$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer File: ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.cer (raw, json) Hash identifier: UIggAGTou1afok/0XPLgMNs0l4JgIteA4n0SWMH083U= Subject key identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B1C2F30AE316BD17EB0D73300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 07 Sep 2025 00:45:25 +0000 Certificate not after: Sat 11 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 68.66.176.0/20 IP: 192.40.224.0/22 IP: 216.86.240.0/20 IP: 2605:db00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:2f:30:ae:31:6b:d1:7e:b0:d7:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 7 00:45:25 2025 GMT Not After : Dec 11 01:45:25 2027 GMT Subject: CN=ee796558-82d6-41a5-b8ec-5dfdbd89d5d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:00:fd:10:bb:27:75:52:48:1c:e2:b1:67: 4b:61:2d:c8:b0:82:18:b1:01:3b:50:f4:f9:01:38: bb:bd:cc:a0:a0:82:dd:51:47:4e:d5:93:06:0d:81: f2:9d:b4:cd:bd:f9:c0:8a:31:fc:bd:e2:f4:af:cf: ea:54:21:32:fe:ee:ac:ae:cb:5a:71:31:f7:25:68: 7b:88:10:9d:22:f2:c9:12:b0:00:f7:61:eb:f0:ec: aa:ae:ef:96:4e:ff:25:8b:66:85:db:11:17:33:9f: 33:d6:d4:8c:72:1a:e2:56:e2:44:2b:74:53:57:89: 05:49:7d:7e:f5:6d:f8:31:bc:ab:c2:3e:ee:09:1b: 61:fc:7a:1e:61:6b:11:96:90:e7:83:00:ba:62:9a: a9:3e:fc:06:1a:dc:9e:5c:29:90:fd:39:a3:7d:d4: d5:80:14:94:c7:a9:44:48:d0:53:9f:1d:a2:72:36: 2d:ba:23:75:89:27:58:f5:e2:c0:6d:28:86:ce:6a: 81:dc:3b:74:b3:ea:43:c3:df:f2:ba:fd:2e:6f:6e: 30:52:3e:a9:29:5a:78:47:63:76:98:f2:bf:d9:4b: f1:24:56:6f:3a:74:e2:14:bd:6a:92:01:8f:cb:64: d6:bb:c3:8e:ee:89:92:60:02:ea:fa:ee:19:7f:5c: b8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A3:ED:89:EB:E7:96:FF:87:08:32:46:85:60:7A:6C:A1:46:1D:D8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7/ee796558-82d6-41a5-b8ec-5dfdbd89d5d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 68.66.176.0/20 192.40.224.0/22 216.86.240.0/20 IPv6: 2605:db00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:5b:d9:17:b4:f9:61:1e:60:69:f5:40:01:85:27:27:f4:03: 55:cf:2d:c2:1e:db:13:85:2d:4f:67:72:03:74:c6:f5:b7:12: 6c:ed:b0:32:3c:83:24:81:ad:65:0a:54:d2:a8:0e:f1:1b:e7: 8d:52:c3:6b:2a:1f:68:26:82:db:ec:fa:cc:0d:96:36:4d:5e: 49:db:17:c6:77:28:b6:c2:7d:84:6e:91:ab:2b:ab:18:2d:55: b1:b6:a2:76:85:e8:65:42:be:0b:fd:96:91:4f:5e:30:e7:72: 28:8e:51:5b:35:fc:09:75:fe:81:32:d6:04:0f:55:79:11:61: 76:ae:8f:dc:5d:35:f0:b0:4e:0c:06:43:fe:08:6e:2c:32:f1: 86:15:bd:5a:78:f6:a2:b9:9c:55:90:35:e3:f8:08:8d:2a:e2: 1b:8f:6b:16:85:b7:e3:ff:16:5a:1e:e1:71:96:98:a9:a2:19: 82:6d:4f:0d:25:b4:7a:2e:a2:44:f2:cb:f4:28:13:90:42:f5: 7d:89:f9:f7:8f:b2:dc:0f:69:44:d5:01:97:4b:14:bf:aa:da: 36:ae:0a:49:ec:89:8a:5c:c8:32:ab:ac:23:65:32:56:07:aa: 69:25:b4:9b:48:30:68:08:2f:64:4d:10:d3:b0:df:88:65:2f: 3e:bb:bd:93 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEscLzCuMWvRfrDXMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkwNzAwNDUyNVoXDTI3MTIxMTAxNDUyNVowLzEtMCsGA1UEAxMk ZWU3OTY1NTgtODJkNi00MWE1LWI4ZWMtNWRmZGJkODlkNWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaQA/RC7J3VSSBzisWdLYS3IsIIYsQE7UPT5 ATi7vcygoILdUUdO1ZMGDYHynbTNvfnAijH8veL0r8/qVCEy/u6srstacTH3JWh7 iBCdIvLJErAA92Hr8Oyqru+WTv8li2aF2xEXM58z1tSMchriVuJEK3RTV4kFSX1+ 9W34Mbyrwj7uCRth/HoeYWsRlpDngwC6YpqpPvwGGtyeXCmQ/TmjfdTVgBSUx6lE SNBTnx2icjYtuiN1iSdY9eLAbSiGzmqB3Dt0s+pDw9/yuv0ub24wUj6pKVp4R2N2 mPK/2UvxJFZvOnTiFL1qkgGPy2TWu8OO7omSYALq+u4Zf1y41QIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFyj7Ynr55b/hwgyRoVgemyhRh3YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4OWQ1ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VlNzk2NTU4LTgyZDYtNDFhNS1i OGVjLTVkZmRiZDg5ZDVkNy9lZTc5NjU1OC04MmQ2LTQxYTUtYjhlYy01ZGZkYmQ4 OWQ1ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAREQrADBALAKOADBATYVvAwDQQCAAIwBwMFACYF 2wAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAg1vZF7T5YR5gafVAAYUnJ/QDVc8twh7bE4UtT2dyA3TG9bcS bO2wMjyDJIGtZQpU0qgO8RvnjVLDayofaCaC2+z6zA2WNk1eSdsXxncotsJ9hG6R qyurGC1VsbaidoXoZUK+C/2WkU9eMOdyKI5RWzX8CXX+gTLWBA9VeRFhdq6P3F01 8LBODAZD/ghuLDLxhhW9Wnj2ormcVZA14/gIjSriG49rFoW34/8WWh7hcZaYqaIZ gm1PDSW0ei6iRPLL9CgTkEL1fYn594+y3A9pRNUBl0sUv6raNq4KSeyJilzIMqus I2UyVgeqaSW0m0gwaAgvZE0Q07DfiGUvPru9kw== -----END CERTIFICATE-----Generated at Tue Nov 4 23:48:41 2025 by rpki-client