$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57.cer File: b194e538-e4ea-40c8-9645-c46a9d5dfe57.cer (raw, json) Hash identifier: yqpKimWIhxAWW32D51m7wZjo2+jVLpKHOWPlAapf2Kk= Subject key identifier: 9E:B0:C7:9B:AA:D3:E0:97:9D:55:0D:F8:2B:6A:03:73:55:BE:34:1F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858498497678B100416EF6888B500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/b194e538-e4ea-40c8-9645-c46a9d5dfe57.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Apr 2025 00:45:35 +0000 Certificate not after: Sun 18 Jul 2027 00:45:35 +0000 Subordinate resources: IP: 2604:a4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:97:67:8b:10:04:16:ef:68:88:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 14 00:45:35 2025 GMT Not After : Jul 18 00:45:35 2027 GMT Subject: CN=b194e538-e4ea-40c8-9645-c46a9d5dfe57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:76:0a:02:f1:f5:29:6e:31:e8:12:84:a0: d3:92:86:ab:f7:64:5b:af:e5:a7:3d:07:f7:6c:19: 19:3a:c0:de:c6:22:3d:29:7e:df:14:e9:2e:f2:4e: 8c:82:6d:7a:4e:6c:ad:01:e0:57:0d:35:cd:8c:d5: 37:b2:e2:83:bd:50:25:57:f7:ec:15:f8:f4:e2:6b: bb:46:24:7b:a4:e8:61:97:23:fb:21:9f:9c:92:6e: c4:e4:ab:09:90:4f:c8:97:f0:4f:aa:db:26:21:bf: 61:a1:20:61:b9:19:2d:43:fc:9c:dd:1e:f1:8d:eb: 93:2a:d6:fb:f9:92:65:b1:ef:64:17:79:62:a8:5f: a5:8b:1a:46:a4:55:59:02:05:c5:74:aa:b1:93:9d: 51:8c:3b:f6:f1:b1:f2:f1:79:b3:ad:c9:d5:11:27: 63:d8:82:d0:0f:39:2f:5b:7b:0f:56:de:c4:d4:7d: 76:d8:16:79:67:d4:9e:6a:ec:09:d3:6e:84:83:bb: 4b:7d:00:b2:73:60:7b:6f:28:fe:40:97:17:52:06: 1a:bb:2a:ad:47:a6:dc:f1:47:32:45:be:38:ca:a3: 30:7f:04:b6:1d:af:45:a0:32:fc:8f:8d:e8:09:17: e5:bb:ac:f0:a1:5b:f1:28:c6:e5:3a:4e:2f:76:a7: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B0:C7:9B:AA:D3:E0:97:9D:55:0D:F8:2B:6A:03:73:55:BE:34:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/b194e538-e4ea-40c8-9645-c46a9d5dfe57.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2604:a4c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:84:2a:f5:3f:07:c8:75:c6:c8:fb:1d:75:3b:7f:bb:a3:23: 4b:88:46:62:85:97:12:e5:2c:be:17:c2:5d:aa:7c:59:80:c8: 21:eb:77:18:3f:b2:40:53:df:7d:a3:e4:63:a8:e2:ec:ba:fc: 15:8b:3f:bc:6d:0b:e9:78:6b:a0:51:4d:42:ea:6b:8a:70:f3: 5e:47:da:9a:01:1a:87:2c:d6:c0:d7:96:11:91:40:51:b5:a6: c0:b7:14:f3:16:a4:0f:67:5e:cb:0a:c5:18:75:97:ec:51:a4: bf:13:6f:9c:a8:be:f0:ae:02:f1:b3:0e:6d:19:4a:f3:c0:f2: 4c:7b:30:c0:5e:79:a9:f8:71:8c:b3:65:ff:59:03:05:b1:e9: f2:5b:a4:a4:e1:bd:b3:0d:8f:99:4e:1b:5a:a0:35:5c:59:e7: 22:da:4c:94:d8:4f:87:94:0f:2a:01:36:0f:bd:09:d7:54:9d: d1:52:4d:a0:99:e4:9e:90:df:97:26:d8:4b:59:ef:34:05:38: e8:70:e4:10:ee:74:ab:9f:8a:6c:00:aa:7b:e5:f4:54:46:95: 41:9b:15:b6:e3:db:a8:ea:64:79:fc:97:c5:cb:15:d5:87:df: 4f:fd:60:15:65:ed:40:64:87:14:de:f8:ef:c8:84:6b:4a:36: c4:27:f0:33 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWEmEl2eLEAQW72iItQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQxNDAwNDUzNVoXDTI3MDcxODAwNDUzNVowLzEtMCsGA1UEAxMk YjE5NGU1MzgtZTRlYS00MGM4LTk2NDUtYzQ2YTlkNWRmZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlF2CgLx9SluMegShKDTkoar92Rbr+WnPQf3 bBkZOsDexiI9KX7fFOku8k6Mgm16TmytAeBXDTXNjNU3suKDvVAlV/fsFfj04mu7 RiR7pOhhlyP7IZ+ckm7E5KsJkE/Il/BPqtsmIb9hoSBhuRktQ/yc3R7xjeuTKtb7 +ZJlse9kF3liqF+lixpGpFVZAgXFdKqxk51RjDv28bHy8XmzrcnVESdj2ILQDzkv W3sPVt7E1H122BZ5Z9SeauwJ026Eg7tLfQCyc2B7byj+QJcXUgYauyqtR6bc8Ucy Rb44yqMwfwS2Ha9FoDL8j43oCRflu6zwoVvxKMblOk4vdqeLlQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFJ6wx5uq0+CXnVUN+CtqA3NVvjQfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i MTk0ZTUzOC1lNGVhLTQwYzgtOTY0NS1jNDZhOWQ1ZGZlNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2IxOTRlNTM4LWU0ZWEtNDBjOC05 NjQ1LWM0NmE5ZDVkZmU1Ny9iMTk0ZTUzOC1lNGVhLTQwYzgtOTY0NS1jNDZhOWQ1 ZGZlNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBKTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAmEKvU/B8h1xsj7HXU7 f7ujI0uIRmKFlxLlLL4Xwl2qfFmAyCHrdxg/skBT332j5GOo4uy6/BWLP7xtC+l4 a6BRTULqa4pw815H2poBGocs1sDXlhGRQFG1psC3FPMWpA9nXssKxRh1l+xRpL8T b5yovvCuAvGzDm0ZSvPA8kx7MMBeean4cYyzZf9ZAwWx6fJbpKThvbMNj5lOG1qg NVxZ5yLaTJTYT4eUDyoBNg+9CddUndFSTaCZ5J6Q35cm2EtZ7zQFOOhw5BDudKuf imwAqnvl9FRGlUGbFbbj26jqZHn8l8XLFdWH30/9YBVl7UBkhxTe+O/IhGtKNsQn 8DM= -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:09 2025 by rpki-client