$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer File: 59f5c767-5b1f-4a85-8f05-980b585fa2b4.cer (raw, json) Hash identifier: dRUsmuiqygY8gew8DJePNSG8Q062IxbbN3fpyLNTIpQ= Subject key identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B3284A7C92F59BB3CA8308000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Sep 2025 00:45:24 +0000 Certificate not after: Sun 19 Dec 2027 01:45:24 +0000 Subordinate resources: AS: 395899 IP: 23.139.128.0/24 IP: 2620:14:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:84:a7:c9:2f:59:bb:3c:a8:30:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 15 00:45:24 2025 GMT Not After : Dec 19 01:45:24 2027 GMT Subject: CN=59f5c767-5b1f-4a85-8f05-980b585fa2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:44:6c:94:46:c8:39:7d:52:9d:9f:0f:b3: 5f:2f:59:e1:31:ca:61:6a:b5:34:e3:d5:57:94:8e: eb:66:d4:bc:fd:ce:65:3b:2e:bb:d8:c0:61:cb:42: e4:39:06:ea:78:da:e9:a6:1d:b8:53:c2:fc:29:a6: 7f:80:a2:5f:0d:10:0b:49:1b:c3:4e:55:a1:28:f2: 68:2d:3f:a9:01:d1:b0:c0:da:56:30:4f:bc:94:de: 0b:da:e1:be:51:28:49:a7:dc:1f:d6:81:b7:f2:4b: 73:5d:51:24:64:30:13:86:b1:0f:69:e6:9f:6b:a7: 96:38:a7:f6:fb:67:c5:80:c1:69:dc:90:b7:71:b5: 44:6a:72:cc:cf:79:ed:1c:94:71:ac:b5:1e:8b:b8: ca:12:5c:80:61:d0:96:29:8a:4c:34:69:7f:67:e4: aa:86:15:1b:76:6e:64:cf:4f:e9:8c:75:2d:d2:f9: 77:2c:66:90:8c:3f:7a:79:85:17:54:8f:a0:95:b0: de:07:bf:a6:ad:b7:5e:2f:bf:d7:d0:b7:fb:aa:c0: 06:94:e0:52:a9:ff:23:ac:bd:56:c5:33:40:ba:92: a9:b6:8f:4c:d7:b7:55:79:f1:c9:98:3e:c8:81:e3: 75:bb:2e:ce:1f:05:8a:59:4f:42:c5:03:ac:81:bc: 63:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:49:30:3A:E2:75:92:90:20:40:F8:B9:1D:11:31:80:FF:4A:93:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/59f5c767-5b1f-4a85-8f05-980b585fa2b4/59f5c767-5b1f-4a85-8f05-980b585fa2b4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.139.128.0/24 IPv6: 2620:14:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395899 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:fc:b2:d5:05:2f:fe:bb:97:4c:00:c0:6a:b6:2a:ad:df:97: f8:42:39:3d:da:f2:0c:07:21:b3:d4:2e:a9:e9:fa:fb:c0:d0: 4f:5c:71:10:88:8b:de:69:d0:78:9b:79:b9:64:4f:68:b4:64: 0e:2e:2d:75:82:86:b9:b1:c5:ed:ab:59:14:34:e4:4c:4c:d5: 6e:bf:26:af:eb:4f:85:77:0d:86:e6:e2:03:b9:3c:58:77:d8: da:7a:92:ab:47:5d:c2:a4:6e:77:e3:d1:4e:a1:cc:4a:96:b7: 3a:1d:cc:bc:23:6f:f1:f8:d5:f9:fb:29:53:64:76:c5:6c:7b: 32:cb:9a:74:7e:2a:7d:aa:37:a2:65:af:19:a7:79:24:96:51: b8:6f:a6:9d:51:27:d6:d7:37:54:f7:2b:c5:a5:c2:5f:a3:82: 34:22:c8:0b:2e:cf:85:63:e3:9b:9a:b5:64:59:4b:94:66:bd: 3b:a5:8a:64:c3:9f:74:31:98:e2:ab:8a:f5:6d:fa:6e:66:2b: 4c:1b:c6:c7:b5:b2:d1:4d:97:d2:5e:9a:b4:78:e1:ee:9f:e2: 35:0c:51:90:a8:bc:d2:a7:69:64:f1:67:9a:40:da:06:f1:26: e1:d3:31:4b:86:1d:30:ff:13:41:a1:ae:39:84:e5:97:ec:04: b3:99:c1:56 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEsyhKfJL1m7PKgwgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MDkxNTAwNDUyNFoXDTI3MTIxOTAxNDUyNFowLzEtMCsGA1UEAxMk NTlmNWM3NjctNWIxZi00YTg1LThmMDUtOTgwYjU4NWZhMmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTpEbJRGyDl9Up2fD7NfL1nhMcpharU049VX lI7rZtS8/c5lOy672MBhy0LkOQbqeNrpph24U8L8KaZ/gKJfDRALSRvDTlWhKPJo LT+pAdGwwNpWME+8lN4L2uG+UShJp9wf1oG38ktzXVEkZDAThrEPaeafa6eWOKf2 +2fFgMFp3JC3cbVEanLMz3ntHJRxrLUei7jKElyAYdCWKYpMNGl/Z+SqhhUbdm5k z0/pjHUt0vl3LGaQjD96eYUXVI+glbDeB7+mrbdeL7/X0Lf7qsAGlOBSqf8jrL1W xTNAupKpto9M17dVefHJmD7IgeN1uy7OHwWKWU9CxQOsgbxj4wIDAQABo4IELDCC BCgwHQYDVR0OBBYEFF5JMDridZKQIED4uR0RMYD/SpNtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 OWY1Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBiNTg1ZmEyYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU5ZjVjNzY3LTViMWYtNGE4NS04 ZjA1LTk4MGI1ODVmYTJiNC81OWY1Yzc2Ny01YjFmLTRhODUtOGYwNS05ODBiNTg1 ZmEyYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXi4AwDwQCAAIwCQMHACYgABQgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGCnswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdfyy1QUv/ruXTADAarYqrd+X +EI5PdryDAchs9Quqen6+8DQT1xxEIiL3mnQeJt5uWRPaLRkDi4tdYKGubHF7atZ FDTkTEzVbr8mr+tPhXcNhubiA7k8WHfY2nqSq0ddwqRud+PRTqHMSpa3Oh3MvCNv 8fjV+fspU2R2xWx7MsuadH4qfao3omWvGad5JJZRuG+mnVEn1tc3VPcrxaXCX6OC NCLICy7PhWPjm5q1ZFlLlGa9O6WKZMOfdDGY4quK9W36bmYrTBvGx7Wy0U2X0l6a tHjh7p/iNQxRkKi80qdpZPFnmkDaBvEm4dMxS4YdMP8TQaGuOYTll+wEs5nBVg== -----END CERTIFICATE-----Generated at Sun Oct 19 22:49:17 2025 by rpki-client