$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer File: 4433fb4a-0d4c-40b7-b64f-d25082cbc954.cer (raw, json) Hash identifier: mftQ+uLMCYJNZMWwJEmkm12R9NSzJ5knMaLdfWMiT78= Subject key identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BA4FAB0A83C61B503CB80A680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Oct 2025 00:45:22 +0000 Certificate not after: Sat 29 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 400071 IP: 216.73.182.0/23 IP: 2602:fc31::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a4:fa:b0:a8:3c:61:b5:03:cb:80:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 26 00:45:22 2025 GMT Not After : Jan 29 01:45:22 2028 GMT Subject: CN=4433fb4a-0d4c-40b7-b64f-d25082cbc954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:34:0d:2f:e8:5f:a2:85:86:60:06:5f:e5: 66:52:b4:11:c9:2d:38:4e:51:b9:e5:26:13:ae:ad: 07:45:26:29:89:0c:bc:07:cb:81:ab:cc:04:7b:2b: d3:8c:31:83:ff:44:22:13:96:85:55:21:49:6f:37: 69:50:8f:71:0a:a6:c9:fc:ba:4d:7a:8e:9c:ed:6e: ae:e2:ef:b3:d5:9d:01:1b:90:80:8c:ea:27:ef:35: d3:d9:4a:29:18:e4:c5:71:1c:6d:af:79:cc:90:91: 64:21:6f:3a:ff:e6:99:81:62:06:8c:1f:2f:93:22: 66:f5:84:b8:e4:1d:fb:12:e6:dd:e6:a7:76:be:e9: f4:88:d7:47:cd:55:f9:56:75:33:2e:46:79:c9:54: 11:99:22:a6:7e:83:62:f8:f7:ba:30:50:14:04:ad: 1d:4e:e9:4b:75:b7:43:8e:a4:96:64:d8:e6:62:f8: 89:4e:8d:ea:93:ec:c8:48:00:36:18:ed:8e:f0:73: 62:3e:26:c0:6d:ab:37:71:1e:39:b1:ed:cd:6c:f9: 6e:2f:58:b4:ea:82:ff:73:e6:f5:2a:d8:51:cb:77: 66:03:83:c8:71:3f:b0:66:c0:f1:d7:95:11:7b:b0: 71:52:79:85:fc:be:1f:a7:2e:51:2c:21:22:a3:d7: b8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E7:3A:FC:FE:25:50:4F:7C:AA:03:5E:26:53:05:C9:DF:0D:22:09 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4433fb4a-0d4c-40b7-b64f-d25082cbc954/4433fb4a-0d4c-40b7-b64f-d25082cbc954.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 216.73.182.0/23 IPv6: 2602:fc31::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400071 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:43:a6:d3:e5:62:9d:d2:b1:91:21:27:2b:26:58:72:9d:68: 7f:66:db:47:94:1c:9d:ec:00:47:30:33:84:b8:1f:ad:1b:8a: 7a:57:27:0c:65:1c:df:84:ff:f6:82:ff:2c:bf:40:2a:5d:b1: fd:b3:c6:34:ae:e5:9d:e7:4e:de:b4:aa:e3:16:d8:3e:9d:b1: c4:c5:3e:1a:7f:32:29:be:6a:b8:c8:84:61:6c:b9:0e:95:e4: 2d:e2:bc:12:3a:58:89:0a:a2:9b:e0:87:d7:fd:43:f9:8a:73: 09:07:d2:a3:05:b3:7c:a1:43:21:22:38:27:39:e2:e8:83:99: 4b:c1:e3:b5:dd:88:2c:69:dc:4c:7a:d7:03:f3:ad:db:f8:2f: 65:2b:39:3d:74:94:cf:17:bf:2f:7e:64:03:d7:69:8a:4c:51: 7c:6f:62:77:5b:2a:2c:e3:e4:42:34:b6:de:7b:fd:a8:b6:22: f6:e6:1b:6e:ca:d4:0e:ed:65:8d:82:cc:e8:cf:ac:15:5e:7d: 46:3a:12:8d:55:2e:37:2c:1e:83:2c:96:d8:d4:60:96:6e:0e: 01:6b:62:16:74:3e:6d:3e:d3:fd:17:d5:36:39:57:e1:55:2b: f4:11:84:5c:06:e5:e8:87:ec:f0:00:d1:de:59:89:7b:b1:bb: b7:c5:04:23 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEuk+rCoPGG1A8uApoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAyNjAwNDUyMloXDTI4MDEyOTAxNDUyMlowLzEtMCsGA1UEAxMk NDQzM2ZiNGEtMGQ0Yy00MGI3LWI2NGYtZDI1MDgyY2JjOTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNY0DS/oX6KFhmAGX+VmUrQRyS04TlG55SYT rq0HRSYpiQy8B8uBq8wEeyvTjDGD/0QiE5aFVSFJbzdpUI9xCqbJ/LpNeo6c7W6u 4u+z1Z0BG5CAjOon7zXT2UopGOTFcRxtr3nMkJFkIW86/+aZgWIGjB8vkyJm9YS4 5B37Eubd5qd2vun0iNdHzVX5VnUzLkZ5yVQRmSKmfoNi+Pe6MFAUBK0dTulLdbdD jqSWZNjmYviJTo3qk+zISAA2GO2O8HNiPibAbas3cR45se3NbPluL1i06oL/c+b1 KthRy3dmA4PIcT+wZsDx15URe7BxUnmF/L4fpy5RLCEio9e4/QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCLnOvz+JVBPfKoDXiZTBcnfDSIJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJjYmM5NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ0MzNmYjRhLTBkNGMtNDBiNy1i NjRmLWQyNTA4MmNiYzk1NC80NDMzZmI0YS0wZDRjLTQwYjctYjY0Zi1kMjUwODJj YmM5NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAHYSbYwDgQCAAIwCAMGBCYC/DEAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYaxzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHQ6bT5WKd0rGRIScrJlhynWh/ ZttHlByd7ABHMDOEuB+tG4p6VycMZRzfhP/2gv8sv0AqXbH9s8Y0ruWd507etKrj Ftg+nbHExT4afzIpvmq4yIRhbLkOleQt4rwSOliJCqKb4IfX/UP5inMJB9KjBbN8 oUMhIjgnOeLog5lLweO13YgsadxMetcD863b+C9lKzk9dJTPF78vfmQD12mKTFF8 b2J3Wyos4+RCNLbee/2otiL25htuytQO7WWNgszoz6wVXn1GOhKNVS43LB6DLJbY 1GCWbg4Ba2IWdD5tPtP9F9U2OVfhVSv0EYRcBuXoh+zwANHeWYl7sbu3xQQj -----END CERTIFICATE-----Generated at Tue Nov 4 23:19:47 2025 by rpki-client