$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1.cer File: 7ea21a7b-596c-45f8-899e-6879815f26b1.cer (raw, json) Hash identifier: rjd8tBuJPpgY3ubVNFXHIpA8tH826FGIn6sOAI8fH3M= Subject key identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D4922A317ABB8CE824B5FA780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 12:45:22 +0000 Certificate not after: Tue 27 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 139.64.200.0/24 IP: 2620:85:a000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:22:a3:17:ab:b8:ce:82:4b:5f:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 25 12:45:22 2026 GMT Not After : Jun 27 12:45:22 2028 GMT Subject: CN=7ea21a7b-596c-45f8-899e-6879815f26b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:95:9b:ee:aa:c6:20:3d:25:37:b1:8e:39:d6: d1:b0:60:91:f0:bb:9f:c3:d5:8f:ca:c2:f1:b2:29: e0:90:d4:81:b3:1e:2d:11:1d:60:18:a0:8a:e1:be: 0a:bc:18:96:f0:6f:61:3b:3d:98:69:ae:ce:2a:eb: e4:88:f0:24:fb:ab:5d:1c:53:77:17:ef:54:58:75: 93:11:55:22:49:63:12:01:a3:03:7c:c8:fe:b1:63: d4:b0:15:bf:c8:ad:cb:66:61:22:7f:ba:c0:cc:1e: 5e:33:eb:56:bf:7c:18:59:a1:3d:6b:f0:48:14:2d: 9c:b2:d4:ed:64:7d:dd:9c:44:9b:21:8e:17:cc:93: 51:3b:ba:c8:8f:df:e2:88:c8:68:54:28:8f:b7:3b: 3d:35:d2:ed:14:7a:ef:d4:06:89:78:3d:27:67:91: 38:70:07:9e:ef:5b:89:61:73:a9:89:23:0a:06:cc: 41:2f:fa:59:0e:e5:02:1d:c7:20:8f:cb:9c:9f:bf: b0:6d:50:3b:ce:02:8b:02:1c:e3:21:50:d4:b1:e3: 3e:6d:7f:44:c9:8b:26:d0:24:b6:33:24:01:ea:25: 28:eb:a2:c8:81:d9:e5:01:76:a6:dd:11:79:c9:d6: 5e:70:df:67:bf:99:93:3d:a0:93:ca:8f:6f:2a:18: 0e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D5:D5:32:EB:10:00:C4:BF:8A:19:33:CE:EA:A3:86:2D:77:F4:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ea21a7b-596c-45f8-899e-6879815f26b1/7ea21a7b-596c-45f8-899e-6879815f26b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 139.64.200.0/24 IPv6: 2620:85:a000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:df:a1:81:40:1a:bc:3c:16:88:75:e1:8a:14:2a:a6:cb:de: fb:cb:e3:aa:ac:12:c6:b0:71:38:ea:5f:26:28:ae:53:db:a4: 77:36:f2:aa:ab:dd:d1:a3:5b:47:a4:85:08:3b:e3:89:53:0b: bf:55:e0:e8:2a:bf:53:58:a1:8d:43:20:7b:1e:a4:05:fb:29: 5b:3e:56:93:bf:9d:56:04:2c:1d:de:80:2f:7f:00:bc:83:7e: 07:df:b5:7e:96:b6:68:63:13:55:67:07:b5:0a:25:0a:4f:95: 43:9c:fb:8f:40:57:47:b7:97:cd:53:15:d3:f8:56:61:f2:99: 43:f6:0a:58:dd:0f:6e:e2:1a:ff:20:2d:ff:2f:ea:48:d0:47: e3:12:0c:e5:68:bd:ae:fb:e3:d4:6f:9a:48:cd:44:88:df:6b: 87:77:9c:61:f2:24:d5:20:18:db:4f:a0:d3:b4:8e:92:a0:d7: 42:94:80:d0:2d:c5:27:29:2b:1c:79:b9:4b:27:ac:f5:7c:1b: f9:67:61:08:33:7b:dd:a0:4e:85:b3:a0:d1:98:60:b5:70:f9: ca:76:5a:e4:f8:1f:9e:31:9e:85:5f:24:0e:01:fb:df:5b:50: dd:84:83:b9:2c:a2:4f:bb:39:a6:da:8b:82:8f:6c:04:6b:52: 63:16:63:7e -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWE1JIqMXq7jOgktfp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMyNTEyNDUyMloXDTI4MDYyNzEyNDUyMlowLzEtMCsGA1UEAxMk N2VhMjFhN2ItNTk2Yy00NWY4LTg5OWUtNjg3OTgxNWYyNmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZWb7qrGID0lN7GOOdbRsGCR8Lufw9WPysLx singkNSBsx4tER1gGKCK4b4KvBiW8G9hOz2Yaa7OKuvkiPAk+6tdHFN3F+9UWHWT EVUiSWMSAaMDfMj+sWPUsBW/yK3LZmEif7rAzB5eM+tWv3wYWaE9a/BIFC2cstTt ZH3dnESbIY4XzJNRO7rIj9/iiMhoVCiPtzs9NdLtFHrv1AaJeD0nZ5E4cAee71uJ YXOpiSMKBsxBL/pZDuUCHccgj8ucn7+wbVA7zgKLAhzjIVDUseM+bX9EyYsm0CS2 MyQB6iUo66LIgdnlAXam3RF5ydZecN9nv5mTPaCTyo9vKhgOKQIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFFjV1TLrEADEv4oZM87qo4Ytd/SpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1ZjI2YjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlYTIxYTdiLTU5NmMtNDVmOC04 OTllLTY4Nzk4MTVmMjZiMS83ZWEyMWE3Yi01OTZjLTQ1ZjgtODk5ZS02ODc5ODE1 ZjI2YjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACLQMgwDwQCAAIwCQMHACYgAIWgADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQBw36GBQBq8PBaIdeGKFCqmy977y+OqrBLGsHE46l8mKK5T26R3NvKqq93Ro1tH pIUIO+OJUwu/VeDoKr9TWKGNQyB7HqQF+ylbPlaTv51WBCwd3oAvfwC8g34H37V+ lrZoYxNVZwe1CiUKT5VDnPuPQFdHt5fNUxXT+FZh8plD9gpY3Q9u4hr/IC3/L+pI 0EfjEgzlaL2u++PUb5pIzUSI32uHd5xh8iTVIBjbT6DTtI6SoNdClIDQLcUnKSsc eblLJ6z1fBv5Z2EIM3vdoE6Fs6DRmGC1cPnKdlrk+B+eMZ6FXyQOAfvfW1DdhIO5 LKJPuzmm2ouCj2wEa1JjFmN+ -----END CERTIFICATE-----Generated at Wed Mar 25 23:24:04 2026 by rpki-client