$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3.cer File: ca37373e-61cf-4274-af0b-afb3c6d47ca3.cer (raw, json) Hash identifier: xbI5JdKmZVcGSWmww1hO7mpaPdByzoIY4ecCODpdhfw= Subject key identifier: 03:6E:12:71:92:A8:BB:32:5B:BD:B7:45:C0:4E:8A:87:FB:DB:B2:AF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F5421E8483289965760419580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/ca37373e-61cf-4274-af0b-afb3c6d47ca3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 28 Sep 2026 20:51:40 +0000 Certificate not after: Sun 31 Dec 2028 21:51:40 +0000 Subordinate resources: AS: 53672 IP: 66.232.60.0/22 IP: 148.59.118.0/23 IP: 198.154.7.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:21:e8:48:32:89:96:57:60:41:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 28 20:51:40 2026 GMT Not After : Dec 31 21:51:40 2028 GMT Subject: CN=ca37373e-61cf-4274-af0b-afb3c6d47ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7c:3d:0b:0b:db:72:5c:95:d6:94:7e:5e:d9: 15:77:06:69:20:f2:27:80:61:12:3a:d2:56:d3:42: 9e:a6:91:08:4f:97:54:d2:c4:1f:92:47:cd:33:29: 43:78:07:a0:15:f1:76:90:23:7c:39:2e:eb:6c:88: af:0c:05:2f:d7:f9:8f:a4:eb:33:8a:61:6f:e7:f3: 49:27:2d:dd:a7:84:a9:89:cd:e7:30:79:ad:9c:ae: 06:22:f3:a6:aa:9c:49:55:06:a6:2a:6d:9e:b4:b2: c6:2e:e0:c9:8a:63:49:4b:58:c9:84:b7:16:a0:0f: 73:15:6d:ed:20:cc:4a:f6:ff:ec:6b:dd:99:88:22: cc:b9:2b:39:9f:7d:63:73:a8:1f:fe:c1:e2:83:ce: 2f:d8:5b:0b:d3:c7:e1:50:06:21:8c:86:65:30:a6: 88:0c:88:9d:b0:e5:64:09:c0:e2:1c:75:8e:1d:9f: b7:57:ed:09:5d:2e:c4:bd:8d:a5:62:1c:e2:c4:70: 72:55:88:5d:cc:86:00:42:f8:38:9d:82:56:f7:68: d9:ae:e4:7c:56:3c:be:68:73:97:3d:13:b5:5e:74: ef:b6:b0:f8:e1:23:c1:39:c6:7d:25:d7:5b:e4:27: 94:80:d5:94:8b:10:4a:12:89:b5:5b:5f:54:f4:5b: 05:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:6E:12:71:92:A8:BB:32:5B:BD:B7:45:C0:4E:8A:87:FB:DB:B2:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ca37373e-61cf-4274-af0b-afb3c6d47ca3/ca37373e-61cf-4274-af0b-afb3c6d47ca3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.232.60.0/22 148.59.118.0/23 198.154.7.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53672 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:1f:7b:dc:1d:1e:4a:11:cd:35:d8:65:7a:f8:ed:75:4f:dd: f4:6f:67:ff:50:22:69:5b:25:b6:9b:db:64:86:45:c1:dd:06: ec:4e:f2:c4:3c:ec:43:92:b4:f6:67:59:e2:51:27:f7:37:75: da:5a:56:db:16:92:aa:71:b7:e8:a8:12:e5:0d:93:bd:d6:c0: 69:f9:f2:75:08:f9:cd:3e:3f:22:72:41:38:0e:2a:05:a7:02: 44:16:f2:f1:26:ad:ca:5c:e6:5d:72:38:4a:28:75:86:5a:e7: b7:fe:47:d1:42:3d:32:4d:f9:d1:17:78:9c:d6:4b:ba:0b:14: 25:fa:f5:e2:47:77:e2:2d:2f:85:f4:c8:c9:49:13:85:c3:07: b4:1e:36:97:df:27:34:45:c1:46:d9:49:2f:5d:51:63:b7:11: 49:8a:43:e4:74:a5:0f:5a:b3:e5:c9:df:b1:31:7f:d4:67:50: 66:07:9f:bb:a1:d1:9b:2f:64:96:37:0d:9b:20:1f:0d:ff:b9: 4d:af:c6:e7:72:7a:66:f4:3c:7a:bb:7f:e2:71:2f:61:8b:40: 72:e8:29:ce:c4:7b:bb:26:4e:0f:14:8a:cc:8c:60:bb:27:9b: f6:c4:25:76:2b:9e:18:c5:b8:11:da:69:7c:58:89:2f:ef:e2: f7:19:1e:11 -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWE9UIehIMomWV2BBlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkyODIwNTE0MFoXDTI4MTIzMTIxNTE0MFowLzEtMCsGA1UEAxMk Y2EzNzM3M2UtNjFjZi00Mjc0LWFmMGItYWZiM2M2ZDQ3Y2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHw9CwvbclyV1pR+XtkVdwZpIPIngGESOtJW 00KeppEIT5dU0sQfkkfNMylDeAegFfF2kCN8OS7rbIivDAUv1/mPpOszimFv5/NJ Jy3dp4Spic3nMHmtnK4GIvOmqpxJVQamKm2etLLGLuDJimNJS1jJhLcWoA9zFW3t IMxK9v/sa92ZiCLMuSs5n31jc6gf/sHig84v2FsL08fhUAYhjIZlMKaIDIidsOVk CcDiHHWOHZ+3V+0JXS7EvY2lYhzixHByVYhdzIYAQvg4nYJW92jZruR8Vjy+aHOX PRO1XnTvtrD44SPBOcZ9Jddb5CeUgNWUixBKEom1W19U9FsFZQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFANuEnGSqLsyW723RcBOiof727KvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j YTM3MzczZS02MWNmLTQyNzQtYWYwYi1hZmIzYzZkNDdjYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2NhMzczNzNlLTYxY2YtNDI3NC1h ZjBiLWFmYjNjNmQ0N2NhMy9jYTM3MzczZS02MWNmLTQyNzQtYWYwYi1hZmIzYzZk NDdjYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBAJC6DwDBAGUO3YDBADGmgcwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDANGoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFcfe9wdHkoRzTXYZXr47XVP3fRvZ/9Q ImlbJbab22SGRcHdBuxO8sQ87EOStPZnWeJRJ/c3ddpaVtsWkqpxt+ioEuUNk73W wGn58nUI+c0+PyJyQTgOKgWnAkQW8vEmrcpc5l1yOEoodYZa57f+R9FCPTJN+dEX eJzWS7oLFCX69eJHd+ItL4X0yMlJE4XDB7QeNpffJzRFwUbZSS9dUWO3EUmKQ+R0 pQ9as+XJ37Exf9RnUGYHn7uh0ZsvZJY3DZsgHw3/uU2vxudyemb0PHq7f+JxL2GL QHLoKc7Ee7smTg8UisyMYLsnm/bEJXYrnhjFuBHaaXxYiS/v4vcZHhE= -----END CERTIFICATE-----Generated at Tue Oct 6 18:26:14 2026 by rpki-client