$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer File: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer (raw, json) Hash identifier: bmPKjkVI5xjgGs/TVsoikv6OLFvsc6XK9CsQBmOmp7w= Subject key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584BB47F1F06CB3B3A515DDB1400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Oct 2025 14:09:20 +0000 Certificate not after: Thu 26 Nov 2026 20:15:03 +0000 Subordinate resources: AS: 8015 AS: 10464 AS: 18806 AS: 19149 AS: 26554 AS: 54111 AS: 54519 IP: 64.141.128.0/18 IP: 64.186.32.0/19 IP: 65.23.64.0/19 IP: 67.59.0.0/18 IP: 67.218.32.0/20 IP: 69.7.16.0/20 IP: 70.34.128.0/18 IP: 74.204.0.0/17 IP: 147.202.0.0/16 IP: 184.175.128.0/18 IP: 192.104.107.0 -- 192.104.110.255 IP: 208.42.0.0 -- 208.42.191.255 IP: 209.98.0.0/16 IP: 2001:18c8::/32 IP: 2607:1800::/32 IP: 2607:f7d8::/32 IP: 2620:a7:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:7f:1f:06:cb:3b:3a:51:5d:db:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 31 14:09:20 2025 GMT Not After : Nov 26 20:15:03 2026 GMT Subject: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:4e:b6:b9:a4:86:cb:08:8d:55:aa:6e:12: 57:95:fc:12:67:12:9a:8a:16:1c:f4:ea:b8:a5:26: fb:62:e8:47:be:50:c6:f0:a0:97:2b:78:51:24:a7: f0:43:94:b7:ac:b0:58:01:be:75:77:8d:c3:4b:dd: 12:20:f7:bb:85:e2:aa:e3:21:45:8b:ba:ee:e5:e3: 1a:a5:d2:47:62:0c:e2:b0:70:2e:40:11:88:f4:c0: c3:fb:b7:85:26:7f:c1:b1:65:c7:b7:1b:77:30:8e: 13:ce:14:f5:c5:28:c6:84:1b:1e:be:46:69:5a:b4: 4d:8a:57:52:9e:d4:e6:36:22:a6:68:fe:56:3c:f5: cd:8d:dd:76:83:8a:53:b1:43:c5:15:b9:86:9f:01: 99:0f:90:51:92:24:de:62:7d:2a:ec:52:b3:fa:35: b8:9f:23:2c:cf:0f:f0:54:b3:6c:9a:c2:95:a5:08: 82:1d:be:c2:2e:74:ca:fb:09:a2:e0:64:df:41:c4: 48:a6:df:9f:c4:5e:8b:26:0b:5a:b2:cd:00:eb:ed: b2:3b:2f:65:70:35:3c:3c:49:4d:ce:d3:b5:2e:dd: d6:7a:1c:00:b1:dc:26:84:65:7e:47:a0:2a:72:8b: 43:8f:d7:e2:3a:c6:23:50:f8:57:85:de:23:cd:83: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.141.128.0/18 64.186.32.0/19 65.23.64.0/19 67.59.0.0/18 67.218.32.0/20 69.7.16.0/20 70.34.128.0/18 74.204.0.0/17 147.202.0.0/16 184.175.128.0/18 192.104.107.0-192.104.110.255 208.42.0.0-208.42.191.255 209.98.0.0/16 IPv6: 2001:18c8::/32 2607:1800::/32 2607:f7d8::/32 2620:a7:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8015 10464 18806 19149 26554 54111 54519 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:81:ac:6f:46:52:e8:69:d3:de:41:5e:0b:64:91:bd:de:c6: