$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e.cer File: 04c04f07-088c-4aa8-8ea2-3e691397960e.cer (raw, json) Hash identifier: phct+gugW4N+esop3Uxl0RBC8NtWJc71TYCwjYgroFk= Subject key identifier: 6F:73:AE:AB:86:C7:4D:95:5A:75:3E:33:A2:07:3F:AA:0C:CB:82:DD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D5AD8B9C3109A53F9456E0F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 31 Mar 2026 21:01:00 +0000 Certificate not after: Mon 03 Jul 2028 21:01:00 +0000 Subordinate resources: IP: 142.249.191.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5a:d8:b9:c3:10:9a:53:f9:45:6e:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 31 21:01:00 2026 GMT Not After : Jul 3 21:01:00 2028 GMT Subject: CN=04c04f07-088c-4aa8-8ea2-3e691397960e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a2:e3:20:fb:c0:f4:98:9d:fb:28:2f:f5:de: 54:11:c1:cc:e7:37:1b:0c:8c:55:29:7f:8c:13:74: db:7c:6a:08:29:f4:a3:1c:ec:dd:76:a8:0d:df:58: 54:24:3e:75:b3:65:ed:49:44:32:e2:92:3f:db:95: e9:b1:8f:7b:a1:24:99:d9:13:87:02:a3:b4:90:35: 52:0a:53:cc:cc:36:bb:fb:f7:04:00:fd:b8:c5:5a: 38:a0:51:9e:60:8c:08:09:44:50:2f:09:41:65:a3: 50:b0:60:2c:bd:e1:e6:fe:1c:4b:df:2d:a7:f2:96: a6:d6:11:1c:ba:3d:ee:fd:58:fe:c3:46:25:98:6a: a5:b5:ef:92:15:4e:bd:f0:79:cf:a5:22:d8:8a:ac: 44:24:5d:63:28:50:fd:6d:77:43:c4:1d:a2:54:f2: aa:fd:97:54:2a:5a:59:81:ac:e4:18:71:31:a9:d4: 77:e1:8c:03:28:4a:be:9a:57:da:c4:2e:f4:b2:c5: e2:24:f3:fe:6c:7a:6f:d0:cc:a8:cb:a4:de:f6:4c: aa:9d:6a:4c:83:db:74:6b:1a:cf:4b:66:a3:14:a8: 9b:6a:fa:17:da:b9:4f:dd:42:60:4c:99:4b:49:3c: 8d:42:0b:26:e0:36:6d:d5:ff:f1:19:05:ae:84:78: ee:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:73:AE:AB:86:C7:4D:95:5A:75:3E:33:A2:07:3F:AA:0C:CB:82:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/04c04f07-088c-4aa8-8ea2-3e691397960e/04c04f07-088c-4aa8-8ea2-3e691397960e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 142.249.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:69:7b:38:d7:99:e2:c1:1c:bc:75:3c:54:2a:17:cc:45:88: b8:d6:08:86:2c:06:e0:4a:e6:33:5b:9f:7d:8d:1a:73:e3:ff: 25:fd:a9:5f:bd:c4:8c:6c:c1:2c:77:83:6d:a4:64:e6:c7:43: b1:f5:d9:4d:6c:5e:98:56:7b:35:c6:3c:54:6c:61:da:60:01: 74:3c:27:03:c0:bf:66:b0:4a:e9:ee:36:72:b0:7f:f1:7f:a6: 87:40:2b:b1:e4:77:6e:57:60:78:84:cc:45:fd:df:5d:5b:b4: 95:9a:aa:3a:90:28:0b:22:73:aa:02:57:24:b1:03:92:ec:e7: 9f:bf:e9:79:39:ae:6c:e2:93:62:f1:6d:2f:95:80:cd:0f:4d: a9:9a:cf:1c:6d:e5:48:8b:4c:96:ea:1c:96:3f:1a:32:fa:a7: a8:06:32:97:74:d7:b7:95:4b:5a:1d:40:b8:d6:74:30:98:48: dd:e9:8d:41:61:8e:76:a8:d3:91:6f:ba:35:43:0c:55:74:21: 6f:16:ff:38:dd:c0:d5:89:3e:60:f4:1d:4e:11:a2:89:95:8e: 70:fb:1a:43:43:b6:08:c4:89:da:c9:16:a7:fc:0d:38:28:e2: 1c:a3:51:f4:73:90:77:03:24:2b:40:d0:7b:60:fc:f3:2e:ff: ce:5d:8a:57 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1a2LnDEJpT+UVuDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMzMTIxMDEwMFoXDTI4MDcwMzIxMDEwMFowLzEtMCsGA1UEAxMk MDRjMDRmMDctMDg4Yy00YWE4LThlYTItM2U2OTEzOTc5NjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqLjIPvA9Jid+ygv9d5UEcHM5zcbDIxVKX+M E3TbfGoIKfSjHOzddqgN31hUJD51s2XtSUQy4pI/25XpsY97oSSZ2ROHAqO0kDVS ClPMzDa7+/cEAP24xVo4oFGeYIwICURQLwlBZaNQsGAsveHm/hxL3y2n8pam1hEc uj3u/Vj+w0YlmGqlte+SFU698HnPpSLYiqxEJF1jKFD9bXdDxB2iVPKq/ZdUKlpZ gazkGHExqdR34YwDKEq+mlfaxC70ssXiJPP+bHpv0Myoy6Te9kyqnWpMg9t0axrP S2ajFKibavoX2rlP3UJgTJlLSTyNQgsm4DZt1f/xGQWuhHjuAQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG9zrquGx02VWnU+M6IHP6oMy4LdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w NGMwNGYwNy0wODhjLTRhYTgtOGVhMi0zZTY5MTM5Nzk2MGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzA0YzA0ZjA3LTA4OGMtNGFhOC04 ZWEyLTNlNjkxMzk3OTYwZS8wNGMwNGYwNy0wODhjLTRhYTgtOGVhMi0zZTY5MTM5 Nzk2MGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+b8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEARml7ONeZ4sEcvHU8VCoX zEWIuNYIhiwG4ErmM1uffY0ac+P/Jf2pX73EjGzBLHeDbaRk5sdDsfXZTWxemFZ7 NcY8VGxh2mABdDwnA8C/ZrBK6e42crB/8X+mh0ArseR3bldgeITMRf3fXVu0lZqq OpAoCyJzqgJXJLEDkuznn7/peTmubOKTYvFtL5WAzQ9NqZrPHG3lSItMluoclj8a MvqnqAYyl3TXt5VLWh1AuNZ0MJhI3emNQWGOdqjTkW+6NUMMVXQhbxb/ON3A1Yk+ YPQdThGiiZWOcPsaQ0O2CMSJ2skWp/wNOCjiHKNR9HOQdwMkK0DQe2D88y7/zl2K Vw== -----END CERTIFICATE-----Generated at Fri Apr 17 05:25:30 2026 by rpki-client