$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer File: ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.cer (raw, json) Hash identifier: 8ClRPscW8q63zJPkBPPxnFVpnt/hHLw3Bj6fPVn/7pw= Subject key identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E8422BB6FFA9A4A613CB11840 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Jul 2026 08:45:12 +0000 Certificate not after: Wed 18 Oct 2028 08:45:12 +0000 Subordinate resources: IP: 68.64.56.0/21 IP: 68.69.0.0/22 IP: 74.209.163.0 -- 74.209.164.255 IP: 74.209.170.0/23 IP: 74.209.174.0/24 IP: 74.209.189.0 -- 74.209.191.255 IP: 2605:15c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:22:bb:6f:fa:9a:4a:61:3c:b1:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 16 08:45:12 2026 GMT Not After : Oct 18 08:45:12 2028 GMT Subject: CN=ebb739b8-a0ed-4449-8c62-99ff6b94b1c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bd:d2:a7:55:f4:27:8d:9b:22:92:0f:fe:28: 01:1e:c7:26:39:b4:3b:19:30:11:f3:0a:3b:26:7a: ad:84:e9:c3:9d:a6:0e:d9:f8:31:df:d2:04:5e:7a: 6c:b7:b3:36:ff:f6:27:96:12:e5:bc:e7:2d:2d:b7: 09:86:77:35:52:af:60:d2:4a:6e:fa:1e:27:5a:b5: 52:8e:91:66:6b:bb:97:03:96:28:e5:ed:d1:87:0f: ee:19:5b:2b:ea:c5:ae:12:76:58:4a:cd:bb:94:fd: 41:fc:98:db:ce:92:d8:d3:10:b5:66:f6:26:f8:e1: 87:58:eb:3e:ba:6b:66:5c:44:fd:0d:dc:41:82:4c: c9:84:c2:72:87:26:5b:69:87:ab:de:72:6c:f2:50: 03:4c:cc:b7:a5:9c:ca:6d:a2:c4:70:ba:64:d0:34: 64:40:67:ee:bd:80:31:7f:51:85:10:8a:88:dd:cd: 5d:6b:51:0c:9d:97:90:4d:a1:33:10:46:43:1b:c2: 74:cb:22:96:97:fd:ad:80:6b:f3:9e:cd:20:57:4f: 56:0b:f0:4d:f1:a3:34:1a:82:26:9d:90:7f:2b:8f: 20:50:96:28:a8:78:a3:bd:18:c1:41:7b:df:54:d8: 12:f8:ee:57:84:5d:7b:52:08:7f:67:2c:b0:8a:af: 20:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:6D:FB:B0:55:03:BC:DA:B3:01:9A:91:11:03:C2:E7:54:DB:63 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3/ebb739b8-a0ed-4449-8c62-99ff6b94b1c3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 68.64.56.0/21 68.69.0.0/22 74.209.163.0-74.209.164.255 74.209.170.0/23 74.209.174.0/24 74.209.189.0-74.209.191.255 IPv6: 2605:15c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9e:bb:8b:af:78:91:13:c0:3f:f4:22:75:62:43:2c:2a:e1: 35:3a:b2:e2:6d:f3:db:07:da:8b:c7:75:06:4b:5c:8d:37:b0: 26:76:65:ed:07:ee:f3:31:7c:d7:29:cd:fd:88:99:81:fb:af: f5:49:62:be:fe:9e:e9:0a:12:50:38:ec:33:01:d4:12:71:a0: c8:51:82:30:dc:39:38:81:37:9a:8c:92:04:8f:5c:82:92:dc: 3f:1c:b7:45:d6:16:7c:7a:4a:fd:98:0e:48:a8:3c:bb:bb:a1: b1:57:25:5b:7f:f6:df:e4:69:2d:18:a9:c0:03:c5:31:c4:1b: 03:60:17:78:13:47:ac:de:29:02:5f:a6:96:85:f6:39:cd:dd: d4:44:a8:c1:c0:f6:75:7d:f4:61:c5:51:60:8c:5d:70:32:98: c2:fb:60:3e:7b:c9:fc:91:bd:c8:b4:76:7d:39:af:ce:66:a8: 95:a9:eb:8e:1a:29:99:e0:41:3b:fd:f8:75:0d:18:40:1b:da: fa:2f:c5:45:55:1f:84:e5:33:54:fe:15:6d:98:e9:09:11:7a: 77:4a:76:0e:5c:19:be:ed:e5:46:33:f2:4b:01:8d:7d:af:4c: 26:44:1d:e4:6e:6e:28:d7:88:20:82:0b:87:fe:ba:86:9c:ee: 29:85:f0:8b -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWE6EIrtv+ppKYTyxGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcxNjA4NDUxMloXDTI4MTAxODA4NDUxMlowLzEtMCsGA1UEAxMk ZWJiNzM5YjgtYTBlZC00NDQ5LThjNjItOTlmZjZiOTRiMWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb3Sp1X0J42bIpIP/igBHscmObQ7GTAR8wo7 JnqthOnDnaYO2fgx39IEXnpst7M2//YnlhLlvOctLbcJhnc1Uq9g0kpu+h4nWrVS jpFma7uXA5Yo5e3Rhw/uGVsr6sWuEnZYSs27lP1B/JjbzpLY0xC1ZvYm+OGHWOs+ umtmXET9DdxBgkzJhMJyhyZbaYer3nJs8lADTMy3pZzKbaLEcLpk0DRkQGfuvYAx f1GFEIqI3c1da1EMnZeQTaEzEEZDG8J0yyKWl/2tgGvzns0gV09WC/BN8aM0GoIm nZB/K48gUJYoqHijvRjBQXvfVNgS+O5XhF17Ugh/Zyywiq8gkwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFO7+bfuwVQO82rMBmpERA8LnVNtjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l YmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5NGIxYzMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ViYjczOWI4LWEwZWQtNDQ0OS04 YzYyLTk5ZmY2Yjk0YjFjMy9lYmI3MzliOC1hMGVkLTQ0NDktOGM2Mi05OWZmNmI5 NGIxYzMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwXAYIKwYBBQUH AQcBAf8ETTBLMDoEAgABMDQDBANEQDgDBAJERQAwDAMEAErRowMEAErRpAMEAUrR qgMEAErRrjAMAwQAStG9AwQGStGAMA0EAgACMAcDBQAmBRXAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADie u4uveJETwD/0InViQywq4TU6suJt89sH2ovHdQZLXI03sCZ2Ze0H7vMxfNcpzf2I mYH7r/VJYr7+nukKElA47DMB1BJxoMhRgjDcOTiBN5qMkgSPXIKS3D8ct0XWFnx6 Sv2YDkioPLu7obFXJVt/9t/kaS0YqcADxTHEGwNgF3gTR6zeKQJfppaF9jnN3dRE qMHA9nV99GHFUWCMXXAymML7YD57yfyRvci0dn05r85mqJWp644aKZngQTv9+HUN GEAb2vovxUVVH4TlM1T+FW2Y6QkRendKdg5cGb7t5UYz8ksBjX2vTCZEHeRubijX iCCCC4f+uoac7imF8Is= -----END CERTIFICATE-----Generated at Thu Jul 23 21:42:46 2026 by rpki-client