$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4.cer File: 156d6bac-1a16-4b0c-b578-992ff1b945c4.cer (raw, json) Hash identifier: p0pdRtvfZAbPPzsCtrBl/9kqy0pBzRPLDRY82wjvJAU= Subject key identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E4C4D0C055F9A694AEFF1CF58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 26 Jun 2026 08:45:11 +0000 Certificate not after: Thu 28 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 192.131.88.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:4d:0c:05:5f:9a:69:4a:ef:f1:cf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 26 08:45:11 2026 GMT Not After : Sep 28 08:45:11 2028 GMT Subject: CN=156d6bac-1a16-4b0c-b578-992ff1b945c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d1:93:d9:00:35:74:b5:3c:8b:0e:a3:41:18: 01:68:34:9c:89:c1:a6:a6:f2:1d:a1:ee:51:20:84: 03:59:83:a4:79:3c:ea:5a:75:99:49:ee:10:2b:ea: 7a:62:90:9e:56:d2:0f:17:d5:0e:12:f4:d6:f6:f1: 1c:d9:b4:00:2c:c7:85:8a:45:ae:44:cc:b9:58:c2: 0d:50:ec:44:60:0e:15:a8:be:b4:a5:a4:00:cb:20: bf:60:30:1c:82:1b:3b:d6:fe:61:e7:28:46:11:d3: a0:95:a3:e3:9d:00:d0:35:bd:4b:53:dc:37:ab:d9: e6:5c:e0:62:c0:8a:db:21:88:af:20:05:15:70:d2: ba:df:0b:50:74:dd:62:3f:17:13:36:cf:18:17:44: 4c:f2:c2:c3:a3:cf:08:6e:ba:9f:1c:bc:74:82:f5: 12:be:eb:90:49:1e:63:cc:c0:39:0b:fb:17:dd:e3: 80:be:13:18:8d:00:17:26:88:a2:82:fd:ba:68:2d: b3:ed:62:7e:8c:f3:51:99:2d:92:e1:69:a9:6e:ad: 4e:32:7c:d4:6e:08:f0:8c:f5:55:1e:88:9e:db:0f: 11:3f:bc:f4:9b:2e:66:da:3d:77:f4:0d:81:bd:ec: c2:e0:4f:53:02:ac:bd:e4:00:44:55:57:a6:48:06: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:78:EA:AD:CE:0A:9A:37:E8:36:01:C3:DA:2A:FB:6D:7B:1A:60:55 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/156d6bac-1a16-4b0c-b578-992ff1b945c4/156d6bac-1a16-4b0c-b578-992ff1b945c4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.131.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d0:eb:46:c8:c0:49:8a:d5:59:59:d9:f9:50:43:92:83:fd: bc:d3:63:85:d7:68:4a:f6:ee:d6:9b:83:43:17:38:77:f6:85: 26:06:42:37:d0:f4:75:76:b4:04:00:1f:a1:89:a2:e8:f4:75: b1:0f:0d:90:f6:40:24:88:42:7a:0f:4e:4f:e5:fa:3c:20:8c: c9:50:28:1a:6c:72:66:b4:65:14:4e:06:c3:ec:e2:90:94:48: 3b:20:bb:b4:13:89:00:67:7a:48:32:df:09:fc:27:43:a5:7b: dc:94:b2:3a:32:6d:f2:3a:9f:71:36:91:d6:0f:61:de:89:b4: f0:4b:5d:29:78:aa:ce:2a:0c:91:ed:3c:b7:be:68:17:b3:bb: e4:20:83:75:e2:cc:91:31:7b:7f:c0:c3:7e:23:20:7e:a3:e5: 7b:12:98:44:e1:cb:08:c9:03:a4:2c:3d:5c:8a:5a:3b:74:56: 94:47:83:2c:51:ea:93:75:8d:0f:03:c8:2f:f2:49:77:44:9e: 23:43:38:aa:a2:1b:88:59:a3:dd:16:06:a8:2d:af:ce:d0:b7: a3:72:84:f5:87:a5:00:83:11:de:17:c7:e6:b5:e1:53:56:cb: 7a:12:3a:bb:3d:cc:54:48:c2:bb:28:24:42:05:23:eb:51:8a: 44:10:40:d8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE5MTQwFX5ppSu/xz1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYyNjA4NDUxMVoXDTI4MDkyODA4NDUxMVowLzEtMCsGA1UEAxMk MTU2ZDZiYWMtMWExNi00YjBjLWI1NzgtOTkyZmYxYjk0NWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtGT2QA1dLU8iw6jQRgBaDScicGmpvIdoe5R IIQDWYOkeTzqWnWZSe4QK+p6YpCeVtIPF9UOEvTW9vEc2bQALMeFikWuRMy5WMIN UOxEYA4VqL60paQAyyC/YDAcghs71v5h5yhGEdOglaPjnQDQNb1LU9w3q9nmXOBi wIrbIYivIAUVcNK63wtQdN1iPxcTNs8YF0RM8sLDo88IbrqfHLx0gvUSvuuQSR5j zMA5C/sX3eOAvhMYjQAXJoiigv26aC2z7WJ+jPNRmS2S4Wmpbq1OMnzUbgjwjPVV Hoie2w8RP7z0my5m2j139A2BvezC4E9TAqy95ABEVVemSAYOrQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOd46q3OCpo36DYBw9oq+217GmBVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x NTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFiOTQ1YzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzE1NmQ2YmFjLTFhMTYtNGIwYy1i NTc4LTk5MmZmMWI5NDVjNC8xNTZkNmJhYy0xYTE2LTRiMGMtYjU3OC05OTJmZjFi OTQ1YzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAg1gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAStDrRsjASYrVWVnZ+VBD koP9vNNjhddoSvbu1puDQxc4d/aFJgZCN9D0dXa0BAAfoYmi6PR1sQ8NkPZAJIhC eg9OT+X6PCCMyVAoGmxyZrRlFE4Gw+zikJRIOyC7tBOJAGd6SDLfCfwnQ6V73JSy OjJt8jqfcTaR1g9h3om08EtdKXiqzioMke08t75oF7O75CCDdeLMkTF7f8DDfiMg fqPlexKYROHLCMkDpCw9XIpaO3RWlEeDLFHqk3WNDwPIL/JJd0SeI0M4qqIbiFmj 3RYGqC2vztC3o3KE9YelAIMR3hfH5rXhU1bLehI6uz3MVEjCuygkQgUj61GKRBBA 2A== -----END CERTIFICATE-----Generated at Fri Jul 24 01:45:45 2026 by rpki-client