$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer File: 4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.cer (raw, json) Hash identifier: nvUh2JcM07zaU2RsZ9dEphKw7ICcqocOFnPoJo25vgU= Subject key identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F4805BA6717BE0F23EE308C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 24 Sep 2026 12:45:11 +0000 Certificate not after: Wed 27 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 14749 IP: 162.212.136.0/21 IP: 199.242.223.0/24 IP: 2606:fbc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:05:ba:67:17:be:0f:23:ee:30:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 24 12:45:11 2026 GMT Not After : Dec 27 13:45:11 2028 GMT Subject: CN=4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:cd:fd:7f:1e:0c:aa:f9:54:24:4d:1f:b7:6f: 38:f7:a9:e8:1f:2a:dd:e8:a9:64:64:3a:13:b8:47: 69:ef:22:34:3f:b4:57:68:83:b9:79:c2:df:54:9d: b7:0e:7e:d7:6a:b9:70:d6:89:7d:f5:98:32:a0:21: b9:ed:21:45:a0:3c:01:45:62:8d:01:cd:92:30:1c: 51:e7:98:4d:03:61:0d:55:6e:21:16:0b:f9:1c:0b: 0a:bb:35:d9:63:f6:c7:39:e9:ae:c1:8f:3c:46:54: 6b:b4:d5:af:3c:6b:53:32:f3:4a:6d:e4:f7:23:cb: 43:45:96:dd:98:85:9b:82:c9:4d:b0:d2:99:bf:82: 6e:74:a1:9b:e6:0a:2e:16:7f:6f:3a:c8:96:eb:5b: 6d:d9:cd:1c:5a:05:c0:e2:12:ed:b6:f8:91:60:08: d4:91:d8:6a:e7:84:b9:55:0a:eb:0e:ba:17:7f:b4: 42:17:ae:cb:85:20:d7:bc:1d:e9:39:ed:38:ab:ae: 17:37:fe:da:7d:0e:9d:d5:4b:f6:3d:25:ba:07:d4: 8e:3e:50:26:e1:47:00:c2:ab:17:77:1b:fa:e2:d8: 83:03:a3:48:7c:70:42:51:be:02:35:a2:5b:fc:2c: e4:15:3d:e1:f8:19:2d:c7:5f:d5:ac:07:fe:62:5b: 0e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2A:0D:DC:55:F7:80:56:18:71:6E:9A:13:2A:E9:4B:ED:25:93:34 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e/4459412c-6bf5-4e2d-90d9-4d8ec5cd3d0e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 162.212.136.0/21 199.242.223.0/24 IPv6: 2606:fbc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14749 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:31:e0:fd:38:39:e2:87:bf:78:09:35:e3:ec:77:dc:ee:21: cb:4d:94:bf:5e:f9:a4:50:ce:52:46:b4:71:56:e0:e4:76:6a: 6f:c5:34:da:5a:92:2e:64:44:b3:e2:3a:9b:3f:76:f7:d6:0c: 44:9d:27:ad:61:cc:b3:d1:aa:ff:87:19:6f:4e:e8:e1:e6:f4: d6:db:03:63:fe:65:1f:14:d2:e7:92:22:36:02:b9:4f:f2:13: 7a:ca:db:d9:5b:11:ac:27:c3:e3:4e:1e:59:d4:1c:a4:3b:aa: bf:58:38:e9:98:53:69:0b:79:08:18:9e:2f:3c:cd:03:50:c4: fc:f8:fd:3b:b0:9d:ad:6e:dd:5a:d7:6f:ff:6e:69:d3:da:8f: ed:87:f7:91:6c:82:a8:6e:58:18:05:33:43:6f:51:58:82:db: ef:96:9b:5b:7d:e3:cb:38:37:33:a1:68:b4:65:b1:cf:22:25: f9:0b:36:22:a3:e6:66:58:1c:67:fe:20:ce:bd:6c:76:41:91: 57:c5:22:da:71:7e:91:1a:a1:bf:60:e0:6a:0a:bc:ed:4f:4e: 2d:21:02:c4:c8:7d:36:65:84:91:e8:2a:83:e6:e2:47:79:a3: 82:f8:08:60:61:17:50:dd:73:07:a6:85:37:10:90:d9:d5:18: 16:7b:f1:5e -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE9IBbpnF74PI+4wjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkyNDEyNDUxMVoXDTI4MTIyNzEzNDUxMVowLzEtMCsGA1UEAxMk NDQ1OTQxMmMtNmJmNS00ZTJkLTkwZDktNGQ4ZWM1Y2QzZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s39fx4MqvlUJE0ft28496noHyrd6KlkZDoT uEdp7yI0P7RXaIO5ecLfVJ23Dn7Xarlw1ol99ZgyoCG57SFFoDwBRWKNAc2SMBxR 55hNA2ENVW4hFgv5HAsKuzXZY/bHOemuwY88RlRrtNWvPGtTMvNKbeT3I8tDRZbd mIWbgslNsNKZv4JudKGb5gouFn9vOsiW61tt2c0cWgXA4hLttviRYAjUkdhq54S5 VQrrDroXf7RCF67LhSDXvB3pOe04q64XN/7afQ6d1Uv2PSW6B9SOPlAm4UcAwqsX dxv64tiDA6NIfHBCUb4CNaJb/CzkFT3h+Bktx1/VrAf+YlsOhwIDAQABo4IELzCC BCswHQYDVR0OBBYEFNUqDdxV94BWGHFumhMq6UvtJZM0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 NDU5NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhlYzVjZDNkMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ0NTk0MTJjLTZiZjUtNGUyZC05 MGQ5LTRkOGVjNWNkM2QwZS80NDU5NDEyYy02YmY1LTRlMmQtOTBkOS00ZDhlYzVj ZDNkMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAOi1IgDBADH8t8wDQQCAAIwBwMFACYG+8AwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICOZ0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAzHg/Tg54oe/eAk14+x3 3O4hy02Uv175pFDOUka0cVbg5HZqb8U02lqSLmREs+I6mz9299YMRJ0nrWHMs9Gq /4cZb07o4eb01tsDY/5lHxTS55IiNgK5T/ITesrb2VsRrCfD404eWdQcpDuqv1g4 6ZhTaQt5CBieLzzNA1DE/Pj9O7CdrW7dWtdv/25p09qP7Yf3kWyCqG5YGAUzQ29R WILb75abW33jyzg3M6FotGWxzyIl+Qs2IqPmZlgcZ/4gzr1sdkGRV8Ui2nF+kRqh v2Dgagq87U9OLSECxMh9NmWEkegqg+biR3mjgvgIYGEXUN1zB6aFNxCQ2dUYFnvx Xg== -----END CERTIFICATE-----Generated at Sun Sep 27 14:06:37 2026 by rpki-client