$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer File: fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer (raw, json) Hash identifier: unSFnWCoobafr3BDCXpNSNv02/oYoiArckWLP3XISGI= Subject key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849CD2D303D87DA6D4E1E0FE900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 10 May 2025 00:45:35 +0000 Certificate not after: Fri 13 Aug 2027 00:45:35 +0000 Subordinate resources: AS: 398555 IP: 192.111.36.0/24 IP: 192.160.64.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cd:2d:30:3d:87:da:6d:4e:1e:0f:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 10 00:45:35 2025 GMT Not After : Aug 13 00:45:35 2027 GMT Subject: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:3d:55:8e:0e:32:9e:ed:b0:4f:40:f1:bd: c0:a8:74:df:23:52:f5:bd:59:79:8a:a0:5a:cb:ca: be:e8:55:7d:29:43:e9:8b:9c:cc:52:83:83:df:84: 1b:74:cd:8c:50:87:6f:29:17:a4:b6:a4:7c:99:47: fc:16:43:68:5b:5d:ef:04:bc:e3:dc:20:0e:45:3b: ba:ae:c6:a3:3b:ea:f8:7e:7e:19:13:0b:50:ac:6d: ba:62:a1:9f:1d:6a:05:20:8e:97:99:5b:97:a8:93: 00:34:b6:c2:8d:75:6e:4d:29:7d:0f:cd:3b:67:62: 34:f4:8c:52:f3:6b:02:2c:6b:8b:da:a7:d0:53:fc: 4b:a0:a5:df:ff:c6:67:0f:87:c4:43:b3:da:e1:d9: af:a5:6b:d3:f2:df:64:b9:50:4a:71:ee:c7:fa:77: 0a:10:87:9a:ca:01:ef:8b:e9:83:13:c3:80:41:89: 92:f4:7c:0f:f3:25:82:19:a1:0e:66:c8:33:e2:39: a2:c1:8e:8c:59:05:23:59:9f:53:f4:8a:85:bd:18: 88:17:d0:cc:e2:7a:73:98:6b:7a:e5:4c:67:e2:39: 5c:26:f9:df:5a:1c:bb:19:e3:a7:a2:4f:45:c8:8e: c5:c5:85:49:9f:34:1f:0d:50:30:44:ca:2a:d2:52: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.111.36.0/24 192.160.64.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398555 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:cf:3f:15:20:d2:fa:2a:e8:b5:ff:6b:dd:0d:93:b7:3e:96: 19:ff:12:46:79:ef:76:f5:a6:e7:ad:1f:6a:1e:ff:d7:d6:ad: 38:f7:bd:c8:9e:99:5b:c8:34:3b:1b:a2:a6:7d:63:65:16:07: 8d:bd:ea:53:84:7d:cc:40:a2:0e:c8:8e:bd:f9:96:0d:82:75: 5a:4c:99:e3:d9:a2:71:b9:00:58:24:1c:17:04:b5:57:85:9e: a1:ae:48:e8:b6:e4:93:06:c9:78:84:12:f9:94:36:c8:74:63: cf:c3:b6:08:17:a7:99:e9:06:ec:40:cb:04:39:76:1f:12:31: 32:42:ff:5f:a5:3f:0a:6d:3c:f6:de:df:82:bb:9b:f6:dc:4d: a4:9a:50:f4:69:29:09:08:df:ff:23:ce:7d:c2:b2:c2:ed:1b: b2:ea:7b:63:5a:e2:cf:6a:69:35:25:d6:cb:29:0d:bc:ae:d0: e0:7a:f6:b8:ff:96:f2:b6:85:c4:7c:cb:dc:60:e7:ec:c5:89: 39:19:70:d4:fd:bb:38:d4:02:7b:70:25:7a:ba:02:5d:18:5f: 6f:46:ef:be:18:ed:c4:84:5b:23:57:fc:ef:46:58:73:33:dc: 2c:c7:5b:bf:b3:e1:4d:5c:9e:e2:57:f7:8d:f5:32:a6:42:f2: 02:14:3a:9b -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEnNLTA9h9ptTh4P6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUxMDAwNDUzNVoXDTI3MDgxMzAwNDUzNVowLzEtMCsGA1UEAxMk ZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUs9VY4OMp7tsE9A8b3AqHTfI1L1vVl5iqBa y8q+6FV9KUPpi5zMUoOD34QbdM2MUIdvKRektqR8mUf8FkNoW13vBLzj3CAORTu6 rsajO+r4fn4ZEwtQrG26YqGfHWoFII6XmVuXqJMANLbCjXVuTSl9D807Z2I09IxS 82sCLGuL2qfQU/xLoKXf/8ZnD4fEQ7Pa4dmvpWvT8t9kuVBKce7H+ncKEIeaygHv i+mDE8OAQYmS9HwP8yWCGaEOZsgz4jmiwY6MWQUjWZ9T9IqFvRiIF9DM4npzmGt6 5Uxn4jlcJvnfWhy7GeOnok9FyI7FxYVJnzQfDVAwRMoq0lLo/wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFMlAnl3M6aySHQHytJdajSf3LwGyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZlZTdiNjdlLTVlNGYtNGEwNS1h NTllLTllODIwYzg5OGZjZC9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4 OThmY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAbyQDBADAoEAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhTbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFPPPxUg0voq6LX/a90Nk7c+lhn/EkZ573b1puet H2oe/9fWrTj3vciemVvINDsboqZ9Y2UWB4296lOEfcxAog7Ijr35lg2CdVpMmePZ onG5AFgkHBcEtVeFnqGuSOi25JMGyXiEEvmUNsh0Y8/DtggXp5npBuxAywQ5dh8S MTJC/1+lPwptPPbe34K7m/bcTaSaUPRpKQkI3/8jzn3CssLtG7Lqe2Na4s9qaTUl 1sspDbyu0OB69rj/lvK2hcR8y9xg5+zFiTkZcNT9uzjUAntwJXq6Al0YX29G774Y 7cSEWyNX/O9GWHMz3CzHW7+z4U1cnuJX9431MqZC8gIUOps= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:14 2025 by rpki-client