$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer File: dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer (raw, json) Hash identifier: bOUXt/Ie2oyg4xDl375TFCNH2LQrxomR2T1C9iRpOZY= Subject key identifier: 9C:77:72:FB:97:A5:A6:54:A3:5A:56:7D:13:E7:B9:9C:AA:CB:6A:9E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584A0D62EC2501153B4ADE753A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Jun 2025 00:45:35 +0000 Certificate not after: Sun 05 Sep 2027 00:45:35 +0000 Subordinate resources: AS: 55158 IP: 23.159.160.0/24 IP: 2605:9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:62:ec:25:01:15:3b:4a:de:75:3a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 2 00:45:35 2025 GMT Not After : Sep 5 00:45:35 2027 GMT Subject: CN=dab76c6b-0e86-4a03-a59a-f3fc77dbba62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:93:73:a8:bd:a1:b0:e5:f8:23:88:a8:de: 42:ba:78:83:0f:c1:3e:52:86:c9:4c:bd:f9:69:7e: b7:ab:29:64:ff:30:e4:86:8e:9c:13:ae:2f:ab:d1: ca:4a:03:44:99:c6:c7:36:57:0e:79:5f:27:fa:df: 80:c3:4d:66:35:f6:5f:23:03:e9:e0:04:39:68:48: ef:a4:39:2b:c8:33:98:f6:33:16:e0:8f:66:5b:9a: 09:1c:6c:83:92:82:5a:f0:21:ae:6f:e1:8f:29:f1: 81:b0:24:b2:6b:f3:bd:7c:a6:7b:10:a9:dd:3f:8d: a0:f4:6b:e0:73:fa:5a:80:f3:d4:9d:e0:93:4b:b5: 16:df:c2:c6:dd:2b:8c:d5:92:61:e1:10:17:9c:f0: 14:38:ad:66:34:03:5b:2e:70:68:af:60:c1:23:a1: bf:ad:58:1e:6d:06:fe:be:33:27:1a:6e:14:4d:8b: 4a:e5:1f:0f:83:e5:2c:47:76:ab:70:eb:f0:78:65: d9:24:c1:df:0d:78:5e:5b:6a:18:70:cb:30:04:77: cb:cd:4d:c7:5a:c7:7c:1c:b9:8b:4b:12:b6:a2:62: 74:8b:e5:a9:c4:10:79:a1:c5:6c:8c:23:5a:f2:79: 8d:ef:3e:fe:2e:99:fa:6d:d8:fb:37:04:6f:1d:fa: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:77:72:FB:97:A5:A6:54:A3:5A:56:7D:13:E7:B9:9C:AA:CB:6A:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.159.160.0/24 IPv6: 2605:9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55158 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7b:7a:0b:82:b1:6e:69:f5:8c:6a:21:cf:2e:9f:b8:9e:3b: 80:02:c6:3d:f4:44:e9:cc:8e:4c:ac:4a:e5:bb:70:38:1e:58: 4c:2e:b8:96:a8:2d:d1:06:49:50:f7:24:6b:2b:97:a0:ac:8f: 2f:0f:d4:53:e7:6b:aa:40:91:89:24:e0:01:9c:74:ac:aa:ac: cd:d9:67:57:ab:4f:b7:4c:f4:85:a2:18:a9:12:be:ec:11:88: 14:df:36:ee:ce:4a:7e:8c:29:c5:b7:be:33:0e:f2:cb:e5:64: f1:53:f5:26:5c:91:4d:b5:78:46:32:12:71:a2:f8:aa:a8:5d: 22:df:59:46:c8:d6:ec:b0:71:cc:7a:76:a8:0d:98:c3:c2:8e: 36:85:38:40:bf:78:d5:2e:56:74:18:00:f8:8a:e7:85:3a:48: f6:bd:f8:83:1f:d9:7b:49:1a:2a:d1:79:9a:47:aa:c0:65:bb: c1:36:02:6b:a2:97:7e:1d:1a:a7:c2:62:1a:2e:37:d1:70:e4: c2:ca:78:0d:8f:3a:f1:08:a0:40:6e:c9:e6:93:13:49:5f:33: d0:b6:3f:52:76:ef:8e:15:29:8b:d8:35:cb:54:e2:06:16:07: e6:d8:36:5d:a4:54:3e:59:10:6b:7d:b7:27:28:11:d7:cb:f9: 4f:c5:40:a2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEoNYuwlARU7St51OkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDYwMjAwNDUzNVoXDTI3MDkwNTAwNDUzNVowLzEtMCsGA1UEAxMk ZGFiNzZjNmItMGU4Ni00YTAzLWE1OWEtZjNmYzc3ZGJiYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoiTc6i9obDl+COIqN5CuniDD8E+UobJTL35 aX63qylk/zDkho6cE64vq9HKSgNEmcbHNlcOeV8n+t+Aw01mNfZfIwPp4AQ5aEjv pDkryDOY9jMW4I9mW5oJHGyDkoJa8CGub+GPKfGBsCSya/O9fKZ7EKndP42g9Gvg c/pagPPUneCTS7UW38LG3SuM1ZJh4RAXnPAUOK1mNANbLnBor2DBI6G/rVgebQb+ vjMnGm4UTYtK5R8Pg+UsR3arcOvweGXZJMHfDXheW2oYcMswBHfLzU3HWsd8HLmL SxK2omJ0i+WpxBB5ocVsjCNa8nmN7z7+Lpn6bdj7NwRvHfqRoQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJx3cvuXpaZUo1pWfRPnuZyqy2qeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k YWI3NmM2Yi0wZTg2LTRhMDMtYTU5YS1mM2ZjNzdkYmJhNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RhYjc2YzZiLTBlODYtNGEwMy1h NTlhLWYzZmM3N2RiYmE2Mi9kYWI3NmM2Yi0wZTg2LTRhMDMtYTU5YS1mM2ZjNzdk YmJhNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXn6AwDQQCAAIwBwMFACYFCcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANd2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACB7eguCsW5p9YxqIc8un7ieO4AC xj30ROnMjkysSuW7cDgeWEwuuJaoLdEGSVD3JGsrl6Csjy8P1FPna6pAkYkk4AGc dKyqrM3ZZ1erT7dM9IWiGKkSvuwRiBTfNu7OSn6MKcW3vjMO8svlZPFT9SZckU21 eEYyEnGi+KqoXSLfWUbI1uywccx6dqgNmMPCjjaFOEC/eNUuVnQYAPiK54U6SPa9 +IMf2XtJGirReZpHqsBlu8E2Amuil34dGqfCYhouN9Fw5MLKeA2POvEIoEBuyeaT E0lfM9C2P1J2744VKYvYNctU4gYWB+bYNl2kVD5ZEGt9tycoEdfL+U/FQKI= -----END CERTIFICATE-----Generated at Wed Oct 29 00:19:53 2025 by rpki-client