$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer File: 011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer (raw, json) Hash identifier: AyjX5Nq0tMR9aM7rOEzhbQHAXS4I2NClcXm8u6+h+qE= Subject key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D2D37CD880DA8CE4F4C489C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Mar 2026 12:45:23 +0000 Certificate not after: Sat 17 Jun 2028 12:45:23 +0000 Subordinate resources: AS: 63394 IP: 23.184.112.0/24 IP: 104.237.112.0/20 IP: 157.52.32.0/19 IP: 172.86.0.0/18 IP: 2605:e4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:37:cd:88:0d:a8:ce:4f:4c:48:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 15 12:45:23 2026 GMT Not After : Jun 17 12:45:23 2028 GMT Subject: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:99:f8:f0:9a:5a:41:9d:e5:40:ec:8a:23:dd: df:db:d6:36:a2:0d:e3:d3:1b:63:a6:14:53:b6:5f: 02:27:72:44:70:78:aa:21:59:79:8f:02:dd:33:34: ca:a1:5e:6a:67:4e:62:9a:85:b2:e9:50:31:19:e1: dd:fc:33:01:9a:93:af:7c:cc:61:c9:1d:26:7f:a6: f5:ab:65:96:e3:16:ff:70:04:35:67:92:b3:ac:1c: de:10:d5:38:73:fe:f4:1f:e6:4f:79:c9:36:a4:a8: 8a:45:c5:48:5e:be:02:fd:80:29:d7:e3:a8:06:ee: ea:6d:56:1d:45:25:1a:fa:05:2d:13:12:77:93:04: 72:a8:e0:0a:b6:1a:ac:3d:6c:08:9e:4b:79:5c:45: 8c:57:cb:8b:61:0e:4c:38:a6:2e:51:31:6c:87:f6: 2b:f1:f6:0d:4b:63:5d:c2:49:a9:07:88:83:9f:44: 94:5e:83:fb:fd:57:81:56:9c:ce:1f:8c:46:86:60: 7e:0d:be:a9:63:4e:3c:3d:ea:1a:e1:e6:d7:2f:7c: 32:e1:56:91:39:4e:f4:86:14:9b:55:20:ff:45:d1: 4d:ca:7a:1c:1b:33:d2:18:90:d9:8d:1c:1e:d1:b5: 42:84:ce:ae:d3:11:20:28:9c:dc:81:0d:d9:a6:14: cc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.184.112.0/24 104.237.112.0/20 157.52.32.0/19 172.86.0.0/18 IPv6: 2605:e4c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63394 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:59:16:96:69:6c:27:3a:90:33:46:3e:4b:60:e5:50:fd:2d: f8:57:06:be:aa:10:07:1a:59:2f:7a:a8:59:49:43:6d:97:a9: 4d:1d:63:01:3f:b3:3f:9f:39:df:22:86:77:76:f2:97:95:3f: e8:08:7d:a3:a5:46:08:26:6c:34:1d:3e:1c:8c:cf:41:9b:e9: 4e:8b:7d:f9:93:24:ce:28:46:58:50:9a:64:9b:ac:06:a6:8b: 34:57:f0:7a:f1:22:eb:0a:4a:eb:47:43:9f:dc:a1:8c:43:ad: 6d:90:ef:c2:16:40:1c:00:81:e9:e2:5c:4a:04:88:79:f7:32: 37:f7:8a:af:5b:58:3e:9d:ed:95:db:21:3d:6f:d8:87:42:84: d0:96:64:5e:05:c6:34:09:68:1a:86:68:78:b8:6e:dd:f9:e6: 2e:67:1b:83:33:21:c5:fc:90:ef:8d:ea:f5:b2:05:ed:d8:f7: 8f:28:ac:52:60:a6:7e:8b:29:a2:5f:07:86:dc:06:4a:04:10: be:0f:eb:bd:12:a5:98:56:b8:55:a0:e0:3e:8f:04:8f:ac:fd: 5a:32:4d:b3:d3:c8:ef:26:ca:3b:52:f3:60:9c:bc:90:95:09: ff:cb:10:9c:ef:d6:8e:a8:e9:f1:b0:f1:50:eb:55:ba:a6:f4: 45:e8:4a:7d -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWE0tN82IDajOT0xInAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxNTEyNDUyM1oXDTI4MDYxNzEyNDUyM1owLzEtMCsGA1UEAxMk MDExYTBkMWItNzlhNC00ZDE0LTljZDAtMDc0M2YyOWJmOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJn48JpaQZ3lQOyKI93f29Y2og3j0xtjphRT tl8CJ3JEcHiqIVl5jwLdMzTKoV5qZ05imoWy6VAxGeHd/DMBmpOvfMxhyR0mf6b1 q2WW4xb/cAQ1Z5KzrBzeENU4c/70H+ZPeck2pKiKRcVIXr4C/YAp1+OoBu7qbVYd RSUa+gUtExJ3kwRyqOAKthqsPWwInkt5XEWMV8uLYQ5MOKYuUTFsh/Yr8fYNS2Nd wkmpB4iDn0SUXoP7/VeBVpzOH4xGhmB+Db6pY048Peoa4ebXL3wy4VaROU70hhSb VSD/RdFNynocGzPSGJDZjRwe0bVChM6u0xEgKJzcgQ3ZphTMKwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFFEKvPdZUuImBtcBExMijFgD578aMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w MTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5YmY5NTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzAxMWEwZDFiLTc5YTQtNGQxNC05 Y2QwLTA3NDNmMjliZjk1Ni8wMTFhMGQxYi03OWE0LTRkMTQtOWNkMC0wNzQzZjI5 YmY5NTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAAXuHADBARo7XADBAWdNCADBAasVgAwDQQCAAIw BwMFACYF5MAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAPeiMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAENZ FpZpbCc6kDNGPktg5VD9LfhXBr6qEAcaWS96qFlJQ22XqU0dYwE/sz+fOd8ihnd2 8peVP+gIfaOlRggmbDQdPhyMz0Gb6U6LffmTJM4oRlhQmmSbrAamizRX8HrxIusK SutHQ5/coYxDrW2Q78IWQBwAgeniXEoEiHn3Mjf3iq9bWD6d7ZXbIT1v2IdChNCW ZF4FxjQJaBqGaHi4bt355i5nG4MzIcX8kO+N6vWyBe3Y948orFJgpn6LKaJfB4bc BkoEEL4P670SpZhWuFWg4D6PBI+s/VoyTbPTyO8myjtS82CcvJCVCf/LEJzv1o6o 6fGw8VDrVbqm9EXoSn0= -----END CERTIFICATE-----Generated at Wed Mar 25 23:15:59 2026 by rpki-client