$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer File: fcbf2352-8296-41fd-bfd5-576c02b9d483.cer (raw, json) Hash identifier: emMJkKTql1+4airugAVbDsQaQwPMuXiWzQvfsmKX85c= Subject key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A8839080DB2DF8334BD129F3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Jul 2025 00:45:36 +0000 Certificate not after: Tue 19 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 20283 AS: 64227 IP: 64.90.64.0/19 IP: 64.238.0.0/20 IP: 68.170.112.0/20 IP: 69.168.240.0/20 IP: 161.199.130.0/24 IP: 167.94.42.0/23 IP: 167.94.52.0/23 IP: 167.94.62.0/23 IP: 167.94.76.0/23 IP: 172.87.0.0/20 IP: 199.59.116.0/22 IP: 205.214.160.0/20 IP: 209.73.80.0/20 IP: 209.212.32.0/20 IP: 2605:5000::/32 IP: 2606:df80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:39:08:0d:b2:df:83:34:bd:12:9f:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 16 00:45:36 2025 GMT Not After : Oct 19 00:45:36 2027 GMT Subject: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7f:32:a2:8c:28:62:b9:4b:d3:45:44:cb:67: a6:d2:fe:d1:cf:2f:69:58:5c:a7:f8:d8:b2:7d:d6: dc:cf:18:e1:92:1b:25:c7:19:98:45:16:90:fb:20: fe:81:c9:12:60:1f:16:52:c3:1d:8f:2a:3a:9d:14: 85:dd:56:11:45:5f:b3:d6:2d:22:7e:06:e5:93:40: 90:7e:15:d3:2d:63:21:6d:ea:99:58:be:20:50:d4: c0:fb:09:64:76:80:08:db:16:6e:44:1d:6c:08:e4: 51:97:8b:cd:3b:5c:f7:ed:ea:b9:b1:18:a1:69:64: 3d:76:d8:6e:f1:11:aa:f2:a0:31:1c:5c:7e:57:2f: 1d:fa:84:a2:ef:33:6e:25:b3:c0:0e:32:5a:aa:0b: 14:b9:3e:04:3d:be:28:8b:a1:a0:06:1b:9b:5e:6f: ce:0b:80:58:d4:a2:2e:f7:ba:26:f7:d6:81:f5:c1: 69:42:bb:c2:e4:8e:ae:ca:d7:d6:b1:ae:1e:6f:67: d2:81:e5:b4:2f:33:fa:fd:80:f4:76:31:92:ba:c7: 4d:97:e6:22:bc:d5:cb:49:4a:ab:07:c1:c6:c2:2b: 5d:2a:ef:15:eb:8d:fd:bd:a2:ef:d7:33:e9:89:ea: 9e:d7:b1:fb:ce:1d:d6:fd:c3:c5:bd:1d:91:22:95: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.90.64.0/19 64.238.0.0/20 68.170.112.0/20 69.168.240.0/20 161.199.130.0/24 167.94.42.0/23 167.94.52.0/23 167.94.62.0/23 167.94.76.0/23 172.87.0.0/20 199.59.116.0/22 205.214.160.0/20 209.73.80.0/20 209.212.32.0/20 IPv6: 2605:5000::/32 2606:df80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20283 64227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:7e:a9:ad:89:b3:0d:b2:23:ad:cf:6c:c6:ce:ba:23:f6:3d: 2e:b6:78:ce:42:05:7f:1d:fa:a7:a7:51:47:63:e7:cd:4e:ee: