$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer File: 64a6009d-12b8-4b34-95f9-d26180d8bf4c.cer (raw, json) Hash identifier: 6gj1IwwpMTnuNfaIYrfIw84T7d1vSnAH44s2vDzejaA= Subject key identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B6A5A572DC60596ADA75482C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Oct 2025 00:45:24 +0000 Certificate not after: Sat 08 Jan 2028 01:45:24 +0000 Subordinate resources: AS: 11444 IP: 161.129.73.0/24 IP: 2620:47:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6a:5a:57:2d:c6:05:96:ad:a7:54:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 5 00:45:24 2025 GMT Not After : Jan 8 01:45:24 2028 GMT Subject: CN=64a6009d-12b8-4b34-95f9-d26180d8bf4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:36:8f:9c:89:45:08:9b:c4:c6:64:f3:a9:20: 38:8a:fa:6a:78:45:b2:e3:14:a3:8f:0f:37:60:1b: 4b:73:97:0d:fd:25:a4:50:e3:52:93:b5:30:55:a8: 02:e6:3f:f6:92:da:50:09:ce:6c:1d:26:26:ad:91: a2:9b:16:96:96:49:de:a1:a2:e2:f4:73:12:72:72: a1:01:25:87:12:f4:f3:b1:8d:23:c3:c5:b2:8f:a2: 15:9a:71:7c:b4:d9:02:60:31:3f:51:ff:53:8e:70: 44:46:86:92:7e:58:b2:c6:90:67:1d:34:f1:41:a6: 85:37:76:d9:b3:9e:66:86:01:02:4a:d9:2d:4c:95: d5:c7:bc:3b:df:25:07:23:0b:69:b8:29:8b:fb:d3: 70:49:4d:13:04:32:32:4b:07:6f:cb:c0:79:8b:e8: 40:46:f2:1c:3d:34:c5:8b:b4:e5:ca:25:0f:e0:96: c1:72:e6:dd:69:fc:4b:06:fc:13:66:cc:53:f9:cd: 94:fa:33:a4:2f:8e:2f:e1:56:a9:8c:1d:50:c4:3e: 92:9f:2e:2f:fd:c2:c4:a6:82:e7:d9:cd:4b:bf:c2: 1d:c6:6b:ab:e8:6f:4f:66:c9:ac:bf:e0:82:da:32: 4a:fd:65:a6:73:53:51:16:a3:36:f6:53:9f:3c:77: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:18:5E:88:BA:94:F1:D1:B6:C1:14:FF:F6:CF:D5:09:C5:AA:5F:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64a6009d-12b8-4b34-95f9-d26180d8bf4c/64a6009d-12b8-4b34-95f9-d26180d8bf4c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 161.129.73.0/24 IPv6: 2620:47:a000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11444 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:2e:54:24:50:8a:44:2e:d0:ef:31:45:60:b8:fe:1e:b1:b5: 12:5b:8c:8b:93:e5:21:9d:01:5b:80:4b:da:aa:8e:85:33:88: 2d:26:82:d4:f8:9e:b5:2a:3f:c2:c9:85:d2:01:b6:cb:09:cc: 0e:48:3a:df:d9:39:b8:da:25:59:f0:bb:b7:1e:9b:39:34:55: 8e:a8:fc:dc:49:7d:23:80:3b:5e:08:e4:3b:25:d0:08:2a:5b: a7:42:96:9b:0d:3e:b0:04:80:c0:4d:cf:d1:a2:7e:d8:77:a0: 09:03:a8:4f:1b:d0:39:a9:ec:99:82:02:4e:a7:ce:2a:08:3b: f0:3e:d4:3a:64:1e:ca:ad:14:34:3f:c0:db:82:e0:07:fb:78: 6f:53:4a:8c:49:32:77:df:c0:1e:2f:d1:61:ab:38:b5:9a:60: 7b:ac:ba:48:c1:2a:73:65:33:d6:45:38:94:bd:fc:ce:f6:c8: 28:5c:c1:2c:b9:83:e5:e7:6f:bb:25:01:1b:04:85:39:70:d6: 41:ed:cd:2b:19:b9:4a:56:96:51:66:5c:bb:89:ea:a1:6f:26: 20:ee:02:cd:03:d3:1b:3d:41:11:b5:30:48:3b:85:66:21:c7: e7:6f:b9:34:a3:c1:fd:ae:39:26:77:4d:58:56:61:1e:1a:42: e0:8b:38:72 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEtqWlctxgWWradUgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwNTAwNDUyNFoXDTI4MDEwODAxNDUyNFowLzEtMCsGA1UEAxMk NjRhNjAwOWQtMTJiOC00YjM0LTk1ZjktZDI2MTgwZDhiZjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzaPnIlFCJvExmTzqSA4ivpqeEWy4xSjjw83 YBtLc5cN/SWkUONSk7UwVagC5j/2ktpQCc5sHSYmrZGimxaWlkneoaLi9HMScnKh ASWHEvTzsY0jw8Wyj6IVmnF8tNkCYDE/Uf9TjnBERoaSfliyxpBnHTTxQaaFN3bZ s55mhgECStktTJXVx7w73yUHIwtpuCmL+9NwSU0TBDIySwdvy8B5i+hARvIcPTTF i7TlyiUP4JbBcubdafxLBvwTZsxT+c2U+jOkL44v4VapjB1QxD6Sny4v/cLEpoLn 2c1Lv8Idxmur6G9PZsmsv+CC2jJK/WWmc1NRFqM29lOfPHeC8QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFPcYXoi6lPHRtsEU//bP1QnFql/nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBkOGJmNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY0YTYwMDlkLTEyYjgtNGIzNC05 NWY5LWQyNjE4MGQ4YmY0Yy82NGE2MDA5ZC0xMmI4LTRiMzQtOTVmOS1kMjYxODBk OGJmNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAChgUkwDwQCAAIwCQMHACYgAEegADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgIstDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfLlQkUIpELtDvMUVguP4esbUS W4yLk+UhnQFbgEvaqo6FM4gtJoLU+J61Kj/CyYXSAbbLCcwOSDrf2Tm42iVZ8Lu3 Hps5NFWOqPzcSX0jgDteCOQ7JdAIKlunQpabDT6wBIDATc/Ron7Yd6AJA6hPG9A5 qeyZggJOp84qCDvwPtQ6ZB7KrRQ0P8DbguAH+3hvU0qMSTJ338AeL9Fhqzi1mmB7 rLpIwSpzZTPWRTiUvfzO9sgoXMEsuYPl52+7JQEbBIU5cNZB7c0rGblKVpZRZly7 ieqhbyYg7gLNA9MbPUERtTBIO4VmIcfnb7k0o8H9rjkmd01YVmEeGkLgizhy -----END CERTIFICATE-----Generated at Fri Oct 17 07:29:19 2025 by rpki-client