$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57.cer File: b194e538-e4ea-40c8-9645-c46a9d5dfe57.cer (raw, json) Hash identifier: yEMDaEgg4gBF7aisPFKFSuudMqKaqPgCoM7J3nhrP2E= Subject key identifier: 9E:B0:C7:9B:AA:D3:E0:97:9D:55:0D:F8:2B:6A:03:73:55:BE:34:1F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E89B8190CDEE049D902A63680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/b194e538-e4ea-40c8-9645-c46a9d5dfe57.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 18 Jul 2026 08:45:11 +0000 Certificate not after: Fri 20 Oct 2028 08:45:11 +0000 Subordinate resources: IP: 2604:a4c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:b8:19:0c:de:e0:49:d9:02:a6:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 18 08:45:11 2026 GMT Not After : Oct 20 08:45:11 2028 GMT Subject: CN=b194e538-e4ea-40c8-9645-c46a9d5dfe57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:51:76:0a:02:f1:f5:29:6e:31:e8:12:84:a0: d3:92:86:ab:f7:64:5b:af:e5:a7:3d:07:f7:6c:19: 19:3a:c0:de:c6:22:3d:29:7e:df:14:e9:2e:f2:4e: 8c:82:6d:7a:4e:6c:ad:01:e0:57:0d:35:cd:8c:d5: 37:b2:e2:83:bd:50:25:57:f7:ec:15:f8:f4:e2:6b: bb:46:24:7b:a4:e8:61:97:23:fb:21:9f:9c:92:6e: c4:e4:ab:09:90:4f:c8:97:f0:4f:aa:db:26:21:bf: 61:a1:20:61:b9:19:2d:43:fc:9c:dd:1e:f1:8d:eb: 93:2a:d6:fb:f9:92:65:b1:ef:64:17:79:62:a8:5f: a5:8b:1a:46:a4:55:59:02:05:c5:74:aa:b1:93:9d: 51:8c:3b:f6:f1:b1:f2:f1:79:b3:ad:c9:d5:11:27: 63:d8:82:d0:0f:39:2f:5b:7b:0f:56:de:c4:d4:7d: 76:d8:16:79:67:d4:9e:6a:ec:09:d3:6e:84:83:bb: 4b:7d:00:b2:73:60:7b:6f:28:fe:40:97:17:52:06: 1a:bb:2a:ad:47:a6:dc:f1:47:32:45:be:38:ca:a3: 30:7f:04:b6:1d:af:45:a0:32:fc:8f:8d:e8:09:17: e5:bb:ac:f0:a1:5b:f1:28:c6:e5:3a:4e:2f:76:a7: 8b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B0:C7:9B:AA:D3:E0:97:9D:55:0D:F8:2B:6A:03:73:55:BE:34:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b194e538-e4ea-40c8-9645-c46a9d5dfe57/b194e538-e4ea-40c8-9645-c46a9d5dfe57.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2604:a4c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:22:7b:0b:bc:b0:8b:cf:26:c7:14:e9:2e:ed:a3:d1:7c:e4: d6:df:9b:e2:10:6d:1a:69:7d:71:08:e5:55:aa:5e:e8:e8:66: 27:2f:9f:7b:91:9d:f1:f4:51:ee:4d:90:95:03:2e:57:87:ec: 42:48:19:1c:9b:a5:8a:c6:1e:3c:29:21:be:b9:31:56:bb:00: 13:53:1b:90:a2:1f:85:97:84:82:d7:6d:95:2a:cd:a1:f5:31: 74:4b:51:51:19:ce:16:11:c2:38:c2:aa:d0:d6:f7:7a:35:43: de:3e:59:d4:67:f6:91:9e:fd:4e:e9:f1:aa:ef:30:b8:6d:79: 65:b2:cb:89:cf:49:92:65:40:fe:24:e1:15:38:4e:ba:0a:56: 9d:87:7f:20:ed:0f:6b:ef:2b:c5:c1:b6:44:08:50:e7:8c:f8: 4f:cc:be:94:89:7f:3d:68:9d:81:58:94:f9:b3:cd:72:d2:4b: d2:c2:51:e8:67:1f:e6:b1:4c:00:6e:5e:50:72:8c:f2:b7:0e: 7e:e1:18:07:2c:d5:81:67:df:b9:f7:2f:24:b5:f5:43:fb:01: cc:34:66:86:cb:e5:a6:65:e3:7d:6a:44:aa:ea:7f:9d:1f:f6: ff:50:a3:49:f6:39:63:35:86:13:1c:52:0f:75:12:80:50:3d: c5:c9:94:29 -----BEGIN CERTIFICATE----- MIIG7jCCBdagAwIBAgIUAQ0Mn0MoWE6JuBkM3uBJ2QKmNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcxODA4NDUxMVoXDTI4MTAyMDA4NDUxMVowLzEtMCsGA1UEAxMk YjE5NGU1MzgtZTRlYS00MGM4LTk2NDUtYzQ2YTlkNWRmZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlF2CgLx9SluMegShKDTkoar92Rbr+WnPQf3 bBkZOsDexiI9KX7fFOku8k6Mgm16TmytAeBXDTXNjNU3suKDvVAlV/fsFfj04mu7 RiR7pOhhlyP7IZ+ckm7E5KsJkE/Il/BPqtsmIb9hoSBhuRktQ/yc3R7xjeuTKtb7 +ZJlse9kF3liqF+lixpGpFVZAgXFdKqxk51RjDv28bHy8XmzrcnVESdj2ILQDzkv W3sPVt7E1H122BZ5Z9SeauwJ026Eg7tLfQCyc2B7byj+QJcXUgYauyqtR6bc8Ucy Rb44yqMwfwS2Ha9FoDL8j43oCRflu6zwoVvxKMblOk4vdqeLlQIDAQABo4IEADCC A/wwHQYDVR0OBBYEFJ6wx5uq0+CXnVUN+CtqA3NVvjQfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i MTk0ZTUzOC1lNGVhLTQwYzgtOTY0NS1jNDZhOWQ1ZGZlNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2IxOTRlNTM4LWU0ZWEtNDBjOC05 NjQ1LWM0NmE5ZDVkZmU1Ny9iMTk0ZTUzOC1lNGVhLTQwYzgtOTY0NS1jNDZhOWQ1 ZGZlNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBKTAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG4iewu8sIvPJscU6S7t o9F85Nbfm+IQbRppfXEI5VWqXujoZicvn3uRnfH0Ue5NkJUDLleH7EJIGRybpYrG HjwpIb65MVa7ABNTG5CiH4WXhILXbZUqzaH1MXRLUVEZzhYRwjjCqtDW93o1Q94+ WdRn9pGe/U7p8arvMLhteWWyy4nPSZJlQP4k4RU4TroKVp2HfyDtD2vvK8XBtkQI UOeM+E/MvpSJfz1onYFYlPmzzXLSS9LCUehnH+axTABuXlByjPK3Dn7hGAcs1YFn 37n3LyS19UP7Acw0ZobL5aZl431qRKrqf50f9v9Qo0n2OWM1hhMcUg91EoBQPcXJ lCk= -----END CERTIFICATE-----Generated at Thu Jul 23 20:15:37 2026 by rpki-client