$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e5886a88-97b8-4240-b13f-e1ed1356d48e.cer File: e5886a88-97b8-4240-b13f-e1ed1356d48e.cer (raw, json) Hash identifier: 0zA51azLo9xqQUeOIlZMBDYn490RTFmpMU/ie6STpsE= Subject key identifier: 01:BF:08:BA:85:69:68:72:11:A6:9F:E5:1B:80:C1:08:FA:AB:6C:7B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B0B6F16FDA9F4C105C76FE640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e5886a88-97b8-4240-b13f-e1ed1356d48e/e5886a88-97b8-4240-b13f-e1ed1356d48e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e5886a88-97b8-4240-b13f-e1ed1356d48e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 01 Sep 2025 00:45:25 +0000 Certificate not after: Sun 05 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 25990 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:6f:16:fd:a9:f4:c1:05:c7:6f:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 1 00:45:25 2025 GMT Not After : Dec 5 01:45:25 2027 GMT Subject: CN=e5886a88-97b8-4240-b13f-e1ed1356d48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:86:e6:72:2f:27:03:db:f2:32:79:40:ad:d8: fc:20:8b:44:9d:5d:3a:47:b5:cb:62:77:cb:6a:5e: 9c:5a:2a:d0:28:df:fe:ef:56:f4:38:2a:b7:07:e6: e6:16:29:2f:66:59:3f:ab:27:1c:5d:2d:79:28:59: 7a:26:6b:a0:3d:16:4f:b6:00:c5:28:83:e5:97:7f: d9:2a:24:4c:52:96:63:4d:1a:04:6c:ef:30:dc:ea: da:49:eb:89:f9:80:d1:b5:cf:35:fc:c6:b8:1a:5d: 40:72:d1:10:50:ad:52:37:e9:c8:7f:0d:b7:d2:2d: 84:83:26:7b:5f:81:45:1c:cd:5b:cc:2b:67:9d:8e: c5:7a:d7:61:ad:8f:cd:77:31:87:2b:4c:ac:54:95: 10:6c:1e:c8:a8:0f:91:2c:0f:d7:84:a2:fb:22:f8: 2e:19:11:a2:04:74:2e:66:a3:80:80:36:66:4d:c1: a3:2b:ae:44:07:7b:ff:48:a6:ee:08:7e:ba:11:eb: c4:9e:ff:39:eb:cb:39:50:e6:3d:fc:67:1f:2b:f0: eb:2f:8a:d8:34:2b:04:6b:bc:f5:73:14:11:9e:11: c7:a2:7e:36:5c:e7:fd:b2:66:35:7b:a9:81:e8:fa: 47:fc:75:bd:63:49:ca:0a:2f:84:5d:11:78:21:76: bd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BF:08:BA:85:69:68:72:11:A6:9F:E5:1B:80:C1:08:FA:AB:6C:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e5886a88-97b8-4240-b13f-e1ed1356d48e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e5886a88-97b8-4240-b13f-e1ed1356d48e/e5886a88-97b8-4240-b13f-e1ed1356d48e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 25990 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:03:e5:d9:07:9f:aa:8d:b3:64:cf:60:2e:79:09:f8:d2:98: eb:1c:00:6b:8b:a8:a6:d5:bc:42:3c:92:a7:47:d2:c4:68:7f: ed:3d:80:63:35:0b:19:ae:22:8a:86:02:5a:15:97:7f:49:11: 62:a5:06:63:0c:f6:82:b1:ed:58:10:d7:7e:6a:72:66:2f:4c: ea:58:43:ae:ca:c0:e1:50:de:12:1b:50:f8:da:4f:e8:1d:15: 10:38:e2:64:ab:6f:63:0c:ab:e7:35:b2:a5:1d:f1:b4:e8:72: ca:9d:33:9c:fc:07:33:ab:3f:a5:b3:91:21:20:42:04:c6:14: ad:63:de:71:2e:29:8a:1d:48:e1:89:4d:a2:ea:46:cf:ba:38: cd:af:ac:df:6f:84:62:d1:80:a1:57:27:62:93:4b:aa:cb:2a: 86:25:d7:c9:95:59:3a:21:21:14:3e:b8:d7:9b:a5:6f:00:c7: 8a:0e:50:0f:a5:9a:b7:66:88:62:27:80:2d:35:2f:7d:9d:dd: ee:e2:56:8b:82:ae:a1:b7:8b:0e:0b:09:4e:ab:c6:21:4d:fd: 11:3e:f9:3f:3e:b9:ed:d8:61:5c:fa:34:cf:df:d7:91:30:60: be:7a:cc:df:df:33:47:97:78:1d:1c:88:db:aa:83:ea:30:3e: 49:5f:08:99 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEsLbxb9qfTBBcdv5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkwMTAwNDUyNVoXDTI3MTIwNTAxNDUyNVowLzEtMCsGA1UEAxMk ZTU4ODZhODgtOTdiOC00MjQwLWIxM2YtZTFlZDEzNTZkNDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIbmci8nA9vyMnlArdj8IItEnV06R7XLYnfL al6cWirQKN/+71b0OCq3B+bmFikvZlk/qyccXS15KFl6JmugPRZPtgDFKIPll3/Z KiRMUpZjTRoEbO8w3OraSeuJ+YDRtc81/Ma4Gl1ActEQUK1SN+nIfw230i2EgyZ7 X4FFHM1bzCtnnY7FetdhrY/NdzGHK0ysVJUQbB7IqA+RLA/XhKL7IvguGRGiBHQu ZqOAgDZmTcGjK65EB3v/SKbuCH66EevEnv8568s5UOY9/GcfK/DrL4rYNCsEa7z1 cxQRnhHHon42XOf9smY1e6mB6PpH/HW9Y0nKCi+EXRF4IXa9TQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFAG/CLqFaWhyEaaf5RuAwQj6q2x7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l NTg4NmE4OC05N2I4LTQyNDAtYjEzZi1lMWVkMTM1NmQ0OGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U1ODg2YTg4LTk3YjgtNDI0MC1i MTNmLWUxZWQxMzU2ZDQ4ZS9lNTg4NmE4OC05N2I4LTQyNDAtYjEzZi1lMWVkMTM1 NmQ0OGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICZYYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAigPl2Qefqo2zZM9gLnkJ+NKY6xwA a4uoptW8QjySp0fSxGh/7T2AYzULGa4iioYCWhWXf0kRYqUGYwz2grHtWBDXfmpy Zi9M6lhDrsrA4VDeEhtQ+NpP6B0VEDjiZKtvYwyr5zWypR3xtOhyyp0znPwHM6s/ pbORISBCBMYUrWPecS4pih1I4YlNoupGz7o4za+s32+EYtGAoVcnYpNLqssqhiXX yZVZOiEhFD6415ulbwDHig5QD6Wat2aIYieALTUvfZ3d7uJWi4KuobeLDgsJTqvG IU39ET75Pz657dhhXPo0z9/XkTBgvnrM398zR5d4HRyI26qD6jA+SV8ImQ== -----END CERTIFICATE-----Generated at Tue Nov 4 18:58:44 2025 by rpki-client