$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad.cer File: ab0439ab-3236-4080-a238-62d21f65e1ad.cer (raw, json) Hash identifier: XS/tA1wW/3/HTNKya5jFWWIZK47vl3LEUNN4BsoqB7g= Subject key identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E6837E390F3C22D64ED266780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 06 Jul 2026 08:45:11 +0000 Certificate not after: Sun 08 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 2602:80e:c000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:37:e3:90:f3:c2:2d:64:ed:26:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 6 08:45:11 2026 GMT Not After : Oct 8 08:45:11 2028 GMT Subject: CN=ab0439ab-3236-4080-a238-62d21f65e1ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7b:4b:ad:20:a4:0b:b9:17:e6:c6:f8:27:6d: c2:52:2d:e7:f7:7b:e4:cc:1d:81:fc:24:71:f3:ba: cb:58:f9:e3:aa:f7:9e:cd:85:28:2e:b9:b9:26:8a: 29:67:ea:90:11:41:b9:1a:38:b7:8b:52:ee:ff:2a: ed:85:d0:ef:e7:a4:e2:9e:8d:52:6d:d9:da:7c:84: a0:a6:2a:80:5a:36:51:39:a0:5d:17:4d:c4:4f:96: 26:46:45:60:3a:7f:c0:03:30:20:1a:89:7f:7e:32: b2:49:54:a4:1e:a3:53:e8:b2:c2:ea:24:95:e9:21: 48:bc:db:7f:f8:97:f7:20:cc:0e:66:9c:29:ed:72: 20:e6:ce:63:f3:3f:91:de:20:30:80:e9:fd:dd:bc: b4:0d:b1:a8:7f:59:d3:b0:e5:ab:4f:78:99:a2:98: 5b:37:5d:a3:b7:d3:e3:07:22:23:bb:43:69:50:4e: 43:46:3c:63:21:a5:3c:d6:b5:c1:c1:36:4a:93:c8: ce:d1:a4:8f:a2:c1:f8:f5:50:af:57:55:56:1b:a7: 1e:43:05:ff:98:7d:5d:4a:fb:5e:fd:d1:d6:3b:b1: b4:52:0e:bc:d3:f7:77:00:5f:80:32:37:7d:45:0a: f5:b7:f7:65:8b:ac:50:59:dc:50:a3:05:67:83:c0: 00:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:40:B2:F6:E4:5E:2D:0D:BA:67:3A:EE:11:E0:18:68:C3:F0:5D:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab0439ab-3236-4080-a238-62d21f65e1ad/ab0439ab-3236-4080-a238-62d21f65e1ad.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2602:80e:c000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:96:50:85:84:03:5f:9a:44:e2:65:7c:ac:cb:1e:60:d4:fa: e4:e3:4c:1f:d5:a7:f0:c2:f0:e8:44:56:36:86:57:79:68:dc: 45:a3:8a:42:0f:04:72:af:ef:1c:f0:9a:fa:c5:03:34:f1:fc: 98:b7:4b:9f:2a:ad:1f:9c:cb:b0:1b:3c:33:d8:d2:e7:a9:f9: 27:cb:90:5f:97:c0:d6:ca:ac:38:b7:68:9d:06:87:87:98:86: 8d:cd:a9:63:80:2b:98:4a:79:b6:09:3e:47:4d:69:2c:49:fd: 2b:a8:94:3a:16:bd:d0:3c:17:05:e1:a6:fd:b8:3a:ae:fa:08: af:a9:1d:c4:c2:03:8f:7c:db:2b:40:94:90:2f:a5:76:aa:cf: 9e:f7:77:71:d9:8b:01:6e:a1:cb:4d:86:cd:a1:15:6b:cd:02: 0e:81:f1:21:e2:ce:56:fc:9e:e0:a5:cf:4e:8d:d2:e7:d8:4d: c8:eb:34:a5:b5:81:19:21:1a:4d:82:46:59:7a:bf:47:1e:91: a3:9c:a1:eb:30:2d:52:48:b4:cd:29:36:cc:ac:5d:57:0e:7e: fd:ca:76:b4:f2:c7:11:37:d3:65:54:72:b6:ca:6d:81:69:e5: 8a:aa:fa:2d:e4:36:cf:ff:59:f8:9b:e5:4a:37:4b:ec:d9:36: 44:3b:55:70 -----BEGIN CERTIFICATE----- MIIG8DCCBdigAwIBAgIUAQ0Mn0MoWE5oN+OQ88ItZO0mZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcwNjA4NDUxMVoXDTI4MTAwODA4NDUxMVowLzEtMCsGA1UEAxMk YWIwNDM5YWItMzIzNi00MDgwLWEyMzgtNjJkMjFmNjVlMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3tLrSCkC7kX5sb4J23CUi3n93vkzB2B/CRx 87rLWPnjqveezYUoLrm5JoopZ+qQEUG5Gji3i1Lu/yrthdDv56Tino1SbdnafISg piqAWjZROaBdF03ET5YmRkVgOn/AAzAgGol/fjKySVSkHqNT6LLC6iSV6SFIvNt/ +Jf3IMwOZpwp7XIg5s5j8z+R3iAwgOn93by0DbGof1nTsOWrT3iZophbN12jt9Pj ByIju0NpUE5DRjxjIaU81rXBwTZKk8jO0aSPosH49VCvV1VWG6ceQwX/mH1dSvte /dHWO7G0Ug680/d3AF+AMjd9RQr1t/dli6xQWdxQowVng8AA5wIDAQABo4IEAjCC A/4wHQYDVR0OBBYEFBdAsvbkXi0Numc67hHgGGjD8F2vMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h YjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2NWUxYWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2FiMDQzOWFiLTMyMzYtNDA4MC1h MjM4LTYyZDIxZjY1ZTFhZC9hYjA0MzlhYi0zMjM2LTQwODAtYTIzOC02MmQyMWY2 NWUxYWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwQmAggOwAAwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmpZQhYQDX5pE4mV8 rMseYNT65ONMH9Wn8MLw6ERWNoZXeWjcRaOKQg8Ecq/vHPCa+sUDNPH8mLdLnyqt H5zLsBs8M9jS56n5J8uQX5fA1sqsOLdonQaHh5iGjc2pY4ArmEp5tgk+R01pLEn9 K6iUOha90DwXBeGm/bg6rvoIr6kdxMIDj3zbK0CUkC+ldqrPnvd3cdmLAW6hy02G zaEVa80CDoHxIeLOVvye4KXPTo3S59hNyOs0pbWBGSEaTYJGWXq/Rx6Ro5yh6zAt Uki0zSk2zKxdVw5+/cp2tPLHETfTZVRytsptgWnliqr6LeQ2z/9Z+JvlSjdL7Nk2 RDtVcA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:45:08 2026 by rpki-client