$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6e95e3b8-3c45-40f3-a9e9-1224d46917b7.cer File: 6e95e3b8-3c45-40f3-a9e9-1224d46917b7.cer (raw, json) Hash identifier: 5K24yiCUra3Xbw+NN+whznwV86EWJzk/XqWenCCRRJk= Subject key identifier: 6A:F0:EB:1A:AE:4F:A2:27:68:90:92:C4:79:B1:BC:BD:2A:C3:29:66 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584DCCE7A02BEAD95508EBE8E480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6e95e3b8-3c45-40f3-a9e9-1224d46917b7/6e95e3b8-3c45-40f3-a9e9-1224d46917b7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6e95e3b8-3c45-40f3-a9e9-1224d46917b7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 17:33:11 +0000 Certificate not after: Sun 13 Aug 2028 17:33:11 +0000 Subordinate resources: AS: 399286 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:e7:a0:2b:ea:d9:55:08:eb:e8:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 11 17:33:11 2026 GMT Not After : Aug 13 17:33:11 2028 GMT Subject: CN=6e95e3b8-3c45-40f3-a9e9-1224d46917b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:fe:58:4b:5c:6e:59:1c:e9:54:12:28:11: 0b:36:5c:5e:d5:64:05:4e:1f:92:e7:82:f4:76:77: dc:8a:42:64:b5:00:4b:19:28:75:6c:b6:c1:b6:20: a9:a1:81:9b:35:02:3e:b3:91:5c:c8:89:ed:05:e5: 7b:0b:c1:a7:91:16:44:53:85:d0:7c:99:44:97:b4: df:2c:ec:17:bf:28:d0:e1:61:35:ed:44:0f:fc:fb: 53:ad:70:ac:d8:43:4a:9e:d5:f5:97:a4:83:a1:e2: 84:11:da:6c:b5:56:41:5d:fe:29:7b:57:0d:5f:2f: 64:6e:c9:80:b5:8a:1b:2d:95:f0:df:af:20:05:ef: ea:27:9a:ac:50:82:27:f6:51:4f:68:cc:8e:f2:f8: 23:8d:8e:fe:e3:94:5d:35:cb:ab:77:06:1e:02:ba: 99:d6:bd:71:63:0c:08:7b:75:0e:c7:59:7c:a1:f5: 7e:ed:ff:5f:06:e7:69:69:46:ac:8b:29:0b:17:12: e2:09:92:25:48:d0:f9:83:ac:96:77:e6:fb:2a:92: cd:3c:94:80:f7:8d:48:b8:09:12:93:2a:8a:87:8c: 7b:ec:f1:26:08:c5:5e:4b:ce:96:d5:ff:15:af:28: fa:05:d9:e5:07:f1:ab:2d:cd:c1:bc:99:78:0f:8e: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F0:EB:1A:AE:4F:A2:27:68:90:92:C4:79:B1:BC:BD:2A:C3:29:66 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6e95e3b8-3c45-40f3-a9e9-1224d46917b7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6e95e3b8-3c45-40f3-a9e9-1224d46917b7/6e95e3b8-3c45-40f3-a9e9-1224d46917b7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 399286 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b0:82:58:84:02:8e:f4:ed:df:21:01:d5:b3:e2:9c:5b:a7: 48:a0:9e:a4:c1:6c:f9:d6:28:88:ea:5a:f1:3f:f5:ce:06:33: 30:13:28:57:62:d6:6e:2d:88:98:57:39:ff:08:cc:68:f5:20: cf:45:40:ad:27:bc:f1:2a:bd:e0:03:85:52:69:b7:ad:ae:fd: 29:6d:c4:f9:ff:d4:14:14:bc:58:ff:2e:37:09:bb:9a:af:99: b6:48:1f:29:45:55:4c:43:52:9d:f4:7d:f2:b6:4c:66:c2:74: aa:dd:0f:1d:e1:f5:6c:14:20:59:30:0b:72:80:e7:dc:2f:55: 0d:c8:47:0a:31:52:71:2b:61:70:6a:34:c4:51:d5:ea:42:a2: 9f:6c:60:b4:25:33:37:f8:12:f4:bf:4f:97:be:2b:3c:f5:26: e1:97:07:c9:7e:0d:48:3b:14:d2:f5:35:51:20:cb:b3:5d:00: 18:da:28:32:52:2a:32:b2:03:eb:ec:a9:3f:40:93:32:e4:ca: 76:8a:be:0d:4b:eb:60:80:aa:ca:76:49:18:bc:88:b6:df:0c: b4:e6:6a:7a:91:18:c2:95:b3:e6:45:1e:81:a9:f5:ec:8e:43: 17:de:c0:55:cf:69:9a:44:d4:39:70:90:f4:81:07:3b:be:d4: 59:aa:c8:44 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWE3M56Ar6tlVCOvo5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDUxMTE3MzMxMVoXDTI4MDgxMzE3MzMxMVowLzEtMCsGA1UEAxMk NmU5NWUzYjgtM2M0NS00MGYzLWE5ZTktMTIyNGQ0NjkxN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7X+WEtcblkc6VQSKBELNlxe1WQFTh+S54L0 dnfcikJktQBLGSh1bLbBtiCpoYGbNQI+s5FcyIntBeV7C8GnkRZEU4XQfJlEl7Tf LOwXvyjQ4WE17UQP/PtTrXCs2ENKntX1l6SDoeKEEdpstVZBXf4pe1cNXy9kbsmA tYobLZXw368gBe/qJ5qsUIIn9lFPaMyO8vgjjY7+45RdNcurdwYeArqZ1r1xYwwI e3UOx1l8ofV+7f9fBudpaUasiykLFxLiCZIlSND5g6yWd+b7KpLNPJSA941IuAkS kyqKh4x77PEmCMVeS86W1f8Vryj6BdnlB/GrLc3BvJl4D452uQIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFGrw6xquT6InaJCSxHmxvL0qwylmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 ZTk1ZTNiOC0zYzQ1LTQwZjMtYTllOS0xMjI0ZDQ2OTE3YjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZlOTVlM2I4LTNjNDUtNDBmMy1h OWU5LTEyMjRkNDY5MTdiNy82ZTk1ZTNiOC0zYzQ1LTQwZjMtYTllOS0xMjI0ZDQ2 OTE3YjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhe2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADCwgliEAo707d8hAdWz4pxbp0ig nqTBbPnWKIjqWvE/9c4GMzATKFdi1m4tiJhXOf8IzGj1IM9FQK0nvPEqveADhVJp t62u/SltxPn/1BQUvFj/LjcJu5qvmbZIHylFVUxDUp30ffK2TGbCdKrdDx3h9WwU IFkwC3KA59wvVQ3IRwoxUnErYXBqNMRR1epCop9sYLQlMzf4EvS/T5e+Kzz1JuGX B8l+DUg7FNL1NVEgy7NdABjaKDJSKjKyA+vsqT9AkzLkynaKvg1L62CAqsp2SRi8 iLbfDLTmanqRGMKVs+ZFHoGp9eyOQxfewFXPaZpE1DlwkPSBBzu+1FmqyEQ= -----END CERTIFICATE-----Generated at Wed May 13 05:25:22 2026 by rpki-client