$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737.cer File: 2b478b8e-451b-4ff9-be29-b8e2c5620737.cer (raw, json) Hash identifier: rstosRDkKHS8IaqxoVk0/4FS7urwfFO9+McGjPyLq1w= Subject key identifier: CF:63:99:31:20:1C:76:2F:99:C4:03:8C:3D:D1:80:A1:3E:89:5A:A7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584DCFEB436F01670D65ED713500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/2b478b8e-451b-4ff9-be29-b8e2c5620737.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 19:27:56 +0000 Certificate not after: Mon 14 Aug 2028 19:27:56 +0000 Subordinate resources: AS: 395308 IP: 2602:f3cc::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:eb:43:6f:01:67:0d:65:ed:71:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 12 19:27:56 2026 GMT Not After : Aug 14 19:27:56 2028 GMT Subject: CN=2b478b8e-451b-4ff9-be29-b8e2c5620737 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:f3:07:e1:5d:39:03:97:2a:59:57:c9:97: de:4e:c6:97:8a:0b:16:fa:43:07:e1:7e:ba:dd:93: 93:57:e2:89:bc:7d:20:a6:2e:7f:5e:e8:30:82:c8: 30:1a:6d:f1:b9:33:3a:bf:9d:ce:77:2f:07:14:c4: 54:c9:50:c0:2d:f0:29:7d:5c:13:bd:77:a2:3c:98: 34:87:80:1e:35:28:ae:cb:dd:f6:8b:90:82:5b:5a: d8:5d:e8:89:8c:0c:98:e5:89:6e:95:b9:77:10:42: 7d:d7:2f:f0:9d:db:59:17:70:3c:98:ae:a7:85:1f: fd:53:9c:c7:d3:1e:e8:8c:96:d1:b1:04:7a:ce:ff: 6d:1f:e7:44:28:38:d8:f1:e8:4a:f6:1b:ab:da:b1: 35:cd:2c:ba:b3:ca:32:28:45:9a:81:f0:a4:cb:79: 8f:04:30:1c:f8:f3:11:80:3d:74:3b:0d:96:99:65: 03:a2:bd:ed:81:99:ba:4d:0c:48:7b:8b:c9:17:51: 03:25:66:70:46:c2:8e:ee:71:a6:b9:63:85:ad:4c: 48:5f:60:3a:76:e5:59:23:15:98:32:24:c8:62:2e: 03:12:c0:5e:42:55:47:fd:65:1f:1e:1f:37:58:33: ea:8d:41:36:c8:8b:42:ce:9f:65:5f:aa:4e:b7:44: 55:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:63:99:31:20:1C:76:2F:99:C4:03:8C:3D:D1:80:A1:3E:89:5A:A7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/2b478b8e-451b-4ff9-be29-b8e2c5620737.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2602:f3cc::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395308 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:a2:90:2b:29:5d:a5:df:4b:1a:ea:35:50:e0:61:7b:4c:a5: 77:1a:82:ac:c9:f4:f5:11:c0:70:cd:8a:0a:2f:50:4b:34:b4: d9:c7:ba:37:36:27:65:cc:d5:bd:47:fc:1a:98:a9:dd:ed:2f: fc:b1:f9:91:0c:06:25:89:5c:5b:58:cc:14:a4:7a:65:a9:b8: de:aa:53:09:f9:f8:e8:28:c6:99:04:82:15:6f:f5:e2:df:5d: fa:6c:ce:76:11:a1:55:d2:3f:11:f2:16:4f:7f:26:c7:da:41: 23:4b:0e:08:2b:8c:1e:88:df:1c:89:96:2d:50:a8:96:4e:78: 70:db:38:fb:24:10:00:5b:df:04:69:da:94:ab:f2:3e:49:34: 47:93:7b:97:29:f8:dd:ae:7d:05:7d:17:2a:9e:f5:d0:bf:0b: 97:2c:54:17:31:5d:c7:5e:d3:a8:92:8f:25:cd:d1:6c:d6:fc: 0f:17:0c:59:c6:85:e9:34:39:a1:68:ac:3e:71:45:fd:bd:33: 73:9d:ec:f4:98:5f:57:43:a7:70:6b:a0:91:f2:54:3c:4a:70: 6b:12:4b:64:7e:e5:e1:23:cd:2a:11:e3:c5:92:ad:7f:00:6d: a1:50:55:5b:83:6a:04:62:04:ea:e2:92:0b:b9:4e:eb:bd:35: b0:6f:a1:e8 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE3P60NvAWcNZe1xNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDUxMjE5Mjc1NloXDTI4MDgxNDE5Mjc1NlowLzEtMCsGA1UEAxMk MmI0NzhiOGUtNDUxYi00ZmY5LWJlMjktYjhlMmM1NjIwNzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wHzB+FdOQOXKllXyZfeTsaXigsW+kMH4X66 3ZOTV+KJvH0gpi5/XugwgsgwGm3xuTM6v53Ody8HFMRUyVDALfApfVwTvXeiPJg0 h4AeNSiuy932i5CCW1rYXeiJjAyY5Ylulbl3EEJ91y/wndtZF3A8mK6nhR/9U5zH 0x7ojJbRsQR6zv9tH+dEKDjY8ehK9hur2rE1zSy6s8oyKEWagfCky3mPBDAc+PMR gD10Ow2WmWUDor3tgZm6TQxIe4vJF1EDJWZwRsKO7nGmuWOFrUxIX2A6duVZIxWY MiTIYi4DEsBeQlVH/WUfHh83WDPqjUE2yItCzp9lX6pOt0RVHwIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFM9jmTEgHHYvmcQDjD3RgKE+iVqnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y YjQ3OGI4ZS00NTFiLTRmZjktYmUyOS1iOGUyYzU2MjA3MzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJiNDc4YjhlLTQ1MWItNGZmOS1i ZTI5LWI4ZTJjNTYyMDczNy8yYjQ3OGI4ZS00NTFiLTRmZjktYmUyOS1iOGUyYzU2 MjA3MzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgQmAvPMADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGCCwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAEaKQKyldpd9LGuo1UOBhe0yldxqCrMn09RHAcM2KCi9Q SzS02ce6NzYnZczVvUf8Gpip3e0v/LH5kQwGJYlcW1jMFKR6Zam43qpTCfn46CjG mQSCFW/14t9d+mzOdhGhVdI/EfIWT38mx9pBI0sOCCuMHojfHImWLVColk54cNs4 +yQQAFvfBGnalKvyPkk0R5N7lyn43a59BX0XKp710L8LlyxUFzFdx17TqJKPJc3R bNb8DxcMWcaF6TQ5oWisPnFF/b0zc53s9JhfV0OncGugkfJUPEpwaxJLZH7l4SPN KhHjxZKtfwBtoVBVW4NqBGIE6uKSC7lO6701sG+h6A== -----END CERTIFICATE-----Generated at Tue May 12 22:32:22 2026 by rpki-client