$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/655bc1f8-69e8-49f7-96cf-c7ac7987cd82.cer File: 655bc1f8-69e8-49f7-96cf-c7ac7987cd82.cer (raw, json) Hash identifier: r8EeP7jj7l/G9yg21lO1wTpHB7ZVhHylqzVksE8E5rU= Subject key identifier: 80:7B:A6:55:69:1C:81:67:ED:C9:54:90:15:7D:46:3D:27:84:5A:A1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D0BD55F88DD9BD670BDDAF400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/655bc1f8-69e8-49f7-96cf-c7ac7987cd82/655bc1f8-69e8-49f7-96cf-c7ac7987cd82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/655bc1f8-69e8-49f7-96cf-c7ac7987cd82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Mar 2026 13:45:23 +0000 Certificate not after: Mon 05 Jun 2028 12:45:23 +0000 Subordinate resources: AS: 22150 IP: 199.119.236.0/22 IP: 199.204.132.0/22 IP: 204.110.52.0/22 IP: 208.87.0.0/22 IP: 2602:fd06::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:d5:5f:88:dd:9b:d6:70:bd:da:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 3 13:45:23 2026 GMT Not After : Jun 5 12:45:23 2028 GMT Subject: CN=655bc1f8-69e8-49f7-96cf-c7ac7987cd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:48:d9:a5:54:0a:e4:1c:e2:41:af:b4:ad:f2: 32:ee:a8:ba:94:48:2c:4f:31:dc:2a:79:88:ef:fb: da:60:fc:34:cc:60:0d:3d:54:73:48:74:7d:50:31: bd:31:5b:61:21:0c:2a:e4:1c:67:2e:91:3e:75:0b: cc:8b:f3:57:5e:4e:98:e6:1d:7c:e7:23:ac:ce:4b: f7:8d:ec:27:20:61:c5:04:58:ef:b6:17:52:ea:8b: 87:bf:90:5d:4f:aa:4d:15:12:53:ef:91:ab:ba:6a: 1d:b6:6b:04:c4:bb:52:a5:49:6e:44:a7:5b:83:64: ba:e9:d6:b7:15:49:db:0a:2a:8a:56:1d:2d:28:92: 37:e8:25:76:f3:ed:1b:6c:49:6b:86:b2:b8:77:c2: 46:03:6f:02:88:be:08:3d:e3:b4:26:d3:de:28:4a: 57:9d:52:f1:f9:e0:ce:21:17:f8:39:2f:17:a0:91: f1:ab:04:3b:08:e2:59:08:1b:0b:63:51:88:71:6f: a7:f6:f9:5a:ff:3b:bf:29:21:ed:12:0e:cc:3e:cc: 93:2a:eb:be:7c:c3:8a:ee:d3:14:db:12:e9:57:4b: 2b:e0:be:25:ad:fc:e1:dc:ca:18:ff:0a:e5:74:8b: e1:07:ad:9d:c1:ce:e7:47:39:35:af:5a:a1:34:18: ea:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7B:A6:55:69:1C:81:67:ED:C9:54:90:15:7D:46:3D:27:84:5A:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/655bc1f8-69e8-49f7-96cf-c7ac7987cd82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/655bc1f8-69e8-49f7-96cf-c7ac7987cd82/655bc1f8-69e8-49f7-96cf-c7ac7987cd82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 199.119.236.0/22 199.204.132.0/22 204.110.52.0/22 208.87.0.0/22 IPv6: 2602:fd06::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22150 