$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1.cer File: 67b004e8-3b23-4f9d-9325-beac85825fe1.cer (raw, json) Hash identifier: jahDnHXpeirJnlyRN+qqEs/U4vMrFSrytBb0UuckOeM= Subject key identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D1F42603DD902652B5FB40640 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 12:45:22 +0000 Certificate not after: Mon 12 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 22224 IP: 23.187.128.0/24 IP: 207.174.168.0/22 IP: 2602:fed6::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:42:60:3d:d9:02:65:2b:5f:b4:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 10 12:45:22 2026 GMT Not After : Jun 12 12:45:22 2028 GMT Subject: CN=67b004e8-3b23-4f9d-9325-beac85825fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d6:e5:e7:ea:93:bc:f8:75:5d:a2:4c:b5:bc: b9:af:a4:01:a9:79:60:d6:1d:40:43:60:91:36:ed: 96:6a:75:e5:fe:5b:04:6d:e0:a9:ce:31:6e:f6:3c: d7:43:e9:c9:26:20:49:1b:6b:43:fb:08:24:d0:0c: 76:3b:d6:05:e1:f3:46:ce:9c:f1:2b:dc:72:80:6b: 41:25:49:9f:34:77:a8:64:2e:d1:e6:ac:a1:59:3f: 19:77:a0:43:34:5e:a2:69:c8:e7:5c:05:b9:21:20: d0:0e:0b:b5:53:d1:a4:cf:60:a6:c6:54:a0:f6:57: 40:e9:05:a6:b1:fe:2d:40:dd:53:e9:c9:bd:ac:d2: 66:97:43:ce:73:54:3e:ef:29:43:ab:99:ed:58:e0: 4d:24:82:31:28:5c:97:ec:84:9e:48:81:91:86:06: 83:86:0d:6e:a6:24:d3:0b:d7:eb:1b:1b:e6:f1:44: f3:fb:d5:c2:38:c4:ee:95:3c:4b:64:f2:a3:06:c4: 88:6d:1a:94:bb:67:32:02:82:82:26:28:3e:dd:dd: 93:ca:b2:01:53:ae:b5:88:a5:3d:cc:e8:dd:b8:3a: 79:f9:1c:f4:c6:1e:2b:e6:2b:2d:03:9a:76:1b:5b: 37:50:cb:91:49:1c:9a:bb:4d:4b:02:e0:99:72:d3: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5C:90:FA:C0:AD:7B:2D:7E:B6:C5:F4:B3:55:90:F2:65:1C:FE:AE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/67b004e8-3b23-4f9d-9325-beac85825fe1/67b004e8-3b23-4f9d-9325-beac85825fe1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.187.128.0/24 207.174.168.0/22 IPv6: 2602:fed6::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22224 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d2:d0:46:56:ed:a2:c3:c8:eb:d6:c0:3e:ed:d3:22:7e:2f: 73:3a:31:6b:e2:e1:87:2e:8a:b5:f4:ae:95:38:40:1c:03:e2: c1:46:5f:dc:84:d9:b6:41:42:be:64:8d:29:46:8e:3a:42:62: c7:25:13:2f:bb:32:91:f8:7c:0d:92:2f:0e:eb:75:a6:dc:6e: 1a:37:3b:c9:6f:72:04:1a:b5:22:1d:0c:e0:92:74:0f:d9:2e: 13:c8:80:73:77:2f:7a:10:18:07:6d:5d:28:fb:28:2c:ae:7a: cb:34:05:74:72:68:23:b5:b6:8a:56:ba:dd:a7:0f:33:53:5b: d2:60:81:37:bc:2c:fc:46:a1:d5:22:91:c4:b3:17:69:ef:a3: 32:24:ca:9c:e4:3b:db:8e:c6:6c:85:9a:aa:c6:7a:20:3b:82: 1a:62:29:67:fe:63:af:ff:3b:74:39:96:27:a2:eb:33:ad:4c: 6f:94:6e:31:ab:df:59:c9:61:7d:8c:44:36:40:b8:5f:96:83: 17:be:25:09:19:c4:ef:d9:51:d8:78:e3:9a:8e:40:7c:27:26: 31:13:ac:ac:50:97:3b:58:b2:39:94:a0:e6:6b:5c:ae:71:94: 93:31:b0:6e:e2:5c:a5:eb:0c:f0:0f:05:ee:cd:72:27:3b:85: 86:8a:9d:c1 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE0fQmA92QJlK1+0BkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxMDEyNDUyMloXDTI4MDYxMjEyNDUyMlowLzEtMCsGA1UEAxMk NjdiMDA0ZTgtM2IyMy00ZjlkLTkzMjUtYmVhYzg1ODI1ZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtbl5+qTvPh1XaJMtby5r6QBqXlg1h1AQ2CR Nu2WanXl/lsEbeCpzjFu9jzXQ+nJJiBJG2tD+wgk0Ax2O9YF4fNGzpzxK9xygGtB JUmfNHeoZC7R5qyhWT8Zd6BDNF6iacjnXAW5ISDQDgu1U9Gkz2CmxlSg9ldA6QWm sf4tQN1T6cm9rNJml0POc1Q+7ylDq5ntWOBNJIIxKFyX7ISeSIGRhgaDhg1upiTT C9frGxvm8UTz+9XCOMTulTxLZPKjBsSIbRqUu2cyAoKCJig+3d2TyrIBU661iKU9 zOjduDp5+Rz0xh4r5istA5p2G1s3UMuRSRyau01LAuCZctPJjwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFEBckPrArXstfrbF9LNVkPJlHP6uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4MjVmZTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzY3YjAwNGU4LTNiMjMtNGY5ZC05 MzI1LWJlYWM4NTgyNWZlMS82N2IwMDRlOC0zYjIzLTRmOWQtOTMyNS1iZWFjODU4 MjVmZTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXu4ADBALPrqgwDgQCAAIwCAMGBCYC/tYAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAlbQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEbS0EZW7aLDyOvWwD7t 0yJ+L3M6MWvi4YcuirX0rpU4QBwD4sFGX9yE2bZBQr5kjSlGjjpCYsclEy+7MpH4 fA2SLw7rdabcbho3O8lvcgQatSIdDOCSdA/ZLhPIgHN3L3oQGAdtXSj7KCyuess0 BXRyaCO1topWut2nDzNTW9JggTe8LPxGodUikcSzF2nvozIkypzkO9uOxmyFmqrG eiA7ghpiKWf+Y6//O3Q5liei6zOtTG+UbjGr31nJYX2MRDZAuF+Wgxe+JQkZxO/Z Udh445qOQHwnJjETrKxQlztYsjmUoOZrXK5xlJMxsG7iXKXrDPAPBe7Ncic7hYaK ncE= -----END CERTIFICATE-----Generated at Wed Mar 25 23:24:00 2026 by rpki-client