$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer File: 7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer (raw, json) Hash identifier: x7ZhLYeKfERf26/5ZCk2ZzmVU2f6HvhBX+H5nMfjjSw= Subject key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849AE77AA2EA50106C3B500A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 29 Apr 2025 00:45:35 +0000 Certificate not after: Mon 02 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 22941 IP: 168.245.140.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ae:77:aa:2e:a5:01:06:c3:b5:00:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 29 00:45:35 2025 GMT Not After : Aug 2 00:45:35 2027 GMT Subject: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:85:2f:11:62:1f:b9:4a:5a:e6:43:b3:f7: 22:0e:cd:1d:8b:df:e0:3e:85:f8:3c:7c:ff:bc:9a: 23:a9:bf:8a:b2:22:d3:53:a0:a1:b2:7f:c2:80:6a: 52:36:dd:b6:88:91:58:31:3b:93:ea:e9:81:1c:10: 0a:d0:ab:20:94:ba:63:34:a6:5a:f0:0b:29:cc:75: fb:69:88:46:8a:37:a4:22:7c:99:8c:8d:51:4d:bb: 1b:f4:61:4f:c6:d3:84:9b:65:ff:e9:d6:cc:e8:e0: 78:58:73:b1:98:aa:52:36:ad:a3:b9:6e:94:b3:f1: d4:96:b1:37:a7:59:ca:8b:40:a1:80:ed:3e:2d:8d: fe:a6:8f:4d:3c:1b:bb:18:ac:7e:9e:bc:52:d0:17: 4c:09:e4:bc:c3:03:8e:a2:e2:62:b6:4a:89:73:de: 78:5a:b2:e8:d8:d9:3c:b1:f1:32:ba:2a:61:61:ff: 52:bc:c7:b8:f5:2c:42:6f:14:0a:c4:42:fc:29:b4: 45:1d:a9:49:95:ee:b5:10:4c:1e:30:b9:ca:9a:02: 0e:de:4c:63:b7:f4:62:99:c2:7c:67:5c:f5:89:de: 81:a9:7e:31:44:b9:80:1d:76:cf:ef:f9:44:a1:42: 1b:17:b2:3b:6f:a3:d5:94:2f:b8:be:a6:7e:99:97: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 168.245.140.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22941 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:7f:79:19:08:e4:d7:2d:04:c7:49:42:90:a5:d9:d0:74:4d: 30:24:ab:f4:2c:13:fa:e9:7a:b6:3e:3b:99:15:04:ef:39:01: da:09:e1:6e:05:54:c7:10:7f:94:54:d8:83:a9:ec:a0:69:99: d5:48:3c:15:c3:f0:85:e2:e4:8c:2b:f1:bc:de:a0:c5:d3:98: 33:f5:a6:65:71:54:70:c9:ae:e5:07:26:df:09:e3:c7:bb:92: 4f:e6:eb:44:49:38:c3:ad:3e:e6:a0:ae:69:a8:b2:c7:20:c5: df:77:3c:45:7a:bc:07:07:06:c0:aa:ae:a8:4e:22:54:45:15: 5c:a3:02:d5:b0:a0:cf:32:85:73:67:45:bb:e2:ae:5c:bf:0d: 0f:43:ae:e7:b4:a2:f6:a8:dc:cb:93:82:f0:1c:8a:c8:bb:dc: 43:85:ac:b2:b8:56:9e:42:85:26:6e:d1:b6:a2:9d:9f:30:21: 0f:32:ef:84:a6:9e:f6:fe:31:cd:d2:92:3e:1e:d5:75:01:92: 4c:06:03:89:ef:59:b4:cb:cc:07:02:a9:98:34:03:f8:79:67: d3:71:8a:07:4b:df:19:a3:9e:5e:fd:c7:2b:1c:85:29:17:4e: 64:71:04:ef:69:e2:d6:68:27:03:da:bf:f7:a5:e7:38:5f:66: c8:2c:c1:1f -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEmud6oupQEGw7UApYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQyOTAwNDUzNVoXDTI3MDgwMjAwNDUzNVowLzEtMCsGA1UEAxMk N2UwMTRjZGQtNGE3Ni00ZWVmLTg2ZjctNmI2YTgzNmUxZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3WFLxFiH7lKWuZDs/ciDs0di9/gPoX4PHz/ vJojqb+KsiLTU6Chsn/CgGpSNt22iJFYMTuT6umBHBAK0KsglLpjNKZa8AspzHX7 aYhGijekInyZjI1RTbsb9GFPxtOEm2X/6dbM6OB4WHOxmKpSNq2juW6Us/HUlrE3 p1nKi0ChgO0+LY3+po9NPBu7GKx+nrxS0BdMCeS8wwOOouJitkqJc954WrLo2Nk8 sfEyuiphYf9SvMe49SxCbxQKxEL8KbRFHalJle61EEweMLnKmgIO3kxjt/RimcJ8 Z1z1id6BqX4xRLmAHXbP7/lEoUIbF7I7b6PVlC+4vqZ+mZf8rQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPgYH8nIIC14WdSw70xLpY3H3JPpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2ZTFkYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlMDE0Y2RkLTRhNzYtNGVlZi04 NmY3LTZiNmE4MzZlMWRiZi83ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2 ZTFkYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACo9YwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WZ0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEACX95GQjk1y0Ex0lCkKXZ0HRNMCSr9CwT+ul6tj47mRUE7zkB 2gnhbgVUxxB/lFTYg6nsoGmZ1Ug8FcPwheLkjCvxvN6gxdOYM/WmZXFUcMmu5Qcm 3wnjx7uST+brREk4w60+5qCuaaiyxyDF33c8RXq8BwcGwKquqE4iVEUVXKMC1bCg zzKFc2dFu+KuXL8ND0Ou57Si9qjcy5OC8ByKyLvcQ4WssrhWnkKFJm7RtqKdnzAh DzLvhKae9v4xzdKSPh7VdQGSTAYDie9ZtMvMBwKpmDQD+Hln03GKB0vfGaOeXv3H KxyFKRdOZHEE72ni1mgnA9q/96XnOF9myCzBHw== -----END CERTIFICATE-----Generated at Tue Nov 4 21:20:58 2025 by rpki-client