$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer File: 4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.cer (raw, json) Hash identifier: oen+kTxr56pH5znHldbL/uvuGCgCr6QRn5SmObtX6uk= Subject key identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B80AFCCEA8C70777AEC800BE0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Oct 2025 00:45:23 +0000 Certificate not after: Sun 16 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 54579 IP: 65.255.130.0/24 IP: 65.255.144.0/20 IP: 68.68.184.0/22 IP: 76.8.144.0/20 IP: 199.36.80.0/22 IP: 2606:5780::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:af:cc:ea:8c:70:77:7a:ec:80:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 13 00:45:23 2025 GMT Not After : Jan 16 01:45:23 2028 GMT Subject: CN=4c85e42d-2171-4f6d-837f-3f7bac9d9a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:35:b3:83:6b:8e:4b:a5:79:36:a1:cd:70: 92:e5:6e:db:7e:f4:c0:fa:f5:31:00:92:6a:6d:6d: f4:d2:e2:42:f1:72:da:8d:4d:f5:47:ef:20:f8:a8: 34:4f:c6:72:1e:15:59:9b:22:a9:23:16:dd:bc:2e: c8:59:f8:ff:57:9e:76:69:ec:1a:9a:fb:e6:32:d4: 6a:93:6e:cb:cb:cb:c1:26:d5:8b:17:5e:f0:6e:d3: 80:a0:0e:9e:bd:ec:84:e7:83:c8:f8:0a:96:13:15: 5f:82:29:07:25:ec:b3:cb:7e:f7:8c:e1:b8:34:d6: 02:b8:92:8d:8e:6b:16:25:5e:f0:b3:8d:95:1f:18: 82:87:8b:40:4a:20:35:9d:1e:7d:ac:ff:a5:bf:89: 50:d2:4a:55:af:37:28:3c:c6:96:e6:cf:58:59:ce: f1:ca:69:7a:07:8f:50:f3:d0:c0:20:0b:cd:76:bc: 24:b4:55:34:c9:22:db:56:d6:a9:17:fb:8c:02:27: 38:aa:09:c8:dd:f0:f2:10:b0:38:fc:d2:8b:bd:4e: f1:36:6b:5d:72:43:2f:b7:5f:63:14:cb:1d:12:76: 0a:ac:bd:ff:5d:4f:07:9e:28:60:90:78:fd:c6:6a: fc:6a:85:21:98:e5:53:19:15:55:82:be:df:05:94: 4e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:31:43:41:4B:7B:18:75:0D:A5:83:40:42:11:7D:4D:95:0E:A3:0C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d/4c85e42d-2171-4f6d-837f-3f7bac9d9a3d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 65.255.130.0/24 65.255.144.0/20 68.68.184.0/22 76.8.144.0/20 199.36.80.0/22 IPv6: 2606:5780::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54579 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:2b:22:26:d3:da:08:91:ce:60:e9:ee:0d:1c:0f:53:bf:5e: 26:fe:19:8d:67:0d:bb:a3:f7:97:e6:c8:db:40:3b:53:b0:60: 96:46:db:50:f6:83:b8:69:3d:98:09:8c:81:38:e1:65:e4:b1: c3:b7:d9:20:f9:72:1e:e3:cb:6b:52:6f:dd:e3:46:ad:4d:88: d4:1b:3d:66:88:71:0b:0b:9d:14:65:92:93:07:85:ca:48:59: f9:48:14:5a:e6:42:5a:aa:c3:c9:1c:f8:5e:33:48:e0:a6:bc: a3:ec:31:8b:35:7f:63:7d:83:66:27:4b:8b:72:af:ee:ac:b9: fc:0c:cb:c9:1b:f3:6f:f3:00:f2:e0:cf:4c:b2:ab:21:e7:cf: 29:11:31:62:fa:05:86:89:db:63:e5:e0:a1:e5:ba:68:c4:1a: 33:cf:a7:2b:a9:1b:cd:f2:de:4a:de:94:43:a8:93:40:74:48: fb:b9:a4:80:ff:ac:e3:3f:7d:f6:5d:85:03:83:04:14:3f:fd: 5a:03:e2:a7:c4:1f:a3:f9:98:5d:75:e4:f7:8f:63:f0:02:3d: ee:bd:3d:09:1e:c9:b1:bd:c9:42:f0:25:ec:84:0f:d4:7b:36: 50:74:39:c7:d5:ac:b3:a1:d4:95:39:bd:56:87:3e:8c:da:6c: 3f:ce:05:d9 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEuAr8zqjHB3euyAC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAxMzAwNDUyM1oXDTI4MDExNjAxNDUyM1owLzEtMCsGA1UEAxMk NGM4NWU0MmQtMjE3MS00ZjZkLTgzN2YtM2Y3YmFjOWQ5YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4k1s4NrjkuleTahzXCS5W7bfvTA+vUxAJJq bW300uJC8XLajU31R+8g+Kg0T8ZyHhVZmyKpIxbdvC7IWfj/V552aewamvvmMtRq k27Ly8vBJtWLF17wbtOAoA6eveyE54PI+AqWExVfgikHJeyzy373jOG4NNYCuJKN jmsWJV7ws42VHxiCh4tASiA1nR59rP+lv4lQ0kpVrzcoPMaW5s9YWc7xyml6B49Q 89DAIAvNdrwktFU0ySLbVtapF/uMAic4qgnI3fDyELA4/NKLvU7xNmtdckMvt19j FMsdEnYKrL3/XU8HnihgkHj9xmr8aoUhmOVTGRVVgr7fBZROxwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFEwxQ0FLexh1DaWDQEIRfU2VDqMMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5ZDlhM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRjODVlNDJkLTIxNzEtNGY2ZC04 MzdmLTNmN2JhYzlkOWEzZC80Yzg1ZTQyZC0yMTcxLTRmNmQtODM3Zi0zZjdiYWM5 ZDlhM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBABB/4IDBARB/5ADBAJERLgDBARMCJADBALHJFAw DQQCAAIwBwMFACYGV4AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANUzMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAGMrIibT2giRzmDp7g0cD1O/Xib+GY1nDbuj95fmyNtAO1OwYJZG21D2g7hp PZgJjIE44WXkscO32SD5ch7jy2tSb93jRq1NiNQbPWaIcQsLnRRlkpMHhcpIWflI FFrmQlqqw8kc+F4zSOCmvKPsMYs1f2N9g2YnS4tyr+6sufwMy8kb82/zAPLgz0yy qyHnzykRMWL6BYaJ22Pl4KHlumjEGjPPpyupG83y3krelEOok0B0SPu5pID/rOM/ ffZdhQODBBQ//VoD4qfEH6P5mF115PePY/ACPe69PQkeybG9yULwJeyED9R7NlB0 OcfVrLOh1JU5vVaHPozabD/OBdk= -----END CERTIFICATE-----Generated at Tue Nov 4 21:17:55 2025 by rpki-client