$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517.cer File: 6fb1732e-723b-4926-bfae-2f7334753517.cer (raw, json) Hash identifier: imLUOLj9VEpu3Vexunt2hAwYoMrD24HcsuXsMKD/nog= Subject key identifier: D1:52:3C:44:A6:FB:62:61:9F:6C:6A:D6:E0:2B:00:CF:02:8D:E1:E8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B2CEF4D9B916DBCDC7F746680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/6fb1732e-723b-4926-bfae-2f7334753517.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 13 Sep 2025 00:45:26 +0000 Certificate not after: Fri 17 Dec 2027 01:45:26 +0000 Subordinate resources: AS: 399971 IP: 23.247.224.0/22 IP: 2606:d3c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:ef:4d:9b:91:6d:bc:dc:7f:74:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 13 00:45:26 2025 GMT Not After : Dec 17 01:45:26 2027 GMT Subject: CN=6fb1732e-723b-4926-bfae-2f7334753517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ef:c4:46:68:d4:7b:f2:c4:b3:f0:95:64:ba: 39:a4:fd:c7:e1:8c:dd:e6:e1:64:6f:f6:4a:cf:64: cf:16:fc:44:80:2c:e7:af:fb:bf:b7:a4:6c:0b:54: c0:b7:60:0b:94:fa:9e:f6:83:f8:1a:c0:fe:c7:e3: 72:66:c6:84:99:a7:d3:f7:21:63:90:ab:0d:3d:20: 88:9d:8e:43:c8:c0:5e:b4:24:a3:5f:f2:f3:29:5f: 39:ab:fb:2d:5b:ae:8e:bf:52:c8:aa:ea:8d:07:a2: ff:92:68:d0:bd:49:1f:99:1f:88:95:9d:ff:51:d4: e3:93:f9:8b:82:34:e0:a1:bb:8e:3a:67:bb:5a:f7: b9:c4:90:e7:0e:54:4b:78:9d:41:ca:9f:f3:11:c3: de:f5:a3:d2:56:b1:26:bf:0f:af:5c:0d:d4:3c:2c: 07:26:b5:cb:f6:b4:bc:7f:05:41:c1:ea:c1:5c:b3: 5b:96:20:ed:29:08:39:66:b6:ab:f9:82:a9:a1:1b: fc:22:ef:42:db:3c:a2:05:d9:98:ac:56:ec:2e:a2: 9d:6a:ba:22:77:73:bd:31:00:39:4e:5a:b4:8c:fc: 4d:b6:22:97:cd:46:b8:66:29:ea:36:ad:99:68:43: a7:9d:20:49:57:45:e0:a5:fe:92:c5:ed:98:c2:5b: f8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:52:3C:44:A6:FB:62:61:9F:6C:6A:D6:E0:2B:00:CF:02:8D:E1:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6fb1732e-723b-4926-bfae-2f7334753517/6fb1732e-723b-4926-bfae-2f7334753517.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.247.224.0/22 IPv6: 2606:d3c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399971 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:b0:ca:97:fa:99:b7:4c:d1:e8:96:cc:02:ca:d3:8b:56:0d: af:ab:57:3e:d3:b2:4e:82:fe:8e:31:d4:4b:c7:08:c3:a7:51: ba:64:54:70:3f:fe:51:ee:d1:6c:b4:f3:4d:af:16:ae:fa:94: 72:77:11:4f:2f:b8:07:b6:32:b0:66:1d:74:d6:95:25:9c:9e: 87:c8:38:77:0d:54:dc:39:d8:b3:0a:62:64:95:16:1c:21:6a: 35:cb:13:14:1b:38:2a:9a:e9:18:69:78:2b:5e:c4:af:d3:63: 0e:63:99:8f:1e:ea:ac:8e:00:72:8c:4c:bb:57:f9:c1:a1:87: 59:7d:26:56:6d:c6:46:32:97:57:ba:02:11:7b:f0:5e:78:50: 41:e4:d6:35:a0:6b:e0:c0:16:1e:d8:de:22:05:97:ff:29:30: c0:d8:5f:b0:72:95:26:34:d9:66:c3:f3:4f:ba:91:45:50:67: 29:72:6c:8e:01:62:58:aa:5e:79:ba:bd:1b:77:1b:7e:56:b7: 13:ca:31:d1:a7:72:bb:8e:77:43:ea:14:85:f4:13:0c:49:85: 18:a5:bc:68:8c:ea:09:fe:e0:bc:9f:0a:aa:00:db:e2:c0:d8: 48:f5:32:22:46:bf:a1:6c:5a:d1:fa:59:73:81:74:50:2c:ad: 38:87:9f:4b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEss702bkW283H90ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkxMzAwNDUyNloXDTI3MTIxNzAxNDUyNlowLzEtMCsGA1UEAxMk NmZiMTczMmUtNzIzYi00OTI2LWJmYWUtMmY3MzM0NzUzNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+/ERmjUe/LEs/CVZLo5pP3H4Yzd5uFkb/ZK z2TPFvxEgCznr/u/t6RsC1TAt2ALlPqe9oP4GsD+x+NyZsaEmafT9yFjkKsNPSCI nY5DyMBetCSjX/LzKV85q/stW66Ov1LIquqNB6L/kmjQvUkfmR+IlZ3/UdTjk/mL gjTgobuOOme7Wve5xJDnDlRLeJ1Byp/zEcPe9aPSVrEmvw+vXA3UPCwHJrXL9rS8 fwVBwerBXLNbliDtKQg5Zrar+YKpoRv8Iu9C2zyiBdmYrFbsLqKdaroid3O9MQA5 Tlq0jPxNtiKXzUa4ZinqNq2ZaEOnnSBJV0Xgpf6Sxe2Ywlv4bwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFNFSPESm+2Jhn2xq1uArAM8CjeHoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 ZmIxNzMyZS03MjNiLTQ5MjYtYmZhZS0yZjczMzQ3NTM1MTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZmYjE3MzJlLTcyM2ItNDkyNi1i ZmFlLTJmNzMzNDc1MzUxNy82ZmIxNzMyZS03MjNiLTQ5MjYtYmZhZS0yZjczMzQ3 NTM1MTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAIX9+AwDQQCAAIwBwMFACYG08AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhpjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACmwypf6mbdM0eiWzALK04tWDa+r Vz7Tsk6C/o4x1EvHCMOnUbpkVHA//lHu0Wy0802vFq76lHJ3EU8vuAe2MrBmHXTW lSWcnofIOHcNVNw52LMKYmSVFhwhajXLExQbOCqa6RhpeCtexK/TYw5jmY8e6qyO AHKMTLtX+cGhh1l9JlZtxkYyl1e6AhF78F54UEHk1jWga+DAFh7Y3iIFl/8pMMDY X7BylSY02WbD80+6kUVQZylybI4BYliqXnm6vRt3G35WtxPKMdGncruOd0PqFIX0 EwxJhRilvGiM6gn+4LyfCqoA2+LA2Ej1MiJGv6FsWtH6WXOBdFAsrTiHn0s= -----END CERTIFICATE-----Generated at Fri Oct 17 07:31:48 2025 by rpki-client