$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer File: 84facd9b-9eda-4887-bc69-899a3c3aec64.cer (raw, json) Hash identifier: 4drNSRMfk+2uNr9Irr095nomELKizGLeTiKH5gARWTY= Subject key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B7728E98016C6ED7B6FCD0180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 14:51:20 +0000 Certificate not after: Fri 25 Dec 2026 01:01:57 +0000 Subordinate resources: AS: 63183 IP: 23.190.88.0/24 IP: 142.249.180.0/22 IP: 2602:f7fc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:28:e9:80:16:c6:ed:7b:6f:cd:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 9 14:51:20 2025 GMT Not After : Dec 25 01:01:57 2026 GMT Subject: CN=84facd9b-9eda-4887-bc69-899a3c3aec64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ce:75:db:3b:07:6d:f5:48:c5:44:1b:e0:d2: 3b:8c:1f:ad:c9:0f:9a:64:bf:23:df:20:b9:a3:27: 04:90:cc:e3:57:09:99:d5:c0:73:68:2e:a6:fa:6e: 0a:7a:c6:1b:40:2a:3d:5e:7a:b7:04:84:bf:67:09: a2:dd:49:f9:ec:15:17:ce:61:ec:0e:e6:da:c6:ec: b0:85:f9:7f:5b:da:e0:f6:90:02:e8:61:88:c1:28: fd:eb:40:82:60:65:17:4b:f7:b2:bb:d2:1d:e6:2d: 8f:41:d2:7f:36:b2:d4:7e:f7:14:33:bf:f1:58:35: 9e:87:97:9c:17:2b:c8:f6:4b:ee:0f:14:3e:08:f5: 97:58:14:e4:03:71:0a:6c:2f:64:9f:17:10:88:e0: be:25:5c:85:5a:18:4a:ff:a0:c6:ef:1c:6c:c7:2c: 09:6b:17:d5:a0:e7:8e:84:43:33:c9:3f:11:1b:99: 82:e1:90:3b:4d:7f:7c:7d:6f:8f:49:98:79:b2:4a: cb:64:5a:86:8d:6b:12:de:83:39:57:e1:99:64:3d: ba:6f:3c:36:e8:39:55:ae:1b:d6:aa:38:2a:90:f8: dd:97:a0:ba:23:ec:31:f2:0a:f9:b6:cb:9b:de:fd: af:e0:fd:f2:f3:4b:8b:c3:1f:e5:42:6f:19:01:83: 35:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.190.88.0/24 142.249.180.0/22 IPv6: 2602:f7fc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63183 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f3:57:51:8f:41:7d:5c:ee:71:1e:45:a4:04:29:8f:ce:ff: 55:0a:99:d2:55:ff:be:40:26:31:f0:ca:64:ce:65:50:84:bc: 54:88:fc:ab:4e:df:04:7c:43:26:42:ff:6e:56:d5:01:6d:67: ac:9e:77:82:d5:1d:54:c4:0d:56:6f:54:ee:8c:c0:44:cf:c8: ea:fc:c9:c6:7b:32:b6:29:33:b7:02:42:03:fe:a1:b2:58:0c: 37:41:ea:00:5e:c2:ff:8b:ae:e8:f2:7c:30:0a:8e:32:22:4c: 9c:e5:53:15:b1:34:ef:b8:84:29:78:e8:c9:f7:31:10:44:b0: 51:6b:e7:64:72:18:70:fb:9d:3c:cf:4c:48:ce:bc:93:82:5b: 64:94:e6:17:2e:65:d6:db:4e:b9:9d:1a:bb:76:f3:73:8b:4f: 1e:3d:3d:f7:88:df:ae:1b:87:9e:38:49:59:8c:a0:ff:10:19: 0d:fe:82:8e:a2:bf:71:71:70:05:c4:3b:51:1a:36:ad:8e:6e: 22:f9:56:58:25:33:12:c6:73:90:16:b6:3b:d1:2e:a7:66:76: 27:b4:e4:ec:e9:be:74:5a:92:f0:de:b2:69:35:ff:7d:d0:c3: 7a:82:db:f2:47:84:6e:54:63:a9:a2:d7:7d:9d:ba:68:88:ea: e7:f3:dd:51 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEt3KOmAFsbte2/NAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwOTE0NTEyMFoXDTI2MTIyNTAxMDE1N1owLzEtMCsGA1UEAxMk ODRmYWNkOWItOWVkYS00ODg3LWJjNjktODk5YTNjM2FlYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs512zsHbfVIxUQb4NI7jB+tyQ+aZL8j3yC5 oycEkMzjVwmZ1cBzaC6m+m4KesYbQCo9Xnq3BIS/Zwmi3Un57BUXzmHsDubaxuyw hfl/W9rg9pAC6GGIwSj960CCYGUXS/eyu9Id5i2PQdJ/NrLUfvcUM7/xWDWeh5ec FyvI9kvuDxQ+CPWXWBTkA3EKbC9knxcQiOC+JVyFWhhK/6DG7xxsxywJaxfVoOeO hEMzyT8RG5mC4ZA7TX98fW+PSZh5skrLZFqGjWsS3oM5V+GZZD26bzw26DlVrhvW qjgqkPjdl6C6I+wx8gr5tsub3v2v4P3y80uLwx/lQm8ZAYM1yQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFMiX6p2SZs2o6Q6RY7EAcF+JgeaMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 NGZhY2Q5Yi05ZWRhLTQ4ODctYmM2OS04OTlhM2MzYWVjNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzg0ZmFjZDliLTllZGEtNDg4Ny1i YzY5LTg5OWEzYzNhZWM2NC84NGZhY2Q5Yi05ZWRhLTQ4ODctYmM2OS04OTlhM2Mz YWVjNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXvlgDBAKO+bQwDgQCAAIwCAMGBCYC9/wAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD2zzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBD81dRj0F9XO5xHkWk BCmPzv9VCpnSVf++QCYx8MpkzmVQhLxUiPyrTt8EfEMmQv9uVtUBbWesnneC1R1U xA1Wb1TujMBEz8jq/MnGezK2KTO3AkID/qGyWAw3QeoAXsL/i67o8nwwCo4yIkyc 5VMVsTTvuIQpeOjJ9zEQRLBRa+dkchhw+508z0xIzryTgltklOYXLmXW2065nRq7 dvNzi08ePT33iN+uG4eeOElZjKD/EBkN/oKOor9xcXAFxDtRGjatjm4i+VZYJTMS xnOQFrY70S6nZnYntOTs6b50WpLw3rJpNf990MN6gtvyR4RuVGOpotd9nbpoiOrn 891R -----END CERTIFICATE-----Generated at Wed Nov 5 05:07:09 2025 by rpki-client