$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer File: cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer (raw, json) Hash identifier: J54GAeJDeM4NSwjYhHRq0hqtavjjSdePb6dj8tBW3C8= Subject key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D3597D8ACC03B88986D41CD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Mar 2026 12:45:22 +0000 Certificate not after: Tue 20 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 395332 IP: 23.146.104.0/24 IP: 206.81.106.0/24 IP: 2602:fb69::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:97:d8:ac:c0:3b:88:98:6d:41:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 18 12:45:22 2026 GMT Not After : Jun 20 12:45:22 2028 GMT Subject: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:a5:75:3a:8b:91:4e:f4:f3:44:e6:0c:e9: a5:59:d4:4b:69:99:24:7f:a9:22:e4:d3:8f:ef:4e: 95:1f:fc:1b:b7:be:dc:b2:93:d4:fd:29:6e:70:ed: e8:04:10:f0:62:ae:b4:9c:02:f5:1b:3f:88:1a:59: ca:46:e1:18:ef:33:57:fb:1e:dc:e1:d9:81:4f:ee: c8:b6:e9:09:37:77:7d:0e:0c:fb:0c:54:c6:0f:76: ad:d4:64:49:77:6c:96:c0:b7:83:c5:7d:fd:ca:9e: f7:d3:be:42:79:7d:c2:c3:a6:ae:03:6b:21:2b:70: e8:d9:74:0e:22:1e:37:61:45:a4:5b:14:66:b8:a1: e8:49:c5:bd:67:7d:79:fc:dd:c5:ae:4e:20:6b:a1: a0:6d:e6:95:47:4b:d3:b1:99:34:57:11:a9:0b:1b: 4f:49:1a:b1:56:36:6a:ee:ef:77:11:2b:c3:de:90: 99:12:3a:4e:d4:97:c7:37:a5:24:1a:fe:39:99:9f: 76:c9:21:0c:f5:f1:63:55:a5:8f:33:a7:c5:5f:f9: 72:a7:40:09:a5:93:78:8c:fb:ac:cc:bc:51:91:99: c3:60:09:86:83:da:6d:82:0f:ea:c1:6c:fc:64:34: 04:bd:ca:2c:91:d0:8f:1a:66:03:35:e1:4f:33:7a: f1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.146.104.0/24 206.81.106.0/24 IPv6: 2602:fb69::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395332 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c2:81:a1:b6:8e:c0:b3:8e:f5:42:a4:2e:11:5e:ef:31:53: f4:db:95:1f:b1:38:5d:e9:c7:31:34:96:c7:e9:54:13:f8:b4: ac:e6:e5:20:89:70:3d:46:89:62:0d:dc:1b:1e:c0:38:07:6b: 01:16:a6:5d:eb:55:02:ab:50:00:a1:2e:83:00:33:62:fe:d2: 92:d8:11:2c:2b:a0:df:77:af:90:84:d1:50:b4:d9:52:19:53: 58:46:74:83:75:d8:7a:ae:39:03:5f:d2:59:a7:03:0b:35:6e: 30:80:f2:a0:21:72:98:01:63:d8:82:c9:41:2e:9a:01:72:40: 1f:28:2a:63:1b:29:2e:19:6c:02:af:49:f6:3b:e9:24:6e:86: 05:67:4a:b5:21:df:c3:ce:ef:8f:49:43:73:e0:25:2b:51:e9: 48:31:d7:bb:eb:12:6b:2c:b8:84:6a:42:ca:4b:00:46:0f:72: 95:21:61:46:84:9d:62:57:af:15:4e:fe:26:45:df:b6:5d:3b: 13:0d:47:60:96:85:75:18:4d:2b:ec:a8:8a:11:bf:26:a3:24: f4:1f:66:18:66:36:e5:b6:78:0d:b2:f0:cb:28:d7:76:ef:fc: 36:c3:50:f2:39:4d:6a:9e:b4:e2:9f:86:22:13:f8:ea:91:06: f6:0e:a9:fd -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE01l9iswDuImG1BzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxODEyNDUyMloXDTI4MDYyMDEyNDUyMlowLzEtMCsGA1UEAxMk Y2MyYjA4ZjktYjNkYy00Y2Y2LTg3MGMtYTczMGI4NjBjNDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPaldTqLkU7080TmDOmlWdRLaZkkf6ki5NOP 706VH/wbt77cspPU/SlucO3oBBDwYq60nAL1Gz+IGlnKRuEY7zNX+x7c4dmBT+7I tukJN3d9Dgz7DFTGD3at1GRJd2yWwLeDxX39yp73075CeX3Cw6auA2shK3Do2XQO Ih43YUWkWxRmuKHoScW9Z315/N3Frk4ga6GgbeaVR0vTsZk0VxGpCxtPSRqxVjZq 7u93ESvD3pCZEjpO1JfHN6UkGv45mZ92ySEM9fFjVaWPM6fFX/lyp0AJpZN4jPus zLxRkZnDYAmGg9ptgg/qwWz8ZDQEvcoskdCPGmYDNeFPM3rxEwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFOEfvyjq8EsGi+ArUcq9YDuNxxiYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j YzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2MGM0OTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2NjMmIwOGY5LWIzZGMtNGNmNi04 NzBjLWE3MzBiODYwYzQ5MS9jYzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2 MGM0OTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXkmgDBADOUWowDgQCAAIwCAMGACYC+2kAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYIRDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYwoGhto7As471QqQu EV7vMVP025UfsThd6ccxNJbH6VQT+LSs5uUgiXA9RoliDdwbHsA4B2sBFqZd61UC q1AAoS6DADNi/tKS2BEsK6Dfd6+QhNFQtNlSGVNYRnSDddh6rjkDX9JZpwMLNW4w gPKgIXKYAWPYgslBLpoBckAfKCpjGykuGWwCr0n2O+kkboYFZ0q1Id/Dzu+PSUNz 4CUrUelIMde76xJrLLiEakLKSwBGD3KVIWFGhJ1iV68VTv4mRd+2XTsTDUdgloV1 GE0r7KiKEb8moyT0H2YYZjbltngNsvDLKNd27/w2w1DyOU1qnrTin4YiE/jqkQb2 Dqn9 -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:22 2026 by rpki-client