$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164.cer File: 032fb77e-a6e2-484b-8175-944f82030164.cer (raw, json) Hash identifier: XPsngAUNVkD5dDN+UIunaeoHPUXH+9OeLpHYe1Whyl8= Subject key identifier: CE:4D:66:FF:71:A1:45:9E:15:12:A8:ED:A4:73:04:A7:06:8D:36:E7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B00445B0491012DF5660048C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 28 Aug 2025 00:45:25 +0000 Certificate not after: Wed 01 Dec 2027 01:45:25 +0000 Subordinate resources: IP: 23.130.184.0/24 IP: 2602:fbee::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:44:5b:04:91:01:2d:f5:66:00:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 28 00:45:25 2025 GMT Not After : Dec 1 01:45:25 2027 GMT Subject: CN=032fb77e-a6e2-484b-8175-944f82030164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:53:89:0e:18:8a:2e:19:9a:ee:92:b2:13:fa: ed:81:69:56:2e:1e:24:85:5b:ec:42:17:f7:43:10: 34:d9:73:69:d5:2e:bd:61:e0:67:12:a5:a8:af:e7: 9d:e8:7d:77:b0:c8:12:63:ba:86:56:a4:09:9f:ad: 5e:99:52:03:a9:7c:4a:f9:53:cc:c1:ab:9a:47:57: 39:c1:e4:4d:be:ba:9f:8e:f6:92:b9:92:db:3e:8e: 3d:3f:f0:6f:66:e0:75:e3:40:c0:e6:a9:e7:5f:44: dd:d7:d7:6b:ee:45:3e:c5:ae:a9:9e:9c:22:c9:64: aa:69:06:de:6c:d6:bd:eb:d1:a4:9c:b7:f5:bd:b3: 4f:9a:b7:eb:12:76:33:32:14:51:72:4f:8c:f3:7a: 6a:98:9e:89:5e:16:af:5b:21:83:2f:2c:f3:8f:0a: 1f:5e:25:19:3f:90:89:6c:38:a7:ac:2c:e1:0f:b0: d7:e1:3e:1f:8b:69:30:00:32:d2:59:e8:d4:2e:55: 36:6c:30:2d:fc:23:62:91:bc:98:3f:56:da:d6:1d: ee:94:95:7f:3b:a7:22:1c:4a:bc:1a:7b:a7:7b:ab: 4c:68:22:0c:6f:0c:78:07:00:2e:a0:2c:9f:2b:33: 06:23:07:8b:25:a0:2c:6a:62:45:6c:5b:5a:6e:02: 9f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:4D:66:FF:71:A1:45:9E:15:12:A8:ED:A4:73:04:A7:06:8D:36:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/032fb77e-a6e2-484b-8175-944f82030164/032fb77e-a6e2-484b-8175-944f82030164.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.130.184.0/24 IPv6: 2602:fbee::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b9:1d:ca:ed:c6:54:35:01:76:72:7c:9d:dc:af:24:05:03: a9:b7:26:d8:ea:8b:c1:f5:7f:f0:71:1c:4f:cb:6d:7c:f8:01: 35:9a:a0:5b:81:ec:df:1d:64:94:26:eb:b8:66:79:4f:7b:51: 26:10:78:03:60:1e:b4:45:77:b6:80:88:3f:b7:21:04:f9:d6: d2:ea:09:a7:05:84:c4:d6:d2:a7:09:40:1c:f7:6b:d7:42:b4: 46:d7:34:48:79:7a:b8:6e:02:f0:da:65:e2:72:d1:d8:64:f0: 34:f0:a7:d1:72:c3:a8:3e:cc:19:1a:74:b5:13:5f:0d:bc:d5: 2a:ae:e9:dd:6b:a8:ea:e7:89:62:e6:33:0a:5b:d4:75:0a:76: 6c:21:38:bd:8e:5c:fd:74:cd:9f:d7:5d:20:79:05:85:6f:0f: d7:41:62:aa:30:15:05:8a:bb:be:95:42:4f:2f:f3:b0:b6:90: dd:cc:ec:a0:77:e8:48:e8:b6:00:13:68:c2:c1:ac:74:c5:1e: cc:30:a8:47:ad:64:77:6f:0c:7e:89:11:cd:68:28:6c:cc:8c: 0b:92:e5:72:d4:3b:d1:30:71:d3:9d:75:9d:59:48:22:8a:00: 69:e4:32:2d:62:c4:8c:7c:95:7e:19:8b:50:73:e7:88:8e:b1: 28:f8:26:c9 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWEsARFsEkQEt9WYASMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgyODAwNDUyNVoXDTI3MTIwMTAxNDUyNVowLzEtMCsGA1UEAxMk MDMyZmI3N2UtYTZlMi00ODRiLTgxNzUtOTQ0ZjgyMDMwMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVOJDhiKLhma7pKyE/rtgWlWLh4khVvsQhf3 QxA02XNp1S69YeBnEqWor+ed6H13sMgSY7qGVqQJn61emVIDqXxK+VPMwauaR1c5 weRNvrqfjvaSuZLbPo49P/BvZuB140DA5qnnX0Td19dr7kU+xa6pnpwiyWSqaQbe bNa969GknLf1vbNPmrfrEnYzMhRRck+M83pqmJ6JXhavWyGDLyzzjwofXiUZP5CJ bDinrCzhD7DX4T4fi2kwADLSWejULlU2bDAt/CNikbyYP1ba1h3ulJV/O6ciHEq8 Gnune6tMaCIMbwx4BwAuoCyfKzMGIweLJaAsamJFbFtabgKfVwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFM5NZv9xoUWeFRKo7aRzBKcGjTbnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w MzJmYjc3ZS1hNmUyLTQ4NGItODE3NS05NDRmODIwMzAxNjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzAzMmZiNzdlLWE2ZTItNDg0Yi04 MTc1LTk0NGY4MjAzMDE2NC8wMzJmYjc3ZS1hNmUyLTQ4NGItODE3NS05NDRmODIw MzAxNjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgrgwDgQCAAIwCAMGACYC++4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEO5HcrtxlQ1AXZyfJ3cryQFA6m3Jtjqi8H1f/BxHE/LbXz4ATWaoFuB7N8dZJQm 67hmeU97USYQeANgHrRFd7aAiD+3IQT51tLqCacFhMTW0qcJQBz3a9dCtEbXNEh5 erhuAvDaZeJy0dhk8DTwp9Fyw6g+zBkadLUTXw281Squ6d1rqOrniWLmMwpb1HUK dmwhOL2OXP10zZ/XXSB5BYVvD9dBYqowFQWKu76VQk8v87C2kN3M7KB36EjotgAT aMLBrHTFHswwqEetZHdvDH6JEc1oKGzMjAuS5XLUO9EwcdOddZ1ZSCKKAGnkMi1i xIx8lX4Zi1Bz54iOsSj4Jsk= -----END CERTIFICATE-----Generated at Wed Oct 15 04:58:29 2025 by rpki-client