$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584.cer File: 6c5be2bd-61a2-464a-be54-34e87a4a9584.cer (raw, json) Hash identifier: BH8TbJ+58I+eBOODjud5AVlJ3SHDjoA5hL0Bq+xgxBI= Subject key identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AF24EEE52B9F78A9BEDD9C280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 23 Aug 2025 00:45:25 +0000 Certificate not after: Fri 26 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 31851 IP: 104.219.188.0/22 IP: 167.88.52.0/22 IP: 216.38.236.0/22 IP: 216.146.12.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:4e:ee:52:b9:f7:8a:9b:ed:d9:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 23 00:45:25 2025 GMT Not After : Nov 26 01:45:25 2027 GMT Subject: CN=6c5be2bd-61a2-464a-be54-34e87a4a9584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e3:aa:ac:65:9e:7b:86:22:b6:b0:fd:fb:b0: 44:4f:8a:c1:7c:df:b5:51:0a:37:23:26:f7:f5:f8: 7f:0c:04:9e:02:26:7e:74:e0:79:61:15:30:e2:0f: b7:fa:dc:6d:78:bb:1c:9c:a5:d8:e5:a3:3c:3f:1b: a2:37:a1:10:16:79:5a:2a:12:2e:31:e4:9d:79:90: a6:d1:09:ef:d8:3d:bf:6c:b0:2d:23:e1:d7:2d:dc: 73:75:6d:24:3b:e7:1a:ce:2d:48:78:0e:30:91:c8: 86:a4:39:ed:9a:d0:b3:9f:ab:6c:85:26:bd:d3:82: b1:0d:78:94:94:8c:d6:0b:fb:67:b0:dd:71:35:88: e4:01:00:31:a1:59:b9:a4:de:fd:9d:16:c3:b0:ce: 79:bf:3a:81:a1:d3:a1:03:62:8a:e7:b8:ec:6a:e5: a8:74:d7:42:16:72:00:2f:5a:68:eb:76:54:2b:2c: c4:8a:ae:fd:2c:43:6d:71:64:a3:06:54:d1:38:7b: 28:68:f6:a0:8c:f9:c9:78:c1:53:42:99:92:ca:78: 38:3c:46:32:a4:66:f7:7e:e7:bd:86:af:2c:16:f6: 21:4f:cf:a8:4b:63:be:41:4e:36:ce:8b:3f:ad:9e: 80:49:67:9a:7a:cd:14:ba:7d:7f:2e:3b:cd:3a:88: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C1:42:F4:9C:11:05:F4:E8:B0:7B:1A:7F:C5:2A:C4:77:83:D0:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c5be2bd-61a2-464a-be54-34e87a4a9584/6c5be2bd-61a2-464a-be54-34e87a4a9584.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.219.188.0/22 167.88.52.0/22 216.38.236.0/22 216.146.12.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31851 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:e0:51:51:a1:c6:d5:47:82:fa:63:d6:e7:90:73:0b:05:08: 6d:1b:37:f3:54:0b:98:33:70:12:4b:88:79:e6:65:f9:b1:09: c6:d6:c6:f7:01:57:fb:61:3c:c2:cf:3b:65:75:e1:e9:74:34: 05:f1:55:52:11:e4:5c:e8:cf:3e:55:62:14:bd:e1:d8:ec:d3: 54:27:e4:07:ae:30:4e:41:9b:43:99:bb:e0:76:db:f4:2c:10: bd:e4:1d:47:ef:f1:6c:6a:c5:d1:5c:6c:98:61:45:a3:2d:d5: 07:32:35:6e:eb:c7:8a:35:5f:b5:d8:24:e8:c9:d9:7a:5d:3d: 1b:4a:7d:e6:73:ad:f3:18:92:ad:63:bb:d0:a3:d2:62:2e:dd: ec:88:88:04:af:53:6f:31:c7:3e:1f:6a:c7:07:06:45:c5:f1: 7c:4a:e0:eb:86:98:2e:57:c6:59:71:b3:e8:0a:b3:6a:dd:32: 08:23:f5:62:c7:e8:a5:d9:76:bc:6c:a5:50:b2:e9:4b:d1:dc: fa:37:b7:00:2f:f3:f6:c1:00:ae:e1:a3:8b:ff:d2:d6:77:65: 4e:72:77:34:d7:04:fe:a7:5f:41:04:85:df:db:e0:b8:84:c3: 86:07:5b:1e:11:b8:ca:7a:1a:8f:54:44:f7:18:b5:35:a7:18: 92:cf:5b:8c -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEryTu5SufeKm+3ZwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgyMzAwNDUyNVoXDTI3MTEyNjAxNDUyNVowLzEtMCsGA1UEAxMk NmM1YmUyYmQtNjFhMi00NjRhLWJlNTQtMzRlODdhNGE5NTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+OqrGWee4YitrD9+7BET4rBfN+1UQo3Iyb3 9fh/DASeAiZ+dOB5YRUw4g+3+txteLscnKXY5aM8PxuiN6EQFnlaKhIuMeSdeZCm 0Qnv2D2/bLAtI+HXLdxzdW0kO+cazi1IeA4wkciGpDntmtCzn6tshSa904KxDXiU lIzWC/tnsN1xNYjkAQAxoVm5pN79nRbDsM55vzqBodOhA2KK57jsauWodNdCFnIA L1po63ZUKyzEiq79LENtcWSjBlTROHsoaPagjPnJeMFTQpmSyng4PEYypGb3fue9 hq8sFvYhT8+oS2O+QU42zos/rZ6ASWeaes0Uun1/LjvNOoighQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFIzBQvScEQX06LB7Gn/FKsR3g9BxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 YzViZTJiZC02MWEyLTQ2NGEtYmU1NC0zNGU4N2E0YTk1ODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZjNWJlMmJkLTYxYTItNDY0YS1i ZTU0LTM0ZTg3YTRhOTU4NC82YzViZTJiZC02MWEyLTQ2NGEtYmU1NC0zNGU4N2E0 YTk1ODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAJo27wDBAKnWDQDBALYJuwDBALYkgwwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICfGswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAeOBRUaHG1UeC+mPW55BzCwUI bRs381QLmDNwEkuIeeZl+bEJxtbG9wFX+2E8ws87ZXXh6XQ0BfFVUhHkXOjPPlVi FL3h2OzTVCfkB64wTkGbQ5m74Hbb9CwQveQdR+/xbGrF0VxsmGFFoy3VBzI1buvH ijVftdgk6MnZel09G0p95nOt8xiSrWO70KPSYi7d7IiIBK9TbzHHPh9qxwcGRcXx fErg64aYLlfGWXGz6Aqzat0yCCP1Ysfopdl2vGylULLpS9Hc+je3AC/z9sEAruGj i//S1ndlTnJ3NNcE/qdfQQSF39vguITDhgdbHhG4ynoaj1RE9xi1NacYks9bjA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:02:12 2025 by rpki-client