$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.cer File: a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.cer (raw, json) Hash identifier: 7+iO/9wO5DGgPBuG1U1s9j/dI/nBktIRk3wx84plD6Q= Subject key identifier: C6:16:7B:95:BB:5B:EF:FC:BE:4B:AB:89:06:71:A6:53:41:1D:43:DD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D4657F33D283F16A889BEA200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Mar 2026 12:45:22 +0000 Certificate not after: Mon 26 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 40464 IP: 135.84.48.0/22 IP: 2607:6700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:57:f3:3d:28:3f:16:a8:89:be:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 24 12:45:22 2026 GMT Not After : Jun 26 12:45:22 2028 GMT Subject: CN=a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7a:57:58:ad:f1:4a:3c:03:3d:87:ee:6e:25: 67:4f:1f:6b:0c:58:6b:d4:1d:dd:9d:81:4d:2f:c1: ce:69:2d:6e:e4:0b:ce:08:f1:f4:ff:6c:e0:b6:a7: 58:c5:1d:a7:8a:d7:9d:1e:eb:8d:e1:d8:63:1c:74: 56:6a:09:6c:aa:a6:40:5e:0d:0e:ba:8c:c4:3e:59: ca:74:62:6e:29:e5:f6:de:cd:db:c2:86:b4:7d:d9: 61:82:18:b3:ee:0d:3c:d7:6b:83:30:07:4f:9d:eb: 22:48:d8:d9:d8:f2:33:89:2a:7f:ca:98:c4:2a:53: be:37:81:72:f3:76:83:e7:7c:13:64:35:c0:80:09: 23:48:7c:ec:d3:fb:de:1c:37:c4:c6:8b:ff:c6:f7: 94:2b:3b:5c:9b:f7:ed:e3:a0:83:33:c2:77:5c:da: f8:90:e0:24:d5:73:bf:42:75:28:3f:1a:08:36:00: d4:c2:08:55:3e:d6:46:ec:b8:16:07:54:bb:61:c2: 68:bb:71:c6:8b:b2:ff:38:5c:39:8c:96:55:73:f0: 32:15:90:ef:98:d5:8d:6c:66:9e:d0:57:fc:42:7e: 71:f8:bf:3a:87:d6:33:e6:2f:e2:b1:f2:dc:59:a7: 4b:b5:6b:f2:6a:38:e4:88:94:9d:49:bd:6b:30:bb: 93:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:16:7B:95:BB:5B:EF:FC:BE:4B:AB:89:06:71:A6:53:41:1D:43:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc/a0764dc6-38c9-4159-9c2a-ecbbd97a3cbc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 135.84.48.0/22 IPv6: 2607:6700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40464 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:d6:c1:94:43:af:dc:60:4e:f8:1f:88:88:46:b1:28:dd:e6: bc:de:1f:44:c8:7b:56:00:f1:f4:ac:97:0a:2b:a2:17:57:b5: ea:d9:d9:af:5d:4b:45:c1:d2:f9:15:e9:1a:71:6b:2a:e5:14: b5:69:5e:65:05:08:b0:43:4d:d1:35:08:bd:2e:b7:1e:f7:50: ab:cc:2b:2d:e0:92:3a:a4:1b:94:a4:69:67:08:7a:46:11:a9: 37:b0:92:73:c4:78:a4:33:16:dc:b3:22:eb:aa:b6:bc:40:66: 07:53:5f:1c:97:65:bc:4b:8a:93:d1:c6:05:7b:21:80:c7:df: 4e:cd:f1:e7:df:71:ed:de:de:98:2f:6c:80:98:09:3d:5a:46: 83:c5:9a:c8:a1:fd:f9:f4:f4:e0:b5:3c:e6:47:cf:df:37:7d: df:df:41:63:a3:b4:38:7e:4c:29:68:49:b4:5e:7e:8e:66:39: 8f:62:4b:b5:36:0f:1a:d9:10:eb:e6:54:0f:e1:b4:2a:10:26: e2:9a:ee:f2:d0:9e:25:e9:cd:b7:9c:77:44:b4:a8:4f:ba:df: cd:ad:a2:dd:37:25:ac:a1:a5:39:eb:32:45:dc:b7:79:f2:26: 76:37:c5:7e:6c:6e:c4:72:37:75:36:84:39:26:8b:ae:86:4d: 13:46:40:b6 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE1GV/M9KD8WqIm+ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMyNDEyNDUyMloXDTI4MDYyNjEyNDUyMlowLzEtMCsGA1UEAxMk YTA3NjRkYzYtMzhjOS00MTU5LTljMmEtZWNiYmQ5N2EzY2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2npXWK3xSjwDPYfubiVnTx9rDFhr1B3dnYFN L8HOaS1u5AvOCPH0/2zgtqdYxR2nitedHuuN4dhjHHRWaglsqqZAXg0OuozEPlnK dGJuKeX23s3bwoa0fdlhghiz7g0812uDMAdPnesiSNjZ2PIziSp/ypjEKlO+N4Fy 83aD53wTZDXAgAkjSHzs0/veHDfExov/xveUKztcm/ft46CDM8J3XNr4kOAk1XO/ QnUoPxoINgDUwghVPtZG7LgWB1S7YcJou3HGi7L/OFw5jJZVc/AyFZDvmNWNbGae 0Ff8Qn5x+L86h9Yz5i/isfLcWadLtWvyajjkiJSdSb1rMLuTDQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFMYWe5W7W+/8vkuriQZxplNBHUPdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h MDc2NGRjNi0zOGM5LTQxNTktOWMyYS1lY2JiZDk3YTNjYmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2EwNzY0ZGM2LTM4YzktNDE1OS05 YzJhLWVjYmJkOTdhM2NiYy9hMDc2NGRjNi0zOGM5LTQxNTktOWMyYS1lY2JiZDk3 YTNjYmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKHVDAwDQQCAAIwBwMFACYHZwAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAJ4QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHLWwZRDr9xgTvgfiIhGsSjd5rze H0TIe1YA8fSslworohdXterZ2a9dS0XB0vkV6RpxayrlFLVpXmUFCLBDTdE1CL0u tx73UKvMKy3gkjqkG5SkaWcIekYRqTewknPEeKQzFtyzIuuqtrxAZgdTXxyXZbxL ipPRxgV7IYDH307N8effce3e3pgvbICYCT1aRoPFmsih/fn09OC1POZHz983fd/f QWOjtDh+TCloSbRefo5mOY9iS7U2DxrZEOvmVA/htCoQJuKa7vLQniXpzbecd0S0 qE+6382tot03JayhpTnrMkXct3nyJnY3xX5sbsRyN3U2hDkmi66GTRNGQLY= -----END CERTIFICATE-----Generated at Wed Mar 25 23:13:49 2026 by rpki-client