$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer File: 324346b5-3875-43b0-bb0d-8052274567d4.cer (raw, json) Hash identifier: T3E8pYUJ/zxr5jpxDofeYEproor8O9blwu7fF/g9A/I= Subject key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B7DE51CCD5E40A32B857F35A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 12 Oct 2025 00:45:22 +0000 Certificate not after: Sat 15 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 55 AS: 69 IP: 128.91.0.0/16 IP: 130.91.0.0/16 IP: 158.130.0.0/16 IP: 165.123.0.0/16 IP: 192.5.44.0/24 IP: 192.84.2.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:e5:1c:cd:5e:40:a3:2b:85:7f:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 12 00:45:22 2025 GMT Not After : Jan 15 01:45:22 2028 GMT Subject: CN=324346b5-3875-43b0-bb0d-8052274567d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b7:6e:b4:db:ac:b0:ff:a3:fc:94:0a:ad:21: cb:9d:9d:8e:dc:40:19:dd:54:8a:88:25:ca:ec:36: 5f:ed:45:1f:0e:e1:05:07:3e:ce:6f:28:e0:fd:ef: 32:be:b7:c9:32:a9:de:72:97:62:d9:b4:bf:5a:43: b6:aa:f7:ed:72:22:e6:6b:49:46:f5:37:dd:4d:9f: 9d:a9:ba:a2:8c:9c:1c:a8:99:8a:73:8b:f0:fb:c2: bf:34:d7:f6:a0:e9:7c:57:15:65:a4:4e:14:78:b8: 43:0b:2c:87:d3:d3:bd:51:ab:92:1a:1f:4f:c4:a6: 53:94:d1:a4:42:3c:43:03:c9:ef:dd:3d:82:e0:69: bf:45:c5:b9:ac:ef:f1:3c:e4:f1:61:7c:b6:b3:a7: b7:f7:7b:23:b5:45:7f:6e:84:7b:6d:2d:99:d0:fd: 9c:53:dc:15:04:ab:ed:37:dc:45:3d:f3:6e:53:06: 73:db:51:05:96:98:6a:24:1c:e0:13:a3:81:45:47: 1f:71:f9:6c:3f:53:00:b2:91:ce:dd:48:0e:16:e7: cf:97:e4:70:e4:73:cc:71:86:9e:dd:32:65:68:a9: c2:c3:b9:71:7a:2d:aa:22:93:93:b1:a2:8d:47:c8: 23:b0:73:bc:1f:8a:80:e1:f9:99:70:21:1c:36:92: 7e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 128.91.0.0/16 130.91.0.0/16 158.130.0.0/16 165.123.0.0/16 192.5.44.0/24 192.84.2.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55 69 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:ed:6d:5d:7b:84:17:e7:f9:5f:51:a6:57:9e:f1:c6:dc:51: 2a:b7:90:0d:16:76:8c:a9:46:b6:f0:5c:a9:8a:31:d7:dd:91: 18:ce:ed:d8:9d:c5:2e:ac:53:1e:4c:2f:c2:f3:11:bb:e5:f7: 6e:c4:10:66:a1:b2:3e:c8:8c:cb:46:99:61:bd:22:4a:21:04: 6f:17:07:68:d4:74:d6:98:a2:97:2b:3b:46:96:09:df:34:ac: 35:3a:46:87:15:55:0c:ae:de:6f:3d:46:cd:2c:ca:08:17:53: d9:2d:88:91:4b:a7:5b:68:2e:48:a2:d6:4d:91:14:39:71:54: d9:b9:a3:3d:31:e0:e9:8c:98:c2:09:86:50:b6:cb:74:7e:a0: 76:5e:89:d3:63:67:9b:20:c1:39:af:72:5a:db:2f:9c:45:87: 20:b7:4d:d7:cb:80:d5:e6:da:f9:2e:77:c6:4e:bb:bc:29:ef: 7b:fb:d5:e9:d4:d9:fe:ce:8c:4e:60:44:89:c4:0c:f7:33:86: fb:e5:05:3b:b2:02:44:50:5b:9b:ca:90:a6:6e:87:05:08:f3: f5:25:44:88:08:a7:bd:15:85:68:36:66:62:73:72:f4:2f:df: 54:81:4a:aa:65:27:a5:ec:e7:19:f5:3d:c0:f5:29:77:4b:c4: ab:08:d6:ac -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEt95RzNXkCjK4V/NaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAxMjAwNDUyMloXDTI4MDExNTAxNDUyMlowLzEtMCsGA1UEAxMk MzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2N2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAordutNussP+j/JQKrSHLnZ2O3EAZ3VSKiCXK 7DZf7UUfDuEFBz7Obyjg/e8yvrfJMqnecpdi2bS/WkO2qvftciLma0lG9TfdTZ+d qbqijJwcqJmKc4vw+8K/NNf2oOl8VxVlpE4UeLhDCyyH09O9UauSGh9PxKZTlNGk QjxDA8nv3T2C4Gm/RcW5rO/xPOTxYXy2s6e393sjtUV/boR7bS2Z0P2cU9wVBKvt N9xFPfNuUwZz21EFlphqJBzgE6OBRUcfcflsP1MAspHO3UgOFufPl+Rw5HPMcYae 3TJlaKnCw7lxei2qIpOTsaKNR8gjsHO8H4qA4fmZcCEcNpJ+owIDAQABo4IENjCC BDIwHQYDVR0OBBYEFEopNMWSZnnp6eAL/n+28Ogpdl4kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z MjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzMyNDM0NmI1LTM4NzUtNDNiMC1i YjBkLTgwNTIyNzQ1NjdkNC8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0 NTY3ZDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMCYEAgABMCADAwCAWwMDAIJbAwMAnoIDAwClewMEAMAFLAMEAMBU AjAbBggrBgEFBQcBCAEB/wQMMAqgCDAGAgE3AgFFMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHHtbV17hBfn +V9Rplee8cbcUSq3kA0WdoypRrbwXKmKMdfdkRjO7didxS6sUx5ML8LzEbvl927E EGahsj7IjMtGmWG9IkohBG8XB2jUdNaYopcrO0aWCd80rDU6RocVVQyu3m89Rs0s yggXU9ktiJFLp1toLkii1k2RFDlxVNm5oz0x4OmMmMIJhlC2y3R+oHZeidNjZ5sg wTmvclrbL5xFhyC3TdfLgNXm2vkud8ZOu7wp73v71enU2f7OjE5gRInEDPczhvvl BTuyAkRQW5vKkKZuhwUI8/UlRIgIp70VhWg2ZmJzcvQv31SBSqplJ6Xs5xn1PcD1 KXdLxKsI1qw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:31:58 2025 by rpki-client