$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer File: 0ab2447c-9735-4548-ac30-fc578e8e36ba.cer (raw, json) Hash identifier: WU4cig/EaHhTFWRFmSncLu7qr3yui5XJMr1yEaE3hjU= Subject key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B8BDA8A57000974E232318BC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Oct 2025 00:45:23 +0000 Certificate not after: Thu 20 Jan 2028 01:45:23 +0000 Subordinate resources: AS: 13926 AS: 22781 AS: 54203 AS: 62651 AS: 63128 IP: 68.68.32.0/20 IP: 98.158.112.0/20 IP: 104.36.176.0/21 IP: 108.171.96.0/19 IP: 173.195.0.0/20 IP: 173.255.160.0/19 IP: 192.200.144.0/20 IP: 199.127.248.0/21 IP: 207.204.224.0/19 IP: 216.131.64.0/18 IP: 216.169.128.0/20 IP: 2604:c980::/32 IP: 2604:ea80::/32 IP: 2604:fc80::/32 IP: 2606:b300::/32 IP: 2607:fb50::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8b:da:8a:57:00:09:74:e2:32:31:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 17 00:45:23 2025 GMT Not After : Jan 20 01:45:23 2028 GMT Subject: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:96:07:95:c3:48:fa:0c:df:7b:47:2b:ac: da:9b:75:6c:3b:50:9c:ee:8a:12:dd:99:0a:e6:95: 5f:e2:e9:b7:c3:66:56:6f:5b:15:6b:97:2b:14:bb: 9c:24:ef:04:a9:5f:ba:58:91:db:c7:8b:c8:02:3e: 56:31:89:49:a4:b3:08:84:bd:b1:45:d1:18:c2:98: 3c:2f:86:88:96:d8:d4:68:2f:b4:f2:4c:8a:c5:7d: 34:bd:88:30:28:3f:e2:f4:25:80:cb:54:a1:df:df: 43:b7:10:a5:23:1f:8d:8f:75:52:91:db:84:93:26: d3:be:37:43:cb:8b:dc:bf:ab:7a:71:a3:01:05:1e: 0b:8c:fb:f1:6d:5b:62:26:db:e7:7c:7c:b1:ee:09: 3f:1a:0a:d3:66:e0:21:09:9f:16:9a:1e:2d:ca:cc: 47:b7:0c:fe:98:f1:f1:86:54:98:0c:31:61:7b:42: 58:8a:d5:50:ea:1f:1a:49:33:d5:47:dc:11:45:ce: 9d:09:20:b9:ea:e4:dd:bb:74:96:83:9a:a1:7c:05: 8b:05:7a:d0:2d:27:75:e7:5d:7e:fb:24:57:85:3b: 34:58:2b:94:d8:96:f4:0b:29:fd:f7:10:90:66:e2: ac:e8:60:2b:85:e0:4f:b5:6a:e6:83:0f:d2:52:23: de:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 68.68.32.0/20 98.158.112.0/20 104.36.176.0/21 108.171.96.0/19 173.195.0.0/20 173.255.160.0/19 192.200.144.0/20 199.127.248.0/21 207.204.224.0/19 216.131.64.0/18 216.169.128.0/20 IPv6: 2604:c980::/32 2604:ea80::/32 2604:fc80::/32 2606:b300::/32 2607:fb50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13926 22781 54203 62651 63128 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:52:8a:f7:fc:90:a0:63:a5:3a:47:dd:60:c8:d4:89:b9:34: f7:b2:06:8b:3c:53:48:7b:e1:c7:ce:d8:15:01:0f:0d:a7:ed: 