$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0.cer File: ff223998-3819-4b72-ade1-eec292b0a8d0.cer (raw, json) Hash identifier: lILex1YYSATQHzAGZgbUUmsGfZKEon/Jc5Vllubq6II= Subject key identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E5B32383221FE54661BEBCDA8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 16:48:16 +0000 Certificate not after: Wed 29 Sep 2027 15:04:09 +0000 Subordinate resources: AS: 11703 IP: 198.102.109.0/24 IP: 2602:f609::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5b:32:38:32:21:fe:54:66:1b:eb:cd:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 1 16:48:16 2026 GMT Not After : Sep 29 15:04:09 2027 GMT Subject: CN=ff223998-3819-4b72-ade1-eec292b0a8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:30:99:86:df:c8:48:a7:06:a9:db:f8:9a: e7:12:e9:a5:ce:02:67:fa:a2:cf:63:96:ba:47:10: 6c:25:08:35:af:57:63:3c:62:53:23:62:8e:67:e3: 39:ba:38:35:08:46:cc:50:4f:d7:84:3e:57:8c:c8: 4f:d4:ae:1f:76:ee:7c:f5:0f:b5:bf:e1:2f:e0:83: a2:c4:90:77:6e:00:96:9f:42:c3:f6:bb:20:22:27: 36:d2:0a:02:8f:6b:7a:9a:97:0e:c4:20:9d:1f:1b: f7:dd:20:14:a1:16:ab:ad:87:2a:91:de:3a:b2:b9: af:3d:0f:b9:f0:6f:0d:3a:42:92:54:e1:38:4a:98: 08:21:21:1a:b3:a9:af:85:4a:72:59:ee:99:d3:5c: c6:be:4a:00:2f:ee:88:af:75:d6:cd:2e:b9:d6:96: 4a:69:cb:92:bf:3e:78:b7:d5:f2:f3:af:0d:6f:bc: ae:91:a1:23:2f:1a:2a:64:f2:aa:15:5f:ef:60:56: 04:fe:58:e6:71:78:dd:f4:48:51:48:8b:0e:bc:3f: 04:c0:bc:74:55:4b:fa:c6:86:9e:8f:a4:b7:b3:ce: 61:cf:56:b1:2e:85:d6:76:16:dd:94:ae:df:54:79: 6f:09:f7:33:69:1b:db:d5:0e:b3:1f:42:07:b8:38: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:24:77:DE:D9:26:8C:BB:AE:95:D5:64:47:F4:A8:33:DD:92:79 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ff223998-3819-4b72-ade1-eec292b0a8d0/ff223998-3819-4b72-ade1-eec292b0a8d0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 198.102.109.0/24 IPv6: 2602:f609::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11703 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ac:dd:b3:83:d5:c2:24:d9:e4:08:1b:0a:66:71:79:ca:d4: 3f:a0:5e:d2:6b:a5:8a:cd:90:2b:40:d9:3b:3d:8c:3b:b8:81: 32:7f:ac:af:c1:95:63:4d:15:c4:86:9a:9f:90:b0:10:3f:81: 63:e5:aa:3b:a8:27:f3:89:29:7a:6d:91:51:cf:82:0f:7c:68: 6f:12:c3:50:c7:40:75:a2:63:30:45:da:46:02:c3:25:4f:d2: e2:da:e7:f1:b0:75:f7:0a:11:99:c6:1e:c6:a5:c4:55:69:e1: fa:1a:99:13:5d:2d:47:e2:7c:93:9f:d9:5d:a5:90:e4:11:d7: 54:7e:25:31:91:63:4c:d0:5e:23:89:8c:9e:95:ce:fc:2a:b2: 7a:a9:b7:31:5a:0c:57:53:a3:ab:49:7b:5c:75:3f:77:76:fe: 41:68:63:16:19:9e:78:6f:4b:bd:7a:cb:e6:b6:1f:b9:b0:ae: cb:ec:a6:21:2f:bb:a9:1c:20:3a:f8:e8:50:89:6b:43:4e:b8: 64:de:c0:46:bc:14:d8:e3:30:22:7b:dd:ef:13:f7:15:cb:1a: d8:56:5d:e9:33:e3:8e:b5:05:ad:a6:93:f9:0d:14:26:b1:10: a0:e0:c9:09:3e:1c:50:66:55:cc:4b:80:ca:6b:db:66:1e:db: 7f:be:e8:21 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE5bMjgyIf5UZhvrzagwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcwMTE2NDgxNloXDTI3MDkyOTE1MDQwOVowLzEtMCsGA1UEAxMk ZmYyMjM5OTgtMzgxOS00YjcyLWFkZTEtZWVjMjkyYjBhOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv8wmYbfyEinBqnb+JrnEumlzgJn+qLPY5a6 RxBsJQg1r1djPGJTI2KOZ+M5ujg1CEbMUE/XhD5XjMhP1K4fdu589Q+1v+Ev4IOi xJB3bgCWn0LD9rsgIic20goCj2t6mpcOxCCdHxv33SAUoRarrYcqkd46srmvPQ+5 8G8NOkKSVOE4SpgIISEas6mvhUpyWe6Z01zGvkoAL+6Ir3XWzS651pZKacuSvz54 t9Xy868Nb7yukaEjLxoqZPKqFV/vYFYE/ljmcXjd9EhRSIsOvD8EwLx0VUv6xoae j6S3s85hz1axLoXWdhbdlK7fVHlvCfczaRvb1Q6zH0IHuDh02wIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDRkJHfe2SaMu66V1WRH9Kgz3ZJ5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJiMGE4ZDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZmMjIzOTk4LTM4MTktNGI3Mi1h ZGUxLWVlYzI5MmIwYThkMC9mZjIyMzk5OC0zODE5LTRiNzItYWRlMS1lZWMyOTJi MGE4ZDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADGZm0wDgQCAAIwCAMGACYC9gkAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAi23MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIas3bOD1cIk2eQIGwpmcXnK1D+g XtJrpYrNkCtA2Ts9jDu4gTJ/rK/BlWNNFcSGmp+QsBA/gWPlqjuoJ/OJKXptkVHP gg98aG8Sw1DHQHWiYzBF2kYCwyVP0uLa5/GwdfcKEZnGHsalxFVp4foamRNdLUfi fJOf2V2lkOQR11R+JTGRY0zQXiOJjJ6VzvwqsnqptzFaDFdTo6tJe1x1P3d2/kFo YxYZnnhvS716y+a2H7mwrsvspiEvu6kcIDr46FCJa0NOuGTewEa8FNjjMCJ73e8T 9xXLGthWXekz4461Ba2mk/kNFCaxEKDgyQk+HFBmVcxLgMpr22Ye23++6CE= -----END CERTIFICATE-----Generated at Thu Jul 23 22:57:28 2026 by rpki-client