$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b.cer File: 207c40f4-33c4-478b-ae61-d3f51358881b.cer (raw, json) Hash identifier: yGlLg/LYMT9fYczp8sWUfGqHIRbwp/43cv/uepyTaBI= Subject key identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E656D34835907324793CC2040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 05 Jul 2026 08:45:11 +0000 Certificate not after: Sat 07 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 40091 IP: 76.9.224.0/20 IP: 216.115.192.0/20 IP: 2607:2580::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:65:6d:34:83:59:07:32:47:93:cc:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 5 08:45:11 2026 GMT Not After : Oct 7 08:45:11 2028 GMT Subject: CN=207c40f4-33c4-478b-ae61-d3f51358881b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:e3:64:d7:4f:f1:3f:0d:41:10:87:55:02: 01:bb:c0:44:33:9b:35:ea:ba:90:dd:1a:0b:15:d6: 5a:24:d0:ee:86:9f:d1:1d:c7:36:eb:f8:6c:78:f4: d0:18:e7:66:e6:c5:33:0d:aa:2f:0d:29:03:67:79: a5:5f:22:ec:8e:9c:9e:60:08:85:c1:ae:0c:56:f0: 3d:01:e5:df:55:b3:ce:52:6c:7c:b6:b1:ff:39:c5: 52:19:7c:e9:41:b9:cc:ae:ca:71:ef:75:27:ed:33: bb:1b:1d:35:77:a3:a8:94:9e:0d:cc:3c:0c:9a:a7: 3f:05:cf:4a:99:57:32:d1:4b:ae:64:1c:de:59:e9: 8a:a0:87:73:35:df:ec:a7:57:70:c6:c7:20:c7:74: f2:f7:86:f7:df:06:e0:02:73:98:7c:ad:56:4e:c3: 43:db:b6:5a:3b:6b:db:d2:8a:b2:91:f8:6b:33:d1: 57:e6:5b:58:5f:46:6d:0c:1a:fd:de:4e:99:0a:19: 25:f0:5f:c8:9d:eb:4f:dd:8d:27:c5:0a:9e:80:1d: d6:aa:d5:0a:db:62:2e:9c:20:70:89:b3:e6:54:f2: 10:e3:46:ae:8d:3e:d7:65:cf:18:9e:ab:c9:a1:b9: 86:3b:d8:57:93:c0:5b:45:5b:db:1d:71:7f:f8:cc: b8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:02:CE:C0:ED:A4:31:D7:53:48:CC:76:D8:88:3C:76:1C:D1:ED:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/207c40f4-33c4-478b-ae61-d3f51358881b/207c40f4-33c4-478b-ae61-d3f51358881b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 76.9.224.0/20 216.115.192.0/20 IPv6: 2607:2580::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40091 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:5b:41:49:bf:63:14:ee:c9:53:c8:c5:2f:c9:d4:1e:69:21: f0:e6:dc:4d:6c:10:53:dd:62:76:4d:b9:1c:e1:12:f4:2a:56: 30:bc:4e:04:70:2f:2a:e5:9c:1b:0e:7a:c2:8a:cc:5e:a4:d5: f3:eb:43:fa:15:4d:44:11:b8:7b:2b:7c:62:b0:2b:63:08:5b: 51:79:99:10:1d:62:d6:75:e6:16:3e:ee:98:16:5c:23:76:94: 90:5d:59:16:11:f3:62:a8:29:cd:d0:3c:27:38:72:14:60:93: 67:2c:f6:70:c2:33:b6:26:44:99:a1:a4:bb:39:e2:66:47:60: 8d:dc:ac:43:94:41:6c:cc:94:17:4a:aa:73:00:15:e0:82:52: a7:04:d4:9a:04:52:f0:91:99:45:45:d0:bf:b4:37:7c:27:3a: 91:54:58:da:1d:ae:b2:37:fb:a7:10:04:9e:2b:6d:36:f4:77: 26:c8:ca:f8:2a:72:3c:e3:73:9f:8d:46:46:2b:a9:b4:05:e9: 17:ba:6f:e7:28:80:26:23:02:2b:9f:a4:5a:96:c8:84:4b:85: d0:d4:02:d1:c0:4a:db:3a:08:8f:a5:30:c0:9e:86:78:fe:72: b2:d8:ae:a6:d6:08:ce:bf:63:12:0a:01:51:36:d1:db:ee:1c: 79:2a:ec:da -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE5lbTSDWQcyR5PMIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcwNTA4NDUxMVoXDTI4MTAwNzA4NDUxMVowLzEtMCsGA1UEAxMk MjA3YzQwZjQtMzNjNC00NzhiLWFlNjEtZDNmNTEzNTg4ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSvjZNdP8T8NQRCHVQIBu8BEM5s16rqQ3RoL FdZaJNDuhp/RHcc26/hsePTQGOdm5sUzDaovDSkDZ3mlXyLsjpyeYAiFwa4MVvA9 AeXfVbPOUmx8trH/OcVSGXzpQbnMrspx73Un7TO7Gx01d6OolJ4NzDwMmqc/Bc9K mVcy0UuuZBzeWemKoIdzNd/sp1dwxscgx3Ty94b33wbgAnOYfK1WTsND27ZaO2vb 0oqykfhrM9FX5ltYX0ZtDBr93k6ZChkl8F/InetP3Y0nxQqegB3WqtUK22IunCBw ibPmVPIQ40aujT7XZc8YnqvJobmGO9hXk8BbRVvbHXF/+My4FwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFICzsDtpDHXU0jMdtiIPHYc0e3sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y MDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1ODg4MWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzIwN2M0MGY0LTMzYzQtNDc4Yi1h ZTYxLWQzZjUxMzU4ODgxYi8yMDdjNDBmNC0zM2M0LTQ3OGItYWU2MS1kM2Y1MTM1 ODg4MWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARMCeADBATYc8AwDQQCAAIwBwMFACYHJYAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAJybMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAElbQUm/YxTuyVPIxS/J 1B5pIfDm3E1sEFPdYnZNuRzhEvQqVjC8TgRwLyrlnBsOesKKzF6k1fPrQ/oVTUQR uHsrfGKwK2MIW1F5mRAdYtZ15hY+7pgWXCN2lJBdWRYR82KoKc3QPCc4chRgk2cs 9nDCM7YmRJmhpLs54mZHYI3crEOUQWzMlBdKqnMAFeCCUqcE1JoEUvCRmUVF0L+0 N3wnOpFUWNodrrI3+6cQBJ4rbTb0dybIyvgqcjzjc5+NRkYrqbQF6Re6b+cogCYj AiufpFqWyIRLhdDUAtHASts6CI+lMMCehnj+crLYrqbWCM6/YxIKAVE20dvuHHkq 7No= -----END CERTIFICATE-----Generated at Fri Jul 24 05:43:48 2026 by rpki-client