$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer File: 5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer (raw, json) Hash identifier: TQwyVyPRx2wOmZXUEXGunDNxjli13JvVCdiYWw91mus= Subject key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849D58D3CCF0D7B32F9F3388C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 13 May 2025 00:45:34 +0000 Certificate not after: Mon 16 Aug 2027 00:45:34 +0000 Subordinate resources: AS: 53278 IP: 69.160.32.0/20 IP: 162.213.40.0/22 IP: 192.34.64.0/22 IP: 199.204.16.0/21 IP: 2607:3000::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:8d:3c:cf:0d:7b:32:f9:f3:38:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 13 00:45:34 2025 GMT Not After : Aug 16 00:45:34 2027 GMT Subject: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:36:6e:5c:70:13:9d:57:25:98:67:bf:d9:7f: c2:62:16:6d:1b:19:49:90:5b:9e:0f:f1:f8:c7:5e: fc:ee:1c:8f:30:9f:76:da:97:87:69:52:fc:66:19: b6:ea:ad:46:0e:c5:9f:c2:2a:97:6c:9b:59:ea:8e: c7:8c:5b:0a:a2:49:d8:de:3a:b5:a8:fc:cb:b2:11: 13:40:be:ed:9d:30:be:05:1f:57:50:3e:33:5b:b2: 33:bb:01:02:27:a1:2d:c8:77:7e:74:e7:ed:c2:5e: 08:98:13:de:eb:71:fd:4f:3a:49:57:48:44:a8:06: 33:3a:5b:5e:ce:3c:fe:0a:95:96:6f:d3:e9:46:07: 7c:5e:78:a1:1c:cb:c8:9e:d5:d8:f4:95:51:c8:30: 27:55:6f:7a:13:76:d4:3c:1c:b4:3d:dc:f2:75:4f: 53:d9:74:29:ca:1a:3a:fd:29:53:58:30:96:7f:12: 41:fd:06:eb:0d:01:61:f6:18:20:d1:56:6d:91:b1: 62:07:b8:d6:ab:71:08:3b:d9:91:f4:68:2a:cc:ae: 57:24:f7:51:81:6e:6e:f7:2b:3e:b7:d2:bf:d8:8f: 59:7a:12:b8:ed:97:78:8c:3a:c4:b6:38:4f:d9:d8: 88:5f:13:71:22:6c:df:b3:ee:89:62:c1:58:f0:40: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 69.160.32.0/20 162.213.40.0/22 192.34.64.0/22 199.204.16.0/21 IPv6: 2607:3000::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53278 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:42:9c:26:4b:87:e1:4b:a7:c8:c1:7e:50:f6:98:d0:72:70: be:81:72:bb:ee:e1:0e:95:ae:e7:0f:31:ca:bf:f0:79:70:f3: 74:a8:7c:de:83:fb:8e:b1:2d:a6:5c:4d:52:65:cd:cd:21:02: 80:c0:47:9b:f1:1d:b4:89:65:3e:e8:28:13:07:af:19:a5:a2: 78:c2:58:29:24:bd:01:8e:e7:8a:4b:f2:d0:4e:85:df:bf:a2: eb:12:e7:f3:79:e7:03:b4:68:37:d0:0d:14:ba:43:4c:f2:4e: 54:92:5e:4f:6c:54:25:3c:e6:f3:a3:97:aa:37:04:25:7a:5d: 21:bd:fa:0d:79:4f:96:96:9a:4d:84:7c:48:35:91:23:15:f5: fd:01:01:5b:a5:1b:76:5e:f7:8c:19:fd:a1:b0:0b:c4:d8:16: e7:d4:dc:f1:39:40:ce:b1:32:e7:c7:d2:1f:28:34:12:d5:03: 88:99:5e:32:77:3d:2f:14:d0:d6:76:e7:dd:48:6e:8e:d3:68: 08:d2:eb:36:58:3d:c8:bb:75:7e:1b:d1:5d:a1:ee:42:e7:f8: 64:6e:e0:ce:44:9b:79:3b:c7:7f:a2:5d:b8:39:50:69:05:a3: a8:c5:a5:a3:a7:1f:57:58:0f:e0:8e:e8:22:55:12:ca:27:79: a9:d5:49:7f -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEnVjTzPDXsy+fM4jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUxMzAwNDUzNFoXDTI3MDgxNjAwNDUzNFowLzEtMCsGA1UEAxMk NTAxN2NlZDUtNmUwMy00YzIwLTllYjItY2FhNTdhMmY3ODI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTZuXHATnVclmGe/2X/CYhZtGxlJkFueD/H4 x1787hyPMJ922peHaVL8Zhm26q1GDsWfwiqXbJtZ6o7HjFsKoknY3jq1qPzLshET QL7tnTC+BR9XUD4zW7IzuwECJ6EtyHd+dOftwl4ImBPe63H9TzpJV0hEqAYzOlte zjz+CpWWb9PpRgd8XnihHMvIntXY9JVRyDAnVW96E3bUPBy0PdzydU9T2XQpyho6 /SlTWDCWfxJB/QbrDQFh9hgg0VZtkbFiB7jWq3EIO9mR9GgqzK5XJPdRgW5u9ys+ t9K/2I9ZehK47Zd4jDrEtjhP2diIXxNxImzfs+6JYsFY8ECu8wIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFCK+jxphVHp4912K6NJAlzS37HmxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2EyZjc4MjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzUwMTdjZWQ1LTZlMDMtNGMyMC05 ZWIyLWNhYTU3YTJmNzgyOS81MDE3Y2VkNS02ZTAzLTRjMjAtOWViMi1jYWE1N2Ey Zjc4MjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARFoCADBAKi1SgDBALAIkADBAPHzBAwDQQCAAIw BwMFACYHMAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANAeMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHBC nCZLh+FLp8jBflD2mNBycL6Bcrvu4Q6VrucPMcq/8Hlw83SofN6D+46xLaZcTVJl zc0hAoDAR5vxHbSJZT7oKBMHrxmlonjCWCkkvQGO54pL8tBOhd+/ousS5/N55wO0 aDfQDRS6Q0zyTlSSXk9sVCU85vOjl6o3BCV6XSG9+g15T5aWmk2EfEg1kSMV9f0B AVulG3Ze94wZ/aGwC8TYFufU3PE5QM6xMufH0h8oNBLVA4iZXjJ3PS8U0NZ2591I bo7TaAjS6zZYPci7dX4b0V2h7kLn+GRu4M5Em3k7x3+iXbg5UGkFo6jFpaOnH1dY D+CO6CJVEsoneanVSX8= -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:30 2025 by rpki-client