$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer File: 21bc3777-de7d-4aed-88bc-9c652ed17843.cer (raw, json) Hash identifier: W4KDFSzQG8UdJuUdHWuRxvuUrnyE1jrxgBw+BEpaKic= Subject key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584F410B04BEA4E5CAFE6F55A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 22 Sep 2026 00:45:11 +0000 Certificate not after: Mon 25 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 46188 IP: 199.21.176.0/22 IP: 199.45.28.0/22 IP: 208.93.12.0/22 IP: 2604:5300::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:0b:04:be:a4:e5:ca:fe:6f:55:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Sep 22 00:45:11 2026 GMT Not After : Dec 25 01:45:11 2028 GMT Subject: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:62:e4:ff:f7:c8:67:81:45:d9:35:9d:c4: 45:ee:3c:f7:00:69:ea:99:4a:f9:fd:c4:b0:d7:b9: 2e:97:bc:d2:fe:8d:42:55:68:5d:41:20:6d:50:19: 0a:53:e6:85:ac:73:16:39:38:60:06:64:1e:c5:fc: d4:9b:e8:7a:b7:2c:40:bc:96:91:d5:c0:10:9c:11: f6:1a:c2:b7:74:1f:0a:b4:ef:a9:33:b6:6d:fb:24: 3c:b4:a1:e0:b6:bf:de:3e:37:3f:ca:43:4f:6b:1c: 74:e4:52:45:ad:c9:0f:ad:b3:41:07:5f:a2:8a:06: aa:c3:64:c9:b6:00:40:58:a1:f3:45:9b:0b:2f:cf: a9:9a:56:01:16:05:75:d8:c8:2d:8d:49:48:5d:0d: 60:ba:a4:99:65:05:66:80:65:ff:61:a2:a7:64:ff: d3:bc:57:f1:52:35:35:03:0d:40:5b:b0:42:65:05: bc:8d:da:73:1a:be:00:3d:2d:02:a4:c9:c6:7c:a7: 5e:3a:f5:90:7d:15:f8:de:a1:9b:1a:28:65:b1:78: 4c:3c:cd:c8:73:51:33:81:d3:78:e7:77:5c:ed:91: 8e:bc:3a:c3:d7:6a:d7:93:4a:d2:8e:6e:7e:77:3b: 4e:32:3f:25:05:d6:f4:b8:00:4a:27:fe:3c:51:8a: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 IPv6: 2604:5300::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46188 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:39:10:16:a2:1e:c1:e4:27:ee:5f:cc:b0:32:32:d5:1f:a5: a4:d0:4b:0c:0d:58:6e:a1:8c:b5:94:ce:50:a6:9c:3f:dd:ea: f3:fc:8e:a4:b6:80:c4:d2:9b:49:0c:41:ac:8a:4f:c6:ae:11: 71:50:cf:a6:78:d8:60:d8:c3:30:4f:4b:29:fe:e5:9a:dd:85: 32:46:41:57:3f:a7:24:22:3f:d6:44:fe:f6:4d:e9:9e:07:03: 52:c1:69:91:39:85:e4:83:f8:9d:1e:6b:c6:bb:69:29:3f:90: f6:f7:a1:61:9c:8b:db:ea:1e:a2:65:f0:39:69:db:21:01:e4: 8a:65:c4:38:17:44:70:52:43:6c:d6:75:bf:cc:a3:ca:5c:1d: 22:a7:3c:3c:a0:21:a5:08:76:06:92:8d:6a:08:21:e4:9b:c6: 17:ac:3d:5a:8b:2e:4f:42:ed:17:1e:79:d8:62:c0:f5:6c:a1: 80:84:4e:2e:83:18:ba:e4:49:4b:60:c3:6f:7d:c2:d7:1a:94: 47:5a:3f:2d:e5:31:f1:73:3e:49:97:f0:f5:b7:cf:01:50:d3: 18:6c:cd:af:2b:59:f4:cc:db:41:68:cf:0b:b7:eb:0c:c4:72: dc:8b:25:58:14:71:fa:27:82:25:55:e7:f1:9b:e3:09:1c:e1: 8a:aa:c6:4c -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE9BCwS+pOXK/m9VqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDkyMjAwNDUxMVoXDTI4MTIyNTAxNDUxMVowLzEtMCsGA1UEAxMk MjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3ODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQJi5P/3yGeBRdk1ncRF7jz3AGnqmUr5/cSw 17kul7zS/o1CVWhdQSBtUBkKU+aFrHMWOThgBmQexfzUm+h6tyxAvJaR1cAQnBH2 GsK3dB8KtO+pM7Zt+yQ8tKHgtr/ePjc/ykNPaxx05FJFrckPrbNBB1+iigaqw2TJ tgBAWKHzRZsLL8+pmlYBFgV12MgtjUlIXQ1guqSZZQVmgGX/YaKnZP/TvFfxUjU1 Aw1AW7BCZQW8jdpzGr4APS0CpMnGfKdeOvWQfRX43qGbGihlsXhMPM3Ic1EzgdN4 53dc7ZGOvDrD12rXk0rSjm5+dztOMj8lBdb0uABKJ/48UYozPQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFFHRTKVQ0NByAEa/nF/nRQh+tFhRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8y MWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzLzIxYmMzNzc3LWRlN2QtNGFlZC04 OGJjLTljNjUyZWQxNzg0My8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVk MTc4NDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBALHFbADBALHLRwDBALQXQwwDQQCAAIwBwMFACYE UwAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALRsMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHI5EBaiHsHk J+5fzLAyMtUfpaTQSwwNWG6hjLWUzlCmnD/d6vP8jqS2gMTSm0kMQayKT8auEXFQ z6Z42GDYwzBPSyn+5ZrdhTJGQVc/pyQiP9ZE/vZN6Z4HA1LBaZE5heSD+J0ea8a7 aSk/kPb3oWGci9vqHqJl8Dlp2yEB5IplxDgXRHBSQ2zWdb/Mo8pcHSKnPDygIaUI dgaSjWoIIeSbxhesPVqLLk9C7RceedhiwPVsoYCETi6DGLrkSUtgw299wtcalEda Py3lMfFzPkmX8PW3zwFQ0xhsza8rWfTM20Fozwu36wzEctyLJVgUcfongiVV5/Gb 4wkc4Yqqxkw= -----END CERTIFICATE-----Generated at Sun Sep 27 08:10:01 2026 by rpki-client