$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer File: 7f6bc06a-0a42-4758-8629-8c90ecf2f82e.cer (raw, json) Hash identifier: Lola1v+0McvKujb2D+3LaGug18r50jxcdTX8k8I9Ifs= Subject key identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584DA80DDA54482D455DA58F6593 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 28 Apr 2026 12:45:17 +0000 Certificate not after: Mon 31 Jul 2028 12:45:17 +0000 Subordinate resources: AS: 26223 IP: 107.190.184.0/21 IP: 162.248.128.0/23 IP: 162.248.131.0/24 IP: 192.64.2.0/23 IP: 192.187.62.0/23 IP: 192.243.36.0/24 IP: 199.19.112.0/21 IP: 199.66.104.0/22 IP: 199.192.124.0/22 IP: 204.8.60.0/22 IP: 204.8.68.0/22 IP: 207.183.160.0/19 IP: 216.21.208.0/22 IP: 216.128.224.0/20 IP: 217.147.184.0/21 IP: 2605:c900::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:0d:da:54:48:2d:45:5d:a5:8f:65:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 28 12:45:17 2026 GMT Not After : Jul 31 12:45:17 2028 GMT Subject: CN=7f6bc06a-0a42-4758-8629-8c90ecf2f82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ed:67:70:b7:70:89:ed:77:a5:ba:cd:18:97: fc:79:9a:7d:21:e2:e5:53:31:99:9e:ce:bd:f1:84: 0e:ea:4d:26:29:c2:5c:f5:ae:75:1c:25:f2:7d:dd: 26:8a:09:ac:18:ce:7c:1b:33:0f:3e:42:d1:0e:7d: c6:42:45:cb:e7:0a:cb:d5:fe:fd:68:f8:9b:52:e5: 14:a9:e6:eb:d4:cc:62:58:06:54:f6:9d:6d:89:2e: 5e:70:f2:86:bf:60:3d:d0:77:6e:b4:a3:32:51:07: e9:99:a8:e5:14:71:40:09:1f:6e:4f:47:70:07:cf: 48:5c:16:ea:1a:b7:a0:7a:1e:be:c1:f5:6e:02:af: 69:d3:27:0b:df:52:86:fc:52:04:57:65:db:35:43: ae:01:bf:0e:19:c2:22:45:f7:59:70:ef:48:92:14: ce:58:20:5f:f9:ed:fd:87:07:5d:6a:a4:24:01:44: 6b:50:89:98:f7:4c:7d:49:fb:13:b5:2c:09:21:b8: 5c:9a:6e:49:17:23:ba:82:db:ce:df:f7:27:36:4a: c6:c6:92:27:f6:e1:c4:06:5b:61:45:29:1b:f0:e9: 53:29:4e:45:7f:55:91:ff:80:40:61:9a:9d:5c:ed: 89:17:54:46:78:a3:6a:0b:e6:43:2b:9d:10:9c:94: 54:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8E:E7:FA:0E:00:40:C5:BA:3F:20:67:77:FA:3C:05:BD:6F:5A:CF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f6bc06a-0a42-4758-8629-8c90ecf2f82e/7f6bc06a-0a42-4758-8629-8c90ecf2f82e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 107.190.184.0/21 162.248.128.0/23 162.248.131.0/24 192.64.2.0/23 192.187.62.0/23 192.243.36.0/24 199.19.112.0/21 199.66.104.0/22 199.192.124.0/22 204.8.60.0/22 204.8.68.0/22 207.183.160.0/19 216.21.208.0/22 216.128.224.0/20 217.147.184.0/21 IPv6: 2605:c900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26223 