$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer File: 2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer (raw, json) Hash identifier: nlapZIsIr78yPNr8cf6dFY9K6lMTVUUEaU9UA98XQBs= Subject key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D3167CFD67E94D51FF80CEC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Mar 2026 00:45:21 +0000 Certificate not after: Mon 19 Jun 2028 00:45:21 +0000 Subordinate resources: AS: 23297 IP: 23.130.44.0/24 IP: 2602:f780::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:67:cf:d6:7e:94:d5:1f:f8:0c:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 17 00:45:21 2026 GMT Not After : Jun 19 00:45:21 2028 GMT Subject: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:98:1d:c4:0c:4f:7d:56:28:61:c1:ff:31: f9:9b:78:20:aa:f6:58:eb:09:d5:7d:36:08:97:65: 87:46:8a:dc:05:8e:30:25:63:9b:e1:9b:a6:b6:b5: 5a:23:36:02:26:23:8a:79:3c:ac:74:e0:a0:43:71: be:25:91:d0:41:82:f2:ee:3a:d5:05:2d:cf:b9:83: 5b:89:3c:0e:de:25:cc:3d:aa:59:b6:b5:3f:3f:6a: e0:47:21:2a:0b:1c:e7:8e:bf:0d:57:6a:75:0b:00: 97:6e:e8:6d:f2:19:56:e1:b3:29:a5:a7:46:20:dd: bb:76:3e:fd:3a:3c:99:fb:fd:68:f1:a0:ad:50:c9: 12:59:73:e7:fc:ac:49:74:46:ff:64:23:e9:d8:c3: e1:04:e1:1d:b4:85:5f:46:01:45:47:59:cd:60:01: c8:f9:05:5d:e6:0d:22:d0:75:dc:cd:91:56:09:22: 67:ed:94:17:02:e2:9b:28:9f:25:35:a2:45:52:52: 4e:d3:1e:75:b4:2e:1c:3c:d9:99:aa:bb:0d:b7:19: 30:6c:9c:7f:a4:09:4a:40:0b:c7:b4:02:4f:6f:b9: cf:9b:7b:11:d2:d9:4c:6c:82:68:18:62:8f:0a:4c: b6:7c:e4:16:aa:ad:06:fc:87:c7:c5:61:ed:e9:e0: 3c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.130.44.0/24 IPv6: 2602:f780::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23297 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2a:11:f0:8e:bc:34:04:ce:a9:b8:27:f8:11:80:f8:81:a6: da:ec:ac:0a:4f:0d:9e:e0:7b:e0:e0:2a:94:48:ad:5b:d4:ec: eb:70:1f:e1:e3:c5:af:08:e7:09:e8:70:ba:ca:4c:e1:11:f9: 61:d7:e4:82:85:4a:12:0a:0c:25:a8:dc:5f:2f:40:2a:49:d2: a5:a8:12:e2:6b:4b:9a:2e:00:8c:69:22:99:c0:d8:d9:de:59: d0:05:7e:4c:80:09:7f:58:bf:d3:3d:58:2e:b4:69:92:9a:5c: 6d:87:f1:e0:0c:f8:29:63:ca:9d:52:c3:ae:19:4a:07:69:04: 9f:23:4e:1e:9e:d5:8d:c5:c6:07:bb:f1:41:53:d8:9a:84:a4: c5:fa:be:13:d3:c9:9f:8c:45:72:b0:1c:32:bf:85:54:5f:13: c4:ba:f1:0b:06:39:82:93:c0:8c:d7:d8:37:1b:a3:c5:0c:9c: 4c:f4:67:e9:4d:a0:69:63:42:c7:a1:1d:cd:28:12:76:60:4a: bf:75:04:cc:7f:d1:d9:8e:ef:f8:a8:ce:79:9b:78:2b:7f:15: 91:8a:35:fd:38:52:c3:29:c0:62:49:da:80:34:da:67:58:45: 01:a3:08:08:e6:42:cc:b9:4d:8a:98:f4:d3:1a:7a:93:13:6e: 62:42:36:73 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0xZ8/WfpTVH/gM7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxNzAwNDUyMVoXDTI4MDYxOTAwNDUyMVowLzEtMCsGA1UEAxMk MmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTViMjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbuYHcQMT31WKGHB/zH5m3ggqvZY6wnVfTYI l2WHRorcBY4wJWOb4ZumtrVaIzYCJiOKeTysdOCgQ3G+JZHQQYLy7jrVBS3PuYNb iTwO3iXMPapZtrU/P2rgRyEqCxznjr8NV2p1CwCXbuht8hlW4bMppadGIN27dj79 OjyZ+/1o8aCtUMkSWXPn/KxJdEb/ZCPp2MPhBOEdtIVfRgFFR1nNYAHI+QVd5g0i 0HXczZFWCSJn7ZQXAuKbKJ8lNaJFUlJO0x51tC4cPNmZqrsNtxkwbJx/pAlKQAvH tAJPb7nPm3sR0tlMbIJoGGKPCky2fOQWqq0G/IfHxWHt6eA8CQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMblM5tu2w5bWam2ZAJujhiaPJDUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y YjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJiNTk0N2U0LTYxZTYtNGRkZi04 YzJlLTBiODQ4MjE1YjI1MS8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIx NWIyNTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXgiwwDgQCAAIwCAMGBCYC94AAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlsBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEkqEfCOvDQEzqm4J/gRgPiBptrs rApPDZ7ge+DgKpRIrVvU7OtwH+Hjxa8I5wnocLrKTOER+WHX5IKFShIKDCWo3F8v QCpJ0qWoEuJrS5ouAIxpIpnA2NneWdAFfkyACX9Yv9M9WC60aZKaXG2H8eAM+Clj yp1Sw64ZSgdpBJ8jTh6e1Y3Fxge78UFT2JqEpMX6vhPTyZ+MRXKwHDK/hVRfE8S6 8QsGOYKTwIzX2Dcbo8UMnEz0Z+lNoGljQsehHc0oEnZgSr91BMx/0dmO7/ioznmb eCt/FZGKNf04UsMpwGJJ2oA02mdYRQGjCAjmQsy5TYqY9NMaepMTbmJCNnM= -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:11 2026 by rpki-client