$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer File: 51d85ec2-b89d-4cae-b3fb-deb592511be0.cer (raw, json) Hash identifier: tIRR+wM+0jHWvZU9XfzfcDc9hZq4/2czHzAFX8MgvxM= Subject key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B08A468630286408FDF64D380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 31 Aug 2025 00:45:25 +0000 Certificate not after: Sat 04 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 6363 IP: 134.141.0.0/16 IP: 2606:9fc0::/32 IP: 2620:1c:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:08:a4:68:63:02:86:40:8f:df:64:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 31 00:45:25 2025 GMT Not After : Dec 4 01:45:25 2027 GMT Subject: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c5:d9:d6:c7:58:1f:76:02:dd:3f:55:8e:97: 7f:de:0b:8b:45:0e:74:3f:a4:1c:56:eb:79:3f:90: 9b:83:06:9f:8d:d7:07:e6:ce:e6:0c:d0:5d:5e:3f: ef:9f:ae:ff:83:1b:70:bc:37:0c:53:02:31:f0:83: d8:ad:a7:04:8b:c6:ce:e8:71:5c:c3:1a:28:52:52: ec:91:29:ff:c7:95:5e:24:8e:b2:92:99:4e:62:18: 4e:68:27:38:8b:4d:a7:3f:2b:93:32:65:a1:2f:ae: 26:fb:85:0c:31:68:90:30:79:98:f4:af:2b:1e:fe: 93:22:38:8c:de:90:8d:d0:52:d3:b4:af:2a:99:2d: 0f:ee:0f:28:85:1a:d2:6d:cb:7c:d0:96:aa:39:8e: 72:04:0c:a5:33:7d:e5:28:57:c9:8c:2e:b0:1f:de: fa:13:e3:65:de:5d:12:0b:d4:3a:4e:b6:d8:95:33: af:09:a9:ab:c0:fb:62:11:3f:47:f0:d0:fe:88:7c: b6:55:19:1b:6f:6c:61:06:3c:12:01:78:de:ae:df: 41:6c:9d:9b:db:60:d1:20:1f:a0:a4:67:8b:39:df: 7f:ac:ef:f0:ea:96:0a:d3:75:fd:d8:70:bd:5b:9d: e0:47:d7:18:aa:43:8e:e7:b6:f6:f6:fd:9a:ef:76: 96:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 134.141.0.0/16 IPv6: 2606:9fc0::/32 2620:1c:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6363 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ba:82:83:79:6a:69:1f:1e:c4:8c:c2:13:f1:72:39:10:38: e0:c0:b1:b2:86:43:78:00:1c:f5:58:73:f3:49:be:94:73:eb: da:9e:98:72:0f:2f:87:e1:37:3f:5d:13:c8:ae:55:ca:62:08: 70:d2:8d:8b:c3:9c:31:63:fe:5e:5d:9e:dc:27:0a:11:55:3f: 38:a9:b6:87:26:aa:cb:0a:93:ac:7d:d0:08:53:f5:d6:ca:0f: 7c:f1:27:b6:78:0f:c8:63:1f:ed:12:eb:cd:56:9d:3d:19:43: eb:b8:40:6b:7d:67:19:fc:20:3e:ad:42:4c:46:b3:4d:ae:da: 1a:76:e3:b6:41:5d:77:f2:bb:28:44:d8:c9:23:3a:aa:9a:98: b0:f7:d7:9d:de:2c:7d:e1:d6:79:6f:89:68:47:eb:92:b7:ce: 67:ba:37:1e:fb:bc:a8:2f:03:21:3a:18:ec:21:a4:ca:b3:0d: 7b:72:93:0b:35:bd:52:52:da:58:ef:33:3c:77:c1:f5:ea:d0: 6d:f6:21:5c:99:50:ee:de:69:5f:98:44:cf:f2:f5:34:d1:4a: e2:31:f5:c2:1b:bc:c1:53:e5:71:26:57:9e:8a:80:41:03:6a: 0f:0b:ee:dc:ec:ec:57:c5:f7:9e:0c:1f:47:58:ea:9f:80:fa: 78:9a:93:24 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEsIpGhjAoZAj99k04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgzMTAwNDUyNVoXDTI3MTIwNDAxNDUyNVowLzEtMCsGA1UEAxMk NTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTExYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsXZ1sdYH3YC3T9Vjpd/3guLRQ50P6QcVut5 P5CbgwafjdcH5s7mDNBdXj/vn67/gxtwvDcMUwIx8IPYracEi8bO6HFcwxooUlLs kSn/x5VeJI6ykplOYhhOaCc4i02nPyuTMmWhL64m+4UMMWiQMHmY9K8rHv6TIjiM 3pCN0FLTtK8qmS0P7g8ohRrSbct80JaqOY5yBAylM33lKFfJjC6wH976E+Nl3l0S C9Q6TrbYlTOvCamrwPtiET9H8ND+iHy2VRkbb2xhBjwSAXjert9BbJ2b22DRIB+g pGeLOd9/rO/w6pYK03X92HC9W53gR9cYqkOO57b29v2a73aWvwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFIoet1DDhZOTU5diVXySGWyWRu4qMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzUxZDg1ZWMyLWI4OWQtNGNhZS1i M2ZiLWRlYjU5MjUxMWJlMC81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1 MTFiZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMAsEAgABMAUDAwCGjTAWBAIAAjAQAwUAJgafwAMHACYgAByAADAZ BggrBgEFBQcBCAEB/wQKMAigBjAEAgIY2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTuoKDeWppHx7EjMIT 8XI5EDjgwLGyhkN4ABz1WHPzSb6Uc+vanphyDy+H4Tc/XRPIrlXKYghw0o2Lw5wx Y/5eXZ7cJwoRVT84qbaHJqrLCpOsfdAIU/XWyg988Se2eA/IYx/tEuvNVp09GUPr uEBrfWcZ/CA+rUJMRrNNrtoaduO2QV138rsoRNjJIzqqmpiw99ed3ix94dZ5b4lo R+uSt85nujce+7yoLwMhOhjsIaTKsw17cpMLNb1SUtpY7zM8d8H16tBt9iFcmVDu 3mlfmETP8vU00UriMfXCG7zBU+VxJleeioBBA2oPC+7c7OxXxfeeDB9HWOqfgPp4 mpMk -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:41 2025 by rpki-client