$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3.cer File: eaf7df35-c67f-440d-9799-461e7a809ef3.cer (raw, json) Hash identifier: WlbKYyszeo6kGDodr8FOP6top3CKc2UqxjfjEBcsdLk= Subject key identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D40C296A137C2A0CC3C8B1840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 12:45:22 +0000 Certificate not after: Sat 24 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 19633 AS: 54630 AS: 62856 IP: 64.207.216.0/22 IP: 162.248.184.0/22 IP: 192.103.120.0/22 IP: 209.112.104.0/22 IP: 2620:130:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:c2:96:a1:37:c2:a0:cc:3c:8b:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 22 12:45:22 2026 GMT Not After : Jun 24 12:45:22 2028 GMT Subject: CN=eaf7df35-c67f-440d-9799-461e7a809ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:92:70:a9:51:ce:0c:1f:87:20:a2:eb:41:0b: eb:64:2c:37:87:d6:49:f2:7d:71:3f:78:a7:e4:a1: 32:3a:52:6e:80:57:8d:6a:a8:4d:ab:8c:4a:0a:a5: 42:52:a7:1b:d9:40:ef:48:d7:d2:b6:5f:99:b1:82: f9:1f:14:ab:3a:fd:87:04:23:34:a5:e1:97:a3:aa: c6:d1:e3:7b:1b:54:d1:bc:3c:e7:40:c0:ec:76:72: 92:38:a2:30:28:72:de:0e:31:1e:d1:77:86:22:84: 40:07:a9:f6:54:72:03:42:d4:a6:49:fc:92:e1:2e: c5:0f:fc:59:b2:f2:d3:31:a0:3e:11:08:e7:06:6f: 0a:da:22:89:98:f1:e7:46:c1:15:f8:f7:b6:ca:50: 69:a2:46:3a:1d:7f:09:a1:d9:18:89:f4:fe:b3:76: b4:96:52:18:f0:6b:0e:55:41:ab:5a:fd:e4:3f:27: c2:ca:10:f2:38:2e:c1:8f:91:2f:9c:4f:35:69:c2: 91:c3:20:05:04:a5:df:5d:35:40:af:f4:ec:4f:ca: d4:31:fa:a6:3f:cf:a4:2b:a0:b3:b6:ff:d2:68:fc: 64:10:ec:06:2b:94:fc:f6:85:4f:0b:72:1c:5c:f3: 38:7a:9e:5e:4d:5a:79:c9:a5:b0:10:28:c6:fb:28: 4b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6C:E3:DD:BC:F0:06:54:CF:29:32:2A:23:2F:FC:E1:12:C2:5B:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eaf7df35-c67f-440d-9799-461e7a809ef3/eaf7df35-c67f-440d-9799-461e7a809ef3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.207.216.0/22 162.248.184.0/22 192.103.120.0/22 209.112.104.0/22 IPv6: 2620:130:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19633 54630 62856 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ca:0f:bd:52:bb:b4:b7:be:a8:1e:4e:0b:25:b6:e6:6a:ba: db:43:40:59:9b:9b:b9:24:78:bc:ed:0b:02:2c:7e:09:48:56: 82:29:ef:a7:6b:9a:66:52:67:61:56:39:1b:49:65:08:07:e5: a0:2a:df:94:1d:63:56:d3:84:d5:09:2c:48:79:a9:1f:62:df: 04:31:6e:55:67:59:6e:5b:0d:a9:3a:ad:fa:0d:68:78:32:b2: 00:24:f5:05:a1:a6:e6:c1:47:b0:95:d1:5b:5d:e8:43:70:b4: 66:9f:fe:de:39:99:d2:8f:cd:bc:76:e6:56:85:8e:11:81:30: ce:ec:7a:56:26:a4:6c:7c:8f:4e:4e:87:bb:62:4f:0e:7e:fc: 86:77:44:66:fe:9d:9e:dc:58:bc:ad:8e:2e:b2:23:8f:c4:d8: f5:60:c1:eb:6b:de:08:33:b3:b2:7e:b8:cd:e0:c2:c8:11:2e: 05:57:69:b1:3f:04:51:49:97:53:48:39:a8:24:db:d7:9e:60: 9d:e3:1a:a1:90:ad:ff:f0:04:15:50:83:d6:9c:ca:21:af:15: df:d7:a1:fd:ba:ff:cd:f8:fc:5e:f5:ef:93:95:34:f4:97:a7: 7b:db:51:a8:47:88:a2:61:ce:eb:cb:f8:a6:8f:a7:52:45:1f: dc:48:fa:d4 -----BEGIN CERTIFICATE----- MIIHNTCCBh2gAwIBAgIUAQ0Mn0MoWE1AwpahN8KgzDyLGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMyMjEyNDUyMloXDTI4MDYyNDEyNDUyMlowLzEtMCsGA1UEAxMk ZWFmN2RmMzUtYzY3Zi00NDBkLTk3OTktNDYxZTdhODA5ZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZJwqVHODB+HIKLrQQvrZCw3h9ZJ8n1xP3in 5KEyOlJugFeNaqhNq4xKCqVCUqcb2UDvSNfStl+ZsYL5HxSrOv2HBCM0peGXo6rG 0eN7G1TRvDznQMDsdnKSOKIwKHLeDjEe0XeGIoRAB6n2VHIDQtSmSfyS4S7FD/xZ svLTMaA+EQjnBm8K2iKJmPHnRsEV+Pe2ylBpokY6HX8JodkYifT+s3a0llIY8GsO VUGrWv3kPyfCyhDyOC7Bj5EvnE81acKRwyAFBKXfXTVAr/TsT8rUMfqmP8+kK6Cz tv/SaPxkEOwGK5T89oVPC3IcXPM4ep5eTVp5yaWwECjG+yhL1wIDAQABo4IERzCC BEMwHQYDVR0OBBYEFNls49288AZUzykyKiMv/OESwls6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l YWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4MDllZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VhZjdkZjM1LWM2N2YtNDQwZC05 Nzk5LTQ2MWU3YTgwOWVmMy9lYWY3ZGYzNS1jNjdmLTQ0MGQtOTc5OS00NjFlN2E4 MDllZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQgYIKwYBBQUH AQcBAf8EMzAxMB4EAgABMBgDBAJAz9gDBAKi+LgDBALAZ3gDBALRcGgwDwQCAAIw CQMHBCYgATDwADAjBggrBgEFBQcBCAEB/wQUMBKgEDAOAgJMsQIDANVmAgMA9Ygw VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B AQsFAAOCAQEAj8oPvVK7tLe+qB5OCyW25mq620NAWZubuSR4vO0LAix+CUhWginv p2uaZlJnYVY5G0llCAfloCrflB1jVtOE1QksSHmpH2LfBDFuVWdZblsNqTqt+g1o eDKyACT1BaGm5sFHsJXRW13oQ3C0Zp/+3jmZ0o/NvHbmVoWOEYEwzux6ViakbHyP Tk6Hu2JPDn78hndEZv6dntxYvK2OLrIjj8TY9WDB62veCDOzsn64zeDCyBEuBVdp sT8EUUmXU0g5qCTb155gneMaoZCt//AEFVCD1pzKIa8V39eh/br/zfj8XvXvk5U0 9Jene9tRqEeIomHO68v4po+nUkUf3Ej61A== -----END CERTIFICATE-----Generated at Wed Mar 25 23:19:07 2026 by rpki-client