:9b:df:eb:60: 42:be:45:99:c7:9f:1d:92:bc:e5:39:fa:59:3b:66: fe:bb:ae:22:69:8e:31:53:4c:a5:e3:fb:c4:41:da: a0:ec:9f:94:39:ed:1f:e7:88:f0:be:51:cd:98:52: 1d:8a:65:e4:ec:5e:c7:b3:f4:3e:b7:30:26:2a:78: 1a:79:a7:d1:61:ed:7b:8a:2f:84:09:bf:10:46:be: 66:d7:7a:a3:dc:7b:61:e1:d2:fe:61:96:98:21:ba: 23:8c:e7:c9:1c:f0:98:a7:f1:d3:b6:bf:43:a2:45: b0:8f:d2:5a:f0:3f:63:f6:66:32:84:63:b2:5e:eb: 33:fe:8e:6d:cb:c1:b4:62:98:d7:5a:4f:bf:2a:c2: 6e:d5:5c:24:0a:90:02:c8:cc:c0:47:b2:92:47:15: 4b:cb:89:99:7e:c0:26:35:b8:23:5d:f0:55:b7:9c: 16:4d:38:20:e5:1b:c9:f6:4c:ff:15:b4:1c:2c:70: 23:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.115.80.0/22 74.126.160.0/20 74.207.200.0/21 206.71.144.0/22 208.89.52.0/22 216.246.216.0/21 IPv6: 2605:e940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398420 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:4c:59:39:ff:0b:12:7e:f4:9a:83:c0:21:99:d2:fe:25:68: 53:45:fc:93:92:ee:f3:d5:e0:a5:e8:9b:99:f9:31:81:7e:2a: 95:78:ac:1e:fe:9c:d3:ab:f2:b3:21:bf:6d:cb:2a:05:e6:76: ce:4e:9a:58:d2:ec:0a:b9:1e:f8:5b:e4:a8:7d:76:5f:73:d2: 09:19:6b:2e:21:3e:7a:0a:27:2e:fc:b8:f8:dc:1d:e3:95:99: c7:05:3d:0e:c1:a8:7b:ca:4a:19:d3:45:4b:09:3f:33:bb:15: 7c:1b:85:c0:8e:66:8f:df:12:72:8f:4b:bc:6c:a8:24:3b:d2: 26:2f:92:c9:ef:b1:bb:c6:3c:ba:cf:a2:38:8a:62:d9:01:79: 94:43:ac:54:3e:83:c2:e7:eb:05:46:c6:55:eb:1b:30:d7:fe: bb:d6:a5:31:e5:65:86:6b:7e:71:73:57:a5:5b:5d:6c:a5:a5: 0a:c3:ce:d0:87:c2:49:30:f8:b9:25:4b:7e:19:ea:1b:55:77: 3f:dc:7a:4f:43:0c:8a:b6:43:0e:ee:74:90:03:9e:36:cd:43: 7e:c4:64:6f:3e:fa:9b:1c:dc:84:b4:7c:ab:37:e4:f7:77:43: 86:f0:24:a4:0e:f4:13:05:ba:8a:7a:20:4b:d8:34:5e:5c:6c: 00:9e:42:5f -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEqEmtf51H+y7y7nOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcxNDE3MzkyN1oXDTI3MDcyODAwNDUzNFowLzEtMCsGA1UEAxMk MWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3OTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIXflB4zmOrSJMErA625dabrwKJbyetj/wQ1 6donWZtjp0diP/0prrhEUfWa3QXEfoPhecvY73Srg9+rEZ1HXC4frfZsFJvf62BC vkWZx58dkrzlOfpZO2b+u64iaY4xU0yl4/vEQdqg7J+UOe0f54jwvlHNmFIdimXk 7F7Hs/Q+tzAmKngaeafRYe17ii+ECb8QRr5m13qj3Hth4dL+YZaYIbojjOfJHPCY p/HTtr9DokWwj9Ja8D9j9mYyhGOyXusz/o5ty8G0YpjXWk+/KsJu1VwkCpACyMzA R7KSRxVLy4mZfsAmNbgjXfBVt5wWTTgg5RvJ9kz/FbQcLHAjdwIDAQABo4IESDCC BEQwHQYDVR0OBBYEFM8A/4qNGnPXapuHEF5/dWMJWhMyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x ZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzFmZjNmNjFjLTg3ZjYtNDhjMi04 NGUwLTI2NDAzYmM0Nzk1OS8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2Jj NDc5NTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAJKc1ADBARKfqADBANKz8gDBALOR5ADBALQWTQD BAPY9tgwDQQCAAIwBwMFACYF6UAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhRU MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGZMWTn/CxJ+9JqDwCGZ0v4laFNF/JOS7vPV4KXom5n5MYF+KpV4 rB7+nNOr8rMhv23LKgXmds5OmljS7Aq5Hvhb5Kh9dl9z0gkZay4hPnoKJy78uPjc HeOVmccFPQ7BqHvKShnTRUsJPzO7FXwbhcCOZo/fEnKPS7xsqCQ70iYvksnvsbvG PLrPojiKYtkBeZRDrFQ+g8Ln6wVGxlXrGzDX/rvWpTHlZYZrfnFzV6VbXWylpQrD ztCHwkkw+LklS34Z6htVdz/cek9DDIq2Qw7udJADnjbNQ37EZG8++psc3IS0fKs3 5Pd3Q4bwJKQO9BMFuop6IEvYNF5cbACeQl8= -----END CERTIFICATE-----Generated at Wed Nov 5 06:31:00 2025 by rpki-client