$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer File: ad3f6620-0576-46d8-b05d-3e2cdd06afa3.cer (raw, json) Hash identifier: it58MCXprkCTG51WarXaXLeTQelb2eMtHWwI9yOmBVc= Subject key identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B6FEFB0971E6127C4B890DA40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 00:45:22 +0000 Certificate not after: Mon 10 Jan 2028 01:45:22 +0000 Subordinate resources: AS: 13880 AS: 26887 IP: 64.57.32.0/20 IP: 216.230.48.0/20 IP: 2620:110:7000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:ef:b0:97:1e:61:27:c4:b8:90:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 7 00:45:22 2025 GMT Not After : Jan 10 01:45:22 2028 GMT Subject: CN=ad3f6620-0576-46d8-b05d-3e2cdd06afa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f0:7c:c8:21:47:03:41:a0:23:ac:c2:d9:84: ff:97:2b:25:0f:3d:a9:07:f2:55:10:e2:f3:c5:eb: 50:cd:f4:0a:d3:84:07:8b:97:ae:42:e0:ce:eb:da: 10:b5:f6:77:42:c8:e7:26:20:fa:6e:f9:fb:ad:b1: 25:7a:31:ef:99:10:d0:ed:16:fd:b4:c8:c7:14:8a: 5d:f5:60:36:86:92:23:3b:90:0f:56:02:fd:da:61: e6:e5:fb:a3:93:5a:1a:ba:5c:20:f0:6e:4e:b7:c5: c7:1c:15:99:f3:88:1f:3d:64:fb:1a:13:06:c5:23: cf:67:2f:a2:cd:94:22:3b:c9:87:05:7f:f9:86:81: 3e:1d:92:38:6c:f5:a3:6b:94:08:00:bb:df:7a:b6: 8d:15:b4:5f:7e:43:fb:cb:59:7b:3c:11:16:2d:c0: 21:8d:93:4f:8b:f8:4b:b4:b7:35:d2:d2:b9:1d:40: d8:0f:48:9e:c1:e8:7a:ee:e4:7a:70:65:ca:d0:82: 54:d8:d3:11:cd:fe:50:fd:73:07:01:c0:13:cf:dd: 8c:e1:74:54:34:f8:b3:ea:f6:a6:ef:bf:d4:11:94: a6:eb:a1:0b:27:c8:fe:f2:ab:38:df:34:de:5c:2a: 23:18:b0:e6:16:f1:b6:16:1f:e9:ac:a6:6e:47:7f: 81:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DF:DB:98:30:C1:D1:4C:D5:B7:31:84:EC:A7:FC:60:F4:5F:F2:D3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad3f6620-0576-46d8-b05d-3e2cdd06afa3/ad3f6620-0576-46d8-b05d-3e2cdd06afa3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.57.32.0/20 216.230.48.0/20 IPv6: 2620:110:7000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13880 26887 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:dc:11:39:43:98:67:cc:2d:e3:a3:4f:7f:49:4e:43:a9:6b: 63:ff:48:ed:ff:29:0c:48:c0:2e:96:d4:b1:e6:3f:38:ab:66: 23:f2:80:06:c1:b7:c1:13:93:ee:5a:77:15:a0:6f:a2:eb:57: 85:84:13:57:9d:43:16:78:b3:26:04:f0:8f:00:ef:87:4b:a9: 93:1b:1e:f2:61:37:27:30:61:75:1d:7c:7c:e9:e3:63:8b:02: 62:a9:bb:a0:73:50:3c:93:b6:13:22:bc:91:5a:f6:e7:78:46: 25:73:bf:38:52:5d:bf:1a:60:1c:2a:2e:3c:b6:ce:aa:13:59: 67:91:7b:63:aa:1c:bc:a7:bb:fe:fb:08:2a:61:43:db:ca:ec: 8b:9a:02:19:fc:c6:07:f4:d9:94:8a:c9:f9:e9:be:e4:2b:ad: 0c:9e:3e:b2:f7:5b:e9:06:98:9a:37:49:f5:34:ee:22:b8:d3: a1:a9:39:bc:c8:c9:ea:ee:b7:20:87:12:bb:c9:cf:57:a0:fc: 5f:fe:25:6f:37:d2:f6:78:7c:2f:d7:a6:76:db:cb:5d:57:ed: 4f:93:64:3c:2f:e5:e2:98:78:d3:d8:24:39:c1:c2:2c:76:f1: d5:ef:bd:c5:e1:14:95:72:e5:6d:b4:3f:57:22:63:95:8e:ad: 93:5c:d8:46 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEtv77CXHmEnxLiQ2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwNzAwNDUyMloXDTI4MDExMDAxNDUyMlowLzEtMCsGA1UEAxMk YWQzZjY2MjAtMDU3Ni00NmQ4LWIwNWQtM2UyY2RkMDZhZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/B8yCFHA0GgI6zC2YT/lyslDz2pB/JVEOLz xetQzfQK04QHi5euQuDO69oQtfZ3QsjnJiD6bvn7rbElejHvmRDQ7Rb9tMjHFIpd 9WA2hpIjO5APVgL92mHm5fujk1oaulwg8G5Ot8XHHBWZ84gfPWT7GhMGxSPPZy+i zZQiO8mHBX/5hoE+HZI4bPWja5QIALvferaNFbRffkP7y1l7PBEWLcAhjZNPi/hL tLc10tK5HUDYD0ieweh67uR6cGXK0IJU2NMRzf5Q/XMHAcATz92M4XRUNPiz6vam 77/UEZSm66ELJ8j+8qs43zTeXCojGLDmFvG2Fh/prKZuR3+BzwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFIjf25gwwdFM1bcxhOyn/GD0X/LTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h ZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQwNmFmYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FkM2Y2NjIwLTA1NzYtNDZkOC1i MDVkLTNlMmNkZDA2YWZhMy9hZDNmNjYyMC0wNTc2LTQ2ZDgtYjA1ZC0zZTJjZGQw NmFmYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBARAOSADBATY5jAwDwQCAAIwCQMHBCYgARBwADAd BggrBgEFBQcBCAEB/wQOMAygCjAIAgI2OAICaQcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABdwROUOYZ8wt 46NPf0lOQ6lrY/9I7f8pDEjALpbUseY/OKtmI/KABsG3wROT7lp3FaBvoutXhYQT V51DFnizJgTwjwDvh0upkxse8mE3JzBhdR18fOnjY4sCYqm7oHNQPJO2EyK8kVr2 53hGJXO/OFJdvxpgHCouPLbOqhNZZ5F7Y6ocvKe7/vsIKmFD28rsi5oCGfzGB/TZ lIrJ+em+5CutDJ4+svdb6QaYmjdJ9TTuIrjToak5vMjJ6u63IIcSu8nPV6D8X/4l bzfS9nh8L9emdtvLXVftT5NkPC/l4ph409gkOcHCLHbx1e+9xeEUlXLlbbQ/VyJj lY6tk1zYRg== -----END CERTIFICATE-----Generated at Wed Oct 8 21:33:00 2025 by rpki-client