dc:b7:c6:f9:fa:2e:55:ae:0f:5e:12:14:c1:8e:00:e7:f5:ec: 0c:de:87:a9:5d:82:40:05:b3:8b:d6:72:b5:dd:45:a7:b5:74: d2:a4:be:b3:df:4d:5c:13:de:9f:d9:e4:e9:4c:fe:40:99:7a: e0:c3:ba:cb:cd:4c:03:0c:34:08:53:31:fa:d5:9d:77:df:cf: e0:1d:5e:aa:9f:11:73:4f:ae:b1:08:a5:d1:e0:fc:bc:c3:de: d2:9d:c1:33:ef:f8:a4:1f:bc:b1:dc:2b:30:cd:18:07:b0:d8: 38:a5:43:69:4a:ed:59:e1:7d:78:26:72:96:8c:01:da:04:f9: 28:87:29:08:93:c4:db:d8:14:4c:bf:12:02:b1:b4:76:a8:cc: e5:8c:9b:34:29:95:3f:3a:89:66:f2:4a:f3:0b:f7:cb:81:87: 08:8e:b4:30:ed:86:c4:f3:a8:07:8a:0f:5a:a2:f2:7a:c5:50: 3f:d9:3f:b6:3d:a2:7e:ba:43:3b:38:66:f6:d0:be:f6:3d:f8: 25:4c:87:04:46:02:c6:07:02:41:95:6a:73:22:79:6a:0c:5b: 6f:d1:b0:02 -----BEGIN CERTIFICATE----- MIIHcjCCBlqgAwIBAgIUAQ0Mn0MoWEqIOQgNst+DNL0Snz4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcxNjAwNDUzNloXDTI3MTAxOTAwNDUzNlowLzEtMCsGA1UEAxMk ZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlkNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX8yoowoYrlL00VEy2em0v7Rzy9pWFyn+Niy fdbczxjhkhslxxmYRRaQ+yD+gckSYB8WUsMdjyo6nRSF3VYRRV+z1i0ifgblk0CQ fhXTLWMhbeqZWL4gUNTA+wlkdoAI2xZuRB1sCORRl4vNO1z37eq5sRihaWQ9dthu 8RGq8qAxHFx+Vy8d+oSi7zNuJbPADjJaqgsUuT4EPb4oi6GgBhubXm/OC4BY1KIu 97om99aB9cFpQrvC5I6uytfWsa4eb2fSgeW0LzP6/YD0djGSusdNl+YivNXLSUqr B8HGwitdKu8V6439vaLv1zPpieqe17H7zh3W/cPFvR2RIpUlNwIDAQABo4IEhDCC BIAwHQYDVR0OBBYEFJD7Ljxim5GAZHm/7tyy/XNqbFlsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m Y2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZjYmYyMzUyLTgyOTYtNDFmZC1i ZmQ1LTU3NmMwMmI5ZDQ4My9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJi OWQ0ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgYMGCCsGAQUF BwEHAQH/BHQwcjBaBAIAATBUAwQFQFpAAwQEQO4AAwQERKpwAwQERajwAwQAoceC AwQBp14qAwQBp140AwQBp14+AwQBp15MAwQErFcAAwQCxzt0AwQEzdagAwQE0UlQ AwQE0dQgMBQEAgACMA4DBQAmBVAAAwUAJgbfgDAeBggrBgEFBQcBCAEB/wQPMA2g CzAJAgJPOwIDAPrjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBABZ+qa2Jsw2yI63PbMbOuiP2PS62eM5CBX8d +qenUUdj581O7ty3xvn6LlWuD14SFMGOAOf17Azeh6ldgkAFs4vWcrXdRae1dNKk vrPfTVwT3p/Z5OlM/kCZeuDDusvNTAMMNAhTMfrVnXffz+AdXqqfEXNPrrEIpdHg /LzD3tKdwTPv+KQfvLHcKzDNGAew2DilQ2lK7VnhfXgmcpaMAdoE+SiHKQiTxNvY FEy/EgKxtHaozOWMmzQplT86iWbySvML98uBhwiOtDDthsTzqAeKD1qi8nrFUD/Z P7Y9on66Qzs4ZvbQvvY9+CVMhwRGAsYHAkGVanMieWoMW2/RsAI= -----END CERTIFICATE-----Generated at Wed Nov 5 10:06:34 2025 by rpki-client