$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8.cer File: 7e7e6463-5b7e-4edb-9081-3d19b06067c8.cer (raw, json) Hash identifier: NoIfVpNgn/GmsewvVCR/Py3grq/PKJ+TR0WdNdD4Jc8= Subject key identifier: D0:EB:07:9E:E2:6D:2E:5F:C0:07:2E:E1:64:FF:49:B5:84:27:3F:48 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D30027B0133FD610E767B1870 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/7e7e6463-5b7e-4edb-9081-3d19b06067c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Mar 2026 12:45:22 +0000 Certificate not after: Sun 18 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 192.153.163.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:02:7b:01:33:fd:61:0e:76:7b:18:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 16 12:45:22 2026 GMT Not After : Jun 18 12:45:22 2028 GMT Subject: CN=7e7e6463-5b7e-4edb-9081-3d19b06067c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:30:98:aa:f2:56:07:a6:38:d9:e3:de:10:52: b6:24:69:cd:40:25:81:89:8b:85:aa:ac:fd:29:57: 2c:4a:e1:36:d4:5f:54:f4:5b:af:d7:1a:c3:95:e3: a3:26:0f:73:4f:4e:ea:7e:46:76:59:89:14:85:21: ef:ac:6a:68:3d:ee:d3:30:71:b9:f9:8b:f4:8e:15: 40:64:61:a7:8c:ee:be:d3:1e:50:d4:5d:c4:c5:cc: 99:bc:d1:ab:6a:17:06:12:b8:d8:56:f9:c7:4a:c2: 2b:2a:7f:f0:61:7e:ba:4b:22:bd:63:2d:1f:16:5f: dd:7d:b9:c2:b1:90:4b:4d:ab:0f:1f:df:fa:39:8c: 03:cc:73:26:cc:aa:39:02:e4:db:cc:08:af:a2:92: 90:b0:ee:fe:f9:45:3a:ad:0c:45:f1:7e:b4:78:7b: 04:3b:a9:40:7f:a4:43:5a:a6:dc:db:af:81:a1:17: 8d:e4:ab:5e:cb:1f:50:e3:95:55:3e:04:09:2b:b9: 7a:c5:1c:2f:7d:26:27:87:1c:90:f8:d9:b8:40:a9: ff:de:b5:ea:bc:aa:c9:df:98:b2:c2:14:10:32:5b: c5:26:5b:0b:65:38:38:d9:dd:42:07:d9:fe:86:6e: f4:52:c8:70:73:46:77:e0:2e:43:d4:d0:97:15:84: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EB:07:9E:E2:6D:2E:5F:C0:07:2E:E1:64:FF:49:B5:84:27:3F:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e7e6463-5b7e-4edb-9081-3d19b06067c8/7e7e6463-5b7e-4edb-9081-3d19b06067c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.153.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9d:37:2f:d5:38:6b:b5:c6:4c:1d:34:d7:5b:a9:5a:5f:3b: d8:82:6f:ef:66:bb:b7:66:7a:44:1a:42:62:31:1d:84:c3:d4: 41:3e:09:45:fa:fd:c1:58:e2:24:ca:4b:03:42:18:f3:93:f9: 10:52:52:dc:c2:dd:21:cc:6f:df:f9:41:e9:7b:0a:5b:2e:be: 9a:8a:c7:c0:2b:22:2c:c2:d9:e4:30:6d:6b:52:0d:e8:1f:fe: 20:c7:b1:e9:e0:32:59:7b:db:07:37:d0:16:67:40:08:09:f3: 62:2b:bf:45:01:a8:0d:a6:c2:8f:63:57:d7:6d:b3:6a:d8:2a: c8:29:90:77:b8:bf:14:10:22:6b:4d:c2:15:a7:66:cd:41:54: 1f:6a:0e:67:c7:68:6f:8e:c1:37:fd:ba:8c:5a:33:d3:37:d3: e5:fb:99:a7:dd:48:16:24:76:fd:5b:78:47:d2:5a:79:0c:83: f2:6f:80:23:0f:03:f9:9e:62:34:79:4b:f8:58:48:45:5d:e9: ff:33:49:7c:9b:53:f4:ab:64:f5:b5:90:df:1e:d5:26:1b:25: 21:c5:b5:4a:a2:fb:5f:17:4a:1f:5f:b4:5b:f1:26:b2:fd:60: fd:13:7c:d2:4a:92:41:fd:45:56:ce:e5:81:e3:ca:94:ce:bc: 63:cd:e5:a0 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0wAnsBM/1hDnZ7GHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxNjEyNDUyMloXDTI4MDYxODEyNDUyMlowLzEtMCsGA1UEAxMk N2U3ZTY0NjMtNWI3ZS00ZWRiLTkwODEtM2QxOWIwNjA2N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTCYqvJWB6Y42ePeEFK2JGnNQCWBiYuFqqz9 KVcsSuE21F9U9Fuv1xrDleOjJg9zT07qfkZ2WYkUhSHvrGpoPe7TMHG5+Yv0jhVA ZGGnjO6+0x5Q1F3ExcyZvNGrahcGErjYVvnHSsIrKn/wYX66SyK9Yy0fFl/dfbnC sZBLTasPH9/6OYwDzHMmzKo5AuTbzAivopKQsO7++UU6rQxF8X60eHsEO6lAf6RD Wqbc26+BoReN5Kteyx9Q45VVPgQJK7l6xRwvfSYnhxyQ+Nm4QKn/3rXqvKrJ35iy whQQMlvFJlsLZTg42d1CB9n+hm70Ushwc0Z34C5D1NCXFYTCaQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNDrB57ibS5fwAcu4WT/SbWEJz9IMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZTdlNjQ2My01YjdlLTRlZGItOTA4MS0zZDE5YjA2MDY3YzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlN2U2NDYzLTViN2UtNGVkYi05 MDgxLTNkMTliMDYwNjdjOC83ZTdlNjQ2My01YjdlLTRlZGItOTA4MS0zZDE5YjA2 MDY3YzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAmaMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAap03L9U4a7XGTB0011up Wl872IJv72a7t2Z6RBpCYjEdhMPUQT4JRfr9wVjiJMpLA0IY85P5EFJS3MLdIcxv 3/lB6XsKWy6+morHwCsiLMLZ5DBta1IN6B/+IMex6eAyWXvbBzfQFmdACAnzYiu/ RQGoDabCj2NX122zatgqyCmQd7i/FBAia03CFadmzUFUH2oOZ8dob47BN/26jFoz 0zfT5fuZp91IFiR2/Vt4R9JaeQyD8m+AIw8D+Z5iNHlL+FhIRV3p/zNJfJtT9Ktk 9bWQ3x7VJhslIcW1SqL7XxdKH1+0W/Emsv1g/RN80kqSQf1FVs7lgePKlM68Y83l oA== -----END CERTIFICATE-----Generated at Sat Mar 28 10:45:08 2026 by rpki-client