$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer File: 39b2626e-a40d-46fc-b3c3-ff5a12195939.cer (raw, json) Hash identifier: NymI5uhTsz3nGU2Wlnw1FxvkdJbm3P4r1Kub3spxwiw= Subject key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584DCF236DDCB90CC2F23DA01094 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 12:45:17 +0000 Certificate not after: Mon 14 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 23477 IP: 104.232.10.0/23 IP: 2602:f899::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:23:6d:dc:b9:0c:c2:f2:3d:a0:10:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 12 12:45:17 2026 GMT Not After : Aug 14 12:45:17 2028 GMT Subject: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:28:86:81:52:2a:cf:a3:74:7a:15:c3:b6:ec: 87:1f:ca:8d:a0:0e:d8:98:a4:2b:cc:e0:75:bc:f9: 37:96:82:b5:5e:c0:3c:a7:95:dc:78:2c:65:4f:cd: 03:fb:ca:44:4d:c0:35:ce:cf:03:bc:78:1d:fa:29: 07:45:34:09:48:97:41:47:5a:cc:f6:46:ff:2f:d1: 80:81:84:e0:2b:aa:58:f9:bc:35:2e:22:33:10:82: 46:b4:0a:81:0a:61:0f:70:2f:44:56:4b:ad:8e:e9: 07:f4:41:04:d8:69:4c:74:e1:14:ff:82:b9:60:2a: 3b:82:35:b1:73:a7:de:bc:ef:30:20:00:4c:b1:0b: 03:9f:6e:54:ae:83:c1:ea:05:20:bf:a0:4d:d2:28: e0:a5:81:4b:0c:9b:3a:e6:67:e9:b4:66:c8:b6:23: fb:c7:bd:34:7b:3b:53:b1:6c:e7:92:d3:6f:6e:4d: 26:73:1c:63:80:6b:0e:7b:12:aa:da:66:82:96:55: 10:87:7e:6b:b2:50:25:39:be:17:8c:55:71:81:90: 8e:ee:ff:cc:33:92:1e:11:39:5b:e0:f5:8f:47:2c: f2:5a:07:64:4d:bd:83:d5:63:9b:5a:6d:2d:6a:93: ce:d2:09:ce:88:47:8c:07:95:f4:07:96:f0:e7:f1: 54:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.232.10.0/23 IPv6: 2602:f899::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23477 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:2c:77:4a:4b:b4:29:fd:ac:54:44:9b:63:2c:a6:cc:c3:94: 62:8a:8c:4f:c7:fc:a9:d1:d8:97:10:45:66:dd:bb:81:2e:c9: 16:f7:0c:60:a5:16:b7:50:4e:93:c8:96:d7:de:01:ae:c3:18: f2:7f:23:ab:7e:9b:4d:3b:f0:c0:6c:4c:8e:a0:8c:6f:74:4a: d0:7c:5a:88:a6:ca:09:c7:ec:f5:3b:8e:72:e3:54:3c:c5:aa: 3c:00:bb:54:0a:2b:89:e4:48:b1:3f:9b:96:7d:2d:62:35:f1: b3:ab:22:c6:ca:9b:b3:34:17:25:3a:ec:7c:9f:0f:7e:3b:9e: 0c:53:92:a2:ce:26:16:ec:d8:cf:d0:82:48:13:44:63:42:a5: 92:19:86:c6:e2:59:53:db:c1:c3:0d:7d:fb:5d:f2:f0:fe:77: 9e:78:f4:3f:cf:d2:3e:84:42:01:25:69:89:c4:9c:1b:1d:0c: 6a:0e:9a:cb:10:a6:ce:4b:dd:f1:2c:13:22:7b:db:9f:f4:9c: 84:b5:07:f5:19:9e:31:72:1f:20:68:a4:cb:c6:36:fe:4c:84: cc:2b:22:62:2f:c1:d9:bc:9f:20:17:a7:12:ef:0e:c5:bb:4e: 67:f7:42:f7:77:9b:18:4e:1b:ef:a0:e9:15:da:ec:f8:e8:24: 3e:94:8d:a0 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE3PI23cuQzC8j2gEJQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDUxMjEyNDUxN1oXDTI4MDgxNDEyNDUxN1owLzEtMCsGA1UEAxMk MzliMjYyNmUtYTQwZC00NmZjLWIzYzMtZmY1YTEyMTk1OTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9CiGgVIqz6N0ehXDtuyHH8qNoA7YmKQrzOB1 vPk3loK1XsA8p5XceCxlT80D+8pETcA1zs8DvHgd+ikHRTQJSJdBR1rM9kb/L9GA gYTgK6pY+bw1LiIzEIJGtAqBCmEPcC9EVkutjukH9EEE2GlMdOEU/4K5YCo7gjWx c6fevO8wIABMsQsDn25UroPB6gUgv6BN0ijgpYFLDJs65mfptGbItiP7x700eztT sWznktNvbk0mcxxjgGsOexKq2maCllUQh35rslAlOb4XjFVxgZCO7v/MM5IeETlb 4PWPRyzyWgdkTb2D1WObWm0tapPO0gnOiEeMB5X0B5bw5/FUsQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBZZNiyqQTgcY07uBVJHwIDcwNmAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z OWIyNjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVhMTIxOTU5MzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzM5YjI2MjZlLWE0MGQtNDZmYy1i M2MzLWZmNWExMjE5NTkzOS8zOWIyNjI2ZS1hNDBkLTQ2ZmMtYjNjMy1mZjVhMTIx OTU5MzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAFo6AowDgQCAAIwCAMGACYC+JkAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAlu1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABgsd0pLtCn9rFREm2MspszDlGKK jE/H/KnR2JcQRWbdu4EuyRb3DGClFrdQTpPIltfeAa7DGPJ/I6t+m0078MBsTI6g jG90StB8WoimygnH7PU7jnLjVDzFqjwAu1QKK4nkSLE/m5Z9LWI18bOrIsbKm7M0 FyU67HyfD347ngxTkqLOJhbs2M/QgkgTRGNCpZIZhsbiWVPbwcMNfftd8vD+d554 9D/P0j6EQgElaYnEnBsdDGoOmssQps5L3fEsEyJ725/0nIS1B/UZnjFyHyBopMvG Nv5MhMwrImIvwdm8nyAXpxLvDsW7Tmf3Qvd3mxhOG++g6RXa7PjoJD6UjaA= -----END CERTIFICATE-----Generated at Wed May 13 05:33:18 2026 by rpki-client