$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a.cer File: 111eedbe-f68d-42f2-84d7-0e90b6634d0a.cer (raw, json) Hash identifier: 9WRbWtNXrNq4g01fiC0Nxql98oPDHCXwCasjkcn/1H8= Subject key identifier: 6A:08:C7:3B:B2:DE:D4:60:5C:37:53:E8:20:6C:2D:C6:6A:3E:2C:B2 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584AC86EAC6657D4EF289AA593C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/111eedbe-f68d-42f2-84d7-0e90b6634d0a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 Aug 2025 00:45:25 +0000 Certificate not after: Thu 11 Nov 2027 01:45:25 +0000 Subordinate resources: AS: 63276 IP: 184.171.144.0/20 IP: 216.93.144.0/20 IP: 2620:e4:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:6e:ac:66:57:d4:ef:28:9a:a5:93:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 8 00:45:25 2025 GMT Not After : Nov 11 01:45:25 2027 GMT Subject: CN=111eedbe-f68d-42f2-84d7-0e90b6634d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:23:93:16:c2:fb:84:dc:1a:ef:c0:6d:68: 1b:5f:84:b6:83:b8:f5:d8:2a:2f:52:8a:f7:56:e0: d4:00:68:bd:4e:0f:96:33:9d:98:5b:0a:b9:0f:71: 63:38:8e:cb:d7:07:e0:4f:d6:0f:7d:a2:cd:4d:3d: 4e:69:b8:d5:c8:23:ed:49:f6:eb:f7:cd:30:f1:fc: 15:bd:f1:83:bc:57:66:43:bb:95:1a:29:34:c9:f3: a2:f1:6b:92:ad:45:dd:60:9d:9c:2a:c8:1d:5a:dc: ce:71:81:76:2c:2e:c8:1c:63:a8:a0:90:7d:02:db: d8:38:5f:11:4a:05:e2:36:e0:d8:95:9e:7f:a4:07: 44:c4:7e:5d:f6:73:35:d7:31:4f:fd:9c:8d:05:60: b6:2a:ec:e1:93:d8:85:a8:50:6b:bd:44:52:22:f6: 66:49:b4:91:31:32:a1:3a:63:30:82:41:e4:ff:1d: ae:9b:6b:29:3f:d6:9d:61:62:cd:57:8b:80:17:85: aa:35:f9:29:ac:13:3d:da:32:4a:71:1a:3f:ae:36: b2:4a:19:8b:05:a8:7f:31:2c:f4:7d:8c:2c:ec:bb: 73:79:61:fc:fd:31:08:47:b8:7f:a0:7b:1e:df:3b: d6:e5:c2:a5:ff:da:70:e9:23:70:50:78:47:0e:54: 75:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:08:C7:3B:B2:DE:D4:60:5C:37:53:E8:20:6C:2D:C6:6A:3E:2C:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/111eedbe-f68d-42f2-84d7-0e90b6634d0a/111eedbe-f68d-42f2-84d7-0e90b6634d0a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 184.171.144.0/20 216.93.144.0/20 IPv6: 2620:e4:c000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63276 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6d:c7:fa:ba:87:d0:16:ca:b1:09:81:35:17:4d:92:de:93: 1b:d1:aa:f2:5b:c5:6a:e2:41:3e:d3:7c:82:32:3e:c2:1f:ff: 17:76:19:e3:2e:12:a4:1f:22:f2:72:80:b9:28:f2:96:52:3b: 0e:99:d3:be:5c:a7:64:06:e5:5d:e0:2a:fe:f3:f4:88:ec:68: 32:d9:95:41:70:bb:9b:ff:b1:36:53:56:bd:b0:f9:62:47:d8: 2d:b5:77:fe:37:82:b3:c4:f5:df:17:fc:7a:48:65:99:bc:90: f9:7f:55:07:ec:0d:8b:80:45:48:ef:ed:d8:81:86:ee:df:81: 30:b4:93:91:0f:8e:57:ae:53:06:62:a4:1d:b7:28:c8:2e:6b: 15:fe:66:3f:0e:48:69:8d:9b:69:31:2e:16:f0:30:86:65:ae: aa:a3:56:c2:53:a0:50:3b:22:76:d2:90:0e:84:1d:51:13:6a: dd:07:f4:fa:0e:08:9a:fc:35:d2:03:66:b5:1e:18:1e:09:f5: 0d:e9:cb:03:81:b2:30:ce:7d:32:d5:35:70:56:7f:78:a6:c5: 56:3b:ca:98:0e:27:25:88:0e:2e:a7:c4:2f:98:c0:4b:fd:60: 5c:03:92:bf:64:14:7c:0f:05:f4:c9:4f:8c:98:6a:e1:1d:b6: d3:81:ef:8c -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWErIbqxmV9TvKJqlk8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDgwODAwNDUyNVoXDTI3MTExMTAxNDUyNVowLzEtMCsGA1UEAxMk MTExZWVkYmUtZjY4ZC00MmYyLTg0ZDctMGU5MGI2NjM0ZDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLcjkxbC+4TcGu/AbWgbX4S2g7j12CovUor3 VuDUAGi9Tg+WM52YWwq5D3FjOI7L1wfgT9YPfaLNTT1OabjVyCPtSfbr980w8fwV vfGDvFdmQ7uVGik0yfOi8WuSrUXdYJ2cKsgdWtzOcYF2LC7IHGOooJB9AtvYOF8R SgXiNuDYlZ5/pAdExH5d9nM11zFP/ZyNBWC2Kuzhk9iFqFBrvURSIvZmSbSRMTKh OmMwgkHk/x2um2spP9adYWLNV4uAF4WqNfkprBM92jJKcRo/rjayShmLBah/MSz0 fYws7LtzeWH8/TEIR7h/oHse3zvW5cKl/9pw6SNwUHhHDlR1FQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFGoIxzuy3tRgXDdT6CBsLcZqPiyyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x MTFlZWRiZS1mNjhkLTQyZjItODRkNy0wZTkwYjY2MzRkMGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzExMWVlZGJlLWY2OGQtNDJmMi04 NGQ3LTBlOTBiNjYzNGQwYS8xMTFlZWRiZS1mNjhkLTQyZjItODRkNy0wZTkwYjY2 MzRkMGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAS4q5ADBATYXZAwDwQCAAIwCQMHACYgAOTAADAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA9ywwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGG3H+rqH0BbKsQmB NRdNkt6TG9Gq8lvFauJBPtN8gjI+wh//F3YZ4y4SpB8i8nKAuSjyllI7DpnTvlyn ZAblXeAq/vP0iOxoMtmVQXC7m/+xNlNWvbD5YkfYLbV3/jeCs8T13xf8ekhlmbyQ +X9VB+wNi4BFSO/t2IGG7t+BMLSTkQ+OV65TBmKkHbcoyC5rFf5mPw5IaY2baTEu FvAwhmWuqqNWwlOgUDsidtKQDoQdURNq3Qf0+g4Imvw10gNmtR4YHgn1DenLA4Gy MM59MtU1cFZ/eKbFVjvKmA4nJYgOLqfEL5jAS/1gXAOSv2QUfA8F9MlPjJhq4R22 04HvjA== -----END CERTIFICATE-----Generated at Sat Aug 23 15:44:56 2025 by rpki-client