$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer File: 9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer (raw, json) Hash identifier: 6kujEWml1IuUoukX8wF6utIMdh6GCFIbT34XbKc6q6g= Subject key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B9B100DFB7EE3C8458AF54680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Oct 2025 11:30:21 +0000 Certificate not after: Tue 31 Aug 2027 13:48:15 +0000 Subordinate resources: AS: 16968 AS: 26879 IP: 23.140.172.0/24 IP: 2602:f634::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:10:0d:fb:7e:e3:c8:45:8a:f5:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 22 11:30:21 2025 GMT Not After : Aug 31 13:48:15 2027 GMT Subject: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:c7:67:73:e6:78:4d:ba:0f:7f:61:f5:6a: b9:dd:fb:cd:0b:76:3c:ac:2b:4d:a0:02:b4:23:f9: f0:99:28:1e:26:bf:01:4c:93:26:f4:15:cc:c2:e4: b4:51:f9:57:99:c6:92:4c:c1:74:2d:42:8b:b8:5b: 5e:ac:97:20:0b:4c:ca:52:5b:bf:c0:41:ec:4d:ae: 36:ab:65:8a:b1:dc:b1:27:78:7c:63:65:05:75:ad: 4c:8c:30:5e:0b:17:89:1d:69:b7:4e:ca:78:d6:d3: 95:dd:53:fc:b4:2d:22:a8:64:3d:07:33:90:c9:e2: b3:77:d7:4f:da:90:c1:7e:12:fa:8f:16:cc:d9:83: ad:61:9c:a9:71:38:55:d2:7f:a5:7e:34:52:d6:73: 4e:e8:62:6d:94:35:d3:7a:cf:e4:36:aa:ed:06:7e: da:4f:39:b0:33:39:b0:d4:7b:6e:ed:29:dd:c7:05: e2:8d:d4:04:61:03:5c:f6:8e:5c:d6:67:19:61:c2: 0d:d0:b4:62:e2:40:a4:b4:57:b1:05:b9:69:83:e4: 49:3a:81:e8:23:fd:a5:f4:0d:ff:21:54:4f:27:a5: dc:22:50:cf:db:86:e8:25:42:b2:69:17:2d:63:63: 55:8c:b2:1f:15:59:7a:e6:6a:f8:db:bd:5c:07:d9: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.140.172.0/24 IPv6: 2602:f634::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16968 26879 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5b:01:a7:e7:a9:9a:39:2b:d5:cc:54:45:34:73:c2:08:15: 8c:3e:19:55:2b:5e:e2:4b:43:45:9d:c9:1d:a1:7a:ca:9f:9a: 1d:b5:dc:a1:5a:78:6c:7c:24:92:23:86:1b:2d:e8:16:79:9b: 53:64:cd:17:c9:49:5f:62:ae:4d:a5:c2:ea:06:29:4d:97:15: 5a:70:16:5d:da:07:b4:b8:98:72:9a:a7:f4:7b:f7:d4:ce:fd: ba:62:a7:a9:73:57:e8:14:9d:af:98:43:f6:ad:0d:58:4f:68: 02:0d:5d:66:1f:3e:d8:33:cf:90:fc:98:6e:0f:a3:da:80:8e: 61:5e:9d:7b:f1:a9:ec:94:01:e7:9e:b1:fc:b9:c1:25:01:2a: e1:1f:a2:37:f4:0d:c9:65:1a:0f:2c:92:66:c4:ca:18:2c:30: cd:6a:b7:77:fd:a2:eb:fa:a0:2b:88:43:7c:1a:a6:0d:86:0f: 1a:19:b2:f2:ad:e1:13:4a:39:23:63:1b:d3:1d:32:55:92:b1: b9:f9:71:86:47:62:14:ab:fa:c7:c9:b1:dc:6c:e6:81:fc:46: 6c:88:0c:01:be:ec:f4:81:6f:ed:58:60:14:0f:16:3d:3c:18: 73:d4:a5:11:18:8b:75:55:48:80:c8:98:8f:49:e8:c4:f8:b8: 6c:99:7d:18 -----BEGIN CERTIFICATE----- MIIHHDCCBgSgAwIBAgIUAQ0Mn0MoWEubEA37fuPIRYr1RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAyMjExMzAyMVoXDTI3MDgzMTEzNDgxNVowLzEtMCsGA1UEAxMk OWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIyNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRjHZ3PmeE26D39h9Wq53fvNC3Y8rCtNoAK0 I/nwmSgeJr8BTJMm9BXMwuS0UflXmcaSTMF0LUKLuFterJcgC0zKUlu/wEHsTa42 q2WKsdyxJ3h8Y2UFda1MjDBeCxeJHWm3Tsp41tOV3VP8tC0iqGQ9BzOQyeKzd9dP 2pDBfhL6jxbM2YOtYZypcThV0n+lfjRS1nNO6GJtlDXTes/kNqrtBn7aTzmwMzmw 1Htu7SndxwXijdQEYQNc9o5c1mcZYcIN0LRi4kCktFexBblpg+RJOoHoI/2l9A3/ IVRPJ6XcIlDP24boJUKyaRctY2NVjLIfFVl65mr4271cB9nVTwIDAQABo4IELjCC BCowHQYDVR0OBBYEFIqNgJcOk9GOZit7RrAu4kBFbIjuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzllNTZiZDkxLWNjOGQtNGE3My05 NTk3LTE3YWI5NDBiMjZkYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQw YjI2ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXjKwwDgQCAAIwCAMGACYC9jQAMB0GCCsGAQUF BwEIAQH/BA4wDKAKMAgCAkJIAgJo/zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCWWwGn56maOSvVzFRFNHPC CBWMPhlVK17iS0NFnckdoXrKn5odtdyhWnhsfCSSI4YbLegWeZtTZM0XyUlfYq5N pcLqBilNlxVacBZd2ge0uJhymqf0e/fUzv26Yqepc1foFJ2vmEP2rQ1YT2gCDV1m Hz7YM8+Q/JhuD6PagI5hXp178anslAHnnrH8ucElASrhH6I39A3JZRoPLJJmxMoY LDDNard3/aLr+qAriEN8GqYNhg8aGbLyreETSjkjYxvTHTJVkrG5+XGGR2IUq/rH ybHcbOaB/EZsiAwBvuz0gW/tWGAUDxY9PBhz1KURGIt1VUiAyJiPSejE+LhsmX0Y -----END CERTIFICATE-----Generated at Wed Nov 5 02:17:19 2025 by rpki-client