aa:cf:e2:95:e8:51:30:ef:6d:ef:e3:26:b3:4d:47:bd:32:33: ae:d0:fc:09:f5:48:14:89:35:52:35:4d:17:96:c3:d9:32:35: e0:57:09:ce:df:38:27:e4:5a:62:08:1d:49:2a:d0:7f:2e:4c: d5:af:19:c5:bb:fb:e5:4c:c2:75:41:fb:bd:49:a0:7a:e5:69: db:44:dd:90:31:e6:90:96:17:cc:cd:cd:a6:c8:c9:e7:d1:fb: 64:c7:54:cc:53:45:e5:b1:cc:e0:2e:db:1c:58:b2:9c:5c:44: 7d:4d:5d:85:3d:83:05:fc:8f:5b:09:9b:94:10:3f:2d:e4:ac: f5:d2:75:08:b5:65:cc:0b:06:1b:43:f8:aa:90:a1:4c:93:72: 76:ad:b7:a5:8f:c4:f0:05:94:9b:50:5c:09:45:92:e1:f6:d9: 7c:6f:ce:c6:11:1a:3e:3c:e6:2b:7b:f2:6a:a7:f5:69:0e:38: e4:45:88:5f:67:cf:2a:4c:be:c4:76:65:b1:0b:9a:3c:83:ac: 0a:cf:f4:d6:cf:c2:dd:4f:1a:33:9f:f9:2c:39:1f:58:ad:44: 40:8f:ec:b1:a6:d5:73:87:4e:31:6b:7a:aa:e0:f7:5d:e6:97: e4:a5:7b:b0 -----BEGIN CERTIFICATE----- MIIHoDCCBoigAwIBAgIUAQ0Mn0MoWEu0fx8Gyzs6UV3bFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAzMTE0MDkyMFoXDTI2MTEyNjIwMTUwM1owLzEtMCsGA1UEAxMk NDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xOtrmkhssIjVWqbhJXlfwSZxKaihYc9Oq4 pSb7YuhHvlDG8KCXK3hRJKfwQ5S3rLBYAb51d43DS90SIPe7heKq4yFFi7ru5eMa pdJHYgzisHAuQBGI9MDD+7eFJn/BsWXHtxt3MI4TzhT1xSjGhBsevkZpWrRNildS ntTmNiKmaP5WPPXNjd12g4pTsUPFFbmGnwGZD5BRkiTeYn0q7FKz+jW4nyMszw/w VLNsmsKVpQiCHb7CLnTK+wmi4GTfQcRIpt+fxF6LJgtass0A6+2yOy9lcDU8PElN ztO1Lt3WehwAsdwmhGV+R6AqcotDj9fiOsYjUPhXhd4jzYMM7wIDAQABo4IEsjCC BK4wHQYDVR0OBBYEFL95Fr63j2n7/WOmv4kZfZ6o8sq3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQxZTM4ZGE1LWRlNGYtNDAwZC04 M2FiLTY1ZWUyZTJjMmQyNC80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUy YzJkMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgZwGCCsGAQUF BwEHAQH/BIGMMIGJMGEEAgABMFsDBAZAjYADBAVAuiADBAVBF0ADBAZDOwADBARD 2iADBARFBxADBAZGIoADBAdKzAADAwCTygMEBrivgDAMAwQAwGhrAwQAwGhuMAsD AwHQKgMEBtAqgAMDANFiMCQEAgACMB4DBQAgARjIAwUAJgcYAAMFACYH99gDBwAm IACngAAwMwYIKwYBBQUHAQgBAf8EJDAioCAwHgICH08CAijgAgJJdgICSs0CAme6 AgMA018CAwDU9zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUH AgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1s MA0GCSqGSIb3DQEBCwUAA4IBAQCLgaxvRlLoadPeQV4LZJG93saqz+KV6FEw723v 4yazTUe9MjOu0PwJ9UgUiTVSNU0XlsPZMjXgVwnO3zgn5FpiCB1JKtB/LkzVrxnF u/vlTMJ1Qfu9SaB65WnbRN2QMeaQlhfMzc2myMnn0ftkx1TMU0XlsczgLtscWLKc XER9TV2FPYMF/I9bCZuUED8t5Kz10nUItWXMCwYbQ/iqkKFMk3J2rbelj8TwBZSb UFwJRZLh9tl8b87GERo+POYre/Jqp/VpDjjkRYhfZ88qTL7EdmWxC5o8g6wKz/TW z8LdTxozn/ksOR9YrURAj+yxptVzh04xa3qq4Pdd5pfkpXuw -----END CERTIFICATE-----Generated at Sun Nov 2 02:31:25 2025 by rpki-client