$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1.cer File: 265b0641-047d-4787-a12d-159370bfcdb1.cer (raw, json) Hash identifier: /VfgnB2l/PaDQXEOIlK7LgHW51KIu/Oi2WYpKVIiOTM= Subject key identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D2A6D1D6120A6A90C713C9F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Mar 2026 12:45:22 +0000 Certificate not after: Fri 16 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 104.171.16.0/20 IP: 2620:94:c000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:6d:1d:61:20:a6:a9:0c:71:3c:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 14 12:45:22 2026 GMT Not After : Jun 16 12:45:22 2028 GMT Subject: CN=265b0641-047d-4787-a12d-159370bfcdb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:ef:77:3f:aa:09:77:fb:7c:9a:b5:d2:9c:0b: e4:df:df:b4:f7:80:4f:f8:a0:9e:f1:47:b5:cd:09: 18:21:04:a8:73:93:44:19:1d:a2:5f:7d:22:8f:c3: 2c:25:3c:b8:89:17:65:56:e5:ce:88:06:af:83:56: 3a:43:78:b7:50:ad:b5:bf:bb:f2:33:0a:a5:b0:d6: b2:62:7a:b1:bf:be:21:fe:c8:9a:7a:86:02:7b:a1: 98:29:9c:d3:35:e4:0e:b3:9f:28:d7:cd:13:88:33: 02:01:51:ae:79:33:84:93:a6:77:8e:51:d3:85:ba: f8:0a:c0:6c:9e:80:11:4b:80:5a:4f:ee:48:ef:84: e3:77:97:86:81:8f:5d:6c:72:85:a2:9e:f3:83:fa: e0:b6:62:86:49:ab:e6:c1:c0:1d:2d:a8:26:62:3a: 41:6a:e6:1c:08:a8:f2:5f:68:cd:d3:9b:33:cb:20: 59:39:d3:56:13:02:23:87:7a:a3:27:99:4b:a9:fc: 67:03:cb:81:c3:6a:3d:c0:67:77:5b:9e:28:bc:10: 2a:51:e9:ee:e2:72:0a:aa:cd:c9:6e:a7:23:5e:2d: 4e:82:79:93:74:e1:b0:7f:e1:30:82:14:5b:dc:ca: 62:b6:ae:4d:a4:f7:d7:8e:fc:63:c7:1a:9c:d4:af: ef:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6C:47:39:A7:73:A8:23:18:A0:B7:CF:9A:FB:63:72:91:54:0B:25 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/265b0641-047d-4787-a12d-159370bfcdb1/265b0641-047d-4787-a12d-159370bfcdb1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.171.16.0/20 IPv6: 2620:94:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:b0:b1:25:1a:9b:71:a4:b8:06:fb:4e:f3:04:7c:ae:d2:c6: 83:a1:43:d5:bc:8f:fd:53:ed:3b:e8:bc:b0:01:ce:4d:12:44: 04:aa:1c:06:9b:eb:a5:dc:ab:5c:88:7a:ce:06:d1:c2:99:58: 83:62:32:a6:f4:ba:8a:4c:ab:51:d3:51:9c:56:29:8f:14:0d: 35:c1:a5:dc:22:69:3e:40:22:1c:4a:03:08:e4:21:13:4d:bf: 6e:20:87:dc:b2:cb:66:7d:e6:0b:4c:98:fd:8f:97:7c:1f:6c: 69:49:f7:ee:51:68:6b:23:81:78:01:08:59:c0:4f:a2:97:ef: 2d:f2:f9:21:bd:b1:32:d0:68:46:75:ef:86:a4:18:a6:c8:0c: 7c:b4:72:b4:17:b5:4e:9d:06:21:3a:bd:56:a7:35:42:81:fc: d8:9a:49:45:ee:50:db:13:d9:f6:fa:43:38:25:05:a1:0d:bb: 56:da:51:dc:7e:bd:61:4c:d2:09:e8:54:7f:60:63:ea:c5:90: 2d:8d:30:86:7b:98:5d:2d:2b:f5:95:56:0d:d4:c7:35:76:3f: 14:a6:a4:63:11:f9:dd:12:47:f5:9e:b7:7d:b8:6e:5a:79:99: 34:57:c4:d7:86:42:1f:69:8f:eb:9e:b4:d9:56:f4:94:7e:c9: f8:d2:f1:41 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWE0qbR1hIKapDHE8n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxNDEyNDUyMloXDTI4MDYxNjEyNDUyMlowLzEtMCsGA1UEAxMk MjY1YjA2NDEtMDQ3ZC00Nzg3LWExMmQtMTU5MzcwYmZjZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge93P6oJd/t8mrXSnAvk39+094BP+KCe8Ue1 zQkYIQSoc5NEGR2iX30ij8MsJTy4iRdlVuXOiAavg1Y6Q3i3UK21v7vyMwqlsNay Ynqxv74h/siaeoYCe6GYKZzTNeQOs58o180TiDMCAVGueTOEk6Z3jlHThbr4CsBs noARS4BaT+5I74Tjd5eGgY9dbHKFop7zg/rgtmKGSavmwcAdLagmYjpBauYcCKjy X2jN05szyyBZOdNWEwIjh3qjJ5lLqfxnA8uBw2o9wGd3W54ovBAqUenu4nIKqs3J bqcjXi1OgnmTdOGwf+EwghRb3Mpitq5NpPfXjvxjxxqc1K/vmQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFCZsRzmnc6gjGKC3z5r7Y3KRVAslMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y NjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBiZmNkYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzI2NWIwNjQxLTA0N2QtNDc4Ny1h MTJkLTE1OTM3MGJmY2RiMS8yNjViMDY0MS0wNDdkLTQ3ODctYTEyZC0xNTkzNzBi ZmNkYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBARoqxAwDwQCAAIwCQMHACYgAJTAADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCMsLElGptxpLgG+07zBHyu0saDoUPVvI/9U+076LywAc5NEkQEqhwGm+ul3Ktc iHrOBtHCmViDYjKm9LqKTKtR01GcVimPFA01waXcImk+QCIcSgMI5CETTb9uIIfc sstmfeYLTJj9j5d8H2xpSffuUWhrI4F4AQhZwE+il+8t8vkhvbEy0GhGde+GpBim yAx8tHK0F7VOnQYhOr1WpzVCgfzYmklF7lDbE9n2+kM4JQWhDbtW2lHcfr1hTNIJ 6FR/YGPqxZAtjTCGe5hdLSv1lVYN1Mc1dj8UpqRjEfndEkf1nrd9uG5aeZk0V8TX hkIfaY/rnrTZVvSUfsn40vFB -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:36 2026 by rpki-client