$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124.cer File: 3a636afd-ece5-4e23-a54f-c43e0fc08124.cer (raw, json) Hash identifier: wZHw7066mjSpArl/s4CEUAM8Di4tUtSsnM85xtqK7iM= Subject key identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AD92EC570FAAE82CB291D2C60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 14 Aug 2025 00:45:24 +0000 Certificate not after: Wed 17 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 395523 IP: 148.59.60.0/24 IP: 148.59.78.0/24 IP: 2620:2a:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d9:2e:c5:70:fa:ae:82:cb:29:1d:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 14 00:45:24 2025 GMT Not After : Nov 17 01:45:24 2027 GMT Subject: CN=3a636afd-ece5-4e23-a54f-c43e0fc08124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:7a:2c:0d:1f:8d:8b:ce:ad:e8:5d:9f:90: f3:a2:dd:71:c5:3c:25:f4:02:a1:05:9a:35:d2:c6: f3:ab:91:01:c8:df:37:5d:c1:7b:f3:f5:b5:69:a0: 5e:e7:6c:8c:50:9d:e5:e0:21:b7:c7:9e:c7:f9:10: 20:37:e3:74:b2:e5:a4:11:67:c8:b7:c8:24:e4:28: 97:25:43:09:7f:dd:b3:89:7c:93:ef:5a:e2:8b:1d: 57:5b:59:7c:2a:ed:70:d7:fc:16:51:c5:d5:d6:5e: e8:a0:6c:8f:d0:0c:c2:f0:88:a0:53:0e:72:f5:35: 56:76:6a:2d:ea:62:3a:85:0f:86:a8:ec:b5:15:e3: 3d:d0:b8:a0:f3:e9:93:70:19:99:ab:f2:1f:37:15: eb:03:24:11:8b:f0:3f:52:8b:c6:91:37:41:f6:fa: b7:1e:ab:6d:92:ed:50:9e:a8:54:d1:66:85:20:ec: 7c:a6:1a:94:8b:14:39:29:82:55:b6:b7:dc:fd:f6: b9:be:6c:d1:91:bb:88:0c:aa:2b:da:34:bb:c9:c4: 4a:00:ce:3a:df:eb:f0:d1:82:c7:e7:47:4a:eb:03: 06:21:11:73:7c:4d:b1:c3:9d:e9:61:8e:4e:78:48: a5:c0:55:31:a4:07:ad:32:32:18:81:46:86:77:50: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CE:40:F1:5E:3E:E3:95:3C:35:42:B6:04:3C:3E:D1:61:07:37:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a636afd-ece5-4e23-a54f-c43e0fc08124/3a636afd-ece5-4e23-a54f-c43e0fc08124.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 148.59.60.0/24 148.59.78.0/24 IPv6: 2620:2a:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395523 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:8b:c1:32:ee:1f:54:42:10:ef:f0:b9:e4:e1:4a:d7:df:c8: 20:12:6e:2c:67:67:45:5f:ac:44:06:c9:9a:65:eb:b9:ce:13: c2:83:85:49:f2:c3:60:cb:d9:01:3e:c3:d2:50:e1:65:56:32: 10:66:31:f6:06:18:51:b8:53:61:32:51:e2:73:de:d8:ee:37: 8d:6b:4e:b5:7f:49:d1:84:96:10:ea:14:08:12:b1:a2:16:cc: 3a:fc:91:e2:59:47:7a:3a:8d:29:c3:8e:d4:38:2b:89:36:53: e7:a4:ec:88:bb:62:ae:64:75:73:0c:f4:45:ab:0a:41:21:9f: da:ab:a0:47:23:af:08:3b:31:27:26:1e:f5:67:08:34:e5:75: c1:cb:62:c6:64:38:24:fe:79:25:c9:52:60:41:8c:a0:cd:df: b5:44:11:18:b6:4e:18:e6:ba:0c:bd:3b:f3:74:88:67:07:63: e9:12:67:ce:c9:a0:6d:b5:56:19:fa:45:de:63:3c:c3:73:51: 57:36:b9:16:4c:6f:d0:7b:ed:02:e4:a3:aa:36:03:16:9c:ed: b6:fd:03:b0:fe:5d:f6:57:04:0b:fd:c4:f5:b6:e8:2c:65:21: 2d:8d:09:c2:9a:16:e9:24:24:0b:17:a8:b7:49:3c:4c:af:26: 5a:ca:c9:cc -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWErZLsVw+q6CyykdLGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgxNDAwNDUyNFoXDTI3MTExNzAxNDUyNFowLzEtMCsGA1UEAxMk M2E2MzZhZmQtZWNlNS00ZTIzLWE1NGYtYzQzZTBmYzA4MTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0B6LA0fjYvOrehdn5Dzot1xxTwl9AKhBZo1 0sbzq5EByN83XcF78/W1aaBe52yMUJ3l4CG3x57H+RAgN+N0suWkEWfIt8gk5CiX JUMJf92ziXyT71riix1XW1l8Ku1w1/wWUcXV1l7ooGyP0AzC8IigUw5y9TVWdmot 6mI6hQ+GqOy1FeM90Lig8+mTcBmZq/IfNxXrAyQRi/A/UovGkTdB9vq3Hqttku1Q nqhU0WaFIOx8phqUixQ5KYJVtrfc/fa5vmzRkbuIDKor2jS7ycRKAM463+vw0YLH 50dK6wMGIRFzfE2xw53pYY5OeEilwFUxpAetMjIYgUaGd1DfzwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFIvOQPFePuOVPDVCtgQ8PtFhBzcjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z YTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZjMDgxMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzNhNjM2YWZkLWVjZTUtNGUyMy1h NTRmLWM0M2UwZmMwODEyNC8zYTYzNmFmZC1lY2U1LTRlMjMtYTU0Zi1jNDNlMGZj MDgxMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBACUOzwDBACUO04wDwQCAAIwCQMHACYgACqgADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGCQMwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATIvBMu4fVEIQ7/C5 5OFK19/IIBJuLGdnRV+sRAbJmmXruc4TwoOFSfLDYMvZAT7D0lDhZVYyEGYx9gYY UbhTYTJR4nPe2O43jWtOtX9J0YSWEOoUCBKxohbMOvyR4llHejqNKcOO1DgriTZT 56TsiLtirmR1cwz0RasKQSGf2qugRyOvCDsxJyYe9WcINOV1wctixmQ4JP55JclS YEGMoM3ftUQRGLZOGOa6DL0783SIZwdj6RJnzsmgbbVWGfpF3mM8w3NRVza5Fkxv 0HvtAuSjqjYDFpzttv0DsP5d9lcEC/3E9bboLGUhLY0JwpoW6SQkCxeot0k8TK8m WsrJzA== -----END CERTIFICATE-----Generated at Wed Aug 20 13:11:12 2025 by rpki-client