$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer File: 9ac09e11-24a9-4451-9633-b772a7a11960.cer (raw, json) Hash identifier: ZZGjtX79frjfVvdSkAMPQfFrSb3NlzCzVnvUSjV2vFM= Subject key identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E94E2D5C326C24A806C35A000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Jul 2026 08:45:11 +0000 Certificate not after: Tue 24 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 194 AS: 14041 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:e2:d5:c3:26:c2:4a:80:6c:35:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 22 08:45:11 2026 GMT Not After : Oct 24 08:45:11 2028 GMT Subject: CN=9ac09e11-24a9-4451-9633-b772a7a11960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:e3:f4:bd:9b:9b:5e:7b:ea:c9:6a:ad:bb: 38:e7:d7:b5:4c:90:c5:03:34:57:de:c0:22:29:73: 59:fc:a0:fb:5e:15:85:19:46:2c:81:3d:3f:42:f7: 57:fc:a3:b5:aa:ed:36:cf:df:2c:12:1c:c1:b1:0b: 94:8c:9b:63:a7:e3:1b:0e:3e:de:e7:3b:1b:a9:4a: f5:e2:e1:e5:8d:08:e3:6b:31:55:ca:ad:48:d6:34: 9c:cd:fb:20:41:a3:9e:c4:ef:ab:a7:5c:7d:d6:9d: 3b:7d:d7:ba:6e:ec:a2:d0:fc:60:5f:5f:8d:ba:c2: 04:23:7f:97:96:97:3f:3a:43:62:1d:b9:00:3e:e6: 5e:2d:2f:7a:3a:14:9f:d6:57:70:26:72:84:43:3a: a6:54:22:88:e0:75:39:09:47:86:65:5d:19:9c:a8: 1b:c9:fd:a5:1a:6d:83:d8:38:cb:e3:6c:e8:f3:1a: f1:d1:60:63:d8:5a:35:e8:24:47:7d:3c:df:9a:fc: 80:d7:b2:dd:4d:ec:bd:39:6c:66:2c:97:e2:7b:1a: 61:6b:ca:68:7c:ca:b1:a4:2a:7b:c6:01:43:0f:fa: 3a:59:68:5e:97:5b:b0:b0:f0:c7:47:0c:cc:f8:e9: 56:24:df:0d:9a:fc:24:42:e1:52:b3:f4:48:00:3c: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 194 14041 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:8a:1f:54:9d:d6:4f:0b:28:55:3b:fc:62:1f:46:1d:cc:14: 1a:37:ca:0e:5e:19:47:95:0c:55:2c:ef:9f:07:1f:de:97:63: bd:f2:cf:b4:ff:98:0e:53:c9:d3:da:22:53:98:a4:60:df:ae: ac:61:34:53:c5:84:2f:21:e8:48:dd:73:6b:ce:7f:6e:57:e7: 29:ed:c3:28:e2:40:ac:66:66:e8:e9:ac:ce:47:6c:d4:0b:35: c3:68:4c:d6:66:79:1b:71:a2:bd:6c:3a:4f:3f:7b:0a:a5:fd: 85:1a:cc:86:83:77:38:13:09:c9:ff:a6:f4:d1:c1:98:00:a5: fd:3e:d7:e5:87:05:ca:bf:dd:9b:93:81:a5:cf:c7:cf:10:ea: 8c:71:01:85:63:11:21:63:d5:cf:de:4a:9f:16:aa:63:c8:c3: 1a:68:b0:b5:49:97:d5:b0:cf:91:39:7c:03:1b:ce:ca:21:72: cf:03:ae:e5:15:dc:70:7d:2e:12:bc:38:8c:04:18:0d:c0:15: cf:d8:e5:8f:cb:8a:95:56:37:f6:67:97:c0:c5:e2:1e:5e:9d: c9:a0:ef:9c:71:67:97:a1:06:44:a0:cd:95:a8:e2:ec:c5:30: 2b:17:b6:18:c9:ba:61:79:34:3a:cd:eb:0d:23:70:0b:11:f3: ae:23:11:4e -----BEGIN CERTIFICATE----- MIIG6zCCBdOgAwIBAgIUAQ0Mn0MoWE6U4tXDJsJKgGw1oAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcyMjA4NDUxMVoXDTI4MTAyNDA4NDUxMVowLzEtMCsGA1UEAxMk OWFjMDllMTEtMjRhOS00NDUxLTk2MzMtYjc3MmE3YTExOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gbj9L2bm1576slqrbs459e1TJDFAzRX3sAi KXNZ/KD7XhWFGUYsgT0/QvdX/KO1qu02z98sEhzBsQuUjJtjp+MbDj7e5zsbqUr1 4uHljQjjazFVyq1I1jSczfsgQaOexO+rp1x91p07fde6buyi0PxgX1+NusIEI3+X lpc/OkNiHbkAPuZeLS96OhSf1ldwJnKEQzqmVCKI4HU5CUeGZV0ZnKgbyf2lGm2D 2DjL42zo8xrx0WBj2Fo16CRHfTzfmvyA17LdTey9OWxmLJfiexpha8pofMqxpCp7 xgFDD/o6WWhel1uwsPDHRwzM+OlWJN8NmvwkQuFSs/RIADwnHwIDAQABo4ID/TCC A/kwHQYDVR0OBBYEFDc7i8Wntvby80LSqh5Dnpk/W4TmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdhMTE5NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzlhYzA5ZTExLTI0YTktNDQ1MS05 NjMzLWI3NzJhN2ExMTk2MC85YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdh MTE5NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHQYIKwYBBQUH AQgBAf8EDjAMoAowCAICAMICAjbZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADiKH1Sd1k8LKFU7/GIfRh3M FBo3yg5eGUeVDFUs758HH96XY73yz7T/mA5TydPaIlOYpGDfrqxhNFPFhC8h6Ejd c2vOf25X5yntwyjiQKxmZujprM5HbNQLNcNoTNZmeRtxor1sOk8/ewql/YUazIaD dzgTCcn/pvTRwZgApf0+1+WHBcq/3ZuTgaXPx88Q6oxxAYVjESFj1c/eSp8WqmPI wxposLVJl9Wwz5E5fAMbzsohcs8DruUV3HB9LhK8OIwEGA3AFc/Y5Y/LipVWN/Zn l8DF4h5encmg75xxZ5ehBkSgzZWo4uzFMCsXthjJumF5NDrN6w0jcAsR864jEU4= -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:08 2026 by rpki-client