$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer File: 704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer (raw, json) Hash identifier: 3rx7Ffz9ZhKsvN5UWhsDrRt4zYt8cpHSb1kCYu94Cgc= Subject key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A36A54B63CEC88B913078AA80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Jun 2025 19:27:28 +0000 Certificate not after: Sat 26 Dec 2026 01:45:26 +0000 Subordinate resources: IP: 137.57.0.0/16 IP: 146.152.0.0/16 IP: 192.55.32.0 -- 192.55.45.255 IP: 192.55.233.0/24 IP: 204.128.183.0/24 IP: 204.130.196.0/24 IP: 2620:104:9000::/44 IP: 2620:148::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:a5:4b:63:ce:c8:8b:91:30:78:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 16 19:27:28 2025 GMT Not After : Dec 26 01:45:26 2026 GMT Subject: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7c:dc:1a:dc:66:8a:c6:df:f3:a5:e6:d6:7b: 27:ee:98:12:ef:ba:90:21:7b:af:69:f3:92:e2:c6: b7:9d:6d:08:e2:42:3b:1c:2a:14:d1:30:5d:22:07: 57:28:a7:61:f3:73:b2:74:06:d2:ef:33:f5:74:ea: 81:79:ce:4a:0a:30:89:57:b1:21:bf:f3:41:71:dd: e9:a4:95:8a:e6:83:54:dc:5c:e0:71:aa:36:c5:7f: 06:5e:1d:92:07:7b:95:45:63:c0:b5:2a:91:72:99: e4:a3:b0:be:be:50:29:1a:28:fe:d1:08:5e:f4:4f: 9a:25:35:24:2b:bd:68:b2:e0:81:50:28:c4:c1:e3: ee:3b:fc:0e:d0:91:5c:88:be:74:08:f1:26:3f:69: 18:dc:04:fd:8c:2c:17:f2:f5:9c:1f:fc:69:b4:50: 51:46:4e:aa:21:bc:13:7d:d7:88:04:6d:06:2c:e5: a9:cd:02:12:ac:20:85:ba:bc:42:4f:5a:41:cf:59: 68:5f:da:6f:1b:b1:2d:16:b1:d0:a1:b8:0e:bb:0c: ae:18:17:15:1e:b4:a4:e9:f2:aa:ad:c8:49:28:8e: c3:35:27:bf:81:50:b8:14:4d:65:09:24:dd:4f:ab: 9d:00:b1:78:6d:4b:2e:af:d0:2c:82:d5:32:1d:9f: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 137.57.0.0/16 146.152.0.0/16 192.55.32.0-192.55.45.255 192.55.233.0/24 204.128.183.0/24 204.130.196.0/24 IPv6: 2620:104:9000::/44 2620:148::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:73:af:8b:f5:20:3b:25:25:b9:9e:e2:9d:60:94:78:6f:21: df:bc:d6:30:ae:d9:76:3f:04:2a:53:40:a1:56:36:85:b2:79: 8d:e5:b4:4e:b5:54:fb:e6:31:3e:9b:f4:6b:01:94:aa:a2:ce: f9:b0:6c:06:df:fb:b2:e9:8e:fb:b6:4e:ca:a0:2a:dc:7d:d9: c3:c1:32:ec:ac:c6:67:1c:39:b0:62:3f:55:2a:48:f6:a9:7d: 74:4f:be:34:a9:9f:59:9e:10:ab:91:5e:31:3a:f3:00:a8:4a: ae:7f:60:5f:ea:71:06:0b:d6:1b:b0:24:06:70:c3:21:f6:bc: 35:be:93:6e:62:34:6c:e6:4b:d2:ef:e0:f4:f3:36:58:3a:3d: e9:62:d8:44:d1:f8:b0:50:1b:e2:0d:76:66:de:6c:79:e3:44: f5:e1:22:41:7c:72:3b:17:fb:f7:52:59:5b:b9:30:93:04:02: 3f:89:6d:58:ce:0f:9d:e8:f2:f6:e1:76:ad:98:f4:3e:58:8f: 58:ce:5c:3b:09:75:8b:54:50:d4:bb:c3:13:be:1b:aa:7d:6d: 9a:23:7b:96:db:d4:99:9e:d1:54:c4:12:f3:ec:f1:c2:7d:a2: c6:66:97:89:81:50:59:d6:6c:46:e2:0a:fa:1e:73:11:d7:92: c7:a7:1c:1c -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEo2pUtjzsiLkTB4qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYxNjE5MjcyOFoXDTI2MTIyNjAxNDUyNlowLzEtMCsGA1UEAxMk NzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIzZGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzcGtxmisbf86Xm1nsn7pgS77qQIXuvafOS 4sa3nW0I4kI7HCoU0TBdIgdXKKdh83OydAbS7zP1dOqBec5KCjCJV7Ehv/NBcd3p pJWK5oNU3Fzgcao2xX8GXh2SB3uVRWPAtSqRcpnko7C+vlApGij+0Qhe9E+aJTUk K71osuCBUCjEwePuO/wO0JFciL50CPEmP2kY3AT9jCwX8vWcH/xptFBRRk6qIbwT fdeIBG0GLOWpzQISrCCFurxCT1pBz1loX9pvG7EtFrHQobgOuwyuGBcVHrSk6fKq rchJKI7DNSe/gVC4FE1lCSTdT6udALF4bUsur9AsgtUyHZ/zmQIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFFIt1muHBQab4kQ+jUHLtTfMODGXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzcwNGE3NjFmLWI3MWEtNGZhMi1i MGU3LWRiNTI3OGUyM2RjMy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhl MjNkYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDAEAgABMCoDAwCJOQMDAJKYMAwDBAXANyADBAHANywDBADAN+kD BADMgLcDBADMgsQwFwQCAAIwEQMHBCYgAQSQAAMGBCYgAUgAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHlz r4v1IDslJbme4p1glHhvId+81jCu2XY/BCpTQKFWNoWyeY3ltE61VPvmMT6b9GsB lKqizvmwbAbf+7Lpjvu2TsqgKtx92cPBMuysxmccObBiP1UqSPapfXRPvjSpn1me EKuRXjE68wCoSq5/YF/qcQYL1huwJAZwwyH2vDW+k25iNGzmS9Lv4PTzNlg6Peli 2ETR+LBQG+INdmbebHnjRPXhIkF8cjsX+/dSWVu5MJMEAj+JbVjOD53o8vbhdq2Y 9D5Yj1jOXDsJdYtUUNS7wxO+G6p9bZoje5bb1Jme0VTEEvPs8cJ9osZml4mBUFnW bEbiCvoecxHXksenHBw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:48 2025 by rpki-client