$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer File: 7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer (raw, json) Hash identifier: Pyu95rEBTKR2RAkeyGHbsUnP0vLw2/qVTSg7sQ7vp00= Subject key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B77DA18127C2D8943DBF52C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Oct 2025 20:48:20 +0000 Certificate not after: Mon 14 Jun 2027 00:45:32 +0000 Subordinate resources: IP: 142.249.24.0/22 IP: 165.140.92.0/22 IP: 167.253.48.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:da:18:12:7c:2d:89:43:db:f5:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 9 20:48:20 2025 GMT Not After : Jun 14 00:45:32 2027 GMT Subject: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:36:7f:52:fb:41:c0:8f:e0:24:f6:a5:f5:68: 1f:aa:80:d7:7c:72:14:a3:26:9a:a8:e6:0b:de:c6: 13:e3:1a:36:af:3a:f5:bd:6e:31:19:2b:eb:45:cc: dd:cc:04:fe:41:da:07:cc:ec:40:e8:32:59:2f:d9: 74:54:fe:65:5e:06:5e:1b:e9:ce:f7:9e:b8:32:68: cc:17:ee:72:68:1d:07:fe:d8:a2:86:dc:6a:be:51: 7e:cd:9c:94:ba:43:8d:e2:ce:cd:c3:75:f3:34:a5: 7f:10:82:9b:42:20:12:d5:2c:51:63:89:41:ab:da: 49:d2:e9:b7:23:60:e7:21:dc:4c:7d:52:5a:48:34: 70:ec:bf:93:5a:d1:89:c4:0c:42:70:9e:fa:f6:6b: c0:9b:4f:63:16:29:64:a1:b5:ba:15:86:60:22:29: 4a:a5:76:3b:e5:81:b2:8d:d6:31:a6:4b:58:e4:50: b9:0a:6c:92:c4:1d:93:eb:a7:03:e4:74:d9:7d:ce: 00:b5:af:52:9b:87:d4:eb:6a:8d:90:d2:1f:c2:38: 06:07:d5:a5:cc:b1:a8:c0:7b:79:d5:80:e8:7c:1d: 51:da:97:b0:5d:23:1e:6a:09:b7:4c:fb:af:ce:80: 11:f3:93:18:86:cd:93:37:37:75:a4:d5:dd:ef:8b: f5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 142.249.24.0/22 165.140.92.0/22 167.253.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:25:5d:b2:f3:29:48:a1:2d:7e:0c:7a:c3:c2:ee:ae:db:c1: 79:5d:45:77:f9:fe:81:36:d8:fe:0d:59:62:b9:11:e4:48:51: ba:7a:46:98:fe:d9:a1:d7:1b:83:05:6e:f0:ca:5d:24:f5:46: 2d:d9:d2:6c:b0:2e:cc:33:80:ac:d4:c8:01:73:a7:5b:f0:79: ce:a0:fb:dc:94:48:4c:6c:f8:6a:8e:d3:65:28:9d:dd:6a:fa: 76:a2:4b:bc:15:93:12:8c:da:e3:a9:08:dd:a8:ce:24:dd:b9: 30:5e:82:ad:d1:20:38:8f:ed:ab:ad:72:ea:6c:1e:a3:a7:3f: be:b8:fa:37:24:cc:99:78:f6:6b:11:05:88:61:e8:06:ab:f9: 3b:54:46:00:86:f4:26:49:9a:bb:4f:33:bd:f1:77:67:1d:5c: 6f:b6:da:32:0c:ad:56:1f:66:a6:fb:69:a2:ab:e2:7a:eb:5b: ed:6b:ba:eb:74:81:37:60:3f:44:ff:07:4d:82:23:8f:51:90: a0:44:84:5d:fc:b0:9b:1c:2c:5d:6d:5f:60:09:3b:1d:d1:d6: b5:97:37:34:fa:18:64:ce:00:1c:62:6c:52:64:5d:05:1c:0e: e7:98:34:d8:79:6b:0b:66:a0:e3:53:d4:e5:39:78:72:bb:7a: 12:e7:c0:7d -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEt32hgSfC2JQ9v1LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAwOTIwNDgyMFoXDTI3MDYxNDAwNDUzMlowLzEtMCsGA1UEAxMk N2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4Yjg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTZ/UvtBwI/gJPal9WgfqoDXfHIUoyaaqOYL 3sYT4xo2rzr1vW4xGSvrRczdzAT+QdoHzOxA6DJZL9l0VP5lXgZeG+nO9564MmjM F+5yaB0H/tiihtxqvlF+zZyUukON4s7Nw3XzNKV/EIKbQiAS1SxRY4lBq9pJ0um3 I2DnIdxMfVJaSDRw7L+TWtGJxAxCcJ769mvAm09jFilkobW6FYZgIilKpXY75YGy jdYxpktY5FC5CmySxB2T66cD5HTZfc4Ata9Sm4fU62qNkNIfwjgGB9WlzLGowHt5 1YDofB1R2pewXSMeagm3TPuvzoAR85MYhs2TNzd1pNXd74v1HwIDAQABo4IECzCC BAcwHQYDVR0OBBYEFELrrwdyDRgyr8B8AbyYD+JKk8NVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdhMWQxYzY4LTc4YzQtNDczMS1h MmU5LTU3NDA4ZmU4OGI4NC83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZl ODhiODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAKO+RgDBAKljFwDBAKn/TAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQSVd svMpSKEtfgx6w8LurtvBeV1Fd/n+gTbY/g1ZYrkR5EhRunpGmP7ZodcbgwVu8Mpd JPVGLdnSbLAuzDOArNTIAXOnW/B5zqD73JRITGz4ao7TZSid3Wr6dqJLvBWTEoza 46kI3ajOJN25MF6CrdEgOI/tq61y6mweo6c/vrj6NyTMmXj2axEFiGHoBqv5O1RG AIb0Jkmau08zvfF3Zx1cb7baMgytVh9mpvtpoqvieutb7Wu663SBN2A/RP8HTYIj j1GQoESEXfywmxwsXW1fYAk7HdHWtZc3NPoYZM4AHGJsUmRdBRwO55g02HlrC2ag 41PU5Tl4crt6EufAfQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:16:31 2025 by rpki-client