$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer File: e8522b95-144f-483f-bbfb-bec0605ebf8c.cer (raw, json) Hash identifier: CFxLMC0f+8b2lCVwC6NLizcKcWk6lSUjDzt7jBihoVc= Subject key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584995578116284DD3ED1A9EC7C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 20 Apr 2025 00:45:34 +0000 Certificate not after: Sat 24 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 11023 IP: 209.251.32.0/20 IP: 2607:f488::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:95:57:81:16:28:4d:d3:ed:1a:9e:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 20 00:45:34 2025 GMT Not After : Jul 24 00:45:34 2027 GMT Subject: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5b:0e:42:c3:95:a2:b9:6a:e2:ed:03:0c:22: d4:a9:d2:cc:f1:20:5e:18:8a:e2:ef:1f:fc:da:17: 1b:ba:c1:6a:90:2c:f7:57:3a:18:d2:6c:fd:34:72: 24:4e:25:e9:d5:79:7c:04:28:93:a5:3c:21:f7:37: 0f:70:e6:0e:9c:35:76:be:19:02:51:62:61:91:fc: 25:58:2f:fa:38:fb:4d:47:04:6c:1d:77:11:e5:d5: 9e:42:54:25:60:5b:d8:21:07:74:b9:7a:b1:eb:b0: f8:db:ec:37:fd:0e:12:2a:2b:09:ff:43:6f:b3:ca: 7f:2c:07:66:70:13:4d:cd:ce:e7:58:dc:dc:b4:32: 3f:e6:da:0f:a8:4f:34:7e:94:17:5d:29:8f:e8:16: e3:32:08:d3:a1:77:6b:e9:21:6f:38:49:5f:0f:51: bb:1f:e7:e7:07:8c:a5:7a:39:02:70:2a:ab:f2:68: 49:38:d8:51:e1:a3:fd:3a:0b:b8:30:ae:62:c8:9a: fe:83:1a:0b:7f:c9:f1:d2:bd:68:22:3e:64:20:ca: fd:a7:de:66:f3:21:5e:13:08:3c:99:db:43:af:bf: ee:65:03:3e:5e:f0:85:f6:3e:cc:b5:c7:d3:5e:62: d1:4a:7f:0e:61:ef:2c:03:63:89:eb:82:9c:4b:2f: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 209.251.32.0/20 IPv6: 2607:f488::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11023 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:51:cd:14:d1:d2:7a:4c:ac:f1:d2:5a:eb:52:cf:9d:4a:c7: de:1b:45:ab:a8:83:b9:09:09:25:b8:f2:0d:19:f0:2e:c3:10: b7:86:ff:10:cc:a4:34:e3:15:09:f0:a8:5f:0e:2e:33:d0:f1: 12:e2:fd:8f:9e:fa:cf:c6:e3:be:7e:a0:75:ba:a6:83:01:18: 85:e8:a8:cc:6f:0f:26:7b:28:74:09:ea:4f:f2:4c:d5:cd:a1: b8:53:c9:c4:26:aa:6c:90:9d:7c:ff:f0:41:3f:9f:17:c4:4a: 63:e0:ff:50:60:66:8f:7e:10:1e:23:bb:50:2d:92:29:12:fb: 7d:f9:1b:08:d2:14:c9:14:aa:5d:a7:90:a8:89:48:26:61:9e: 5a:93:ca:1f:c6:17:cd:8e:aa:20:ec:8a:ae:e1:44:3f:48:89: ee:15:c2:5a:48:67:d5:2e:a9:f4:09:50:08:5d:11:5a:31:de: 60:df:4c:41:73:22:d8:32:f2:eb:2d:73:78:5e:f2:4f:be:fd: 40:92:76:9b:3e:2e:10:c9:9f:9e:1e:d1:df:de:56:1a:70:c7: e6:87:5c:ba:32:b4:48:a2:ff:a8:60:9d:72:92:1a:1e:bd:4e: 06:91:88:e7:f8:b5:76:09:23:42:7e:41:bd:89:69:8c:a8:bb: df:64:af:6b -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEmVV4EWKE3T7Rqex8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQyMDAwNDUzNFoXDTI3MDcyNDAwNDUzNFowLzEtMCsGA1UEAxMk ZTg1MjJiOTUtMTQ0Zi00ODNmLWJiZmItYmVjMDYwNWViZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFsOQsOVorlq4u0DDCLUqdLM8SBeGIri7x/8 2hcbusFqkCz3VzoY0mz9NHIkTiXp1Xl8BCiTpTwh9zcPcOYOnDV2vhkCUWJhkfwl WC/6OPtNRwRsHXcR5dWeQlQlYFvYIQd0uXqx67D42+w3/Q4SKisJ/0Nvs8p/LAdm cBNNzc7nWNzctDI/5toPqE80fpQXXSmP6BbjMgjToXdr6SFvOElfD1G7H+fnB4yl ejkCcCqr8mhJONhR4aP9Ogu4MK5iyJr+gxoLf8nx0r1oIj5kIMr9p95m8yFeEwg8 mdtDr7/uZQM+XvCF9j7MtcfTXmLRSn8OYe8sA2OJ64KcSy+rVwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFAEdfPrFWOhIiWsg3dfVzxXTDiBSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ODUyMmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMwNjA1ZWJmOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2U4NTIyYjk1LTE0NGYtNDgzZi1i YmZiLWJlYzA2MDVlYmY4Yy9lODUyMmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMwNjA1 ZWJmOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBATR+yAwDQQCAAIwBwMFACYH9IgwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKw8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATVHNFNHSekys8dJa61LPnUrH3htF q6iDuQkJJbjyDRnwLsMQt4b/EMykNOMVCfCoXw4uM9DxEuL9j576z8bjvn6gdbqm gwEYheiozG8PJnsodAnqT/JM1c2huFPJxCaqbJCdfP/wQT+fF8RKY+D/UGBmj34Q HiO7UC2SKRL7ffkbCNIUyRSqXaeQqIlIJmGeWpPKH8YXzY6qIOyKruFEP0iJ7hXC Wkhn1S6p9AlQCF0RWjHeYN9MQXMi2DLy6y1zeF7yT779QJJ2mz4uEMmfnh7R395W GnDH5odcujK0SKL/qGCdcpIaHr1OBpGI5/i1dgkjQn5BvYlpjKi732Svaw== -----END CERTIFICATE-----Generated at Wed Nov 5 01:15:31 2025 by rpki-client