$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer File: 5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer (raw, json) Hash identifier: n5oaIo5KcuwOjoEFdp77wyxPGeRE6tD7F8gfET59fyY= Subject key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849E64D55A96CF0A7C1443D65E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 19 May 2025 00:45:33 +0000 Certificate not after: Sun 22 Aug 2027 00:45:33 +0000 Subordinate resources: AS: 400226 IP: 23.128.248.0/24 IP: 204.197.168.0/22 IP: 2602:fc05::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:4d:55:a9:6c:f0:a7:c1:44:3d:65:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 19 00:45:33 2025 GMT Not After : Aug 22 00:45:33 2027 GMT Subject: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:eb:dc:12:40:51:91:69:fb:fe:b8:b5:1d:85: 5b:ba:6c:f7:ea:11:1c:c4:e7:55:c7:7a:2b:60:b4: ff:99:88:77:b7:3a:a5:81:0a:e0:e6:1c:9b:17:73: b5:50:40:da:91:df:01:bd:71:c9:3a:fb:70:63:1a: 24:c6:88:cb:7d:a6:1f:dc:cf:ec:8c:77:6b:5e:c1: 40:aa:ec:6e:72:6b:d2:bc:4a:d7:8f:e9:b5:1c:29: 67:e6:15:b1:39:79:07:e6:d4:37:87:6b:4d:4a:d5: 46:60:0a:9c:0d:16:04:48:76:85:8e:1f:35:73:fd: bd:db:b4:97:e9:00:65:77:2e:a4:b3:02:95:6f:2c: c3:1c:cf:6a:bf:7a:93:e7:18:c5:39:fc:51:57:09: 16:22:d2:33:71:be:34:7a:26:0b:74:1e:f8:8d:8d: 6a:67:d1:55:3a:ef:f1:0e:fe:1e:68:19:50:48:f5: 69:90:98:71:ff:86:12:be:76:b3:6e:35:45:8e:7b: 49:1f:fa:ec:5e:5e:33:9b:9f:e8:3f:f1:f0:46:3f: d0:6e:77:62:52:21:de:f0:94:70:39:28:5c:17:2a: 9c:d7:f9:96:21:c5:d4:ab:15:eb:fd:60:7b:04:7e: 91:62:0c:b8:69:ab:30:17:5a:73:66:4f:6e:de:d1: 01:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.128.248.0/24 204.197.168.0/22 IPv6: 2602:fc05::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400226 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:36:e2:08:c0:57:78:37:e8:62:47:36:d0:58:b0:6c:34:7c: dc:a0:00:07:3b:18:b5:7d:65:d5:9e:2c:d2:6c:ed:79:cd:a6: 8b:3b:20:ac:79:f9:0c:46:67:4c:9d:90:62:8f:54:d0:ab:49: c0:7e:01:64:47:03:7b:5a:55:59:c1:7e:fc:f0:1b:9f:6f:07: d9:5a:54:20:a5:27:35:46:22:8b:4a:1b:ee:2a:f4:02:98:27: 29:5e:f0:cd:d0:01:14:aa:98:33:15:68:36:4c:52:43:17:ec: 1c:ff:17:a2:80:65:45:b9:3a:3f:39:a4:9b:43:5d:44:b0:03: 73:cb:c9:37:c0:a2:63:82:b9:18:57:95:a7:a8:ee:6d:2d:a4: 11:32:08:79:3f:d1:0c:f3:cb:e0:8f:69:c8:8b:3a:08:e6:44: 2d:d6:4b:97:b6:62:e8:b0:15:a5:ed:72:cf:e5:66:c9:7d:0f: c9:f1:b6:97:1a:df:e3:f5:4b:59:e9:fd:b8:0a:e1:dc:00:37: ca:e5:19:c8:7d:57:b9:b1:be:da:d3:c9:14:d6:b6:83:53:8e: 1c:e1:91:ae:0c:a2:8a:48:dd:8c:ce:1a:11:98:1f:1c:db:2f: fd:d9:21:85:e3:67:ba:28:ee:2f:30:9d:11:0c:0d:24:cb:1b: af:bf:39:8a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEnmTVWpbPCnwUQ9ZeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUxOTAwNDUzM1oXDTI3MDgyMjAwNDUzM1owLzEtMCsGA1UEAxMk NTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2MxZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+vcEkBRkWn7/ri1HYVbumz36hEcxOdVx3or YLT/mYh3tzqlgQrg5hybF3O1UEDakd8BvXHJOvtwYxokxojLfaYf3M/sjHdrXsFA quxucmvSvErXj+m1HCln5hWxOXkH5tQ3h2tNStVGYAqcDRYESHaFjh81c/2927SX 6QBldy6kswKVbyzDHM9qv3qT5xjFOfxRVwkWItIzcb40eiYLdB74jY1qZ9FVOu/x Dv4eaBlQSPVpkJhx/4YSvnazbjVFjntJH/rsXl4zm5/oP/HwRj/QbndiUiHe8JRw OShcFyqc1/mWIcXUqxXr/WB7BH6RYgy4aaswF1pzZk9u3tEBiQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFF9KYq8ux4Qq4MXa5raU2IkXT9UaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU5MzNhZjcwLWZhZTQtNDRjNi05 ZTQyLTJiOWVkYTNjMWUwZS81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEz YzFlMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgPgDBALMxagwDgQCAAIwCAMGACYC/AUAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYbYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUNuIIwFd4N+hiRzbQ WLBsNHzcoAAHOxi1fWXVnizSbO15zaaLOyCsefkMRmdMnZBij1TQq0nAfgFkRwN7 WlVZwX788BufbwfZWlQgpSc1RiKLShvuKvQCmCcpXvDN0AEUqpgzFWg2TFJDF+wc /xeigGVFuTo/OaSbQ11EsANzy8k3wKJjgrkYV5WnqO5tLaQRMgh5P9EM88vgj2nI izoI5kQt1kuXtmLosBWl7XLP5WbJfQ/J8baXGt/j9UtZ6f24CuHcADfK5RnIfVe5 sb7a08kU1raDU44c4ZGuDKKKSN2MzhoRmB8c2y/92SGF42e6KO4vMJ0RDA0kyxuv vzmK -----END CERTIFICATE-----Generated at Wed Nov 5 11:13:08 2025 by rpki-client