$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc.cer File: 4b2ad884-5960-46cd-bf60-910c222c8cfc.cer (raw, json) Hash identifier: XXalw/4SMljj3xnM3F1Nv2cRT71ZsGFkTmSMK4PZN8k= Subject key identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D2D37CD6D7A2B021989954280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Mar 2026 12:45:23 +0000 Certificate not after: Sat 17 Jun 2028 12:45:23 +0000 Subordinate resources: IP: 204.19.42.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:37:cd:6d:7a:2b:02:19:89:95:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 15 12:45:23 2026 GMT Not After : Jun 17 12:45:23 2028 GMT Subject: CN=4b2ad884-5960-46cd-bf60-910c222c8cfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2e:1c:16:5e:e9:8b:88:d2:48:8c:dc:8e:c0: 91:b7:8f:12:f7:fc:ab:64:f6:1c:38:c6:c8:7c:6f: e8:d4:f9:ad:d7:41:34:a5:17:a1:b4:b7:1f:2b:96: ed:8c:4c:d3:3c:9e:5c:71:f0:5d:b1:48:b9:f4:16: 5d:e9:53:14:ac:d7:6a:85:a5:28:93:8d:df:e1:a2: ab:61:cc:c4:36:e3:fa:be:23:d0:92:f0:94:a1:e5: 13:59:9c:d7:f4:78:52:f2:31:c5:bc:d6:5a:9f:b2: 9e:dc:17:bd:96:72:1b:60:67:47:c7:bc:5e:2d:c8: 19:38:04:c7:47:60:bd:32:b8:b1:51:b1:17:78:6a: 19:f1:85:b4:33:21:db:e1:17:b2:2c:2b:6a:7f:d9: 79:72:ab:06:31:de:e8:c0:e0:88:af:92:90:3a:d7: 78:b0:e5:79:2c:9a:43:de:b0:3e:80:d7:2e:da:38: 96:1b:29:ec:4d:bd:a3:97:a4:31:d9:8c:ce:72:7b: 36:89:8e:f6:88:c4:ea:01:75:9e:52:a9:a3:0d:ba: a7:5a:8a:0c:1a:b6:d4:69:c8:ad:9b:b7:df:c4:23: e4:f9:ae:dc:4c:c4:d0:75:14:e1:4c:b3:dc:f1:04: da:40:0a:85:a1:81:d2:b7:91:12:84:4d:f0:1c:d6: 49:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6E:8F:38:F6:0D:E5:AE:A9:FC:82:8E:9F:82:C6:52:BF:D9:F1:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4b2ad884-5960-46cd-bf60-910c222c8cfc/4b2ad884-5960-46cd-bf60-910c222c8cfc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.19.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:99:ae:9a:81:ab:2f:34:0c:ac:49:10:cd:88:75:da:b2:19: 4b:bd:ab:92:4c:40:88:98:a4:97:5c:c7:ff:6e:1e:75:0b:86: 0a:ec:35:c6:40:66:d0:43:c6:d8:96:09:82:8b:f6:59:1f:06: da:2d:72:9f:57:c3:5c:2d:41:2d:8c:6a:ac:4b:48:36:0f:a6: df:64:d4:47:c8:cc:ad:0f:12:f6:92:72:12:3b:1f:ed:81:55: 2a:f1:d9:56:9d:66:ee:ca:88:9e:73:01:8f:a1:4f:02:cc:54: 41:84:fe:b3:89:8c:3f:be:f1:59:41:1a:41:8c:ec:2a:75:49: f6:05:4c:94:a8:3d:17:75:6c:1d:39:fb:c1:07:47:94:79:15: f0:65:e8:b0:ea:91:f5:1b:95:8f:64:51:7f:28:cc:06:8c:9a: 29:6d:6b:5f:25:be:ee:17:f2:a8:ec:bb:47:41:f7:19:c1:f2: eb:d4:f3:40:dc:49:b7:9c:22:14:46:05:15:1c:d0:21:13:54: 4d:f9:23:5f:9f:b9:5c:d8:08:b5:3b:dc:8f:17:6f:8c:88:76: b0:cd:c3:bf:af:de:e7:c3:21:d3:a0:be:54:1f:a0:97:ff:7d: e8:55:55:e9:21:08:b4:de:e0:ea:e0:4b:7f:69:f9:00:78:d6: ee:ce:95:bb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0tN81teisCGYmVQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxNTEyNDUyM1oXDTI4MDYxNzEyNDUyM1owLzEtMCsGA1UEAxMk NGIyYWQ4ODQtNTk2MC00NmNkLWJmNjAtOTEwYzIyMmM4Y2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy4cFl7pi4jSSIzcjsCRt48S9/yrZPYcOMbI fG/o1Pmt10E0pRehtLcfK5btjEzTPJ5ccfBdsUi59BZd6VMUrNdqhaUok43f4aKr YczENuP6viPQkvCUoeUTWZzX9HhS8jHFvNZan7Ke3Be9lnIbYGdHx7xeLcgZOATH R2C9MrixUbEXeGoZ8YW0MyHb4ReyLCtqf9l5cqsGMd7owOCIr5KQOtd4sOV5LJpD 3rA+gNcu2jiWGynsTb2jl6Qx2YzOcns2iY72iMTqAXWeUqmjDbqnWooMGrbUacit m7ffxCPk+a7cTMTQdRThTLPc8QTaQAqFoYHSt5EShE3wHNZJGQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDlujzj2DeWuqfyCjp+CxlK/2fGCMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIyYzhjZmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRiMmFkODg0LTU5NjAtNDZjZC1i ZjYwLTkxMGMyMjJjOGNmYy80YjJhZDg4NC01OTYwLTQ2Y2QtYmY2MC05MTBjMjIy YzhjZmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADMEyowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQJmumoGrLzQMrEkQzYh1 2rIZS72rkkxAiJikl1zH/24edQuGCuw1xkBm0EPG2JYJgov2WR8G2i1yn1fDXC1B LYxqrEtINg+m32TUR8jMrQ8S9pJyEjsf7YFVKvHZVp1m7sqInnMBj6FPAsxUQYT+ s4mMP77xWUEaQYzsKnVJ9gVMlKg9F3VsHTn7wQdHlHkV8GXosOqR9RuVj2RRfyjM BoyaKW1rXyW+7hfyqOy7R0H3GcHy69TzQNxJt5wiFEYFFRzQIRNUTfkjX5+5XNgI tTvcjxdvjIh2sM3Dv6/e58Mh06C+VB+gl/996FVV6SEItN7g6uBLf2n5AHjW7s6V uw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:19:17 2026 by rpki-client