$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb.cer File: bac49063-78ed-4cca-a152-73b0c601c1bb.cer (raw, json) Hash identifier: xBNc1z7+jidG5fXtyfKOAj2wj3Yw/Pj8egvJRTQlcIo= Subject key identifier: B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AF7E44C309EE7890B9C205D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 25 Aug 2025 00:45:25 +0000 Certificate not after: Sun 28 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 54058 IP: 104.241.192.0/20 IP: 204.87.189.0/24 IP: 2602:260::/32 IP: 2620:cb:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:e4:4c:30:9e:e7:89:0b:9c:20:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 25 00:45:25 2025 GMT Not After : Nov 28 01:45:25 2027 GMT Subject: CN=bac49063-78ed-4cca-a152-73b0c601c1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a4:56:54:2b:94:7d:55:d4:f4:11:d4:2c:e5: 34:5b:db:46:85:80:7f:26:52:f2:f1:56:7f:ca:9b: c8:0f:3f:e9:e6:4e:0d:2f:4f:8d:ef:0f:cd:d7:d7: b0:a2:61:38:41:0c:c4:f4:91:2d:37:b4:8c:f1:81: 75:95:31:5e:a9:c5:29:61:9e:03:66:1d:0e:7d:ea: a3:ec:07:18:51:57:eb:a2:15:9c:6b:60:31:07:e5: 06:5a:08:56:23:07:f0:0f:7d:4f:ac:cc:0e:71:0c: 06:b0:28:1e:18:df:c4:7b:f2:19:83:29:4c:ee:bc: 97:c0:14:30:05:74:1a:ac:69:7b:31:69:cb:a5:a7: d3:a3:68:0f:47:5f:c8:66:36:2d:a7:33:f5:b9:bb: 96:ac:72:68:eb:a3:28:2f:18:26:6b:70:ae:0e:9b: 44:76:6d:c0:57:a5:7a:6f:a7:15:89:e3:7c:43:ea: 0c:e2:48:00:bf:f3:d6:6f:70:88:b3:d7:d3:12:9c: 9d:b6:42:8f:46:dd:8d:0a:c1:b4:08:67:12:bd:ef: e7:9f:43:8f:25:e5:a7:5d:94:03:63:f9:49:90:74: 74:10:a1:a1:99:5a:bf:87:95:07:55:2f:d7:4f:aa: ed:45:31:2e:20:f4:d9:11:72:f8:88:bd:84:ef:58: 1b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:E1:DA:35:C9:CA:68:3E:39:F5:CF:67:64:78:89:DB:A5:A4:47:A5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bac49063-78ed-4cca-a152-73b0c601c1bb/bac49063-78ed-4cca-a152-73b0c601c1bb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.241.192.0/20 204.87.189.0/24 IPv6: 2602:260::/32 2620:cb:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54058 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:88:a7:c9:0e:cf:dc:0c:96:4a:6f:c3:70:42:cb:68:95:85: ba:58:83:17:7f:a2:5a:5d:79:5f:2f:e4:29:d3:e1:2a:c8:3f: 79:43:68:52:a0:59:6a:c4:1f:a1:6e:2e:cc:57:c4:f0:cc:8f: c8:7c:9f:45:36:18:2b:95:ea:e2:93:f0:a8:a7:17:4a:51:67: 84:4f:cb:e4:50:82:e7:0b:c5:b7:65:7f:ca:fd:81:94:2d:67: ab:18:4d:91:9e:59:63:90:a0:a8:ca:82:38:49:43:1f:43:c0: f1:53:da:eb:3d:a8:7c:b4:17:f0:b4:e2:f9:8f:fd:d2:11:9f: 61:fd:bc:8f:6c:63:a0:00:79:09:8d:f1:f6:74:9a:61:79:b4: 89:89:14:70:95:d6:46:c3:23:ef:45:62:7a:d5:f3:9f:45:01: 51:90:f9:a9:d0:b6:d3:4b:ee:cb:52:6c:f5:71:4f:d4:bf:51: c6:e7:9b:31:96:6c:b9:0c:9c:af:d2:34:6d:85:ab:71:61:66: 4c:6b:bc:2d:5c:c2:1c:c1:2f:3f:dd:6d:a6:d2:47:ae:ad:4d: 86:d5:2e:71:b7:7e:fb:53:cd:66:d9:43:ad:b5:dd:ae:6a:f6: 58:a3:c3:e0:f3:d3:d7:77:a1:e2:f2:79:89:4c:17:4c:a2:e0: a5:dc:84:0e -----BEGIN CERTIFICATE----- MIIHJzCCBg+gAwIBAgIUAQ0Mn0MoWEr35EwwnueJC5wgXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgyNTAwNDUyNVoXDTI3MTEyODAxNDUyNVowLzEtMCsGA1UEAxMk YmFjNDkwNjMtNzhlZC00Y2NhLWExNTItNzNiMGM2MDFjMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaRWVCuUfVXU9BHULOU0W9tGhYB/JlLy8VZ/ ypvIDz/p5k4NL0+N7w/N19ewomE4QQzE9JEtN7SM8YF1lTFeqcUpYZ4DZh0Ofeqj 7AcYUVfrohWca2AxB+UGWghWIwfwD31PrMwOcQwGsCgeGN/Ee/IZgylM7ryXwBQw BXQarGl7MWnLpafTo2gPR1/IZjYtpzP1ubuWrHJo66MoLxgma3CuDptEdm3AV6V6 b6cVieN8Q+oM4kgAv/PWb3CIs9fTEpydtkKPRt2NCsG0CGcSve/nn0OPJeWnXZQD Y/lJkHR0EKGhmVq/h5UHVS/XT6rtRTEuIPTZEXL4iL2E71gb5QIDAQABo4IEOTCC BDUwHQYDVR0OBBYEFLbh2jXJymg+OfXPZ2R4idulpEelMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i YWM0OTA2My03OGVkLTRjY2EtYTE1Mi03M2IwYzYwMWMxYmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2JhYzQ5MDYzLTc4ZWQtNGNjYS1h MTUyLTczYjBjNjAxYzFiYi9iYWM0OTA2My03OGVkLTRjY2EtYTE1Mi03M2IwYzYw MWMxYmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPQYIKwYBBQUH AQcBAf8ELjAsMBIEAgABMAwDBARo8cADBADMV70wFgQCAAIwEAMFACYCAmADBwAm IADLgAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANMqMFQGA1UdIAEB/wRKMEgw RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGaIp8kO z9wMlkpvw3BCy2iVhbpYgxd/olpdeV8v5CnT4SrIP3lDaFKgWWrEH6FuLsxXxPDM j8h8n0U2GCuV6uKT8KinF0pRZ4RPy+RQgucLxbdlf8r9gZQtZ6sYTZGeWWOQoKjK gjhJQx9DwPFT2us9qHy0F/C04vmP/dIRn2H9vI9sY6AAeQmN8fZ0mmF5tImJFHCV 1kbDI+9FYnrV859FAVGQ+anQttNL7stSbPVxT9S/UcbnmzGWbLkMnK/SNG2Fq3Fh ZkxrvC1cwhzBLz/dbabSR66tTYbVLnG3fvtTzWbZQ6213a5q9lijw+Dz09d3oeLy eYlMF0yi4KXchA4= -----END CERTIFICATE-----Generated at Tue Sep 16 05:01:49 2025 by rpki-client