$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1.cer File: 40e46360-7ddb-4bec-b73a-9620baea4da1.cer (raw, json) Hash identifier: o3wQq7rH35imUt4taTSL4evg0Ffs0v8Udn3ZDTPqSSk= Subject key identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B248F3E72843605E04C75B960 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Sep 2025 00:45:25 +0000 Certificate not after: Tue 14 Dec 2027 01:45:25 +0000 Subordinate resources: AS: 36197 IP: 168.100.167.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:8f:3e:72:84:36:05:e0:4c:75:b9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 10 00:45:25 2025 GMT Not After : Dec 14 01:45:25 2027 GMT Subject: CN=40e46360-7ddb-4bec-b73a-9620baea4da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:13:bc:c2:c7:c6:1f:63:44:86:8b:3c:6a:89: 26:6e:1d:43:bf:f2:05:b9:cf:72:d5:d3:48:34:02: bc:07:1e:46:c2:82:2a:94:bd:90:46:c5:53:1e:9b: 18:f9:58:8e:06:fc:ad:f9:51:52:32:a4:55:72:9f: d0:21:61:50:49:a6:d9:e9:27:c0:85:b5:b6:aa:00: 7a:f6:80:5c:a6:45:f8:fa:42:af:43:2d:48:16:63: 29:fe:10:c4:d2:8b:ae:5e:2e:5a:6f:b3:d0:84:a4: 5d:fc:ee:96:69:b5:af:87:e2:2a:8b:05:68:f7:22: 4c:15:d9:6b:55:00:9f:8d:4c:61:8a:29:3b:4c:9a: 4e:bf:6a:1d:c8:06:fd:1c:b5:22:52:25:f4:2d:b5: 1a:f0:c2:11:da:fd:47:b2:1e:c7:d2:d8:b8:ec:a8: b3:6e:21:25:6e:2c:10:6f:f4:e4:12:5c:df:5d:36: 7f:09:f6:ef:b1:a5:06:04:3e:39:73:38:a8:fc:c7: a3:5c:40:72:2b:45:01:8a:50:c8:de:6f:92:15:85: 55:5f:64:fc:6b:45:83:bb:04:8d:8d:dd:59:8a:f6: 25:f3:c4:e2:4a:cf:51:03:7b:1a:16:b8:dd:d9:b4: 30:39:98:3f:fb:d2:aa:fe:84:f4:65:50:94:b4:e9: 34:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:8E:6C:47:BA:6D:30:A2:D0:A2:3C:6D:68:2D:C3:77:C4:70:19:EB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40e46360-7ddb-4bec-b73a-9620baea4da1/40e46360-7ddb-4bec-b73a-9620baea4da1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 168.100.167.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36197 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f5:30:38:ef:bf:40:56:b6:e4:5e:69:80:71:7c:ed:46:c0: 4e:97:b4:eb:83:3d:1f:4c:e0:4e:91:96:5d:39:1c:c5:3b:11: 9f:17:a7:17:02:42:58:0b:35:c3:b1:f5:34:45:22:92:8b:76: 83:2b:cd:53:fb:c2:95:3c:0e:86:5b:0b:0b:fd:1e:42:04:f6: e8:00:5a:09:10:8e:06:e5:e9:a7:24:d8:63:74:fa:96:16:46: c5:ee:f6:84:d7:df:94:3d:5d:f3:1a:2f:17:9a:ed:30:4e:05: 15:5f:23:c6:51:2e:84:c7:07:2e:d1:03:b3:47:be:94:ab:dd: b5:e0:16:1a:27:39:61:33:01:6e:19:be:0f:d6:51:ca:93:e1: c4:45:14:47:ff:31:04:ce:67:08:d1:1b:3a:6e:ba:d0:d1:df: 3b:f4:a0:3a:ec:2b:94:42:07:f7:5d:1d:4f:4c:4a:02:a9:87: 02:86:2a:b3:c8:61:1d:54:a6:ce:4b:55:18:5c:a2:77:5e:7c: 6c:73:88:06:0b:44:57:2f:07:23:e0:01:a0:89:70:44:ac:83: 6d:1f:69:11:96:ea:fa:20:be:1e:ea:54:0a:69:a0:a7:96:5b: 34:0c:63:d9:bb:4c:be:5b:10:bd:46:75:7e:eb:d5:03:8d:57: af:62:49:47 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEskjz5yhDYF4Ex1uWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkxMDAwNDUyNVoXDTI3MTIxNDAxNDUyNVowLzEtMCsGA1UEAxMk NDBlNDYzNjAtN2RkYi00YmVjLWI3M2EtOTYyMGJhZWE0ZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBO8wsfGH2NEhos8aokmbh1Dv/IFuc9y1dNI NAK8Bx5GwoIqlL2QRsVTHpsY+ViOBvyt+VFSMqRVcp/QIWFQSabZ6SfAhbW2qgB6 9oBcpkX4+kKvQy1IFmMp/hDE0ouuXi5ab7PQhKRd/O6WabWvh+IqiwVo9yJMFdlr VQCfjUxhiik7TJpOv2odyAb9HLUiUiX0LbUa8MIR2v1Hsh7H0ti47KizbiElbiwQ b/TkElzfXTZ/CfbvsaUGBD45czio/MejXEByK0UBilDI3m+SFYVVX2T8a0WDuwSN jd1ZivYl88TiSs9RA3saFrjd2bQwOZg/+9Kq/oT0ZVCUtOk0iQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEaObEe6bTCi0KI8bWgtw3fEcBnrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFlYTRkYTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQwZTQ2MzYwLTdkZGItNGJlYy1i NzNhLTk2MjBiYWVhNGRhMS80MGU0NjM2MC03ZGRiLTRiZWMtYjczYS05NjIwYmFl YTRkYTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACoZKcwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID AI1lMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIv1MDjvv0BWtuReaYBxfO1GwE6XtOuDPR9M4E6Rll05HMU7 EZ8XpxcCQlgLNcOx9TRFIpKLdoMrzVP7wpU8DoZbCwv9HkIE9ugAWgkQjgbl6ack 2GN0+pYWRsXu9oTX35Q9XfMaLxea7TBOBRVfI8ZRLoTHBy7RA7NHvpSr3bXgFhon OWEzAW4Zvg/WUcqT4cRFFEf/MQTOZwjRGzpuutDR3zv0oDrsK5RCB/ddHU9MSgKp hwKGKrPIYR1Ups5LVRhcondefGxziAYLRFcvByPgAaCJcESsg20faRGW6vogvh7q VAppoKeWWzQMY9m7TL5bEL1GdX7r1QONV69iSUc= -----END CERTIFICATE-----Generated at Fri Oct 17 07:31:46 2025 by rpki-client