$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer File: 4a74ffe6-3c09-4633-b8de-781dfa287da6.cer (raw, json) Hash identifier: 8iF5UdhaoYaGk+75ryaK2U5sJxQjwAArhKWKH3ED6Xo= Subject key identifier: C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858499AECDD37944BD5DF4A8B3600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Apr 2025 00:45:33 +0000 Certificate not after: Mon 26 Jul 2027 00:45:33 +0000 Subordinate resources: AS: 398266 IP: 130.51.202.0/23 IP: 167.253.84.0/22 IP: 216.230.18.0/24 IP: 2602:feae::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:ec:dd:37:94:4b:d5:df:4a:8b:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 22 00:45:33 2025 GMT Not After : Jul 26 00:45:33 2027 GMT Subject: CN=4a74ffe6-3c09-4633-b8de-781dfa287da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:c2:58:05:01:86:dc:38:55:d9:8b:30:5f: 11:26:c8:13:a5:fe:f6:fc:50:6a:69:be:f9:35:a6: 7a:33:14:77:d8:7e:60:48:ea:66:6d:17:3c:58:60: 47:88:e4:37:87:e0:70:0c:06:8c:1d:13:28:98:41: f9:a0:11:69:0b:7e:80:7c:69:2b:f7:a2:96:a1:0f: 4e:96:d6:c2:77:8c:e2:9f:a4:a5:a3:bd:77:00:7d: 93:37:92:78:2c:12:0d:4a:ee:42:4f:94:20:02:62: 1c:24:df:50:b8:84:8f:ed:1e:f0:3e:6d:d4:4f:00: bb:88:1c:04:d8:7b:3b:7e:18:78:f4:5a:a7:b6:07: 9f:ec:a0:b6:a0:e4:53:c9:86:bb:87:b9:fd:fc:4a: 03:03:10:57:df:56:1e:e4:27:82:24:a9:7c:dd:02: c5:a2:6c:a4:2b:24:54:33:6b:55:21:f8:74:17:d0: 6b:43:24:99:a5:d3:5c:9e:78:5b:2b:29:38:2e:ab: ea:b5:72:84:a6:26:b3:24:b6:7c:3d:6b:89:db:2e: 6f:9f:44:58:aa:1f:20:c1:9c:7c:bd:22:e0:2f:c2: 86:72:b3:81:bb:4d:c0:46:54:b9:60:b2:3e:7e:eb: d5:9f:e2:25:6e:ba:f8:4d:4c:0b:08:c9:57:1a:25: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 130.51.202.0/23 167.253.84.0/22 216.230.18.0/24 IPv6: 2602:feae::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398266 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:de:69:3a:ca:53:7f:ec:c9:3a:ca:c1:9a:30:97:fd:ad:29: df:50:f0:14:10:d8:c1:f4:d3:1f:e2:77:d6:61:b2:c4:e0:f7: 13:99:38:e2:b2:27:90:d5:09:9d:26:2f:8d:6a:32:1d:ca:cf: 28:b9:f6:9b:06:b2:9a:32:da:9a:0b:bf:04:e7:d6:23:b3:02: 1b:8c:9e:00:a9:c1:ac:df:7e:32:97:39:d7:e4:6c:eb:23:73: 2f:1f:b2:f8:fe:2b:1d:5b:0c:16:c3:60:08:d0:ff:4f:79:c4: 0a:fd:df:ba:42:c4:40:b1:a7:d8:a6:5e:7a:87:8d:08:d0:13: 32:1c:8b:7b:5b:9b:d1:f6:66:ff:5b:77:9e:34:28:9e:27:0e: d1:f5:4c:8a:3b:48:d8:2b:86:cd:d4:31:02:aa:6d:c5:47:10: a2:e0:3f:21:a5:29:80:39:2b:3c:a2:04:54:3f:07:85:ef:ad: c0:c8:f0:f0:17:2d:05:5e:3b:56:1a:a8:96:83:9f:99:01:8d: d5:6b:9c:e3:30:4f:53:eb:30:4d:ef:32:47:fe:35:bb:37:05: 24:53:3e:60:77:ef:67:39:26:4c:62:0c:71:cf:65:f7:c8:89: 8a:e9:a1:88:1d:d0:9b:4e:55:50:3e:18:26:f3:bc:92:59:c6: 35:4c:01:66 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWEma7N03lEvV30qLNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQyMjAwNDUzM1oXDTI3MDcyNjAwNDUzM1owLzEtMCsGA1UEAxMk NGE3NGZmZTYtM2MwOS00NjMzLWI4ZGUtNzgxZGZhMjg3ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj/CWAUBhtw4VdmLMF8RJsgTpf72/FBqab75 NaZ6MxR32H5gSOpmbRc8WGBHiOQ3h+BwDAaMHRMomEH5oBFpC36AfGkr96KWoQ9O ltbCd4zin6Slo713AH2TN5J4LBINSu5CT5QgAmIcJN9QuISP7R7wPm3UTwC7iBwE 2Hs7fhh49Fqntgef7KC2oORTyYa7h7n9/EoDAxBX31Ye5CeCJKl83QLFomykKyRU M2tVIfh0F9BrQySZpdNcnnhbKyk4LqvqtXKEpiazJLZ8PWuJ2y5vn0RYqh8gwZx8 vSLgL8KGcrOBu03ARlS5YLI+fuvVn+Ilbrr4TUwLCMlXGiWhNQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFMlvxBEw6PKIpIiRyAOmN+qiHKUwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 YTc0ZmZlNi0zYzA5LTQ2MzMtYjhkZS03ODFkZmEyODdkYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRhNzRmZmU2LTNjMDktNDYzMy1i OGRlLTc4MWRmYTI4N2RhNi80YTc0ZmZlNi0zYzA5LTQ2MzMtYjhkZS03ODFkZmEy ODdkYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAGCM8oDBAKn/VQDBADY5hIwDgQCAAIwCAMGBCYC /q4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYTujBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBw3mk6ylN/ 7Mk6ysGaMJf9rSnfUPAUENjB9NMf4nfWYbLE4PcTmTjisieQ1QmdJi+NajIdys8o ufabBrKaMtqaC78E59YjswIbjJ4AqcGs334ylznX5GzrI3MvH7L4/isdWwwWw2AI 0P9PecQK/d+6QsRAsafYpl56h40I0BMyHIt7W5vR9mb/W3eeNCieJw7R9UyKO0jY K4bN1DECqm3FRxCi4D8hpSmAOSs8ogRUPweF763AyPDwFy0FXjtWGqiWg5+ZAY3V a5zjME9T6zBN7zJH/jW7NwUkUz5gd+9nOSZMYgxxz2X3yImK6aGIHdCbTlVQPhgm 87ySWcY1TAFm -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:37 2025 by rpki-client