$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05aa9e6e-c585-4712-9ece-3537711066ce.cer File: 05aa9e6e-c585-4712-9ece-3537711066ce.cer (raw, json) Hash identifier: oKyz0N/ddbUzdnDxx4003gt7IHqBp3r0XzPv1PgwTLg= Subject key identifier: FF:F1:CB:AA:4D:99:4E:00:5B:5C:5A:F1:E3:77:51:86:04:8F:6B:DA Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AFD79AAC5345B290D3E1F88EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05aa9e6e-c585-4712-9ece-3537711066ce/05aa9e6e-c585-4712-9ece-3537711066ce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05aa9e6e-c585-4712-9ece-3537711066ce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 Aug 2025 00:45:25 +0000 Certificate not after: Tue 30 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 400070 IP: 23.189.80.0/23 IP: 2602:80c:9000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:79:aa:c5:34:5b:29:0d:3e:1f:88:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 27 00:45:25 2025 GMT Not After : Nov 30 01:45:25 2027 GMT Subject: CN=05aa9e6e-c585-4712-9ece-3537711066ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:30:46:da:e5:ce:f3:af:39:a0:4a:76:29:de: 91:2e:31:7f:e1:c0:3d:8e:93:c1:a1:4b:dc:51:da: f2:ab:a7:16:89:c9:c7:fa:b2:a8:85:09:b7:38:9c: 0e:79:67:dd:54:0d:8c:bb:e6:03:97:37:95:7d:cc: 52:44:10:d2:04:28:0f:8f:6c:0d:d1:79:fc:28:a5: a0:85:0c:33:58:e1:eb:68:a6:ca:78:31:28:e1:4f: a0:f0:12:bd:f9:75:87:4c:d3:cb:95:78:b5:c1:c4: 04:49:a6:b5:cb:80:9a:3f:81:6c:c4:fe:c0:49:36: df:e4:d4:51:15:6a:66:2f:f5:88:d2:09:f2:1b:0c: 21:70:6c:6e:0c:fc:5b:f8:52:c3:10:14:f5:7f:40: 14:32:e3:d6:99:18:a8:fc:23:22:34:da:50:62:6f: 6a:ff:ab:b0:1b:36:fb:12:4a:ea:98:e8:5c:9e:30: 16:f3:80:d3:ab:77:28:ea:e3:0a:4c:45:0d:bf:9f: fa:0c:c7:96:d0:9f:72:1d:7c:f1:c4:46:4f:88:7c: fd:60:c2:52:81:e1:54:61:57:e8:8f:49:0c:9d:99: be:f2:0b:67:6c:0f:ba:d3:90:68:c8:38:13:09:3b: 27:c4:4e:b4:75:b7:e0:3c:78:e6:3c:b9:cc:a8:c6: 1f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F1:CB:AA:4D:99:4E:00:5B:5C:5A:F1:E3:77:51:86:04:8F:6B:DA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05aa9e6e-c585-4712-9ece-3537711066ce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/05aa9e6e-c585-4712-9ece-3537711066ce/05aa9e6e-c585-4712-9ece-3537711066ce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.189.80.0/23 IPv6: 2602:80c:9000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400070 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:0e:1e:15:af:53:a0:52:75:77:42:15:f2:29:b4:d9:20:45: 4a:76:e2:35:5a:a1:94:a2:69:38:5e:67:cc:2f:94:3b:59:e9: da:5b:4c:82:cb:30:5d:86:4c:33:1d:87:6a:2a:f0:c7:55:7c: 05:40:f1:7f:eb:8a:16:c6:d3:0f:de:d0:07:ef:26:e1:51:49: ce:30:f5:e3:28:d4:92:a7:c7:37:98:7b:a4:56:b8:66:55:06: 99:3d:35:cf:ed:34:ce:02:8b:f0:46:d7:58:f7:66:29:cc:c8: 04:b9:a0:a9:62:83:fc:22:1b:e9:6f:59:6f:4f:2f:d6:24:51: 5d:20:bc:dc:49:8a:a8:4a:fa:2b:af:27:0f:59:50:d9:f1:ee: 11:13:74:22:7c:a7:2b:79:87:a4:ab:4d:86:f0:41:2c:d6:4e: 9f:7b:28:5d:aa:1d:d9:7d:f9:50:0d:3a:1f:3a:20:87:0f:0a: 70:1e:87:d7:dd:b5:ad:d7:75:8f:87:a2:ed:22:1f:e4:bd:8e: c8:12:5e:b2:64:2d:64:81:79:86:5e:1d:fc:9b:8a:bb:b2:b1: bd:b9:2c:5e:3c:26:0e:6c:67:f2:e9:c8:b0:94:41:76:8f:43: 10:5b:48:7e:ef:8f:12:92:bd:31:5e:64:21:5d:e6:e9:9e:a4: 08:7f:32:fa -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEr9earFNFspDT4fiO4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgyNzAwNDUyNVoXDTI3MTEzMDAxNDUyNVowLzEtMCsGA1UEAxMk MDVhYTllNmUtYzU4NS00NzEyLTllY2UtMzUzNzcxMTA2NmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTBG2uXO8685oEp2Kd6RLjF/4cA9jpPBoUvc Udryq6cWicnH+rKohQm3OJwOeWfdVA2Mu+YDlzeVfcxSRBDSBCgPj2wN0Xn8KKWg hQwzWOHraKbKeDEo4U+g8BK9+XWHTNPLlXi1wcQESaa1y4CaP4FsxP7ASTbf5NRR FWpmL/WI0gnyGwwhcGxuDPxb+FLDEBT1f0AUMuPWmRio/CMiNNpQYm9q/6uwGzb7 EkrqmOhcnjAW84DTq3co6uMKTEUNv5/6DMeW0J9yHXzxxEZPiHz9YMJSgeFUYVfo j0kMnZm+8gtnbA+605BoyDgTCTsnxE60dbfgPHjmPLnMqMYf5QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFP/xy6pNmU4AW1xa8eN3UYYEj2vaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w NWFhOWU2ZS1jNTg1LTQ3MTItOWVjZS0zNTM3NzExMDY2Y2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzA1YWE5ZTZlLWM1ODUtNDcxMi05 ZWNlLTM1Mzc3MTEwNjZjZS8wNWFhOWU2ZS1jNTg1LTQ3MTItOWVjZS0zNTM3NzEx MDY2Y2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAEXvVAwDwQCAAIwCQMHBCYCCAyQADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGGsYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAw4eFa9ToFJ1d0IV8im02SBF SnbiNVqhlKJpOF5nzC+UO1np2ltMgsswXYZMMx2Hairwx1V8BUDxf+uKFsbTD97Q B+8m4VFJzjD14yjUkqfHN5h7pFa4ZlUGmT01z+00zgKL8EbXWPdmKczIBLmgqWKD /CIb6W9Zb08v1iRRXSC83EmKqEr6K68nD1lQ2fHuERN0InynK3mHpKtNhvBBLNZO n3soXaod2X35UA06Hzoghw8KcB6H1921rdd1j4ei7SIf5L2OyBJesmQtZIF5hl4d /JuKu7KxvbksXjwmDmxn8unIsJRBdo9DEFtIfu+PEpK9MV5kIV3m6Z6kCH8y+g== -----END CERTIFICATE-----Generated at Fri Oct 17 07:32:36 2025 by rpki-client