$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer File: 961c0ec8-64a9-4c51-bd77-b28e693a3e72.cer (raw, json) Hash identifier: jriYxUgLgEmJSdKSqRfL8jD9HxgI7exFrK3E3sHMAec= Subject key identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B381E6E3C2AF3317B801765E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 17 Sep 2025 00:54:17 +0000 Certificate not after: Tue 21 Dec 2027 01:54:17 +0000 Subordinate resources: IP: 216.14.192.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:1e:6e:3c:2a:f3:31:7b:80:17:65:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 17 00:54:17 2025 GMT Not After : Dec 21 01:54:17 2027 GMT Subject: CN=961c0ec8-64a9-4c51-bd77-b28e693a3e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7c:95:d2:50:ed:aa:00:b6:2f:28:1c:4f:3e: 35:70:70:06:9b:ff:a7:a9:ca:f8:70:a6:00:b7:6c: d5:17:15:7b:a4:16:3f:89:f7:45:7e:4d:96:fd:91: d2:e4:97:26:91:a5:63:f6:4d:d6:de:ff:d6:56:17: 1e:c5:07:0f:62:47:2a:a7:31:06:65:ca:fc:5e:13: 14:cb:a3:31:a4:57:4c:81:90:c3:ce:2b:f0:15:5a: 13:23:e6:14:8b:a1:ea:1c:4b:f7:d7:77:ff:08:35: 8b:e9:ea:63:0c:de:8f:af:e5:44:73:4e:a8:ca:e1: f0:ab:33:69:9b:bd:f5:a0:26:47:4f:a3:76:74:ac: e3:cf:59:b7:26:00:25:0e:4d:61:f2:7b:3f:6e:99: 89:6b:fd:e5:22:d7:9e:e6:15:c5:b7:de:39:f6:37: e8:60:e5:c8:09:10:bf:2a:e9:38:c7:bf:8f:ee:e9: 3a:92:e5:34:2d:06:bb:dc:48:7e:39:1e:e9:f3:19: 8e:06:aa:e6:10:a7:d5:7e:71:bb:28:b1:71:40:89: 63:c3:91:43:13:95:b6:28:5a:0a:12:5a:f9:02:8a: eb:c8:89:5e:91:bf:a0:6c:38:8e:64:1a:6d:8b:22: 82:65:5d:4b:88:bd:e4:09:80:9c:47:00:c6:73:aa: 69:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BF:ED:26:2E:57:57:94:13:DD:8B:CC:57:34:53:D8:46:CD:82:E4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/961c0ec8-64a9-4c51-bd77-b28e693a3e72/961c0ec8-64a9-4c51-bd77-b28e693a3e72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 216.14.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:69:5f:32:a3:a0:4d:5f:02:df:05:88:ea:24:80:c2:31:8f: 0f:c8:b8:d7:d9:00:91:0b:f0:b2:df:dd:7c:dd:3d:8c:06:ee: 5b:4b:80:3d:16:14:99:f0:90:a0:ca:15:54:cc:f3:42:16:dd: 90:fc:3a:02:e7:d2:49:3e:dd:46:5a:61:7a:d4:fc:2d:6a:5b: 19:91:11:da:d1:60:c1:46:5d:85:1a:3c:c6:ed:be:54:09:80: 2e:57:3a:ce:d5:73:ed:94:c4:14:98:f2:75:50:85:61:b9:17: f2:7c:37:ad:77:09:60:55:5b:ac:7f:3b:aa:4d:e0:39:60:07: 50:e5:55:76:74:b3:1f:0a:d1:93:cc:c5:4e:93:c4:c3:7d:4d: 9d:dc:6c:8b:59:ea:95:fe:a9:e0:d2:4c:e2:42:a8:5a:d7:97: de:eb:81:81:61:d5:90:8c:71:fd:d3:7a:b7:c8:7b:c8:98:21: 5d:e2:21:68:3c:c6:ca:c6:72:26:e3:ca:21:0e:ac:9a:1e:4e: 35:fb:25:49:19:4d:60:3b:b7:78:6a:4b:b0:87:7d:17:6c:06: af:b4:8a:b4:16:3c:6c:b3:86:66:78:46:df:44:a5:dd:aa:2c: 07:ef:f4:6e:1e:43:5f:87:c8:5e:89:82:59:5c:b2:fe:12:21: 4a:40:5d:3d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEs4Hm48KvMxe4AXZeYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkxNzAwNTQxN1oXDTI3MTIyMTAxNTQxN1owLzEtMCsGA1UEAxMk OTYxYzBlYzgtNjRhOS00YzUxLWJkNzctYjI4ZTY5M2EzZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinyV0lDtqgC2LygcTz41cHAGm/+nqcr4cKYA t2zVFxV7pBY/ifdFfk2W/ZHS5JcmkaVj9k3W3v/WVhcexQcPYkcqpzEGZcr8XhMU y6MxpFdMgZDDzivwFVoTI+YUi6HqHEv313f/CDWL6epjDN6Pr+VEc06oyuHwqzNp m731oCZHT6N2dKzjz1m3JgAlDk1h8ns/bpmJa/3lItee5hXFt9459jfoYOXICRC/ Kuk4x7+P7uk6kuU0LQa73Eh+OR7p8xmOBqrmEKfVfnG7KLFxQIljw5FDE5W2KFoK Elr5AorryIlekb+gbDiOZBptiyKCZV1LiL3kCYCcRwDGc6pplwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIK/7SYuV1eUE92LzFc0U9hGzYLkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 NjFjMGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhlNjkzYTNlNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk2MWMwZWM4LTY0YTktNGM1MS1i ZDc3LWIyOGU2OTNhM2U3Mi85NjFjMGVjOC02NGE5LTRjNTEtYmQ3Ny1iMjhlNjkz YTNlNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATYDsAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWWlfMqOgTV8C3wWI6iSA wjGPD8i419kAkQvwst/dfN09jAbuW0uAPRYUmfCQoMoVVMzzQhbdkPw6AufSST7d RlphetT8LWpbGZER2tFgwUZdhRo8xu2+VAmALlc6ztVz7ZTEFJjydVCFYbkX8nw3 rXcJYFVbrH87qk3gOWAHUOVVdnSzHwrRk8zFTpPEw31Nndxsi1nqlf6p4NJM4kKo WteX3uuBgWHVkIxx/dN6t8h7yJghXeIhaDzGysZyJuPKIQ6smh5ONfslSRlNYDu3 eGpLsId9F2wGr7SKtBY8bLOGZnhG30Sl3aosB+/0bh5DX4fIXomCWVyy/hIhSkBd PQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:48:42 2025 by rpki-client