$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3.cer File: 93486113-52ec-4d22-9c7f-d493f8e27cb3.cer (raw, json) Hash identifier: eKCftA1SNPzStNcFsrP8PNbVSC40RujilgayVkC4+7A= Subject key identifier: 3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A9099172D09A167C14110A600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 19 Jul 2025 00:45:37 +0000 Certificate not after: Fri 22 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 40328 IP: 108.59.96.0/20 IP: 162.249.96.0/21 IP: 205.185.128.0/19 IP: 208.74.240.0/21 IP: 2606:ec00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:99:17:2d:09:a1:67:c1:41:10:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 19 00:45:37 2025 GMT Not After : Oct 22 00:45:37 2027 GMT Subject: CN=93486113-52ec-4d22-9c7f-d493f8e27cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:b0:f5:ff:57:8b:18:e2:b0:5a:21:80:49: ee:ad:b3:1c:00:83:18:c6:9d:f3:4d:20:df:85:3f: e1:44:a4:18:f9:85:9b:1f:99:6a:06:be:c3:00:b9: 23:e8:f7:80:e9:05:80:82:66:97:c1:b1:c1:ca:74: 7d:c6:78:13:4a:c4:74:63:01:b3:89:83:88:68:73: df:5e:e6:b1:2d:13:f0:9f:1d:23:eb:62:1d:7b:54: d4:08:7b:c2:f0:fa:55:bf:af:39:df:32:18:8a:0d: a4:cd:56:5a:46:38:9b:b8:4c:1f:60:1a:5b:9e:a5: 67:d0:83:c7:46:85:b5:2b:e1:ae:d9:a4:48:de:f0: c1:e1:b6:1c:7c:3f:86:92:c2:12:c6:8f:a9:92:e2: 10:7b:86:2e:ee:63:d7:1d:a1:2e:3e:50:5d:f7:73: 1c:a3:34:b7:76:73:66:7a:19:b3:d9:b3:72:85:a7: fb:24:87:65:68:d9:ec:a4:fa:4a:d6:4f:79:a7:ab: d5:07:f2:df:39:ae:c8:5f:f4:7d:37:5e:09:36:5c: 0e:4a:55:a3:47:e3:2e:a3:16:9a:78:41:5c:57:8a: 03:ae:ea:bb:b4:59:52:18:92:23:1d:6f:7e:8d:5f: 18:99:46:6d:e0:60:6d:15:fb:c7:ae:e9:ef:31:c6: 1e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:CB:86:C0:C6:7E:F3:71:43:38:DD:49:7C:F4:23:D6:A5:F4:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/93486113-52ec-4d22-9c7f-d493f8e27cb3/93486113-52ec-4d22-9c7f-d493f8e27cb3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 108.59.96.0/20 162.249.96.0/21 205.185.128.0/19 208.74.240.0/21 IPv6: 2606:ec00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9b:b0:2e:75:e0:25:1f:14:a6:5f:2f:e7:c3:c0:f4:ff:e5: b8:68:0e:4c:d7:26:6e:15:44:68:57:4a:75:aa:8c:47:4b:2d: a9:83:af:91:c2:16:4a:7d:a4:3a:67:a5:0d:39:d7:74:b8:88: 67:53:36:e8:14:81:b5:ac:f4:f1:33:f9:18:01:e1:30:dc:3f: 79:2a:7c:c8:ab:d3:7d:5a:8f:dd:7d:19:65:a6:4a:b2:96:81: 94:ba:e6:89:13:22:70:a7:20:d1:8b:29:91:1d:05:07:b7:11: 1f:fb:2f:6b:60:4d:95:49:3a:83:32:66:b4:71:fd:84:d2:4b: ea:40:c6:46:97:3d:d9:3d:d7:4f:3a:26:63:98:b2:62:72:73: 92:98:d3:54:68:dc:63:3b:8a:66:c2:91:25:ca:9a:cf:b2:4e: b0:20:3b:7a:c2:5a:2e:33:a9:c7:c1:24:a3:f6:d8:cc:9c:59: 72:9b:9e:21:04:c9:8c:e8:ef:fc:40:3c:b3:a1:4d:19:b8:e0: 81:e6:4a:7f:21:75:51:43:e8:65:d5:a8:ea:59:17:15:32:2c: 5e:ab:55:2d:e7:ed:7a:9d:ff:d0:94:3e:ae:1c:78:45:e1:64: 4e:10:17:ce:84:28:85:3b:d9:47:a3:e7:ac:4d:7b:41:c0:0e: 83:3c:7d:ea -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEqQmRctCaFnwUEQpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcxOTAwNDUzN1oXDTI3MTAyMjAwNDUzN1owLzEtMCsGA1UEAxMk OTM0ODYxMTMtNTJlYy00ZDIyLTljN2YtZDQ5M2Y4ZTI3Y2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriyw9f9XixjisFohgEnurbMcAIMYxp3zTSDf hT/hRKQY+YWbH5lqBr7DALkj6PeA6QWAgmaXwbHBynR9xngTSsR0YwGziYOIaHPf XuaxLRPwnx0j62Ide1TUCHvC8PpVv6853zIYig2kzVZaRjibuEwfYBpbnqVn0IPH RoW1K+Gu2aRI3vDB4bYcfD+GksISxo+pkuIQe4Yu7mPXHaEuPlBd93McozS3dnNm ehmz2bNyhaf7JIdlaNnspPpK1k95p6vVB/LfOa7IX/R9N14JNlwOSlWjR+Muoxaa eEFcV4oDruq7tFlSGJIjHW9+jV8YmUZt4GBtFfvHrunvMcYeowIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFDyiy4bAxn7zcUM43Ul89CPWpfSnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 MzQ4NjExMy01MmVjLTRkMjItOWM3Zi1kNDkzZjhlMjdjYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzkzNDg2MTEzLTUyZWMtNGQyMi05 YzdmLWQ0OTNmOGUyN2NiMy85MzQ4NjExMy01MmVjLTRkMjItOWM3Zi1kNDkzZjhl MjdjYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBARsO2ADBAOi+WADBAXNuYADBAPQSvAwDQQCAAIw BwMFACYG7AAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ2IMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI2b sC514CUfFKZfL+fDwPT/5bhoDkzXJm4VRGhXSnWqjEdLLamDr5HCFkp9pDpnpQ05 13S4iGdTNugUgbWs9PEz+RgB4TDcP3kqfMir031aj919GWWmSrKWgZS65okTInCn INGLKZEdBQe3ER/7L2tgTZVJOoMyZrRx/YTSS+pAxkaXPdk91086JmOYsmJyc5KY 01Ro3GM7imbCkSXKms+yTrAgO3rCWi4zqcfBJKP22MycWXKbniEEyYzo7/xAPLOh TRm44IHmSn8hdVFD6GXVqOpZFxUyLF6rVS3n7Xqd/9CUPq4ceEXhZE4QF86EKIU7 2Uej56xNe0HADoM8feo= -----END CERTIFICATE-----Generated at Fri Aug 8 19:27:01 2025 by rpki-client