$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a.cer File: 6008afb8-c913-426f-a72d-ea741ab1eb7a.cer (raw, json) Hash identifier: 5OwyPY4TjtxnQNon3AXJS0Z6mFhci/xj3SSavOal3fg= Subject key identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BBF9DF6DF8F0E07EF61EC7180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 04 Nov 2025 13:45:22 +0000 Certificate not after: Mon 07 Feb 2028 13:45:22 +0000 Subordinate resources: AS: 92 IP: 128.153.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:9d:f6:df:8f:0e:07:ef:61:ec:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 4 13:45:22 2025 GMT Not After : Feb 7 13:45:22 2028 GMT Subject: CN=6008afb8-c913-426f-a72d-ea741ab1eb7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:85:3d:a9:c6:0b:6e:26:36:36:33:3b:e3: 7f:fa:4b:a2:14:e3:89:e0:38:28:f9:24:ec:39:f0: 5e:40:43:40:45:15:3e:80:d7:4a:36:d2:c5:8a:4a: db:92:dd:e6:fc:81:8c:5b:01:96:62:ba:24:65:0f: 22:b3:c9:c5:2f:01:fc:b0:7c:73:31:4d:a2:5e:c4: 2c:25:7d:3a:26:7d:7c:23:4d:fa:75:6a:21:5c:6a: 88:c5:2f:0d:87:7f:66:90:20:22:45:38:b5:7d:b7: 2e:20:34:69:4e:76:ae:27:92:b8:92:58:ff:75:65: 2d:55:fd:7a:4f:70:40:e2:33:a7:63:26:b5:f1:d9: ab:b1:42:e4:c3:be:7e:a7:a5:97:04:f5:59:42:a6: 95:75:ce:3b:a8:91:5d:4a:5b:3d:13:64:da:b2:a5: 21:19:55:27:61:7e:ab:35:87:52:d7:d8:ec:59:b4: 72:86:a1:68:a3:8b:7f:31:2a:5e:b4:3a:23:49:d3: f7:a8:e5:23:55:8d:ec:5e:fd:e6:ce:db:d3:4f:55: 00:17:da:23:21:d4:44:77:3f:12:90:9d:f0:38:28: 86:22:ce:3a:fd:90:51:3b:7a:cc:2c:e8:57:d4:a4: e0:be:19:fa:a5:ac:cf:ce:7d:86:f3:06:b9:b0:9b: f3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4C:9A:EC:9D:B1:58:DA:D4:06:B0:56:1E:39:9F:D2:61:49:4A:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6008afb8-c913-426f-a72d-ea741ab1eb7a/6008afb8-c913-426f-a72d-ea741ab1eb7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 128.153.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 92 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:11:7e:74:a8:ec:2f:82:49:37:46:26:a6:9b:83:28:4d:77: 9a:c4:67:53:b3:e9:16:5b:01:1f:06:ef:20:61:dd:36:7a:78: cf:6a:31:d0:7b:6f:47:c3:05:46:14:a9:e1:d7:03:95:e5:af: ea:06:aa:48:1b:fb:00:69:d2:f9:ee:7e:bb:0f:f9:04:c8:af: df:ac:a5:40:b1:3a:4b:86:80:63:81:c2:1b:2b:05:a4:6e:65: 5f:f1:43:2f:c2:6d:c1:c4:39:9f:24:de:82:4a:8a:ba:14:dd: d6:c4:2a:43:1e:7c:7d:b9:81:e4:9d:6e:d9:4d:a0:2f:eb:36: e1:f0:4a:86:cb:d6:91:e5:18:48:e2:c4:73:c2:08:a9:e2:8b: 9e:8e:cd:bf:4e:8a:be:d3:36:f5:e1:10:d1:0a:ce:79:db:66: d2:f8:eb:5b:6e:99:50:38:fc:6b:f8:5b:a6:d6:6e:42:4f:e9: 66:9a:57:50:0e:88:84:3c:6a:4c:d4:c3:d1:0b:73:2e:1b:6c: 5f:a0:64:a6:93:49:fc:30:f5:a0:6c:70:40:03:cb:91:34:e1: 47:a6:a4:54:e8:36:2a:83:5c:76:5d:f9:ba:c3:3a:90:1d:0f: b3:3c:02:f0:7b:50:6a:75:d4:c9:da:8f:39:db:d3:4c:c3:39: 4f:a7:de:4a -----BEGIN CERTIFICATE----- MIIHBjCCBe6gAwIBAgIUAQ0Mn0MoWEu/nfbfjw4H72HscYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTEwNDEzNDUyMloXDTI4MDIwNzEzNDUyMlowLzEtMCsGA1UEAxMk NjAwOGFmYjgtYzkxMy00MjZmLWE3MmQtZWE3NDFhYjFlYjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBWFPanGC24mNjYzO+N/+kuiFOOJ4Dgo+STs OfBeQENARRU+gNdKNtLFikrbkt3m/IGMWwGWYrokZQ8is8nFLwH8sHxzMU2iXsQs JX06Jn18I036dWohXGqIxS8Nh39mkCAiRTi1fbcuIDRpTnauJ5K4klj/dWUtVf16 T3BA4jOnYya18dmrsULkw75+p6WXBPVZQqaVdc47qJFdSls9E2TasqUhGVUnYX6r NYdS19jsWbRyhqFoo4t/MSpetDojSdP3qOUjVY3sXv3mztvTT1UAF9ojIdREdz8S kJ3wOCiGIs46/ZBRO3rMLOhX1KTgvhn6pazPzn2G8wa5sJvzMwIDAQABo4IEGDCC BBQwHQYDVR0OBBYEFJJMmuydsVja1AawVh45n9JhSUrxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFiMWViN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzYwMDhhZmI4LWM5MTMtNDI2Zi1h NzJkLWVhNzQxYWIxZWI3YS82MDA4YWZiOC1jOTEzLTQyNmYtYTcyZC1lYTc0MWFi MWViN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCAmTAYBggrBgEFBQcBCAEB/wQJMAegBTADAgFc MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHIRfnSo7C+CSTdGJqabgyhNd5rEZ1Oz6RZbAR8G7yBh3TZ6eM9q MdB7b0fDBUYUqeHXA5Xlr+oGqkgb+wBp0vnufrsP+QTIr9+spUCxOkuGgGOBwhsr BaRuZV/xQy/CbcHEOZ8k3oJKiroU3dbEKkMefH25geSdbtlNoC/rNuHwSobL1pHl GEjixHPCCKnii56Ozb9Oir7TNvXhENEKznnbZtL461tumVA4/Gv4W6bWbkJP6Waa V1AOiIQ8akzUw9ELcy4bbF+gZKaTSfww9aBscEADy5E04UempFToNiqDXHZd+brD OpAdD7M8AvB7UGp11Mnajznb00zDOU+n3ko= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:09 2025 by rpki-client