$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer File: d21149ca-bfeb-409c-adbb-e86e751b6f22.cer (raw, json) Hash identifier: 0Fh/cKbuJvOD2aBl5oQ9SS35bFpuSZ+dcqjs1J82Lo8= Subject key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AEF843E3D1E8681DFB740E900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 22 Aug 2025 00:45:24 +0000 Certificate not after: Thu 25 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 23467 AS: 395722 IP: 152.38.128.0/19 IP: 162.247.240.0/22 IP: 2602:816:5000::/40 IP: 2620:16:4000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:84:3e:3d:1e:86:81:df:b7:40:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 22 00:45:24 2025 GMT Not After : Nov 25 01:45:24 2027 GMT Subject: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:33:83:ad:a0:4b:e9:b9:48:9a:1e:5e:58:58: df:93:9a:4e:56:45:ad:40:48:b4:25:6c:d1:73:c8: fe:be:70:05:74:da:ae:50:ca:e8:c3:21:63:c6:97: 36:7e:42:9f:0d:e0:7b:cd:89:3b:98:34:ee:3e:6f: e9:d8:b0:c9:59:a9:b3:ec:81:17:3b:64:96:10:5a: 25:80:e8:af:12:15:be:3a:27:f2:b2:59:09:b5:0d: 4e:8c:b0:3b:e8:1e:6b:6c:b8:2c:6c:96:fc:9e:96: b7:0d:47:35:36:a1:55:a5:2e:c3:fe:4c:3f:1b:b9: bf:de:87:c2:84:91:e1:f6:b8:6b:df:0a:5a:4f:64: 6e:26:8e:0c:50:54:4a:ec:cf:7e:c4:17:11:d6:61: 69:7c:70:9c:01:27:09:d9:c4:75:ba:83:44:19:a3: 98:1a:6d:e9:35:6a:97:fc:ef:cc:9d:78:e2:5a:d0: b7:77:fe:55:46:36:ad:e4:f0:93:42:0c:eb:f1:5c: 1e:b7:5d:76:47:40:ff:f1:eb:1a:e9:e7:4d:ea:c6: fc:a3:32:bd:49:0e:21:92:e4:9b:2d:2c:42:f9:c6: 63:95:3b:ee:90:88:6f:e4:ce:9b:d3:29:be:df:1f: d5:d3:8c:42:10:cb:62:38:00:9c:8c:37:e7:f9:12: 92:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 152.38.128.0/19 162.247.240.0/22 IPv6: 2602:816:5000::/40 2620:16:4000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23467 395722 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a5:db:30:8c:84:8b:bb:16:5d:b5:37:28:a5:0d:1a:8c:10: 6e:11:f6:81:9f:4e:f9:3b:99:b0:dd:ca:02:ec:1a:85:e3:ed: 15:24:df:dc:ad:52:82:00:57:5b:e1:db:4d:c1:9e:bd:a1:54: 8e:3d:99:20:ce:ba:a2:74:8f:c0:2e:56:92:49:64:6f:2f:7e: 4d:fd:56:ae:88:49:da:f8:57:bd:5e:62:52:73:47:5e:5b:8c: df:b6:e3:d5:f3:c9:12:9e:07:8e:72:45:d3:1b:33:3a:d1:5c: a6:65:52:07:78:31:8c:e8:1b:b7:be:5c:0e:1d:f6:3f:f0:21: a8:14:f7:86:45:36:e5:c6:4f:b1:e4:86:23:b1:10:a3:79:d7: 27:f1:a1:54:32:11:70:e4:85:15:36:8a:ed:47:96:19:5e:b2: a3:69:c9:6b:8c:9c:6a:1c:19:04:a1:9f:41:58:59:b9:b9:33: 01:52:28:a4:d0:0c:d2:8e:ef:5e:fe:93:35:81:ab:69:87:3c: 35:f4:55:20:c6:16:ed:58:6d:ba:8f:4d:99:2e:f8:bd:f8:17: 91:b1:bf:e2:f5:44:8a:55:72:6d:0c:3f:ff:7e:1a:f7:84:42: d6:6f:72:bd:7f:ea:cf:bf:85:1c:52:2e:36:d0:3a:8e:2a:03: 55:fc:38:82 -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWErvhD49HoaB37dA6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgyMjAwNDUyNFoXDTI3MTEyNTAxNDUyNFowLzEtMCsGA1UEAxMk ZDIxMTQ5Y2EtYmZlYi00MDljLWFkYmItZTg2ZTc1MWI2ZjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjODraBL6blImh5eWFjfk5pOVkWtQEi0JWzR c8j+vnAFdNquUMrowyFjxpc2fkKfDeB7zYk7mDTuPm/p2LDJWamz7IEXO2SWEFol gOivEhW+OifyslkJtQ1OjLA76B5rbLgsbJb8npa3DUc1NqFVpS7D/kw/G7m/3ofC hJHh9rhr3wpaT2RuJo4MUFRK7M9+xBcR1mFpfHCcAScJ2cR1uoNEGaOYGm3pNWqX /O/MnXjiWtC3d/5VRjat5PCTQgzr8Vwet112R0D/8esa6edN6sb8ozK9SQ4hkuSb LSxC+cZjlTvukIhv5M6b0ym+3x/V04xCEMtiOACcjDfn+RKSGwIDAQABo4IEPjCC BDowHQYDVR0OBBYEFEPr96ysRVcLRGAp4vU0UOfSgjD/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k MjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUxYjZmMjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2QyMTE0OWNhLWJmZWItNDA5Yy1h ZGJiLWU4NmU3NTFiNmYyMi9kMjExNDljYS1iZmViLTQwOWMtYWRiYi1lODZlNzUx YjZmMjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPgYIKwYBBQUH AQcBAf8ELzAtMBIEAgABMAwDBAWYJoADBAKi9/AwFwQCAAIwEQMGACYCCBZQAwcA JiAAFkAAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlurAgMGCcowVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA K6XbMIyEi7sWXbU3KKUNGowQbhH2gZ9O+TuZsN3KAuwahePtFSTf3K1SggBXW+Hb TcGevaFUjj2ZIM66onSPwC5Wkklkby9+Tf1WrohJ2vhXvV5iUnNHXluM37bj1fPJ Ep4HjnJF0xszOtFcpmVSB3gxjOgbt75cDh32P/AhqBT3hkU25cZPseSGI7EQo3nX J/GhVDIRcOSFFTaK7UeWGV6yo2nJa4ycahwZBKGfQVhZubkzAVIopNAM0o7vXv6T NYGraYc8NfRVIMYW7Vhtuo9NmS74vfgXkbG/4vVEilVybQw//34a94RC1m9yvX/q z7+FHFIuNtA6jioDVfw4gg== -----END CERTIFICATE-----Generated at Tue Oct 28 02:01:30 2025 by rpki-client