$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878.cer File: f90be2e1-b57b-4e04-bd16-0b4a08488878.cer (raw, json) Hash identifier: yovsmCXiooexgFOgmENTB/XfDgTT89p3FiF2AKMw5LU= Subject key identifier: 0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F432858499131CFFAAE5889ACA6052BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Apr 2025 13:06:24 +0000 Certificate not after: Fri 02 Jul 2027 00:45:31 +0000 Subordinate resources: AS: 1408 AS: 32161 IP: 64.38.212.0/22 IP: 64.38.240.0/22 IP: 74.119.28.0/22 IP: 2620:0:e60::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:91:31:cf:fa:ae:58:89:ac:a6:05:2b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 18 13:06:24 2025 GMT Not After : Jul 2 00:45:31 2027 GMT Subject: CN=f90be2e1-b57b-4e04-bd16-0b4a08488878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:5f:cc:5f:45:52:8a:4d:a2:e0:81:3c:2f: 79:f9:60:f1:23:ef:9d:b2:d3:e4:6b:66:6e:a7:20: c6:34:80:51:e3:c4:9b:42:18:3d:2a:0e:c2:6d:90: d1:e6:77:ec:00:cc:6f:05:3e:6e:53:4f:d3:d2:90: 84:d0:d0:3a:5f:bb:f4:c7:b2:7e:6b:95:9c:b0:45: 0b:13:66:66:f8:28:23:e5:61:fb:33:b4:ce:d7:de: a2:46:b7:02:aa:f6:80:24:77:a6:c5:71:f6:79:47: b6:3a:ed:55:f2:d3:cc:49:9c:4b:3c:7d:b2:53:6e: da:e2:7b:ef:e6:24:2d:06:9e:52:5f:8b:66:f1:3d: 99:dd:00:ce:48:b0:b2:93:3a:6e:46:f3:d2:0a:f3: a8:1f:52:34:dd:00:40:7e:db:39:b2:36:bb:6b:92: 77:9e:46:a3:ce:51:fe:d5:88:09:8c:04:58:37:4e: 57:25:40:b5:b6:13:70:4b:5c:08:09:ad:f3:fb:8d: aa:f4:5d:32:64:9f:13:6e:6f:d3:e7:89:d4:58:34: d7:02:74:e9:4b:1c:f4:2a:aa:2e:10:0c:0d:10:ff: a7:e2:c1:89:0e:e9:3d:41:d5:de:be:b2:29:40:8f: 5d:22:92:95:a0:a2:ad:12:e2:64:b4:15:27:f0:87: e8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:48:E4:C3:2E:C0:3B:51:EE:4B:9B:6E:9C:60:C1:52:85:1B:78:8F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f90be2e1-b57b-4e04-bd16-0b4a08488878/f90be2e1-b57b-4e04-bd16-0b4a08488878.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.38.212.0/22 64.38.240.0/22 74.119.28.0/22 IPv6: 2620:0:e60::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1408 32161 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2f:be:4e:7c:0d:a7:87:b2:39:14:e1:e1:9d:e6:26:64:15: 4f:03:e8:8c:e2:45:46:1f:91:ea:40:fe:9c:97:d8:42:38:84: 81:33:45:49:f9:7e:9f:c4:88:96:7e:fa:15:54:37:4e:2e:bf: a6:65:58:b1:3d:d2:d8:c7:4d:d4:fb:de:9e:a5:ff:84:99:78: c0:54:4d:71:c0:36:f3:d7:fd:b3:a5:a8:0c:18:76:94:19:a4: 40:51:35:b2:3a:31:0e:2d:af:9e:45:47:f4:65:01:91:30:d6: de:bb:49:6c:8d:df:12:15:45:35:cf:ac:fb:0a:22:5a:15:bf: cf:7f:12:3f:1c:4c:ed:0e:6f:41:ec:f8:6b:ed:a4:4e:2e:46: c7:60:25:80:3c:a9:51:13:ae:c4:d9:9c:b1:d1:b1:a0:be:c2: 0d:08:33:24:06:70:75:ee:c0:20:ad:a0:a6:cd:7f:ab:73:51: 1f:d0:90:79:84:38:fe:95:2e:db:50:bd:ed:d4:60:00:c1:14: ad:52:59:8f:0f:7a:f0:74:f5:ed:84:ec:de:ce:aa:4a:64:f4: 5a:c9:4c:c4:e3:46:7d:98:f4:cb:f4:13:84:02:61:e1:68:55: a8:d5:99:21:ae:85:b9:46:bd:b2:b6:7b:de:aa:73:16:e4:76: 1f:87:59:26 -----BEGIN CERTIFICATE----- MIIHKTCCBhGgAwIBAgIUAQ0Mn0MoWEmRMc/6rliJrKYFK8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDQxODEzMDYyNFoXDTI3MDcwMjAwNDUzMVowLzEtMCsGA1UEAxMk ZjkwYmUyZTEtYjU3Yi00ZTA0LWJkMTYtMGI0YTA4NDg4ODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX5fzF9FUopNouCBPC95+WDxI++dstPka2Zu pyDGNIBR48SbQhg9Kg7CbZDR5nfsAMxvBT5uU0/T0pCE0NA6X7v0x7J+a5WcsEUL E2Zm+Cgj5WH7M7TO196iRrcCqvaAJHemxXH2eUe2Ou1V8tPMSZxLPH2yU27a4nvv 5iQtBp5SX4tm8T2Z3QDOSLCykzpuRvPSCvOoH1I03QBAfts5sja7a5J3nkajzlH+ 1YgJjARYN05XJUC1thNwS1wICa3z+42q9F0yZJ8Tbm/T54nUWDTXAnTpSxz0Kqou EAwNEP+n4sGJDuk9QdXevrIpQI9dIpKVoKKtEuJktBUn8IfomQIDAQABo4IEOzCC BDcwHQYDVR0OBBYEFA5I5MMuwDtR7kubbpxgwVKFG3iPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m OTBiZTJlMS1iNTdiLTRlMDQtYmQxNi0wYjRhMDg0ODg4NzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Y5MGJlMmUxLWI1N2ItNGUwNC1i ZDE2LTBiNGEwODQ4ODg3OC9mOTBiZTJlMS1iNTdiLTRlMDQtYmQxNi0wYjRhMDg0 ODg4NzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBAJAJtQDBAJAJvADBAJKdxwwDwQCAAIwCQMHACYg AAAOYDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIFgAICfaEwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFy++ TnwNp4eyORTh4Z3mJmQVTwPojOJFRh+R6kD+nJfYQjiEgTNFSfl+n8SIln76FVQ3 Ti6/pmVYsT3S2MdN1PvenqX/hJl4wFRNccA289f9s6WoDBh2lBmkQFE1sjoxDi2v nkVH9GUBkTDW3rtJbI3fEhVFNc+s+woiWhW/z38SPxxM7Q5vQez4a+2kTi5Gx2Al gDypUROuxNmcsdGxoL7CDQgzJAZwde7AIK2gps1/q3NRH9CQeYQ4/pUu21C97dRg AMEUrVJZjw968HT17YTs3s6qSmT0WslMxONGfZj0y/QThAJh4WhVqNWZIa6FuUa9 srZ73qpzFuR2H4dZJg== -----END CERTIFICATE-----Generated at Tue Nov 4 18:52:37 2025 by rpki-client