$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer File: d589f3e4-2701-48f5-9c6b-7ea8d071ece7.cer (raw, json) Hash identifier: cgCzhLk87dzixcT1yZrg9kap9zjI1r0WQjPlg/0JMjE= Subject key identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D438D4648C6D48D0A03C2BB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 12:45:22 +0000 Certificate not after: Sun 25 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 962 AS: 400679 IP: 206.168.92.0/24 IP: 2602:fb82::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:8d:46:48:c6:d4:8d:0a:03:c2:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 23 12:45:22 2026 GMT Not After : Jun 25 12:45:22 2028 GMT Subject: CN=d589f3e4-2701-48f5-9c6b-7ea8d071ece7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:da:ae:58:d1:ea:0f:ab:1c:ea:62:75:17:1c: 60:13:5b:27:c3:26:e1:2a:0c:ee:27:90:9e:a1:f5: 0c:37:2d:ba:0e:d0:05:40:d2:61:61:e3:38:d5:79: 44:40:e0:74:3a:59:88:f3:10:e8:d9:a4:55:17:ff: 39:41:10:63:7a:6d:19:27:3e:5a:ac:64:d9:77:f8: 3d:f4:38:29:aa:96:dc:f5:11:f3:ca:aa:3b:1e:64: ec:46:d0:e7:78:21:21:cc:88:51:11:76:59:5e:a6: 6d:24:c6:ac:d6:4b:1f:0a:3d:a2:39:d2:cd:d0:0c: 09:a8:a4:dc:7f:e7:76:f4:ec:19:49:10:a7:a7:7c: e5:69:f6:17:e0:a6:96:78:54:04:52:98:b3:37:13: 6f:92:6e:b2:85:63:09:26:f3:e8:8f:e1:9e:96:d6: c6:1a:2a:32:24:a8:77:fc:04:5c:e0:0a:3d:3d:05: 41:f0:44:dd:40:dd:40:fc:0a:b9:f5:a4:8f:a0:52: a7:b2:ec:90:9e:91:6b:38:8f:fd:db:f4:21:80:dc: 81:67:f4:46:38:93:a9:b9:b4:5d:a2:4d:c6:fd:ad: f7:7b:a2:46:7c:60:64:58:f3:67:81:18:c4:83:bd: 77:e2:89:40:00:3a:43:75:3c:2d:bb:59:ec:d9:31: 04:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B9:A4:1B:C6:22:84:AE:E5:CB:BA:7B:33:62:3B:FA:24:FB:FF:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d589f3e4-2701-48f5-9c6b-7ea8d071ece7/d589f3e4-2701-48f5-9c6b-7ea8d071ece7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 206.168.92.0/24 IPv6: 2602:fb82::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 962 400679 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:83:f2:c7:54:cf:6e:60:2a:0b:57:70:db:df:71:9a:03:5e: d1:07:47:9a:3a:64:80:43:79:59:eb:1d:75:be:e3:15:be:fb: 74:14:66:ed:5f:e7:76:02:b5:cd:f4:37:ce:c0:7e:04:38:9a: da:80:d9:e1:f7:6e:3f:b4:bb:3e:3c:92:47:7b:8b:ce:32:31: 63:2d:14:1f:21:27:fd:1f:71:d9:ff:0a:25:b7:ad:15:93:63: b6:b4:49:8d:68:9c:93:32:25:5f:46:8b:4f:c5:78:e9:4e:97: 52:16:c2:f2:a7:0f:2d:a2:29:5f:16:47:0a:a1:07:c6:fb:33: e6:09:bf:46:61:80:09:b8:b4:72:20:eb:21:3b:d6:70:a8:06: f4:2e:b7:43:b8:ff:cc:9d:d3:23:13:b8:ea:31:68:52:80:21: 4c:a7:5d:e0:15:69:f4:12:26:b6:e3:c1:ff:83:e8:40:d5:44: db:8b:5e:70:c9:95:29:dc:99:70:e6:09:1e:a1:8d:68:b8:6a: 79:f1:ae:e3:47:6f:45:7f:4b:33:fe:22:68:5b:75:af:22:19: d1:89:ca:58:4a:0d:12:d0:79:21:fe:d3:a0:d4:e4:4c:21:57: c3:28:97:6c:72:f2:b3:53:a1:65:92:01:db:5a:8c:dc:b0:c6: d4:1b:51:bb -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE1DjUZIxtSNCgPCuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMyMzEyNDUyMloXDTI4MDYyNTEyNDUyMlowLzEtMCsGA1UEAxMk ZDU4OWYzZTQtMjcwMS00OGY1LTljNmItN2VhOGQwNzFlY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNquWNHqD6sc6mJ1FxxgE1snwybhKgzuJ5Ce ofUMNy26DtAFQNJhYeM41XlEQOB0OlmI8xDo2aRVF/85QRBjem0ZJz5arGTZd/g9 9Dgpqpbc9RHzyqo7HmTsRtDneCEhzIhREXZZXqZtJMas1ksfCj2iOdLN0AwJqKTc f+d29OwZSRCnp3zlafYX4KaWeFQEUpizNxNvkm6yhWMJJvPoj+GeltbGGioyJKh3 /ARc4Ao9PQVB8ETdQN1A/Aq59aSPoFKnsuyQnpFrOI/92/QhgNyBZ/RGOJOpubRd ok3G/a33e6JGfGBkWPNngRjEg7134olAADpDdTwtu1ns2TEEfwIDAQABo4IELzCC BCswHQYDVR0OBBYEFEG5pBvGIoSu5cu6ezNiO/ok+/8iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k NTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3MWVjZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q1ODlmM2U0LTI3MDEtNDhmNS05 YzZiLTdlYThkMDcxZWNlNy9kNTg5ZjNlNC0yNzAxLTQ4ZjUtOWM2Yi03ZWE4ZDA3 MWVjZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADOqFwwDgQCAAIwCAMGBCYC+4IAMB4GCCsGAQUF BwEIAQH/BA8wDaALMAkCAgPCAgMGHScwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj4Pyx1TPbmAqC1dw299x mgNe0QdHmjpkgEN5Wesddb7jFb77dBRm7V/ndgK1zfQ3zsB+BDia2oDZ4fduP7S7 PjySR3uLzjIxYy0UHyEn/R9x2f8KJbetFZNjtrRJjWickzIlX0aLT8V46U6XUhbC 8qcPLaIpXxZHCqEHxvsz5gm/RmGACbi0ciDrITvWcKgG9C63Q7j/zJ3TIxO46jFo UoAhTKdd4BVp9BImtuPB/4PoQNVE24tecMmVKdyZcOYJHqGNaLhqefGu40dvRX9L M/4iaFt1ryIZ0YnKWEoNEtB5If7ToNTkTCFXwyiXbHLys1OhZZIB21qM3LDG1BtR uw== -----END CERTIFICATE-----Generated at Wed Mar 25 23:20:03 2026 by rpki-client