$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d.cer File: 311f19cc-344e-48c5-a1f1-47593aa56b0d.cer (raw, json) Hash identifier: Uhi/gpDu5KhBxuq9rKpiD+Ta18WAlX0kF4oiG7vmT4c= Subject key identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E71B8D2D4C058F2ABADC71260 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Jul 2026 18:27:15 +0000 Certificate not after: Mon 20 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 54225 AS: 397853 IP: 23.160.244.0/24 IP: 216.21.216.0/21 IP: 2604:ebc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:71:b8:d2:d4:c0:58:f2:ab:ad:c7:12:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 9 18:27:15 2026 GMT Not After : Mar 20 12:45:23 2028 GMT Subject: CN=311f19cc-344e-48c5-a1f1-47593aa56b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a6:df:03:d2:b7:ac:cd:fb:e9:b4:47:3a:34: 50:8c:2a:6a:8e:a9:87:4f:63:a3:e9:6b:fd:26:64: 0f:f2:df:18:3a:51:a7:1d:70:ca:d5:97:29:3c:87: db:31:2d:3f:cd:65:7c:b0:b0:23:dd:3e:97:9e:96: e1:2f:fa:41:da:4b:3f:76:be:d9:26:91:e2:b2:47: aa:63:cb:1b:ce:ef:4b:a7:02:14:b8:13:70:e4:ec: 09:08:6b:fc:ea:a0:71:7e:e0:e3:bd:6f:23:27:6b: 12:10:39:06:f1:06:64:32:20:47:23:80:27:95:40: 2b:00:28:32:c6:4c:bb:2c:a5:4e:40:69:cf:57:7c: 74:54:31:b1:af:a4:6f:8c:0e:be:61:4c:46:14:eb: d9:34:d1:18:83:2c:da:05:56:4b:71:d5:5a:e9:de: 87:3e:f2:36:ab:45:5f:13:de:e4:bc:a5:41:63:c1: 48:c0:25:47:30:d2:6e:02:1b:d1:ab:85:e1:ec:dc: bf:c9:cc:06:a2:73:10:ef:d4:5a:77:84:a6:ae:a6: 21:14:66:2c:76:0a:19:c4:7a:35:41:c0:a2:d5:91: cc:3a:08:07:0d:a3:4c:41:8f:1b:17:a3:63:5b:29: 6b:80:cd:19:fe:e8:c5:68:f0:de:ca:c6:18:92:24: 9f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D6:60:E6:E1:75:11:29:94:0A:F2:82:C1:B6:B6:AD:02:D9:60:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/311f19cc-344e-48c5-a1f1-47593aa56b0d/311f19cc-344e-48c5-a1f1-47593aa56b0d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.160.244.0/24 216.21.216.0/21 IPv6: 2604:ebc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54225 397853 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:08:42:7a:7e:93:25:c6:34:76:8e:53:d7:f7:a8:da:5b:76: 59:95:0b:9a:d0:23:be:de:4e:4d:36:1d:88:50:5d:f3:8a:9d: 76:f6:92:8f:5d:15:42:98:33:c2:98:d9:28:ff:87:9d:a5:cb: 1f:17:4a:3f:ed:7c:0a:12:88:fe:39:68:28:31:d4:e0:44:36: 9b:0c:73:f1:4d:39:40:3f:c7:e7:ad:48:32:4e:0e:c2:26:ce: b4:2e:82:00:a9:fd:f6:3b:fb:62:f5:12:a9:d3:22:7e:73:09: 9b:84:2c:37:c0:3f:90:62:1e:39:0d:1c:81:05:25:ad:e0:c1: 4d:11:1d:20:9d:f9:cf:54:0f:4c:63:a1:a3:7b:fc:f7:6a:e6: c0:46:74:db:e8:b5:77:a8:58:dd:0d:04:63:db:c4:35:26:4e: dd:95:d7:78:ea:4a:56:3e:35:0b:96:f3:72:c2:93:db:17:ab: e9:da:57:ba:1f:fe:b5:48:df:72:27:0e:11:ba:db:98:82:84: 1b:f9:ca:bf:fd:ca:2f:0d:b3:4d:65:a9:ef:2b:bd:12:c9:99: 60:01:96:53:6f:7f:1a:92:e4:8a:6a:c6:ed:cd:88:a2:c9:8e: 60:b0:57:63:96:b7:ca:d1:f3:96:e7:f4:9b:03:54:ce:17:91: 6a:70:f8:bf -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE5xuNLUwFjyq63HEmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcwOTE4MjcxNVoXDTI4MDMyMDEyNDUyM1owLzEtMCsGA1UEAxMk MzExZjE5Y2MtMzQ0ZS00OGM1LWExZjEtNDc1OTNhYTU2YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqbfA9K3rM376bRHOjRQjCpqjqmHT2Oj6Wv9 JmQP8t8YOlGnHXDK1ZcpPIfbMS0/zWV8sLAj3T6XnpbhL/pB2ks/dr7ZJpHiskeq Y8sbzu9LpwIUuBNw5OwJCGv86qBxfuDjvW8jJ2sSEDkG8QZkMiBHI4AnlUArACgy xky7LKVOQGnPV3x0VDGxr6RvjA6+YUxGFOvZNNEYgyzaBVZLcdVa6d6HPvI2q0Vf E97kvKVBY8FIwCVHMNJuAhvRq4Xh7Ny/ycwGonMQ79Rad4SmrqYhFGYsdgoZxHo1 QcCi1ZHMOggHDaNMQY8bF6NjWylrgM0Z/ujFaPDeysYYkiSfPwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFE3WYObhdREplArygsG2tq0C2WB9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z MTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2FhNTZiMGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzMxMWYxOWNjLTM0NGUtNDhjNS1h MWYxLTQ3NTkzYWE1NmIwZC8zMTFmMTljYy0zNDRlLTQ4YzUtYTFmMS00NzU5M2Fh NTZiMGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXoPQDBAPYFdgwDQQCAAIwBwMFACYE68AwHwYI KwYBBQUHAQgBAf8EEDAOoAwwCgIDANPRAgMGEh0wVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlwhCen6TJcY0 do5T1/eo2lt2WZULmtAjvt5OTTYdiFBd84qddvaSj10VQpgzwpjZKP+HnaXLHxdK P+18ChKI/jloKDHU4EQ2mwxz8U05QD/H561IMk4OwibOtC6CAKn99jv7YvUSqdMi fnMJm4QsN8A/kGIeOQ0cgQUlreDBTREdIJ35z1QPTGOho3v892rmwEZ02+i1d6hY 3Q0EY9vENSZO3ZXXeOpKVj41C5bzcsKT2xer6dpXuh/+tUjfcicOEbrbmIKEG/nK v/3KLw2zTWWp7yu9EsmZYAGWU29/GpLkimrG7c2IosmOYLBXY5a3ytHzluf0mwNU zheRanD4vw== -----END CERTIFICATE-----Generated at Thu Jul 23 20:17:36 2026 by rpki-client