$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer File: 06758d63-ebc2-49b2-b82c-063e47fb7a0f.cer (raw, json) Hash identifier: Q5enCk5Y1VcgHUABWyUblJP4BctvGyLML/D7WMmi1UA= Subject key identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A962E75271FC2B8DA34376A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 21 Jul 2025 00:45:37 +0000 Certificate not after: Sun 24 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 36263 IP: 2606:5cc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:2e:75:27:1f:c2:b8:da:34:37:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 21 00:45:37 2025 GMT Not After : Oct 24 00:45:37 2027 GMT Subject: CN=06758d63-ebc2-49b2-b82c-063e47fb7a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9e:5f:62:ba:a0:7c:0e:54:8f:f1:8e:30:f1: a7:f5:22:f0:a5:06:e2:49:b6:ad:e7:68:19:57:a0: 08:2c:21:2a:f0:ae:90:e9:bd:23:33:de:5a:4f:f2: 45:38:d8:86:0c:aa:c2:37:62:34:f4:d5:de:da:9b: 2f:85:97:5a:d6:ea:8a:18:4d:55:eb:b1:ee:4e:79: 9c:da:22:41:6b:69:be:80:e1:18:da:23:e9:2a:7f: 88:1e:c8:d6:d3:5b:92:21:60:24:61:10:68:d0:b2: 1e:d9:b7:08:5c:9b:bf:48:d1:45:e7:38:3d:90:74: 46:0b:02:51:11:6c:60:a5:73:49:67:6f:7f:e6:3b: 60:52:08:e7:76:10:95:87:a0:72:99:eb:49:a7:76: 77:69:fe:ff:c8:fd:9f:d3:6b:76:9b:26:37:c8:c5: e2:39:db:5f:52:c5:71:a4:77:8a:f4:99:b3:25:0a: bc:fc:9c:07:7d:30:a1:8f:43:ad:82:f4:eb:a4:07: fa:1d:0f:a9:2e:e9:3e:e6:67:e2:3a:91:d8:9f:09: 29:2e:ff:26:fb:44:2f:1f:a8:11:6b:7f:26:b4:11: 4a:67:5c:04:84:2e:ed:01:d9:b3:73:f1:64:56:6c: 3d:5d:78:e3:c8:23:51:0a:88:53:df:2d:f2:3c:ab: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FE:D6:68:34:3C:F9:A3:DE:8F:AD:F3:20:09:E6:2A:66:47:4E:92 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/06758d63-ebc2-49b2-b82c-063e47fb7a0f/06758d63-ebc2-49b2-b82c-063e47fb7a0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2606:5cc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36263 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:33:92:b9:64:04:6b:71:3a:fc:8b:1b:61:72:97:82:32:20: ab:c9:f9:b1:55:67:c7:4f:74:59:3a:95:f4:d7:4d:db:ba:5d: 97:5a:42:29:59:08:25:17:1d:0a:b3:48:0d:b5:b9:c1:10:74: 74:21:b4:11:d8:c7:af:a8:96:79:4d:a3:e1:5d:5e:3e:5a:82: 53:5f:8c:41:f4:43:7d:76:fe:f0:04:1e:73:c0:ea:d7:cd:c1: 87:87:d0:79:3a:73:2e:19:32:9a:2f:f1:73:2d:e7:59:93:e2: 39:f0:d6:d6:79:5d:e2:53:ea:03:29:9b:93:db:df:d4:cf:b8: f2:b4:45:a0:70:c6:85:03:20:1c:16:55:38:c4:e0:e1:52:8a: be:9d:ef:c5:d0:24:55:8a:83:d4:b2:9c:35:9c:23:c4:73:3b: 90:3c:e6:72:94:14:94:ae:3a:75:6c:d3:c1:a6:b0:2a:fe:a0: 35:7c:ed:96:79:a0:02:f4:50:a5:00:19:1e:b2:99:2e:0f:a1: 45:6f:82:fd:a5:18:a7:b4:87:59:36:03:26:37:34:a5:9e:e3: e4:c7:fc:08:60:9b:a1:6f:b6:52:49:cd:88:f9:79:51:c5:30: 3f:e6:b8:93:c2:19:89:63:49:22:f7:47:de:67:3f:0d:df:60: 96:d3:df:cd -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWEqWLnUnH8K42jQ3aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDcyMTAwNDUzN1oXDTI3MTAyNDAwNDUzN1owLzEtMCsGA1UEAxMk MDY3NThkNjMtZWJjMi00OWIyLWI4MmMtMDYzZTQ3ZmI3YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ5fYrqgfA5Uj/GOMPGn9SLwpQbiSbat52gZ V6AILCEq8K6Q6b0jM95aT/JFONiGDKrCN2I09NXe2psvhZda1uqKGE1V67HuTnmc 2iJBa2m+gOEY2iPpKn+IHsjW01uSIWAkYRBo0LIe2bcIXJu/SNFF5zg9kHRGCwJR EWxgpXNJZ29/5jtgUgjndhCVh6BymetJp3Z3af7/yP2f02t2myY3yMXiOdtfUsVx pHeK9JmzJQq8/JwHfTChj0OtgvTrpAf6HQ+pLuk+5mfiOpHYnwkpLv8m+0QvH6gR a38mtBFKZ1wEhC7tAdmzc/FkVmw9XXjjyCNRCohT3y3yPKsZ1wIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFBH+1mg0PPmj3o+t8yAJ5ipmR06SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w Njc1OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNlNDdmYjdhMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzA2NzU4ZDYzLWViYzItNDliMi1i ODJjLTA2M2U0N2ZiN2EwZi8wNjc1OGQ2My1lYmMyLTQ5YjItYjgyYy0wNjNlNDdm YjdhMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBlzAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwCNpzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCXM5K5ZARrcTr8ixthcpeCMiCryfmxVWfHT3RZOpX0103b ul2XWkIpWQglFx0Ks0gNtbnBEHR0IbQR2MevqJZ5TaPhXV4+WoJTX4xB9EN9dv7w BB5zwOrXzcGHh9B5OnMuGTKaL/FzLedZk+I58NbWeV3iU+oDKZuT29/Uz7jytEWg cMaFAyAcFlU4xODhUoq+ne/F0CRVioPUspw1nCPEczuQPOZylBSUrjp1bNPBprAq /qA1fO2WeaAC9FClABkespkuD6FFb4L9pRintIdZNgMmNzSlnuPkx/wIYJuhb7ZS Sc2I+XlRxTA/5riTwhmJY0ki90feZz8N32CW09/N -----END CERTIFICATE-----Generated at Fri Oct 24 10:07:26 2025 by rpki-client