$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer File: 896f0624-c28d-44c0-93cf-3f879f877518.cer (raw, json) Hash identifier: s7D8mCRECtMhKQ+bCWe0aRP/LhUBc+TJFhW2egqG68Q= Subject key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D32CD2CB13569ECA9090B6280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Mar 2026 12:45:23 +0000 Certificate not after: Mon 19 Jun 2028 12:45:23 +0000 Subordinate resources: AS: 400503 IP: 23.133.56.0/23 IP: 2602:fbb4::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:cd:2c:b1:35:69:ec:a9:09:0b:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 17 12:45:23 2026 GMT Not After : Jun 19 12:45:23 2028 GMT Subject: CN=896f0624-c28d-44c0-93cf-3f879f877518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:24:97:48:fd:d6:39:83:14:f6:1c:b3:f7:90: 7c:15:9d:c0:f3:fb:1f:e8:3a:b6:62:94:38:d0:c8: c4:6a:83:7c:fb:57:f7:13:4c:11:97:cd:57:a1:1f: aa:81:75:e6:19:c1:df:46:f8:ff:eb:c6:15:45:ae: 34:08:ac:5c:97:fc:12:b4:df:4f:aa:07:e4:6b:a2: ff:77:aa:3e:66:f7:15:c1:de:d2:ea:f7:84:9d:3d: 4c:7a:d5:ac:a4:cf:8c:a1:5f:2f:e9:b0:20:47:0b: 7d:48:9d:87:1e:62:87:ff:e3:e1:e7:d5:23:76:00: 5e:ea:c6:0d:f0:8a:35:14:40:89:6b:08:b0:af:98: 72:da:34:39:cf:34:40:e9:7d:34:af:25:98:e8:a3: 29:63:15:d1:88:ca:b4:23:8b:4f:a6:b5:80:7a:49: 01:6a:6e:6a:7f:fe:86:fc:3c:42:48:8a:93:46:92: 79:8a:f4:16:00:a3:ee:57:ca:b0:b0:32:fe:ae:67: e4:54:59:d0:22:b9:b5:ab:71:5b:da:6a:8f:24:0b: 53:61:8e:80:ec:5a:ae:85:c2:45:4f:d4:78:59:20: ff:24:8d:cf:3b:17:05:6c:28:09:e5:fa:f1:c1:e7: aa:a0:df:dc:73:96:13:54:66:f2:92:da:8c:dd:6f: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.133.56.0/23 IPv6: 2602:fbb4::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400503 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:43:6f:97:92:08:a5:74:2b:fc:b6:82:a8:13:f4:cb:c8:cf: 21:55:5a:be:05:38:a9:45:7f:79:d4:d7:0c:8b:db:55:86:55: cc:f5:12:0d:f4:8a:85:99:d1:ec:b9:c5:61:a5:cc:28:dd:e0: 8a:ff:ac:23:29:74:1c:99:00:b3:0c:3f:58:c6:25:ce:e8:29: 4f:ee:c1:2e:ce:51:bb:16:c4:f9:76:bc:44:80:8f:ef:67:e2: 5f:45:15:13:48:7e:06:9d:c5:5d:f8:d6:e8:64:f9:8c:ff:52: 06:e1:05:92:3a:b3:17:e5:ad:2a:86:ed:5e:94:84:09:0d:cd: e4:55:ad:ba:be:f5:1f:c8:7a:48:f7:c0:fc:ee:74:8c:5c:1b: e0:39:67:c6:9e:c2:2a:59:33:63:82:51:8c:b4:b1:ee:46:ad: 33:2f:f8:65:f7:41:4f:72:5e:ed:38:71:62:d3:43:75:e9:cd: 21:40:10:5f:9b:7a:35:70:08:e4:b6:8f:9f:57:78:26:6c:a2: f6:e6:bf:0b:28:36:ae:95:53:84:36:07:1f:82:80:f5:92:32: 4f:4d:d9:16:7d:9c:34:d5:4d:c3:08:27:ba:61:8f:f2:8f:7f: c6:1d:2e:2f:b2:b7:74:0f:6c:0f:e1:16:20:d1:35:66:9d:5d: 4f:16:f1:c3 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0yzSyxNWnsqQkLYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxNzEyNDUyM1oXDTI4MDYxOTEyNDUyM1owLzEtMCsGA1UEAxMk ODk2ZjA2MjQtYzI4ZC00NGMwLTkzY2YtM2Y4NzlmODc3NTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriSXSP3WOYMU9hyz95B8FZ3A8/sf6Dq2YpQ4 0MjEaoN8+1f3E0wRl81XoR+qgXXmGcHfRvj/68YVRa40CKxcl/wStN9Pqgfka6L/ d6o+ZvcVwd7S6veEnT1MetWspM+MoV8v6bAgRwt9SJ2HHmKH/+Ph59UjdgBe6sYN 8Io1FECJawiwr5hy2jQ5zzRA6X00ryWY6KMpYxXRiMq0I4tPprWAekkBam5qf/6G /DxCSIqTRpJ5ivQWAKPuV8qwsDL+rmfkVFnQIrm1q3Fb2mqPJAtTYY6A7FquhcJF T9R4WSD/JI3POxcFbCgJ5frxweeqoN/cc5YTVGbyktqM3W8OowIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFK5lnPBXfVxcidFg6QEvJ6Grtq8LMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4Nzc1MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzg5NmYwNjI0LWMyOGQtNDRjMC05 M2NmLTNmODc5Zjg3NzUxOC84OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4 Nzc1MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAEXhTgwDgQCAAIwCAMGACYC+7QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYcdzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOQ2+XkgildCv8toKoE/TLyM8h VVq+BTipRX951NcMi9tVhlXM9RIN9IqFmdHsucVhpcwo3eCK/6wjKXQcmQCzDD9Y xiXO6ClP7sEuzlG7FsT5drxEgI/vZ+JfRRUTSH4GncVd+NboZPmM/1IG4QWSOrMX 5a0qhu1elIQJDc3kVa26vvUfyHpI98D87nSMXBvgOWfGnsIqWTNjglGMtLHuRq0z L/hl90FPcl7tOHFi00N16c0hQBBfm3o1cAjkto+fV3gmbKL25r8LKDaulVOENgcf goD1kjJPTdkWfZw01U3DCCe6YY/yj3/GHS4vsrd0D2wP4RYg0TVmnV1PFvHD -----END CERTIFICATE-----Generated at Thu Mar 26 02:27:48 2026 by rpki-client