$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1.cer File: 5de35d89-662a-401a-a494-7d5da6facae1.cer (raw, json) Hash identifier: KUIqgCkuOEf1ADrXAFdkRwY4RyyiP+8vK5wRQD+i8PM= Subject key identifier: 82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584DBE635392C9A06E47ADB85400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 12:45:17 +0000 Certificate not after: Tue 08 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 3833 IP: 204.227.192.0/19 IP: 206.54.64.0/18 IP: 216.67.128.0/18 IP: 2604:1300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:63:53:92:c9:a0:6e:47:ad:b8:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 6 12:45:17 2026 GMT Not After : Aug 8 12:45:17 2028 GMT Subject: CN=5de35d89-662a-401a-a494-7d5da6facae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:9d:61:60:00:1d:2a:fb:45:af:df:a4:23: 40:63:f7:f8:a9:86:a8:7d:8e:e5:b5:47:a9:29:c1: 63:37:99:a4:65:2a:79:df:a7:83:28:12:fd:c1:e8: 65:f0:52:82:94:86:e7:5f:70:40:6f:f2:59:60:fd: f7:30:75:74:ca:61:7e:ce:89:14:df:25:c0:fb:0c: 4f:65:bb:c8:af:99:35:ae:6b:d5:a3:8b:3c:98:bc: 68:33:51:21:5f:74:23:e7:98:9d:98:e2:3f:17:65: 98:86:c7:6d:16:97:5c:bd:80:a2:29:a1:10:24:56: 33:6e:ac:60:4b:4a:a3:3a:f8:c9:47:a0:87:a1:0d: ac:2b:e9:d6:e2:2e:77:28:21:17:c2:69:a1:2f:ea: 9b:3c:f0:9a:df:ef:38:27:58:a2:8a:d1:ed:ca:65: f4:a4:b3:35:c1:89:2f:cb:79:23:9a:82:4c:ba:b9: 70:33:62:5a:32:00:8d:2b:a6:2f:c1:91:d7:9c:24: 83:c7:0d:e6:97:86:eb:d9:0d:d0:99:40:f4:53:51: d2:55:20:19:4e:ad:3b:7c:68:8d:5d:ae:0e:3c:a4: ce:85:74:d6:49:7f:ec:0b:d7:bd:b9:2b:02:f9:7d: b0:99:bc:0e:16:40:af:dc:2d:d4:5f:da:3b:52:e2: 00:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:C2:14:32:47:64:53:0A:2A:10:B1:B2:91:5A:E2:83:9D:40:66:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5de35d89-662a-401a-a494-7d5da6facae1/5de35d89-662a-401a-a494-7d5da6facae1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.227.192.0/19 206.54.64.0/18 216.67.128.0/18 IPv6: 2604:1300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 3833 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:7c:61:6c:ba:65:01:e0:8d:b4:fc:c5:eb:92:4e:1b:4f:5a: 43:76:ef:63:a1:42:21:a6:5f:db:6d:3a:17:6e:08:44:38:43: 6a:4c:65:49:4e:2a:b9:e6:b4:a7:cc:3d:13:03:02:a7:79:89: 60:8e:43:d6:16:4c:79:bd:f6:b9:05:4c:18:bc:bd:c8:a8:fb: d7:a5:fa:87:6a:ca:89:d2:42:b3:41:ad:ef:b4:c8:4e:f0:8f: fb:c9:de:70:6b:2d:02:3c:ce:37:8d:84:f5:ac:87:3f:34:5c: fa:07:bb:eb:9e:e9:af:b8:66:f0:95:8d:c1:c5:80:68:9e:29: 39:f4:aa:85:1d:15:60:e5:d9:d9:90:01:ee:5d:5b:41:ed:c3: c8:8e:05:0c:38:09:b0:4e:d9:19:c1:be:ff:58:08:4d:ca:40: 03:d4:92:9a:e5:15:03:f2:81:e4:3a:53:92:8c:70:d6:a0:a7: 70:a6:0e:e1:cc:e8:9e:8f:91:60:84:34:de:0a:df:f2:c2:26: ac:c7:a6:b4:c4:b2:39:ec:d3:4f:87:95:b7:a8:dc:8e:db:7b: 4a:11:8c:e5:12:64:7a:1d:0a:88:cb:d5:72:90:47:97:a1:8f: 53:92:ae:f9:4d:52:bd:0c:ea:44:e9:4b:a3:6a:69:8b:3d:1b: f2:29:3c:d9 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE2+Y1OSyaBuR624VAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDUwNjEyNDUxN1oXDTI4MDgwODEyNDUxN1owLzEtMCsGA1UEAxMk NWRlMzVkODktNjYyYS00MDFhLWE0OTQtN2Q1ZGE2ZmFjYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW2dYWAAHSr7Ra/fpCNAY/f4qYaofY7ltUep KcFjN5mkZSp536eDKBL9wehl8FKClIbnX3BAb/JZYP33MHV0ymF+zokU3yXA+wxP ZbvIr5k1rmvVo4s8mLxoM1EhX3Qj55idmOI/F2WYhsdtFpdcvYCiKaEQJFYzbqxg S0qjOvjJR6CHoQ2sK+nW4i53KCEXwmmhL+qbPPCa3+84J1iiitHtymX0pLM1wYkv y3kjmoJMurlwM2JaMgCNK6YvwZHXnCSDxw3ml4br2Q3QmUD0U1HSVSAZTq07fGiN Xa4OPKTOhXTWSX/sC9e9uSsC+X2wmbwOFkCv3C3UX9o7UuIAQwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFILCFDJHZFMKKhCxspFa4oOdQGbdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 ZGUzNWQ4OS02NjJhLTQwMWEtYTQ5NC03ZDVkYTZmYWNhZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzVkZTM1ZDg5LTY2MmEtNDAxYS1h NDk0LTdkNWRhNmZhY2FlMS81ZGUzNWQ4OS02NjJhLTQwMWEtYTQ5NC03ZDVkYTZm YWNhZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAXM48ADBAbONkADBAbYQ4AwDQQCAAIwBwMFACYE EwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICDvkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASXxhbLplAeCN tPzF65JOG09aQ3bvY6FCIaZf2206F24IRDhDakxlSU4quea0p8w9EwMCp3mJYI5D 1hZMeb32uQVMGLy9yKj716X6h2rKidJCs0Gt77TITvCP+8necGstAjzON42E9ayH PzRc+ge7657pr7hm8JWNwcWAaJ4pOfSqhR0VYOXZ2ZAB7l1bQe3DyI4FDDgJsE7Z GcG+/1gITcpAA9SSmuUVA/KB5DpTkoxw1qCncKYO4czono+RYIQ03grf8sImrMem tMSyOezTT4eVt6jcjtt7ShGM5RJkeh0KiMvVcpBHl6GPU5Ku+U1SvQzqROlLo2pp iz0b8ik82Q== -----END CERTIFICATE-----Generated at Tue May 12 21:37:24 2026 by rpki-client