$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer File: 47a6fbc4-59e2-49b4-a345-3edde81f26a4.cer (raw, json) Hash identifier: 2k0wlN4MjCEAr2RDf3xWeUB85QcB8/xwF2i4r3Vnscw= Subject key identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B248F3E846C0828CEC2DAE100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Sep 2025 00:45:25 +0000 Certificate not after: Tue 14 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 32546 IP: 66.33.34.0/23 IP: 66.33.96.0/24 IP: 199.47.168.0/22 IP: 199.59.52.0/22 IP: 199.85.91.0/24 IP: 2620:29::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:8f:3e:84:6c:08:28:ce:c2:da:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 10 00:45:25 2025 GMT Not After : Dec 14 01:45:25 2027 GMT Subject: CN=47a6fbc4-59e2-49b4-a345-3edde81f26a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e8:46:93:4c:88:25:23:e0:e5:a4:65:b1:c2: 80:38:30:ce:3b:89:64:90:8c:4a:85:80:02:92:44: 30:53:8b:51:73:b1:98:c1:17:a2:8d:23:e8:c4:d1: 55:fe:05:b9:83:b7:5a:2d:99:05:d1:57:fa:fc:d0: f3:c3:93:f6:e7:28:8e:bb:c1:17:46:db:50:7f:e8: 0f:fb:71:6a:5c:f5:dd:6c:f5:49:4c:51:ec:e4:ca: a6:a5:73:ff:d7:45:a4:c1:17:16:74:15:d1:1c:3e: e7:ac:a6:4f:55:81:9b:68:48:4b:4a:c5:04:17:3f: 8e:55:21:67:2e:4b:71:8e:fa:3d:c8:1f:f1:42:cf: b9:1e:05:13:f2:97:3b:74:f9:77:fd:4c:dc:5a:a6: 41:1b:87:3e:25:f8:03:48:e8:58:9e:cd:ff:85:36: f5:3c:51:11:85:3a:fa:24:ae:33:bb:e2:65:00:8d: d3:64:df:25:d8:c1:6d:e9:3e:c9:e9:73:9a:91:32: 66:8b:85:6b:a2:26:db:a8:f0:3d:eb:d4:fe:52:b1: 60:fb:cc:e2:5d:42:91:2c:8c:62:d7:2c:c3:fe:f7: 32:02:97:d4:51:b0:9e:d9:ed:d2:de:9b:ef:e6:30: 49:a1:88:7b:bc:8b:be:0d:76:e1:3b:86:42:f3:bd: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:0D:FE:5B:7C:27:3A:40:80:44:7C:E8:75:9B:8B:31:AD:CB:57:5C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/47a6fbc4-59e2-49b4-a345-3edde81f26a4/47a6fbc4-59e2-49b4-a345-3edde81f26a4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.33.34.0/23 66.33.96.0/24 199.47.168.0/22 199.59.52.0/22 199.85.91.0/24 IPv6: 2620:29::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32546 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b7:ae:2d:29:c8:e1:00:5a:6b:81:6b:d0:a5:20:74:66:5b: e1:e7:16:4e:20:ba:0e:de:0e:1f:e2:4c:1c:60:4c:99:d5:a3: 2d:a0:d9:42:31:e9:87:10:e2:82:c1:30:1e:b8:7a:8c:73:cc: 39:8b:b6:c5:8c:85:9b:ad:cc:f2:aa:b5:20:34:f3:7e:13:ac: 77:80:eb:28:be:e6:bd:b5:8a:b3:9f:ca:2a:af:33:2b:d5:89: c4:46:d8:56:c9:7b:2d:3b:da:5a:f9:c7:52:50:3b:b9:a1:1b: 9d:df:d8:ad:8e:42:20:48:19:57:02:9a:8c:f8:a0:fe:59:3f: cc:63:83:96:22:0b:23:51:0d:44:67:04:1b:67:3d:57:2c:e0: cc:91:80:de:98:54:41:8d:ca:44:4a:e3:ef:6a:d2:2d:1b:4c: 13:56:02:12:24:7c:18:fa:2b:01:dd:d9:bb:52:11:ad:e7:dc: 08:fd:94:d1:56:2d:46:73:b0:43:c0:3a:10:10:8b:ed:6d:5d: 5b:f6:77:92:53:c5:3f:73:98:01:80:33:a5:52:2c:dd:4d:53: c8:60:19:e0:f8:c2:09:4e:12:ab:17:65:5a:5a:bd:37:76:40: 73:e3:ea:5e:c0:86:2e:b5:2f:50:4a:6c:dc:00:a4:da:c9:cd: f2:db:30:93 -----BEGIN CERTIFICATE----- MIIHMTCCBhmgAwIBAgIUAQ0Mn0MoWEskjz6EbAgozsLa4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkxMDAwNDUyNVoXDTI3MTIxNDAxNDUyNVowLzEtMCsGA1UEAxMk NDdhNmZiYzQtNTllMi00OWI0LWEzNDUtM2VkZGU4MWYyNmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuhGk0yIJSPg5aRlscKAODDOO4lkkIxKhYAC kkQwU4tRc7GYwReijSPoxNFV/gW5g7daLZkF0Vf6/NDzw5P25yiOu8EXRttQf+gP +3FqXPXdbPVJTFHs5MqmpXP/10WkwRcWdBXRHD7nrKZPVYGbaEhLSsUEFz+OVSFn Lktxjvo9yB/xQs+5HgUT8pc7dPl3/UzcWqZBG4c+JfgDSOhYns3/hTb1PFERhTr6 JK4zu+JlAI3TZN8l2MFt6T7J6XOakTJmi4VroibbqPA969T+UrFg+8ziXUKRLIxi 1yzD/vcyApfUUbCe2e3S3pvv5jBJoYh7vIu+DXbhO4ZC8727ywIDAQABo4IEQzCC BD8wHQYDVR0OBBYEFPAN/lt8JzpAgER86HWbizGty1dcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgxZjI2YTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ3YTZmYmM0LTU5ZTItNDliNC1h MzQ1LTNlZGRlODFmMjZhNC80N2E2ZmJjNC01OWUyLTQ5YjQtYTM0NS0zZWRkZTgx ZjI2YTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBAFCISIDBABCIWADBALHL6gDBALHOzQDBADHVVsw DwQCAAIwCQMHACYgACkAADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJ/IjBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQBXt64tKcjhAFprgWvQpSB0Zlvh5xZOILoO3g4f4kwcYEyZ1aMtoNlCMemH EOKCwTAeuHqMc8w5i7bFjIWbrczyqrUgNPN+E6x3gOsovua9tYqzn8oqrzMr1YnE RthWyXstO9pa+cdSUDu5oRud39itjkIgSBlXApqM+KD+WT/MY4OWIgsjUQ1EZwQb Zz1XLODMkYDemFRBjcpESuPvatItG0wTVgISJHwY+isB3dm7UhGt59wI/ZTRVi1G c7BDwDoQEIvtbV1b9neSU8U/c5gBgDOlUizdTVPIYBng+MIJThKrF2VaWr03dkBz 4+pewIYutS9QSmzcAKTayc3y2zCT -----END CERTIFICATE-----Generated at Wed Oct 8 21:24:50 2025 by rpki-client