$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer File: 74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer (raw, json) Hash identifier: 4AB5Wb9yIpxRzkl4OpMtSbJby2MmTf8J0sfhfzYbzrs= Subject key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584FA9BBAD5FFD4ACA27EA61CB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Oct 2026 12:45:12 +0000 Certificate not after: Wed 31 Jan 2029 13:45:12 +0000 Subordinate resources: IP: 23.247.160.0/22 IP: 2602:80c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a9:bb:ad:5f:fd:4a:ca:27:ea:61:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 29 12:45:12 2026 GMT Not After : Jan 31 13:45:12 2029 GMT Subject: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b9:b7:7e:24:68:e6:cc:ba:f1:81:f7:68:59: b0:96:66:16:54:73:1f:56:6b:f3:35:25:27:2e:8e: 5a:15:73:d7:ba:b0:12:54:6e:dd:80:4d:98:4a:f0: ed:39:52:09:0a:43:e9:6d:7e:68:9f:98:3e:c8:93: 8f:99:66:03:d9:28:82:b5:c2:e7:98:0e:b6:26:fa: ae:7c:37:ff:38:f0:74:03:79:0a:fe:23:2c:94:ce: e5:04:fd:23:ff:b3:59:65:93:76:45:e0:88:bd:95: a4:c2:14:0c:80:21:ac:11:f6:51:f3:03:79:47:89: 00:57:8c:c9:3f:39:4a:be:cf:16:53:6d:e3:69:32: a5:13:38:7d:fb:34:57:a8:5b:2e:14:e7:c4:2d:ed: 60:d9:a2:d7:44:03:48:17:cf:e7:ba:0a:7a:7a:45: f3:ea:2e:ee:3c:bf:7c:af:ab:66:ab:02:a6:4f:3b: d5:5a:a7:3e:52:fe:07:36:d6:46:e9:2d:55:f3:33: b7:20:05:35:09:23:4c:ec:1f:d9:b8:d3:b7:2b:a2: a7:f7:8b:a8:62:25:ce:c6:9e:9a:5b:48:91:0c:fe: a6:f0:65:84:c0:db:bd:da:ad:42:19:56:48:8d:3c: 08:2d:b4:af:c8:62:42:e6:79:b9:59:d3:e2:0a:4b: 84:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.247.160.0/22 IPv6: 2602:80c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:e4:7b:b7:4d:b6:ca:47:00:32:43:58:d2:2c:c8:b0:a6:88: 45:f0:0a:7a:a2:3c:8b:50:fc:9d:88:45:a8:60:ed:86:22:d8: 49:cd:90:5f:48:b8:74:fb:81:ad:37:51:74:3b:dd:3f:e5:2c: c7:9a:fd:c8:0d:6e:e4:15:24:f5:d0:b7:ff:66:e4:cb:e5:d8: cb:b1:e2:1a:d2:b8:7b:ea:f5:08:2e:3d:11:d2:38:27:7b:e2: 28:f2:13:f3:ff:a7:b6:19:c0:09:6f:8f:01:1c:46:82:22:c8: 46:2f:7d:a5:51:c4:69:47:47:60:5e:d8:65:50:14:1b:71:0c: 29:da:31:ff:33:67:d4:62:f3:ee:aa:e0:90:c9:fe:f1:a8:6f: ff:1c:b0:9e:b1:ad:f7:5e:26:df:6b:c9:51:19:78:ba:7d:fa: 9d:3a:8c:21:bb:8d:58:03:df:e0:17:21:05:91:d1:e2:e1:18: aa:9f:69:4b:3a:63:63:f7:0d:79:f6:42:13:58:54:6d:44:ea: 5a:96:bb:52:63:1d:6c:bd:f3:81:da:1a:44:1a:ca:db:d3:f0: c6:96:34:12:e9:96:89:b7:91:5b:d1:48:56:19:f8:0f:f9:ad: 88:0a:0d:0b:08:91:3a:19:4e:b7:9d:d6:f1:6f:0a:c0:1a:9e: 60:c3:99:06 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE+pu61f/UrKJ+phy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MTAyOTEyNDUxMloXDTI5MDEzMTEzNDUxMlowLzEtMCsGA1UEAxMk NzRjN2YzMGUtNzBiZS00ZjhjLWJjOGYtNjBiODVkMWI2OGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bm3fiRo5sy68YH3aFmwlmYWVHMfVmvzNSUn Lo5aFXPXurASVG7dgE2YSvDtOVIJCkPpbX5on5g+yJOPmWYD2SiCtcLnmA62Jvqu fDf/OPB0A3kK/iMslM7lBP0j/7NZZZN2ReCIvZWkwhQMgCGsEfZR8wN5R4kAV4zJ PzlKvs8WU23jaTKlEzh9+zRXqFsuFOfELe1g2aLXRANIF8/nugp6ekXz6i7uPL98 r6tmqwKmTzvVWqc+Uv4HNtZG6S1V8zO3IAU1CSNM7B/ZuNO3K6Kn94uoYiXOxp6a W0iRDP6m8GWEwNu92q1CGVZIjTwILbSvyGJC5nm5WdPiCkuEcQIDAQABo4IEDzCC BAswHQYDVR0OBBYEFL0/Hd8u8E7vH141RoF8VBPhpe1DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQxYjY4ZjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc0YzdmMzBlLTcwYmUtNGY4Yy1i YzhmLTYwYjg1ZDFiNjhmNy83NGM3ZjMwZS03MGJlLTRmOGMtYmM4Zi02MGI4NWQx YjY4ZjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAIX96AwDgQCAAIwCAMGACYCCAwAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AEnke7dNtspHADJDWNIsyLCmiEXwCnqiPItQ/J2IRahg7YYi2EnNkF9IuHT7ga03 UXQ73T/lLMea/cgNbuQVJPXQt/9m5Mvl2Mux4hrSuHvq9QguPRHSOCd74ijyE/P/ p7YZwAlvjwEcRoIiyEYvfaVRxGlHR2Be2GVQFBtxDCnaMf8zZ9Ri8+6q4JDJ/vGo b/8csJ6xrfdeJt9ryVEZeLp9+p06jCG7jVgD3+AXIQWR0eLhGKqfaUs6Y2P3DXn2 QhNYVG1E6lqWu1JjHWy984HaGkQaytvT8MaWNBLplom3kVvRSFYZ+A/5rYgKDQsI kToZTred1vFvCsAanmDDmQY= -----END CERTIFICATE-----Generated at Sun Nov 15 14:10:17 2026 by rpki-client