$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc.cer File: 8e34a71f-aa28-4e58-b789-2715811effcc.cer (raw, json) Hash identifier: bS0a0FKEB4WuCXBzuRPP3Jl+IXDYPU8nwO5l9blwT0A= Subject key identifier: 81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584DCFECDDF45938D355AB721E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 12 May 2026 19:31:10 +0000 Certificate not after: Mon 14 Aug 2028 19:31:10 +0000 Subordinate resources: AS: 397696 AS: 399025 IP: 23.138.240.0/23 IP: 209.99.160.0/21 IP: 2605:55c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cf:ec:dd:f4:59:38:d3:55:ab:72:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 12 19:31:10 2026 GMT Not After : Aug 14 19:31:10 2028 GMT Subject: CN=8e34a71f-aa28-4e58-b789-2715811effcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3a:6c:34:79:34:dc:d0:e3:5d:0b:ce:52:3d: 4b:1f:55:12:5c:b1:b7:7b:45:73:af:41:cf:ff:c7: 49:fa:7a:51:6f:61:53:52:56:aa:90:09:69:15:29: 06:fb:0e:29:51:39:36:c8:67:2d:79:3f:71:9d:7f: ea:ad:9c:cf:38:18:72:2f:6e:2c:03:72:0f:73:7c: 38:cb:85:4a:e8:2d:3e:a1:cf:4a:42:41:75:7b:58: ff:85:bd:f4:8b:98:e2:1f:af:71:fa:3c:73:b3:5f: c0:16:b0:a5:49:09:93:9e:e9:56:71:b1:eb:f6:55: 34:ca:cb:15:bb:ad:05:89:e4:4d:18:a4:1c:01:c5: 9f:39:e6:d9:e4:1c:b9:be:6d:78:07:5b:e0:37:1c: 05:12:0c:ea:c0:88:52:b7:9b:29:10:12:63:6d:09: 7f:e1:b6:ee:35:81:7d:a4:5a:34:75:e2:af:aa:d0: 51:ad:5c:18:55:7d:69:d8:78:8e:28:6c:3d:00:9c: 70:37:1c:87:2b:98:a1:69:a0:24:84:9e:14:00:8a: 19:13:cc:4c:f1:2f:17:19:2d:53:ad:15:43:46:90: 3a:76:52:7d:9c:17:72:4f:1a:87:33:33:ce:49:d4: 44:d3:7d:00:eb:a9:dc:4e:77:22:bd:07:e4:d9:71: f3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E2:E5:45:2B:2A:E0:16:B1:47:63:52:47:B0:3C:0D:21:7C:31:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e34a71f-aa28-4e58-b789-2715811effcc/8e34a71f-aa28-4e58-b789-2715811effcc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.138.240.0/23 209.99.160.0/21 IPv6: 2605:55c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397696 399025 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:a9:d4:d0:b2:93:4a:51:b7:5d:b7:7b:e9:85:8e:35:94:ff: 28:f4:cf:07:18:f9:a8:68:75:01:28:83:43:3d:e1:fb:68:c5: 7e:f3:12:d8:d4:46:32:03:58:6f:4d:69:0a:eb:c0:c6:22:11: 7b:dc:2d:0e:4e:37:df:03:ec:e3:f8:a8:6d:40:be:25:eb:c1: 79:bf:89:39:23:24:39:79:13:53:6f:e5:45:1b:01:4d:3e:64: 5f:8c:92:ea:e4:66:86:e3:68:b3:b5:31:60:9d:c4:34:49:71: f6:ab:8b:34:40:09:ff:e5:a5:8a:d2:79:40:98:42:fb:a8:44: a5:db:cd:61:db:c0:f5:79:ef:81:4b:26:ba:c0:c5:31:d6:f4: 2c:ed:89:2a:01:8b:f0:ec:bc:3f:68:ea:83:6d:9f:d9:3b:39: f5:33:e8:02:ab:17:bd:e1:29:de:76:02:ac:bb:49:3c:ba:e3: cf:f5:d4:cc:9e:a4:24:a0:93:4d:5e:b1:0c:eb:de:6d:72:84: 54:cc:46:f1:52:2f:dd:0d:cd:e0:81:d8:2f:37:33:c2:dc:bc: 31:70:5b:17:13:d6:f2:cc:24:5d:05:34:9e:25:11:97:c3:e9: 1b:24:36:9a:bb:9a:58:2f:7e:1d:d5:fd:d5:57:a2:4b:8b:5d: 0c:00:70:ee -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE3P7N30WTjTVatyHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDUxMjE5MzExMFoXDTI4MDgxNDE5MzExMFowLzEtMCsGA1UEAxMk OGUzNGE3MWYtYWEyOC00ZTU4LWI3ODktMjcxNTgxMWVmZmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTpsNHk03NDjXQvOUj1LH1USXLG3e0Vzr0HP /8dJ+npRb2FTUlaqkAlpFSkG+w4pUTk2yGcteT9xnX/qrZzPOBhyL24sA3IPc3w4 y4VK6C0+oc9KQkF1e1j/hb30i5jiH69x+jxzs1/AFrClSQmTnulWcbHr9lU0yssV u60FieRNGKQcAcWfOebZ5By5vm14B1vgNxwFEgzqwIhSt5spEBJjbQl/4bbuNYF9 pFo0deKvqtBRrVwYVX1p2HiOKGw9AJxwNxyHK5ihaaAkhJ4UAIoZE8xM8S8XGS1T rRVDRpA6dlJ9nBdyTxqHMzPOSdRE030A66ncTncivQfk2XHzJwIDAQABo4IENTCC BDEwHQYDVR0OBBYEFIHi5UUrKuAWsUdjUkewPA0hfDFrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 ZTM0YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1ODExZWZmY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhlMzRhNzFmLWFhMjgtNGU1OC1i Nzg5LTI3MTU4MTFlZmZjYy84ZTM0YTcxZi1hYTI4LTRlNTgtYjc4OS0yNzE1ODEx ZWZmY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAEXivADBAPRY6AwDQQCAAIwBwMFACYFVcAwHwYI KwYBBQUHAQgBAf8EEDAOoAwwCgIDBhGAAgMGFrEwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAGanU0LKTSlG3 Xbd76YWONZT/KPTPBxj5qGh1ASiDQz3h+2jFfvMS2NRGMgNYb01pCuvAxiIRe9wt Dk433wPs4/iobUC+JevBeb+JOSMkOXkTU2/lRRsBTT5kX4yS6uRmhuNos7UxYJ3E NElx9quLNEAJ/+WlitJ5QJhC+6hEpdvNYdvA9XnvgUsmusDFMdb0LO2JKgGL8Oy8 P2jqg22f2Ts59TPoAqsXveEp3nYCrLtJPLrjz/XUzJ6kJKCTTV6xDOvebXKEVMxG 8VIv3Q3N4IHYLzczwty8MXBbFxPW8swkXQU0niURl8PpGyQ2mruaWC9+HdX91Vei S4tdDABw7g== -----END CERTIFICATE-----Generated at Wed May 13 01:16:56 2026 by rpki-client