74:d9:48:9b:47:6d:19:7d:08:12:af:ae:31:ca:c5:1f:60:1e: cd:99:64:49:89:c2:b0:de:21:10:7b:91:bf:d0:d8:e5:2e:69: ad:25:3d:ea:11:f1:50:6d:c4:b4:28:da:85:db:32:c6:87:82: 27:3f:97:19:d7:68:78:ca:3e:25:28:f0:c8:97:59:a7:cb:f8: 11:2e:46:27:af:87:4b:3e:83:a6:6c:67:85:88:55:12:d1:42: 30:81:99:ec:01:9e:8b:a2:46:bc:c1:9a:1d:ff:cb:d5:0f:67: a8:fb:78:96:65:b7:09:61:e3:9d:13:ee:d5:87:39:b0:e5:5f: ba:6d:53:66:3f:81:58:29:c3:48:30:6b:4e:73:5b:36:06:a2: 36:70:97:0b:29:0a:31:bc:cd:43:c5:34:82:a1:e0:c3:54:2e: 37:b1:7d:9a:33:aa:a2:83:ce:38:d4:79:8f:46:ee:e3:46:96: 7f:6b:0d:2d:a1:df:d5:a4:86:9e:59:24:07:b5:cf:9c:0b:1f: 82:37:e4:2c:d8:81:11:3d:21:a2:1e:c0:36:70:d4:bb:f0:87: 42:65:dd:77 -----BEGIN CERTIFICATE----- MIIHgzCCBmugAwIBAgIUAQ0Mn0MoWEuL2opXAAl04jIxi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAxNzAwNDUyM1oXDTI4MDEyMDAxNDUyM1owLzEtMCsGA1UEAxMk MGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUzNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcSWB5XDSPoM33tHK6zam3VsO1Cc7ooS3ZkK 5pVf4um3w2ZWb1sVa5crFLucJO8EqV+6WJHbx4vIAj5WMYlJpLMIhL2xRdEYwpg8 L4aIltjUaC+08kyKxX00vYgwKD/i9CWAy1Sh399DtxClIx+Nj3VSkduEkybTvjdD y4vcv6t6caMBBR4LjPvxbVtiJtvnfHyx7gk/GgrTZuAhCZ8Wmh4tysxHtwz+mPHx hlSYDDFhe0JYitVQ6h8aSTPVR9wRRc6dCSC56uTdu3SWg5qhfAWLBXrQLSd1511+ +yRXhTs0WCuU2Jb0Cyn99xCQZuKs6GArheBPtWrmgw/SUiPehQIDAQABo4IElTCC BJEwHQYDVR0OBBYEFFAaEzJgbOg9DXHv2DLxbx6kc9uUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w YWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBhYjI0NDdjLTk3MzUtNDU0OC1h YzMwLWZjNTc4ZThlMzZiYS8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4 ZTM2YmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgYYGCCsGAQUF BwEHAQH/BHcwdTBIBAIAATBCAwQEREQgAwQEYp5wAwQDaCSwAwQFbKtgAwQErcMA AwQFrf+gAwQEwMiQAwQDx3/4AwQFz8zgAwQG2INAAwQE2KmAMCkEAgACMCMDBQAm BMmAAwUAJgTqgAMFACYE/IADBQAmBrMAAwUAJgf7UDAsBggrBgEFBQcBCAEB/wQd MBugGTAXAgI2ZgICWP0CAwDTuwIDAPS7AgMA9pgwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMlKK9/yQoGOl OkfdYMjUibk097IGizxTSHvhx87YFQEPDaftdNlIm0dtGX0IEq+uMcrFH2AezZlk SYnCsN4hEHuRv9DY5S5prSU96hHxUG3EtCjahdsyxoeCJz+XGddoeMo+JSjwyJdZ p8v4ES5GJ6+HSz6DpmxnhYhVEtFCMIGZ7AGei6JGvMGaHf/L1Q9nqPt4lmW3CWHj nRPu1Yc5sOVfum1TZj+BWCnDSDBrTnNbNgaiNnCXCykKMbzNQ8U0gqHgw1QuN7F9 mjOqooPOONR5j0bu40aWf2sNLaHf1aSGnlkkB7XPnAsfgjfkLNiBET0hoh7ANnDU u/CHQmXddw== -----END CERTIFICATE-----Generated at Mon Oct 20 00:14:02 2025 by rpki-client