$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer File: 8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer (raw, json) Hash identifier: hWIxO/kjYqWJkPHAAB2FyhOZG7RHnvtrf1wsvC1JUZg= Subject key identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B8AF9B0144B040ED27C9C75C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Oct 2025 17:12:21 +0000 Certificate not after: Thu 30 Sep 2027 00:45:37 +0000 Subordinate resources: AS: 21505 AS: 400264 IP: 74.117.40.0/21 IP: 206.109.128.0/19 IP: 209.172.5.0/24 IP: 209.188.98.0/24 IP: 2602:f53c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8a:f9:b0:14:4b:04:0e:d2:7c:9c:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 16 17:12:21 2025 GMT Not After : Sep 30 00:45:37 2027 GMT Subject: CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0c:7f:1c:bf:36:26:53:75:d6:7e:91:c2:dd: b9:2e:be:af:fd:4b:50:d5:37:5c:3e:26:b4:53:fc: 45:07:e1:9d:49:9f:57:80:84:12:32:e6:92:6e:c3: d9:30:50:9c:c8:b6:98:19:7f:f8:d8:04:f4:81:01: 5d:45:73:bd:98:73:09:11:37:c3:fc:46:a7:b5:87: 40:80:b5:a5:52:78:20:0d:8b:4e:c1:53:81:31:3e: 11:39:a3:72:3c:df:23:aa:1a:3d:cd:66:01:2a:13: 32:0c:eb:60:92:10:0e:57:65:41:1a:d0:52:aa:5b: 9a:a6:19:7d:e5:11:93:cf:03:46:67:be:85:da:8b: a7:88:47:69:47:2e:06:d3:ec:58:8c:22:75:63:f4: d8:4e:a8:36:e9:53:d5:72:02:0e:cb:ff:cb:e9:48: 12:14:ac:df:4c:c8:6b:11:1a:94:4e:94:5d:f2:18: 08:d3:68:f2:81:9f:97:9a:06:ee:13:b4:0e:59:c0: e5:a4:f1:b0:a2:d3:57:23:2d:25:c7:b2:ad:cc:16: f2:e1:1f:5c:4b:47:43:94:77:9e:40:1b:b6:0c:65: b1:5a:60:cd:68:d4:81:e9:38:e1:e6:f9:c7:03:06: ca:5c:a2:1a:18:57:be:04:6e:6c:0c:30:be:21:4a: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.117.40.0/21 206.109.128.0/19 209.172.5.0/24 209.188.98.0/24 IPv6: 2602:f53c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21505 400264 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:e5:82:0e:72:9b:f0:e7:46:f8:0b:3a:1c:4e:33:68:2b:50: c6:80:c8:62:30:51:e5:1a:85:ef:f0:65:1a:44:bf:c4:e1:e9: 79:f8:be:fb:56:a8:fc:e5:45:2c:7f:e0:13:ed:4b:7d:53:42: bc:0d:94:1e:7a:cc:78:2c:d2:af:ad:50:73:12:58:4f:d2:fd: 65:37:90:04:c8:bb:de:fd:02:2d:e4:04:62:44:90:f4:cf:4f: 45:99:53:9f:78:3a:20:29:a3:8e:f2:8c:4d:d9:d1:09:b5:60: 56:4b:c5:0e:49:ed:5b:a8:48:82:59:55:d6:35:21:77:bc:ed: e8:38:cb:30:67:10:5d:42:fd:16:df:4d:18:80:1b:77:b7:0a: 29:01:80:98:91:21:0d:94:12:ef:b2:dd:9d:85:7a:da:68:e6: f7:8b:6b:55:4f:d5:14:ec:f2:da:f4:23:ff:09:b9:c7:f3:38: 1d:f0:ae:78:e8:49:a0:22:6a:80:3c:19:75:c6:ec:4a:7b:92: e7:c8:1c:93:11:8a:29:f2:5a:f0:ad:19:57:f8:df:89:c0:35: 1d:d0:bb:93:70:e9:07:56:ff:84:9e:41:ec:ef:38:38:94:94: 10:74:b7:e6:60:96:f1:22:8e:39:8a:61:7f:ec:26:0a:f2:a4: 69:92:a9:6d -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWEuK+bAUSwQO0nycdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAxNjE3MTIyMVoXDTI3MDkzMDAwNDUzN1owLzEtMCsGA1UEAxMk OGU1YWM1YmQtMjZjOC00ZWNhLTlmMTUtZmQyMzI3NmMwZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAx/HL82JlN11n6Rwt25Lr6v/UtQ1TdcPia0 U/xFB+GdSZ9XgIQSMuaSbsPZMFCcyLaYGX/42AT0gQFdRXO9mHMJETfD/EantYdA gLWlUnggDYtOwVOBMT4ROaNyPN8jqho9zWYBKhMyDOtgkhAOV2VBGtBSqluaphl9 5RGTzwNGZ76F2ouniEdpRy4G0+xYjCJ1Y/TYTqg26VPVcgIOy//L6UgSFKzfTMhr ERqUTpRd8hgI02jygZ+XmgbuE7QOWcDlpPGwotNXIy0lx7KtzBby4R9cS0dDlHee QBu2DGWxWmDNaNSB6Tjh5vnHAwbKXKIaGFe+BG5sDDC+IUqelwIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFLMnyG4vBqxOrmJdNEP0uPXmCmybMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2YzBkNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhlNWFjNWJkLTI2YzgtNGVjYS05 ZjE1LWZkMjMyNzZjMGQ0Yy84ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2 YzBkNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBANKdSgDBAXObYADBADRrAUDBADRvGIwDgQCAAIw CAMGBCYC9TwAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlQBAgMGG4gwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAGuWCDnKb8OdG+As6HE4zaCtQxoDIYjBR5RqF7/BlGkS/xOHpefi++1ao/OVF LH/gE+1LfVNCvA2UHnrMeCzSr61QcxJYT9L9ZTeQBMi73v0CLeQEYkSQ9M9PRZlT n3g6ICmjjvKMTdnRCbVgVkvFDkntW6hIgllV1jUhd7zt6DjLMGcQXUL9Ft9NGIAb d7cKKQGAmJEhDZQS77LdnYV62mjm94trVU/VFOzy2vQj/wm5x/M4HfCueOhJoCJq gDwZdcbsSnuS58gckxGKKfJa8K0ZV/jficA1HdC7k3DpB1b/hJ5B7O84OJSUEHS3 5mCW8SKOOYphf+wmCvKkaZKpbQ== -----END CERTIFICATE-----Generated at Fri Oct 17 07:27:54 2025 by rpki-client