$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b.cer File: 7c74b511-7d11-4209-84c2-f7b800242a7b.cer (raw, json) Hash identifier: N08uzkpV20XyxE/fgFZUOY4QIVmjDOUgcFXwgnq/W5M= Subject key identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584DC3F8B0609A7E409202C6C500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 08 May 2026 12:45:16 +0000 Certificate not after: Thu 10 Aug 2028 12:45:16 +0000 Subordinate resources: IP: 192.231.202.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c3:f8:b0:60:9a:7e:40:92:02:c6:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 8 12:45:16 2026 GMT Not After : Aug 10 12:45:16 2028 GMT Subject: CN=7c74b511-7d11-4209-84c2-f7b800242a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:51:9b:ed:88:a7:f1:f7:a1:80:75:17:d8:d9: a4:7d:11:0d:d1:0e:9f:88:f0:96:f8:c9:a2:98:c6: 09:36:84:50:d4:ed:65:c2:f6:76:de:37:6e:ab:81: 54:c3:91:3a:e8:6b:df:11:82:cb:3b:60:33:18:3e: c1:38:1b:cd:43:0f:ed:97:1a:82:8d:50:db:79:35: cc:b2:11:b3:8b:d4:14:d9:72:0d:ed:53:be:f1:2d: e6:71:a4:f1:9e:73:3e:85:77:1e:a4:33:c2:58:2f: e2:4d:24:c7:91:52:2d:dc:4b:22:00:6a:01:ec:cc: 06:7d:fe:cf:33:7d:b3:88:27:0a:5b:f9:39:53:46: 07:4b:3d:fa:b4:4a:ea:45:d2:f5:7c:d2:60:6c:6a: 83:c9:a2:db:27:f7:db:2c:16:75:a2:60:72:10:5b: c9:1c:76:c3:e4:a7:6e:68:56:6b:bc:b3:37:7d:e8: 04:09:8d:d0:22:fa:c0:9b:a4:68:9b:fd:41:78:98: e4:0d:77:a6:0e:41:92:c5:ce:c2:50:ee:f3:2c:ca: ac:d9:34:fd:2c:4e:0a:48:84:f2:ed:f8:d8:0b:61: 15:9c:f2:a3:33:e3:1e:2b:0d:2f:43:81:9d:1c:6b: 06:57:6d:d3:18:5c:6c:cf:6c:43:c5:06:57:89:ef: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B9:36:87:B8:4E:A3:D9:B3:51:34:02:21:D6:12:2F:82:E4:2C:E8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c74b511-7d11-4209-84c2-f7b800242a7b/7c74b511-7d11-4209-84c2-f7b800242a7b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.231.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9f:87:93:30:4f:3e:13:2c:8f:6b:ad:15:ed:2f:a5:9e:1c: 26:c6:1f:5b:14:d8:ab:24:79:37:cf:bb:b7:b8:51:c3:07:30: 31:f8:31:60:19:e3:d4:0e:3e:e4:70:0f:23:94:4f:99:5a:52: cb:7f:ec:18:bb:b7:22:35:f0:a7:ef:5b:fb:32:5d:1a:80:62: 5b:7b:90:60:62:bc:61:9c:ae:78:47:04:1b:8a:fe:a2:88:f4: 41:29:d6:f4:66:3f:1c:94:82:66:1d:02:30:7f:48:8a:dc:0f: c6:35:f2:dc:50:e9:e6:ff:31:62:47:56:6a:d1:ff:7e:d7:1e: 96:53:a3:cd:c1:82:d0:e6:c9:c1:11:b8:0c:8d:d5:b7:ad:a6: 70:29:d3:03:90:66:71:4e:bf:86:a7:d7:d9:09:eb:b3:70:de: 85:42:6a:ea:dd:7e:6e:67:25:f4:04:7d:7b:98:3a:d1:31:68: 5d:d3:29:2d:e5:ac:14:17:bd:95:a6:e3:76:8a:25:0f:2f:e7: cc:4a:8c:03:c0:d5:17:d4:7d:c0:20:2b:8c:f8:a6:61:0f:4c: 01:4a:53:fe:74:19:cf:6b:ac:c3:57:4f:8c:de:f2:06:71:15: 40:53:9d:94:a2:38:ec:c4:cc:83:38:c4:11:a3:90:1b:f8:ac: 0e:d1:e1:56 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE3D+LBgmn5AkgLGxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDUwODEyNDUxNloXDTI4MDgxMDEyNDUxNlowLzEtMCsGA1UEAxMk N2M3NGI1MTEtN2QxMS00MjA5LTg0YzItZjdiODAwMjQyYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VGb7Yin8fehgHUX2NmkfREN0Q6fiPCW+Mmi mMYJNoRQ1O1lwvZ23jduq4FUw5E66GvfEYLLO2AzGD7BOBvNQw/tlxqCjVDbeTXM shGzi9QU2XIN7VO+8S3mcaTxnnM+hXcepDPCWC/iTSTHkVIt3EsiAGoB7MwGff7P M32ziCcKW/k5U0YHSz36tErqRdL1fNJgbGqDyaLbJ/fbLBZ1omByEFvJHHbD5Kdu aFZrvLM3fegECY3QIvrAm6Rom/1BeJjkDXemDkGSxc7CUO7zLMqs2TT9LE4KSITy 7fjYC2EVnPKjM+MeKw0vQ4GdHGsGV23TGFxsz2xDxQZXie/F1QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFHa5Noe4TqPZs1E0AiHWEi+C5CzoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAyNDJhN2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdjNzRiNTExLTdkMTEtNDIwOS04 NGMyLWY3YjgwMDI0MmE3Yi83Yzc0YjUxMS03ZDExLTQyMDktODRjMi1mN2I4MDAy NDJhN2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA58owVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAc5+HkzBPPhMsj2utFe0v pZ4cJsYfWxTYqyR5N8+7t7hRwwcwMfgxYBnj1A4+5HAPI5RPmVpSy3/sGLu3IjXw p+9b+zJdGoBiW3uQYGK8YZyueEcEG4r+ooj0QSnW9GY/HJSCZh0CMH9IitwPxjXy 3FDp5v8xYkdWatH/ftcellOjzcGC0ObJwRG4DI3Vt62mcCnTA5BmcU6/hqfX2Qnr s3DehUJq6t1+bmcl9AR9e5g60TFoXdMpLeWsFBe9labjdoolDy/nzEqMA8DVF9R9 wCArjPimYQ9MAUpT/nQZz2usw1dPjN7yBnEVQFOdlKI47MTMgzjEEaOQG/isDtHh Vg== -----END CERTIFICATE-----Generated at Wed May 13 08:52:49 2026 by rpki-client