$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer File: bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer (raw, json) Hash identifier: R3hElUA1m1kyD9VoQXRWXOJ6H+praJRfzcbfE+2Npek= Subject key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F4AD068F290DEFAD4914D29A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 25 Sep 2026 12:45:11 +0000 Certificate not after: Thu 28 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 40867 IP: 74.114.72.0/21 IP: 172.86.240.0/21 IP: 208.90.96.0/21 IP: 2605:3240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4a:d0:68:f2:90:de:fa:d4:91:4d:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 25 12:45:11 2026 GMT Not After : Dec 28 13:45:11 2028 GMT Subject: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4a:28:37:1b:90:f9:a2:33:3a:0d:43:af:1d: 87:5c:4e:d4:90:47:65:38:13:82:94:10:df:14:f9: 69:e9:b1:d7:7c:3e:3f:80:1c:6b:53:8c:95:1a:97: 72:aa:91:f7:bd:8f:08:84:50:a8:f0:50:05:65:01: 2d:57:c8:32:cf:24:52:c5:90:2b:44:db:9a:ab:11: f6:f6:42:99:42:28:f0:ac:53:4f:58:b0:99:1b:52: 9f:08:8a:c7:1c:35:ae:f4:c3:de:7b:08:a9:5e:8c: 53:a9:e0:08:bc:af:1a:b9:6d:20:47:de:88:d2:cc: 75:da:42:d5:ca:2d:ca:82:0e:15:a9:62:ce:ec:53: e3:d2:18:14:9b:b0:0c:b0:ee:50:cc:7e:68:54:de: 82:86:77:7f:c1:b4:e4:07:05:5b:ca:bc:46:73:3b: e2:8a:3a:d8:cc:f8:4d:66:f8:dd:a9:1e:3d:e0:cd: cb:b1:b0:12:aa:5c:b0:d6:e1:82:00:a9:e4:fe:47: 9e:4c:5e:88:57:9c:53:97:2c:65:67:82:16:f1:30: 6d:3b:37:a0:ba:91:14:b3:d2:23:1f:b9:0c:2e:41: 28:60:26:05:e7:3d:c4:de:d1:65:08:59:24:69:73: 31:80:37:9b:57:bc:cc:bd:53:cb:3b:d0:70:e7:2f: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.114.72.0/21 172.86.240.0/21 208.90.96.0/21 IPv6: 2605:3240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40867 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:01:44:4c:2f:f1:56:7a:6e:30:35:5d:5a:d3:93:dd:76:42: 2d:a5:5b:7c:f0:e0:ad:44:36:f5:ad:3d:1b:c7:51:4d:2b:c9: 57:9e:25:52:ef:b1:16:77:7e:4b:2a:b3:b0:68:d5:fe:1c:58: 80:ac:62:ff:3f:70:f0:b4:88:45:94:1a:15:84:d9:b2:b4:bd: 8e:1c:7e:9d:88:fe:e6:9e:c0:e5:e8:0e:33:05:3f:80:2c:3f: a6:cf:56:49:66:c5:fa:ad:fe:c1:63:99:52:e5:3b:ae:ab:c3: d2:ea:be:16:c9:14:4e:2a:48:4e:8b:3f:c1:8c:aa:ff:77:09: 92:33:d7:f3:42:bb:c8:33:9a:02:e0:38:73:88:f2:f6:21:77: 5a:51:61:af:8d:57:84:e9:c1:c9:dc:d5:bf:4a:6c:58:65:11: 0a:c7:09:fc:b2:b0:64:58:3b:7e:a3:97:72:81:a0:99:b0:82: 5f:5b:64:48:0c:ca:a3:01:c3:7b:d0:97:d1:42:70:80:89:c4: fd:b1:fe:4e:7f:25:08:75:5c:d6:f1:f7:1d:70:81:e4:3d:08: c6:15:0b:41:1d:41:01:46:0d:2e:9e:22:11:2d:03:cb:3b:e2: 33:95:40:1d:78:d6:fa:de:38:0d:60:bb:d8:79:99:f0:d1:66: f8:09:1e:90 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9K0GjykN761JFNKaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkyNTEyNDUxMVoXDTI4MTIyODEzNDUxMVowLzEtMCsGA1UEAxMk YmYzYzNiZDUtM2I5NC00N2UyLTgxZmMtZjQ5MDA4MTRlNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEooNxuQ+aIzOg1Drx2HXE7UkEdlOBOClBDf FPlp6bHXfD4/gBxrU4yVGpdyqpH3vY8IhFCo8FAFZQEtV8gyzyRSxZArRNuaqxH2 9kKZQijwrFNPWLCZG1KfCIrHHDWu9MPeewipXoxTqeAIvK8auW0gR96I0sx12kLV yi3Kgg4VqWLO7FPj0hgUm7AMsO5QzH5oVN6Chnd/wbTkBwVbyrxGczviijrYzPhN ZvjdqR494M3LsbASqlyw1uGCAKnk/keeTF6IV5xTlyxlZ4IW8TBtOzegupEUs9Ij H7kMLkEoYCYF5z3E3tFlCFkkaXMxgDebV7zMvVPLO9Bw5y/X2wIDAQABo4IENjCC BDIwHQYDVR0OBBYEFL9u4M20L3SWRgwuzXYMfxZaXIFvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i ZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgxNGU0OTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2JmM2MzYmQ1LTNiOTQtNDdlMi04 MWZjLWY0OTAwODE0ZTQ5NC9iZjNjM2JkNS0zYjk0LTQ3ZTItODFmYy1mNDkwMDgx NGU0OTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBANKckgDBAOsVvADBAPQWmAwDQQCAAIwBwMFACYF MkAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJ+jMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACEBREwv8VZ6 bjA1XVrTk912Qi2lW3zw4K1ENvWtPRvHUU0ryVeeJVLvsRZ3fksqs7Bo1f4cWICs Yv8/cPC0iEWUGhWE2bK0vY4cfp2I/uaewOXoDjMFP4AsP6bPVklmxfqt/sFjmVLl O66rw9LqvhbJFE4qSE6LP8GMqv93CZIz1/NCu8gzmgLgOHOI8vYhd1pRYa+NV4Tp wcnc1b9KbFhlEQrHCfyysGRYO36jl3KBoJmwgl9bZEgMyqMBw3vQl9FCcICJxP2x /k5/JQh1XNbx9x1wgeQ9CMYVC0EdQQFGDS6eIhEtA8s74jOVQB141vreOA1gu9h5 mfDRZvgJHpA= -----END CERTIFICATE-----Generated at Wed Sep 30 00:22:04 2026 by rpki-client