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:18:39:3f:f2:0b:e9:b2:a8:fb:4e:1b:6a:8f:03:62:73:b4: 4d:84:7f:15:79:c4:bf:87:6f:bb:87:83:a2:bf:2b:4c:81:66: 9d:e6:dd:fc:df:88:42:19:00:41:40:0e:d7:2b:09:28:f7:de: fb:12:72:1b:25:bf:94:4d:c6:52:c5:3e:5e:67:41:a7:2a:16: 0e:59:45:8e:30:7f:c9:2e:e7:45:6d:d0:88:19:dc:4e:e9:47: ee:79:56:6b:d3:06:22:30:fe:54:8a:75:58:24:87:d8:f7:b9: 68:96:7b:39:be:e8:7a:d9:c6:cb:b6:8c:ca:f5:cb:d7:d6:02: 64:5d:ac:49:ff:cb:42:6a:cc:c6:f1:9b:7c:33:0f:28:11:b5: 4e:a0:92:fb:20:51:05:6b:6e:74:c2:62:28:0c:08:4d:43:02: 54:9d:12:57:ed:7f:a3:f0:8d:77:88:77:66:9a:7c:2c:8d:3f: fa:4a:b1:3f:f7:2e:c2:0c:4e:71:92:1d:9a:ad:30:17:13:d8: 74:30:89:e7:d0:eb:78:61:42:de:67:78:22:02:46:28:2f:d5: 42:4d:a5:6a:89:a3:33:f4:12:3a:50:9f:c6:eb:0b:88:47:2b: 2d:b9:de:1b:95:37:24:c4:f8:1b:8d:6c:fa:52:2f:55:23:13: 07:79:0e:cb -----BEGIN CERTIFICATE----- MIIHbDCCBlSgAwIBAgIUAQ0Mn0MoWE2oDdpUSC1FXaWPZZMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDQyODEyNDUxN1oXDTI4MDczMTEyNDUxN1owLzEtMCsGA1UEAxMk N2Y2YmMwNmEtMGE0Mi00NzU4LTg2MjktOGM5MGVjZjJmODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+1ncLdwie13pbrNGJf8eZp9IeLlUzGZns69 8YQO6k0mKcJc9a51HCXyfd0migmsGM58GzMPPkLRDn3GQkXL5wrL1f79aPibUuUU qebr1MxiWAZU9p1tiS5ecPKGv2A90HdutKMyUQfpmajlFHFACR9uT0dwB89IXBbq Gregeh6+wfVuAq9p0ycL31KG/FIEV2XbNUOuAb8OGcIiRfdZcO9IkhTOWCBf+e39 hwddaqQkAURrUImY90x9SfsTtSwJIbhcmm5JFyO6gtvO3/cnNkrGxpIn9uHEBlth RSkb8OlTKU5Ff1WR/4BAYZqdXO2JF1RGeKNqC+ZDK50QnJRUbQIDAQABo4IEfjCC BHowHQYDVR0OBBYEFCKO5/oOAEDFuj8gZ3f6PAW9b1rPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNmMmY4MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdmNmJjMDZhLTBhNDItNDc1OC04 NjI5LThjOTBlY2YyZjgyZS83ZjZiYzA2YS0wYTQyLTQ3NTgtODYyOS04YzkwZWNm MmY4MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgYIGCCsGAQUF BwEHAQH/BHMwcTBgBAIAATBaAwQDa764AwQBoviAAwQAoviDAwQBwEACAwQBwLs+ AwQAwPMkAwQDxxNwAwQCx0JoAwQCx8B8AwQCzAg8AwQCzAhEAwQFz7egAwQC2BXQ AwQE2IDgAwQD2ZO4MA0EAgACMAcDBQAmBckAMBkGCCsGAQUFBwEIAQH/BAowCKAG MAQCAmZvMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAHQYOT/yC+myqPtOG2qPA2JztE2EfxV5xL+Hb7uHg6K/ K0yBZp3m3fzfiEIZAEFADtcrCSj33vsSchslv5RNxlLFPl5nQacqFg5ZRY4wf8ku 50Vt0IgZ3E7pR+55VmvTBiIw/lSKdVgkh9j3uWiWezm+6HrZxsu2jMr1y9fWAmRd rEn/y0JqzMbxm3wzDygRtU6gkvsgUQVrbnTCYigMCE1DAlSdElftf6PwjXeId2aa fCyNP/pKsT/3LsIMTnGSHZqtMBcT2HQwiefQ63hhQt5neCICRigv1UJNpWqJozP0 EjpQn8brC4hHKy253huVNyTE+BuNbPpSL1UjEwd5Dss= -----END CERTIFICATE-----Generated at Wed May 13 02:31:47 2026 by rpki-client