$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba.cer File: 8ce84fb2-c539-46e7-8212-12b9730afeba.cer (raw, json) Hash identifier: Gl46hDXAbRFcW49atyfLyqd2dMcotzT476Mt0d+Sgdo= Subject key identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584B784FBF05AE93F21787FAB4C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 10 Oct 2025 00:45:22 +0000 Certificate not after: Thu 13 Jan 2028 01:45:22 +0000 Subordinate resources: IP: 23.247.181.0/24 IP: 2606:8940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:4f:bf:05:ae:93:f2:17:87:fa:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 10 00:45:22 2025 GMT Not After : Jan 13 01:45:22 2028 GMT Subject: CN=8ce84fb2-c539-46e7-8212-12b9730afeba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:93:2e:bb:51:17:5f:cf:4b:1f:f8:29:55:bb: 3f:05:90:c6:89:c9:fb:3e:1f:7d:fc:51:05:84:9b: a9:a3:9d:96:b9:09:3c:e4:9e:7a:ce:8e:aa:36:18: 45:f5:48:bf:ce:eb:f1:d5:d0:0a:27:0f:4f:61:ba: d1:cc:03:26:28:98:ec:9d:01:b1:67:23:c0:96:b3: 17:09:d3:ca:79:74:26:90:fa:c9:33:e4:1a:cb:7d: b8:23:65:77:d3:6d:76:49:40:f6:58:06:64:98:1f: 61:19:6c:dc:07:98:54:9b:d2:fa:23:2d:06:5e:78: 2d:87:c6:27:f7:ff:0d:28:5a:90:0b:e1:33:f5:eb: 32:f2:a0:ae:5b:8c:98:47:53:d8:97:f1:2c:f5:c0: 32:1f:2e:83:8e:b8:3e:8a:dc:8d:c0:09:ec:b6:e7: 43:0d:3f:4f:16:10:e4:34:bc:b7:63:5b:1b:45:bb: a2:7a:9c:74:7a:26:e4:9d:c2:17:50:c3:02:cd:66: 58:b5:78:01:d1:9e:a6:25:ff:c9:04:23:3d:9c:20: 92:0a:94:32:fa:3e:4e:a2:bc:7a:80:0d:ab:4f:78: d7:d3:42:0c:9d:69:9d:87:e4:df:5d:65:25:a9:c1: 81:a5:db:cc:43:fd:93:e7:00:40:c1:7a:14:d6:84: 76:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8A:39:65:E1:53:C3:03:64:C1:56:0F:C9:45:83:B6:FA:B1:38:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ce84fb2-c539-46e7-8212-12b9730afeba/8ce84fb2-c539-46e7-8212-12b9730afeba.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.247.181.0/24 IPv6: 2606:8940::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:79:94:5d:5a:4d:d4:a3:65:09:0d:43:c2:2a:fa:b9:e5:39: b4:ca:e2:b0:ee:3e:c5:7e:53:5e:11:7b:f4:b7:27:1f:67:aa: a8:96:5b:27:db:68:2e:17:7f:40:c5:7d:76:dc:e3:ab:d4:35: 00:cd:6a:bf:59:ef:80:ef:ed:61:8d:3f:53:05:7f:01:25:f1: cc:7d:88:91:f2:41:cd:df:ea:8a:1e:65:2b:58:f7:39:fb:b6: 39:8a:d4:45:af:25:7d:7e:30:25:3e:a3:66:08:1e:3e:63:be: 04:d3:b5:2d:b2:82:4c:ad:d9:5e:8b:eb:0d:0f:01:30:59:c8: 84:b6:ee:bf:43:50:fc:2b:46:7e:88:db:b6:ea:ba:a8:19:d1: 1c:5b:30:f9:c5:34:e0:6b:f3:a2:32:b3:a0:ce:34:ee:c2:d2: 39:8a:96:f4:4e:c1:a8:44:d9:0e:a5:02:23:ce:d6:4a:63:b3: b3:b0:cf:de:c2:f7:e7:bd:b6:42:69:d1:e8:1b:7d:bd:89:cc: 85:07:01:a6:86:31:18:2a:c4:e5:e7:ce:d6:06:b8:64:a0:e7: e9:d9:9f:93:84:09:ae:5e:6a:26:8e:e6:fe:c6:55:7d:33:79: 94:82:ee:f3:64:e4:9b:92:a4:32:94:aa:90:6c:ef:df:16:d0: a5:e6:ff:63 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWEt4T78FrpPyF4f6tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI1MTAxMDAwNDUyMloXDTI4MDExMzAxNDUyMlowLzEtMCsGA1UEAxMk OGNlODRmYjItYzUzOS00NmU3LTgyMTItMTJiOTczMGFmZWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJMuu1EXX89LH/gpVbs/BZDGicn7Ph99/FEF hJupo52WuQk85J56zo6qNhhF9Ui/zuvx1dAKJw9PYbrRzAMmKJjsnQGxZyPAlrMX CdPKeXQmkPrJM+Qay324I2V30212SUD2WAZkmB9hGWzcB5hUm9L6Iy0GXngth8Yn 9/8NKFqQC+Ez9esy8qCuW4yYR1PYl/Es9cAyHy6Djrg+ityNwAnstudDDT9PFhDk NLy3Y1sbRbuiepx0eibkncIXUMMCzWZYtXgB0Z6mJf/JBCM9nCCSCpQy+j5Oorx6 gA2rT3jX00IMnWmdh+TfXWUlqcGBpdvMQ/2T5wBAwXoU1oR2dwIDAQABo4IEDjCC BAowHQYDVR0OBBYEFNOKOWXhU8MDZMFWD8lFg7b6sTjbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMwYWZlYmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhjZTg0ZmIyLWM1MzktNDZlNy04 MjEyLTEyYjk3MzBhZmViYS84Y2U4NGZiMi1jNTM5LTQ2ZTctODIxMi0xMmI5NzMw YWZlYmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAX97UwDQQCAAIwBwMFACYGiUAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA OnmUXVpN1KNlCQ1Dwir6ueU5tMrisO4+xX5TXhF79LcnH2eqqJZbJ9toLhd/QMV9 dtzjq9Q1AM1qv1nvgO/tYY0/UwV/ASXxzH2IkfJBzd/qih5lK1j3Ofu2OYrURa8l fX4wJT6jZggePmO+BNO1LbKCTK3ZXovrDQ8BMFnIhLbuv0NQ/CtGfojbtuq6qBnR HFsw+cU04GvzojKzoM407sLSOYqW9E7BqETZDqUCI87WSmOzs7DP3sL35722QmnR 6Bt9vYnMhQcBpoYxGCrE5efO1ga4ZKDn6dmfk4QJrl5qJo7m/sZVfTN5lILu82Tk m5KkMpSqkGzv3xbQpeb/Yw== -----END CERTIFICATE-----Generated at Sun Oct 19 22:35:05 2025 by rpki-client