$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer File: a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer (raw, json) Hash identifier: QLN/G1hGhPFu8/yByQDep12nyksXYsPQF08aXuVCSWE= Subject key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F43285849EBE2BAD6B06C6E0641454480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 May 2025 00:45:37 +0000 Certificate not after: Tue 24 Aug 2027 00:45:37 +0000 Subordinate resources: AS: 46969 IP: 205.178.192.0/18 IP: 2602:80c:a000::/40 IP: 2607:4f40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:eb:e2:ba:d6:b0:6c:6e:06:41:45:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 21 00:45:37 2025 GMT Not After : Aug 24 00:45:37 2027 GMT Subject: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:7e:58:ae:99:04:97:73:b4:9a:5e:d0:79: e2:7f:41:bc:b0:19:04:83:4d:a8:b3:4b:da:f0:f5: 00:4e:8c:c6:13:b0:33:10:37:0d:6c:1a:66:c5:2b: b3:f0:1b:c1:c2:26:11:d4:f5:31:b4:e2:fc:72:97: 35:3b:56:ab:42:f1:d5:62:5e:d6:f8:d3:97:be:5e: fe:82:44:ef:02:c7:2b:a9:34:8a:c9:c9:07:39:65: 3d:6c:5d:ad:27:9b:cf:5c:10:cf:f7:b4:4e:d2:4d: 7a:88:c6:c5:38:bc:c8:d5:53:69:56:84:de:69:ad: 7e:fb:6c:b0:39:36:1b:46:7a:b4:18:5e:52:2b:df: 76:42:1e:08:e5:07:f5:ab:7a:f2:2b:24:9b:16:6f: 83:a4:8b:c8:c2:89:81:16:f3:32:e5:44:96:43:b4: 1c:8b:4e:aa:12:a0:93:b8:d3:fb:24:f6:dc:cf:3e: b4:05:df:14:83:e5:b7:7f:d8:05:ce:f4:e7:0b:50: c6:7d:c0:7e:a3:3d:e9:24:fd:f8:af:6b:95:dd:ae: 2e:29:aa:1d:2e:5e:e8:e3:4b:1f:54:c2:c3:bb:5b: de:ba:16:a2:cd:92:ac:37:88:c2:07:c8:59:ea:e3: 4f:ef:0e:29:69:97:43:d3:23:00:3b:82:8f:46:cf: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 205.178.192.0/18 IPv6: 2602:80c:a000::/40 2607:4f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46969 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ab:8e:bc:bd:ae:02:31:11:77:a9:31:13:bc:62:4b:92:d2: 2d:c2:7e:44:f2:df:94:9b:48:f5:c2:8b:1d:2d:db:9c:34:f6: e5:27:72:4f:78:ef:0c:89:ed:99:d5:ba:07:a7:7b:66:dd:ea: da:cb:05:5b:d4:93:33:9c:6c:fe:31:12:62:1b:fe:8f:8d:c5: 69:d0:ea:64:07:fb:b2:a4:b1:66:49:f4:c7:ec:48:0a:72:b9: 0a:42:86:ed:82:34:9b:a0:5e:34:ba:25:9c:80:31:f4:ef:48: 45:53:4c:a5:a8:d8:21:49:ca:60:12:a9:db:4e:d2:ed:7f:e6: 71:1f:2c:89:21:97:7f:47:c2:95:a9:fa:10:b4:28:f3:67:cd: 22:0f:6f:b9:7b:ae:26:7a:c9:b7:10:a5:8c:f0:ff:95:1c:30: fb:90:33:59:4c:1c:72:c2:25:80:7e:7b:9a:99:53:ab:1e:10: 8d:b8:1a:ae:2a:89:8a:dc:39:b5:00:82:bd:56:0e:92:9b:f4: 15:db:97:98:e2:a4:61:fa:e7:77:d8:8d:1b:cd:51:66:75:6a: 8d:9e:97:ba:1c:37:4c:84:57:79:58:12:f1:dc:38:b9:84:55: 8b:26:b7:27:49:e1:86:5d:3f:cc:90:cd:2f:6d:23:67:98:43: ff:60:c8:15 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWEnr4rrWsGxuBkFFRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDUyMTAwNDUzN1oXDTI3MDgyNDAwNDUzN1owLzEtMCsGA1UEAxMk YTZiMzMwNTItZTVhOC00ZjYzLWIyNjQtYjU1YzFhZTFlZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIZ+WK6ZBJdztJpe0Hnif0G8sBkEg02os0va 8PUATozGE7AzEDcNbBpmxSuz8BvBwiYR1PUxtOL8cpc1O1arQvHVYl7W+NOXvl7+ gkTvAscrqTSKyckHOWU9bF2tJ5vPXBDP97RO0k16iMbFOLzI1VNpVoTeaa1++2yw OTYbRnq0GF5SK992Qh4I5Qf1q3ryKySbFm+DpIvIwomBFvMy5USWQ7Qci06qEqCT uNP7JPbczz60Bd8Ug+W3f9gFzvTnC1DGfcB+oz3pJP34r2uV3a4uKaodLl7o40sf VMLDu1veuhaizZKsN4jCB8hZ6uNP7w4paZdD0yMAO4KPRs8LQQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFJjRZzP4twbh+/f3wAdERYGAcdx0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h NmIzMzA1Mi1lNWE4LTRmNjMtYjI2NC1iNTVjMWFlMWVkNWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2E2YjMzMDUyLWU1YTgtNGY2My1i MjY0LWI1NWMxYWUxZWQ1Yi9hNmIzMzA1Mi1lNWE4LTRmNjMtYjI2NC1iNTVjMWFl MWVkNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMAwEAgABMAYDBAbNssAwFQQCAAIwDwMGACYCCAygAwUAJgdPQDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAt3kwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQ6uOvL2uAjERd6kx E7xiS5LSLcJ+RPLflJtI9cKLHS3bnDT25SdyT3jvDIntmdW6B6d7Zt3q2ssFW9ST M5xs/jESYhv+j43FadDqZAf7sqSxZkn0x+xICnK5CkKG7YI0m6BeNLolnIAx9O9I RVNMpajYIUnKYBKp207S7X/mcR8siSGXf0fClan6ELQo82fNIg9vuXuuJnrJtxCl jPD/lRww+5AzWUwccsIlgH57mplTqx4QjbgariqJitw5tQCCvVYOkpv0FduXmOKk Yfrnd9iNG81RZnVqjZ6Xuhw3TIRXeVgS8dw4uYRViya3J0nhhl0/zJDNL20jZ5hD /2DIFQ== -----END CERTIFICATE-----Generated at Sun Nov 2 02:33:10 2025 by rpki-client