$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer File: 6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer (raw, json) Hash identifier: BPEz4WOp3r6Fyeo1RFcDrJmCzkTaDiocq0qKJoxqdwA= Subject key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BB0256F73F44CE92CD9A49E80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 30 Oct 2025 00:45:24 +0000 Certificate not after: Wed 02 Feb 2028 01:45:24 +0000 Subordinate resources: AS: 54718 IP: 185.216.124.0/22 IP: 2602:f94f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:25:6f:73:f4:4c:e9:2c:d9:a4:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 30 00:45:24 2025 GMT Not After : Feb 2 01:45:24 2028 GMT Subject: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:f0:f1:a6:eb:4d:f2:60:43:09:ef:85:0f: 05:24:d9:42:22:6b:d3:0e:13:6d:53:15:a8:fa:8f: 16:4f:05:08:c0:da:66:17:bb:66:89:6d:a1:50:83: cd:49:ad:b4:53:0f:7c:b5:c9:3c:e0:37:4f:57:fe: 34:ec:54:8f:fb:d4:f9:1c:c5:48:1c:31:fd:79:10: cd:07:56:b0:92:fa:ab:bc:77:87:f9:3d:21:11:ac: d4:04:6d:9f:27:70:4c:c6:6a:bc:1c:cb:bc:42:19: d5:f1:06:e4:35:56:0e:1e:4a:b0:ff:fb:e4:7e:7f: 14:f9:0b:c6:c8:39:d7:70:69:69:a4:cb:6a:b2:90: 37:a7:52:8a:6f:32:b1:90:2e:30:79:3c:1a:2d:5c: ed:10:8b:f7:36:e2:5a:3e:d9:64:7e:5e:e1:6a:5c: d0:d1:55:82:9f:f0:8e:cd:73:a0:82:a0:56:e7:7f: b9:fa:85:e9:cb:9c:49:5f:2b:39:cc:f4:82:0e:03: 64:4a:9b:4f:e8:bd:13:ce:4f:62:bb:ed:e9:36:fb: 4d:8b:82:d3:06:74:f6:35:29:b8:a7:db:9e:7b:2f: b4:88:6e:3c:4b:5b:23:17:e0:a5:65:77:e1:cd:d5: 8c:8d:cd:fa:3a:23:c6:3b:72:16:38:b8:8a:8e:b4: b9:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 185.216.124.0/22 IPv6: 2602:f94f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54718 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:7b:50:8d:1a:53:15:7c:a7:5d:9b:9b:06:f3:e2:63:ef:72: d2:d8:59:08:00:0f:72:95:6f:14:bf:c7:9e:4a:5c:9d:08:8d: d7:26:9c:1a:bb:f3:45:88:0c:73:9d:7f:45:d2:46:c9:e2:66: 1e:82:67:74:c7:35:2c:84:c6:e7:2f:e0:42:67:f7:c0:b3:c8: d6:a3:0b:c9:5e:03:9f:61:6d:43:67:b3:fb:0e:cb:3d:bb:49: a8:60:07:61:70:44:0d:ae:fc:43:1d:e6:10:7e:80:04:d3:2c: 61:58:dd:7a:93:32:d1:11:70:23:ba:5c:0a:d7:1b:ac:77:2f: d4:a7:06:a3:05:27:3b:9a:ba:cd:f0:28:cb:64:22:f5:b4:80: 02:78:b6:90:e4:05:73:2e:08:c4:4e:dc:1a:c9:ca:79:d3:b4: 74:9e:2d:14:7d:5c:40:d7:75:62:3e:5f:81:ed:ef:37:9b:07: 78:84:15:d0:7a:c2:70:17:80:b1:6e:e9:ec:f8:e7:df:ba:96: cf:37:10:91:52:86:5c:b7:fd:6c:55:5a:de:ea:17:42:35:7b: 63:c8:52:31:fd:5f:f7:0c:69:1a:a2:0a:0f:88:c8:5c:ae:55: 46:a1:b8:a7:dc:cd:89:56:68:2b:36:7e:70:8a:db:40:1f:da: 08:d1:c1:0b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEuwJW9z9EzpLNmknoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAzMDAwNDUyNFoXDTI4MDIwMjAxNDUyNFowLzEtMCsGA1UEAxMk NmVmYTg4MjktNTZmNS00YWMxLTk4YzYtZTRiZjExOWJkODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzfw8abrTfJgQwnvhQ8FJNlCImvTDhNtUxWo +o8WTwUIwNpmF7tmiW2hUIPNSa20Uw98tck84DdPV/407FSP+9T5HMVIHDH9eRDN B1awkvqrvHeH+T0hEazUBG2fJ3BMxmq8HMu8QhnV8QbkNVYOHkqw//vkfn8U+QvG yDnXcGlppMtqspA3p1KKbzKxkC4weTwaLVztEIv3NuJaPtlkfl7halzQ0VWCn/CO zXOggqBW53+5+oXpy5xJXys5zPSCDgNkSptP6L0Tzk9iu+3pNvtNi4LTBnT2NSm4 p9ueey+0iG48S1sjF+ClZXfhzdWMjc36OiPGO3IWOLiKjrS5OQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFCEHUIpkDb2vq8V/12AZbFCBYlHXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5YmQ4ODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZlZmE4ODI5LTU2ZjUtNGFjMS05 OGM2LWU0YmYxMTliZDg4Mi82ZWZhODgyOS01NmY1LTRhYzEtOThjNi1lNGJmMTE5 YmQ4ODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAK52HwwDgQCAAIwCAMGBCYC+U8AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDVvjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXe1CNGlMVfKddm5sG8+Jj73LS 2FkIAA9ylW8Uv8eeSlydCI3XJpwau/NFiAxznX9F0kbJ4mYegmd0xzUshMbnL+BC Z/fAs8jWowvJXgOfYW1DZ7P7Dss9u0moYAdhcEQNrvxDHeYQfoAE0yxhWN16kzLR EXAjulwK1xusdy/UpwajBSc7mrrN8CjLZCL1tIACeLaQ5AVzLgjETtwaycp507R0 ni0UfVxA13ViPl+B7e83mwd4hBXQesJwF4Cxbuns+OffupbPNxCRUoZct/1sVVre 6hdCNXtjyFIx/V/3DGkaogoPiMhcrlVGobin3M2JVmgrNn5wittAH9oI0cEL -----END CERTIFICATE-----Generated at Tue Nov 4 18:56:27 2025 by rpki-client