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:93:f1:6c:6e:10:75:e3:58:2e:74:7a:71:0a:49:b3:a4:bf: ad:06:9d:b7:8b:2b:34:09:44:33:d7:c0:e7:9c:89:62:95:0f: 64:82:5c:65:28:8c:89:7e:ee:a3:9f:c8:89:08:59:33:c6:bc: cc:f9:33:b8:9a:5d:43:0c:a7:2d:eb:f8:9e:39:02:92:e8:8d: 21:7b:75:fd:f1:bc:15:44:c6:d4:c4:a1:d8:0c:cd:06:23:36: ec:a1:ab:c5:64:52:d9:e1:c9:0b:0b:b7:e2:f0:01:85:94:a2: 10:29:7d:9e:51:a9:a7:01:ca:4b:f7:86:57:7b:49:28:a1:46: 85:19:48:d3:b0:b0:a0:ef:ee:28:d8:ee:4d:eb:5f:00:4d:9a: 69:4f:ab:f6:e9:d4:38:55:f9:c1:d5:6c:b7:b0:f4:aa:1c:02: b7:0e:ee:c6:26:82:d3:9f:05:7f:78:65:14:6f:4e:c0:82:9e: d3:90:06:d7:11:dc:7b:f8:36:1f:c8:15:2a:c7:88:73:af:f8: 34:90:3d:84:92:ac:f1:4a:f0:f3:75:33:f5:37:d8:22:28:e3: b2:b5:51:14:90:39:0d:22:1b:9f:9f:23:52:05:97:f8:c0:14: fe:ee:34:e6:b5:93:41:ab:51:83:af:0c:5b:83:35:2e:b4:51: b9:a6:c9:3d -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWE0L1V+I3ZvWcL3a9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMwMzEzNDUyM1oXDTI4MDYwNTEyNDUyM1owLzEtMCsGA1UEAxMk NjU1YmMxZjgtNjllOC00OWY3LTk2Y2YtYzdhYzc5ODdjZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkjZpVQK5BziQa+0rfIy7qi6lEgsTzHcKnmI 7/vaYPw0zGANPVRzSHR9UDG9MVthIQwq5BxnLpE+dQvMi/NXXk6Y5h185yOszkv3 jewnIGHFBFjvthdS6ouHv5BdT6pNFRJT75GrumodtmsExLtSpUluRKdbg2S66da3 FUnbCiqKVh0tKJI36CV28+0bbElrhrK4d8JGA28CiL4IPeO0JtPeKEpXnVLx+eDO IRf4OS8XoJHxqwQ7COJZCBsLY1GIcW+n9vla/zu/KSHtEg7MPsyTKuu+fMOK7tMU 2xLpV0sr4L4lrfzh3MoY/wrldIvhB62dwc7nRzk1r1qhNBjquwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFIB7plVpHIFn7clUkBV9Rj0nhFqhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 NTViYzFmOC02OWU4LTQ5ZjctOTZjZi1jN2FjNzk4N2NkODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY1NWJjMWY4LTY5ZTgtNDlmNy05 NmNmLWM3YWM3OTg3Y2Q4Mi82NTViYzFmOC02OWU4LTQ5ZjctOTZjZi1jN2FjNzk4 N2NkODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBALHd+wDBALHzIQDBALMbjQDBALQVwAwDgQCAAIw CAMGBCYC/QYAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAlaGMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIeT 8WxuEHXjWC50enEKSbOkv60GnbeLKzQJRDPXwOeciWKVD2SCXGUojIl+7qOfyIkI WTPGvMz5M7iaXUMMpy3r+J45ApLojSF7df3xvBVExtTEodgMzQYjNuyhq8VkUtnh yQsLt+LwAYWUohApfZ5RqacBykv3hld7SSihRoUZSNOwsKDv7ijY7k3rXwBNmmlP q/bp1DhV+cHVbLew9KocArcO7sYmgtOfBX94ZRRvTsCCntOQBtcR3Hv4Nh/IFSrH iHOv+DSQPYSSrPFK8PN1M/U32CIo47K1URSQOQ0iG5+fI1IFl/jAFP7uNOa1k0Gr UYOvDFuDNS60UbmmyT0= -----END CERTIFICATE-----Generated at Sat Mar 28 12:13:13 2026 by rpki-client