$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer File: d00749ed-70ef-447c-b17c-da6be8d7f312.cer (raw, json) Hash identifier: gmm7C2uyPmEBJIYgrOe4c0RB7ei3qFxi5OxcWnMhZYw= Subject key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D1FF389EEB5CCCC3086337CFD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 18:42:20 +0000 Certificate not after: Thu 16 Sep 2027 00:45:36 +0000 Subordinate resources: AS: 16686 IP: 64.68.192.0/20 IP: 198.38.0.0/22 IP: 205.233.216.0/24 IP: 2620:49::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:f3:89:ee:b5:cc:cc:30:86:33:7c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 10 18:42:20 2026 GMT Not After : Sep 16 00:45:36 2027 GMT Subject: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:80:f5:83:3b:ef:eb:61:96:71:29:64:15: e2:1f:02:32:c8:4e:7c:32:ef:30:88:e6:5b:0e:5d: fc:0f:5f:ac:be:dd:70:ed:7e:7d:32:35:56:a8:68: 0b:99:e0:9f:d6:c9:96:3e:81:98:9d:b9:ae:8f:78: 56:ed:1f:84:68:92:62:76:88:87:9a:30:fb:51:bb: 5e:f2:37:62:c2:8b:16:69:85:5f:a7:30:5a:ce:3d: f5:e4:36:0d:8d:8e:99:f6:43:8a:d4:1f:91:27:dd: 2f:04:0f:1e:99:d4:3c:7a:0b:95:ab:c3:99:bc:b0: bd:ee:bf:fd:8b:d9:ba:c2:4a:b6:9e:76:d1:82:9a: 25:d1:3f:14:a1:8e:05:24:2f:88:9d:11:c8:e5:8c: 7f:be:92:e1:a5:5b:3f:3f:80:4f:5a:35:34:d4:63: 64:da:2d:15:fe:d1:1d:9f:1d:75:d0:4e:ea:18:87: 05:20:d0:54:20:62:27:3a:62:85:b9:bd:97:7e:88: d6:85:1d:c9:98:ab:1b:60:f6:68:33:0a:df:4e:f1: 01:1a:39:bf:cf:78:87:d2:15:1d:b0:65:f4:49:8b: ec:c0:7c:b0:83:de:53:d2:7b:c7:a1:a4:f2:0a:a8: 36:60:b9:2a:4b:c5:0e:0a:2d:05:37:4a:1e:15:59: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.68.192.0/20 198.38.0.0/22 205.233.216.0/24 IPv6: 2620:49::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:22:b9:26:cc:e4:5d:de:bd:81:9b:99:d7:65:28:3a:88:7d: d3:ec:3a:64:66:42:a9:2f:99:aa:54:9d:de:f5:c9:1e:31:f9: 66:4e:29:1a:e6:76:9f:a4:2c:c3:38:c7:ab:e8:47:ee:82:89: af:c4:d9:76:d1:60:f9:83:3b:e5:19:63:57:4c:69:73:81:e4: 50:22:58:74:6e:f9:cb:32:12:80:b2:8c:c6:79:14:ec:45:53: 37:0a:db:91:a2:35:50:1e:03:c9:27:ec:8f:9a:be:01:f3:fb: 26:67:28:f9:ad:ed:ef:dd:84:d8:5d:27:b0:d7:07:35:86:66: 13:8b:36:95:bf:63:ee:a5:df:81:21:67:43:1c:76:7f:0e:47: 04:7f:68:51:49:be:3f:d9:b3:df:12:b2:77:a8:8d:a0:75:cc: ee:79:a3:65:54:b4:64:39:48:a8:ce:93:f9:af:5a:78:77:99: 4a:c4:7a:2c:0a:c0:96:e5:60:2e:c0:77:b4:e1:15:a9:3e:2c: 49:b1:2c:14:c7:77:95:ea:eb:c7:6b:a6:0a:58:33:9e:11:b7: 30:27:f4:47:e0:f3:03:ad:5b:df:cf:70:d9:05:57:2e:e9:1d: dd:a2:3e:e6:e3:d4:06:b3:56:f6:43:fc:7e:00:59:dc:f8:5c: 7a:0e:77:fa -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE0f84nutczMMIYzfP0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxMDE4NDIyMFoXDTI3MDkxNjAwNDUzNlowLzEtMCsGA1UEAxMk ZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdmMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjWA9YM77+thlnEpZBXiHwIyyE58Mu8wiOZb Dl38D1+svt1w7X59MjVWqGgLmeCf1smWPoGYnbmuj3hW7R+EaJJidoiHmjD7Ubte 8jdiwosWaYVfpzBazj315DYNjY6Z9kOK1B+RJ90vBA8emdQ8eguVq8OZvLC97r/9 i9m6wkq2nnbRgpol0T8UoY4FJC+InRHI5Yx/vpLhpVs/P4BPWjU01GNk2i0V/tEd nx110E7qGIcFINBUIGInOmKFub2XfojWhR3JmKsbYPZoMwrfTvEBGjm/z3iH0hUd sGX0SYvswHywg95T0nvHoaTyCqg2YLkqS8UOCi0FN0oeFVnsTQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFPUgFYczWMUSeGRm87DjXYr0eHl0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k MDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2QwMDc0OWVkLTcwZWYtNDQ3Yy1i MTdjLWRhNmJlOGQ3ZjMxMi9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThk N2YzMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBARARMADBALGJgADBADN6dgwDwQCAAIwCQMHBCYg AEkAADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJBLjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4IrkmzORd 3r2Bm5nXZSg6iH3T7DpkZkKpL5mqVJ3e9ckeMflmTika5nafpCzDOMer6Efugomv xNl20WD5gzvlGWNXTGlzgeRQIlh0bvnLMhKAsozGeRTsRVM3CtuRojVQHgPJJ+yP mr4B8/smZyj5re3v3YTYXSew1wc1hmYTizaVv2Pupd+BIWdDHHZ/DkcEf2hRSb4/ 2bPfErJ3qI2gdczueaNlVLRkOUiozpP5r1p4d5lKxHosCsCW5WAuwHe04RWpPixJ sSwUx3eV6uvHa6YKWDOeEbcwJ/RH4PMDrVvfz3DZBVcu6R3doj7m49QGs1b2Q/x+ AFnc+Fx6Dnf6 -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:46 2026 by rpki-client