$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer File: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer (raw, json) Hash identifier: 4iXUvUX8e/exxAnl1AiUcUpiH2r43l1cLGNPC0Qp3Ko= Subject key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B720630FADBDB50B9E2A0BC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Oct 2025 18:42:20 +0000 Certificate not after: Thu 26 Nov 2026 20:15:03 +0000 Subordinate resources: AS: 8015 AS: 26554 IP: 64.141.128.0/18 IP: 64.186.32.0/19 IP: 65.23.64.0/19 IP: 67.59.0.0/18 IP: 70.34.128.0/18 IP: 74.204.0.0/17 IP: 184.175.128.0/18 IP: 208.42.0.0 -- 208.42.191.255 IP: 209.98.0.0/16 IP: 2001:18c8::/32 IP: 2607:f7d8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:06:30:fa:db:db:50:b9:e2:a0:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 7 18:42:20 2025 GMT Not After : Nov 26 20:15:03 2026 GMT Subject: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:4e:b6:b9:a4:86:cb:08:8d:55:aa:6e:12: 57:95:fc:12:67:12:9a:8a:16:1c:f4:ea:b8:a5:26: fb:62:e8:47:be:50:c6:f0:a0:97:2b:78:51:24:a7: f0:43:94:b7:ac:b0:58:01:be:75:77:8d:c3:4b:dd: 12:20:f7:bb:85:e2:aa:e3:21:45:8b:ba:ee:e5:e3: 1a:a5:d2:47:62:0c:e2:b0:70:2e:40:11:88:f4:c0: c3:fb:b7:85:26:7f:c1:b1:65:c7:b7:1b:77:30:8e: 13:ce:14:f5:c5:28:c6:84:1b:1e:be:46:69:5a:b4: 4d:8a:57:52:9e:d4:e6:36:22:a6:68:fe:56:3c:f5: cd:8d:dd:76:83:8a:53:b1:43:c5:15:b9:86:9f:01: 99:0f:90:51:92:24:de:62:7d:2a:ec:52:b3:fa:35: b8:9f:23:2c:cf:0f:f0:54:b3:6c:9a:c2:95:a5:08: 82:1d:be:c2:2e:74:ca:fb:09:a2:e0:64:df:41:c4: 48:a6:df:9f:c4:5e:8b:26:0b:5a:b2:cd:00:eb:ed: b2:3b:2f:65:70:35:3c:3c:49:4d:ce:d3:b5:2e:dd: d6:7a:1c:00:b1:dc:26:84:65:7e:47:a0:2a:72:8b: 43:8f:d7:e2:3a:c6:23:50:f8:57:85:de:23:cd:83: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.141.128.0/18 64.186.32.0/19 65.23.64.0/19 67.59.0.0/18 70.34.128.0/18 74.204.0.0/17 184.175.128.0/18 208.42.0.0-208.42.191.255 209.98.0.0/16 IPv6: 2001:18c8::/32 2607:f7d8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8015 26554 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:df:3f:b7:9a:8b:51:b7:3d:85:48:2f:09:52:64:5f:46:51: 6d:c7:cb:a6:d0:65:95:6e:e4:14:8f:da:ca:80:b0:81:3b:9e: 7f:e5:c8:29:91:45:a0:d6:6d:c2:d8:f3:92:18:f7:82:63:20: fb:4c:59:e5:81:95:2d:04:fd:c1:7c:e7:e0:4d:a0:07:63:f6: 0e:4c:1c:c6:cb:23:02:24:62:72:d2:63:13:81:42:09:b4:fa: 4d:c4:2b:51:d2:48:ce:22:b2:aa:3b:28:a3:15:b7:ba:c6:b7: e0:11:0b:87:bd:51:8f:cd:76:8f:f4:d1:4a:da:a8:27:13:7b: 82:79:60:85:49:4c:4d:56:9c:ee:61:f4:8f:b7:66:ee:d7:22: 48:20:e0:e5:fc:d0:db:ad:c1:9b:d9:ed:47:88:8a:12:68:26: 31:35:89:83:df:88:97:af:20:4c:24:5e:f8:d2:fa:fc:d1:77: 49:2f:73:0d:e7:03:8d:b3:58:5c:09:da:8d:f5:4a:f5:fb:a6: 5e:6d:bd:b2:49:22:be:43:b5:e0:6b:45:3d:b3:7e:e9:6e:d7: 2e:d9:77:97:91:f4:9b:88:d8:d3:27:2f:53:4e:34:3d:8f:19: 8e:78:36:e1:52:9a:48:98:c1:cf:66:ac:26:dd:17:b8:81:b6: 38:bd:b9:8e -----BEGIN CERTIFICATE----- MIIHWDCCBkCgAwIBAgIUAQ0Mn0MoWEtyBjD629tQueKgvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwNzE4NDIyMFoXDTI2MTEyNjIwMTUwM1owLzEtMCsGA1UEAxMk NDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xOtrmkhssIjVWqbhJXlfwSZxKaihYc9Oq4 pSb7YuhHvlDG8KCXK3hRJKfwQ5S3rLBYAb51d43DS90SIPe7heKq4yFFi7ru5eMa pdJHYgzisHAuQBGI9MDD+7eFJn/BsWXHtxt3MI4TzhT1xSjGhBsevkZpWrRNildS ntTmNiKmaP5WPPXNjd12g4pTsUPFFbmGnwGZD5BRkiTeYn0q7FKz+jW4nyMszw/w VLNsmsKVpQiCHb7CLnTK+wmi4GTfQcRIpt+fxF6LJgtass0A6+2yOy9lcDU8PElN ztO1Lt3WehwAsdwmhGV+R6AqcotDj9fiOsYjUPhXhd4jzYMM7wIDAQABo4IEajCC BGYwHQYDVR0OBBYEFL95Fr63j2n7/WOmv4kZfZ6o8sq3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQxZTM4ZGE1LWRlNGYtNDAwZC04 M2FiLTY1ZWUyZTJjMmQyNC80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUy YzJkMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwawYIKwYBBQUH AQcBAf8EXDBaMEIEAgABMDwDBAZAjYADBAVAuiADBAVBF0ADBAZDOwADBAZGIoAD BAdKzAADBAa4r4AwCwMDAdAqAwQG0CqAAwMA0WIwFAQCAAIwDgMFACABGMgDBQAm B/fYMB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAh9PAgJnujBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAO3z+3 motRtz2FSC8JUmRfRlFtx8um0GWVbuQUj9rKgLCBO55/5cgpkUWg1m3C2POSGPeC YyD7TFnlgZUtBP3BfOfgTaAHY/YOTBzGyyMCJGJy0mMTgUIJtPpNxCtR0kjOIrKq OyijFbe6xrfgEQuHvVGPzXaP9NFK2qgnE3uCeWCFSUxNVpzuYfSPt2bu1yJIIODl /NDbrcGb2e1HiIoSaCYxNYmD34iXryBMJF740vr80XdJL3MN5wONs1hcCdqN9Ur1 +6Zebb2ySSK+Q7Xga0U9s37pbtcu2XeXkfSbiNjTJy9TTjQ9jxmOeDbhUppImMHP Zqwm3Re4gbY4vbmO -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:57 2025 by rpki-client