$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer File: 2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.cer (raw, json) Hash identifier: LbR1Fpe5wdRc07bcf8RB2NwE/p+kpfpMFom0q7JSJMI= Subject key identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B1EF9DEF4CEE100E425949A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 08 Sep 2025 00:45:24 +0000 Certificate not after: Sun 12 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 10439 IP: 66.240.192.0/18 IP: 71.6.128.0/17 IP: 209.126.128.0/17 IP: 216.75.0.0/18 IP: 216.98.128.0/19 IP: 2607:ff10::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1e:f9:de:f4:ce:e1:00:e4:25:94:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 8 00:45:24 2025 GMT Not After : Dec 12 01:45:24 2027 GMT Subject: CN=2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:ce:70:de:9f:64:ba:f0:a1:58:53:c6:5d: 86:4f:2a:17:f5:18:1a:e1:c0:5b:5c:69:f1:5b:64: fd:27:81:4f:f8:e2:fb:5b:89:88:55:8a:8b:b5:ee: 77:f8:f0:4e:3e:35:eb:35:f8:a7:75:92:ec:3e:4a: 82:19:e3:ba:85:d0:27:72:3d:11:17:46:01:44:ef: a1:d3:f5:c9:26:2f:24:05:f0:28:a4:f6:b3:17:13: ad:ef:8b:a2:fc:80:6a:d7:78:d3:20:22:60:aa:30: 09:9b:a4:a0:9f:a9:69:64:43:82:27:3c:1b:a0:a3: 11:d3:86:29:c0:4b:84:0c:5b:9e:95:c9:3f:be:84: 02:f2:d2:03:c5:d4:5a:1c:8b:d1:8f:33:eb:5e:65: ab:84:a7:64:61:ac:cb:4b:f6:2a:6d:db:1b:2c:9f: 9f:d9:0a:ad:03:de:1f:e1:38:d0:7f:76:67:06:11: c2:4d:09:dd:b7:c7:e0:94:2f:fa:18:51:92:35:35: ba:d2:82:07:83:d6:50:f7:96:48:58:ab:b5:b9:7e: f3:ff:75:2d:f2:70:24:87:2f:c8:c9:e4:0a:0c:c3: 03:b4:0e:96:3d:c4:50:13:7e:9e:8a:8a:15:8f:8c: d9:25:72:f8:d1:1f:20:8a:c5:c6:77:4d:d3:9c:ae: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FC:FB:A5:07:E3:E4:59:51:89:82:45:0E:83:84:F3:DA:D5:28:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65/2f2ed87e-27f9-414c-a7af-2b5b5ffa3f65.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.240.192.0/18 71.6.128.0/17 209.126.128.0/17 216.75.0.0/18 216.98.128.0/19 IPv6: 2607:ff10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10439 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f2:16:c4:cb:0e:6d:b4:d9:ff:a6:9a:69:8e:d3:09:09:8d: 3d:a5:45:a3:db:05:ff:8f:ab:b5:9e:07:ef:22:a0:42:69:8b: ba:22:b7:03:ef:6e:df:54:bd:f9:7c:f7:cc:2c:65:24:8d:68: 06:dd:16:0c:45:3b:8c:ea:aa:49:b9:dc:28:8a:7a:12:7d:d9: 83:f3:55:1c:07:ea:72:8e:63:c3:29:18:b3:c8:ef:5e:50:6d: ed:2c:10:7a:e6:bd:ae:be:b0:71:db:91:8d:f2:fb:a6:7c:9a: 5f:d1:35:44:4f:2b:ba:8c:6c:08:75:71:dc:e3:5c:41:d9:77: 06:c4:2a:3d:b1:fe:e9:62:e8:81:64:0b:6e:23:5f:f0:95:00: 80:7d:31:fa:cb:67:13:15:39:fe:dd:a4:c1:8d:9d:1c:8e:8d: d5:a4:c9:bf:a6:f4:de:98:9b:16:b2:bb:46:89:7b:1e:52:13: 34:fc:74:ce:83:15:ac:65:4b:93:d2:97:01:e2:d9:a8:88:40: 1a:29:ee:a9:bd:a9:28:3c:5c:2b:d9:b4:c4:ef:7e:d9:42:b9: a7:3b:88:a9:fe:bb:bd:5e:5c:6e:5e:69:59:8d:30:8c:47:3e: 49:21:24:53:d3:49:9f:f8:dd:dd:d6:2a:c7:69:57:20:22:be: 04:a3:ad:1f -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEse+d70zuEA5CWUmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkwODAwNDUyNFoXDTI3MTIxMjAxNDUyNFowLzEtMCsGA1UEAxMk MmYyZWQ4N2UtMjdmOS00MTRjLWE3YWYtMmI1YjVmZmEzZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3InOcN6fZLrwoVhTxl2GTyoX9Rga4cBbXGnx W2T9J4FP+OL7W4mIVYqLte53+PBOPjXrNfindZLsPkqCGeO6hdAncj0RF0YBRO+h 0/XJJi8kBfAopPazFxOt74ui/IBq13jTICJgqjAJm6Sgn6lpZEOCJzwboKMR04Yp wEuEDFuelck/voQC8tIDxdRaHIvRjzPrXmWrhKdkYazLS/YqbdsbLJ+f2QqtA94f 4TjQf3ZnBhHCTQndt8fglC/6GFGSNTW60oIHg9ZQ95ZIWKu1uX7z/3Ut8nAkhy/I yeQKDMMDtA6WPcRQE36eiooVj4zZJXL40R8gisXGd03TnK4+ZwIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFP78+6UH4+RZUYmCRQ6DhPPa1Sh7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y ZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZmYTNmNjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJmMmVkODdlLTI3ZjktNDE0Yy1h N2FmLTJiNWI1ZmZhM2Y2NS8yZjJlZDg3ZS0yN2Y5LTQxNGMtYTdhZi0yYjViNWZm YTNmNjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAZC8MADBAdHBoADBAfRfoADBAbYSwADBAXYYoAw DQQCAAIwBwMFACYH/xAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICKMcwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAGvIWxMsObbTZ/6aaaY7TCQmNPaVFo9sF/4+rtZ4H7yKgQmmLuiK3A+9u31S9 +Xz3zCxlJI1oBt0WDEU7jOqqSbncKIp6En3Zg/NVHAfqco5jwykYs8jvXlBt7SwQ eua9rr6wcduRjfL7pnyaX9E1RE8ruoxsCHVx3ONcQdl3BsQqPbH+6WLogWQLbiNf 8JUAgH0x+stnExU5/t2kwY2dHI6N1aTJv6b03pibFrK7Rol7HlITNPx0zoMVrGVL k9KXAeLZqIhAGinuqb2pKDxcK9m0xO9+2UK5pzuIqf67vV5cbl5pWY0wjEc+SSEk U9NJn/jd3dYqx2lXICK+BKOtHw== -----END CERTIFICATE-----Generated at Thu Oct 9 06:23:58 2025 by rpki-client