$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer File: 0f63fd96-8907-4574-8e07-79a8c7fd8c7a.cer (raw, json) Hash identifier: jXpTINinj4bxqYjTLfpdcHfZeyRUY/uzNFTeEFVRIZg= Subject key identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CD134FE86B55E5667EB342480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Feb 2026 13:45:21 +0000 Certificate not after: Mon 15 May 2028 12:45:21 +0000 Subordinate resources: AS: 46238 IP: 96.46.112.0/20 IP: 162.248.0.0/22 IP: 2606:9480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d1:34:fe:86:b5:5e:56:67:eb:34:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 10 13:45:21 2026 GMT Not After : May 15 12:45:21 2028 GMT Subject: CN=0f63fd96-8907-4574-8e07-79a8c7fd8c7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0e:4c:32:b2:12:f4:0f:54:2f:2f:2a:a6:10: f6:63:ce:7b:46:b5:c0:c3:9f:59:ff:8e:6a:e7:85: 43:05:2f:31:47:6c:53:eb:f5:4d:c9:70:d8:ce:c5: 16:19:db:95:8c:92:45:a5:1e:95:5b:47:a2:b9:08: 4f:de:9f:de:1f:97:4a:3e:3c:e9:3d:ba:12:3f:97: b8:01:fa:29:d4:34:70:9e:f6:44:2e:e4:4b:1b:39: 7b:9f:26:b8:b0:8d:6c:a4:46:f1:57:5f:ae:e5:e0: c7:68:25:2b:e8:00:7a:07:0a:2b:50:5a:9e:7f:51: 3e:b4:8d:96:d3:23:49:42:71:04:81:cd:77:1e:04: 14:24:d4:ac:71:d3:71:5b:6e:0f:a2:5b:80:e0:51: 74:24:90:19:e5:6f:7a:52:63:f3:01:50:85:38:93: e5:93:95:85:c7:e0:f2:22:a8:73:34:21:20:13:eb: 55:94:c1:19:1b:95:43:4b:98:3b:e3:c4:ec:81:cb: c1:1d:e3:d3:b3:13:d7:64:4c:a9:0a:88:72:31:0d: d9:3f:9e:38:a8:f2:4a:37:d2:e2:55:16:1b:0f:75: e1:ef:9a:c7:a4:05:1f:87:5c:d0:e1:65:60:69:84: a7:6f:0b:6b:64:ad:3f:07:9a:27:ce:c3:ae:bb:9c: 19:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:0E:D2:2B:49:AF:1B:55:A0:09:F8:3F:C0:71:88:2F:43:E9:F5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f63fd96-8907-4574-8e07-79a8c7fd8c7a/0f63fd96-8907-4574-8e07-79a8c7fd8c7a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 96.46.112.0/20 162.248.0.0/22 IPv6: 2606:9480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46238 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:6a:d2:f3:67:17:47:13:f7:14:b1:e2:91:41:25:58:76:e1: d2:3f:d8:b9:68:e9:e6:a1:59:70:ae:20:d8:e5:c1:ee:03:04: 8f:a8:83:9e:66:6c:b9:c9:ff:2b:68:8b:45:7a:29:02:05:20: 01:8c:52:d9:00:85:d6:cb:0b:f8:d2:f9:65:bd:60:fa:9f:20: 11:ab:fd:0a:8a:9c:d2:f7:37:0c:37:68:01:19:bb:29:55:6b: 99:bc:02:f9:7d:ed:9a:e6:c7:25:ff:71:1a:c2:63:97:96:ce: 17:fd:d7:70:ca:4e:86:b7:2f:af:1f:8b:07:3f:23:eb:ff:09: 17:cf:86:0e:ce:d7:b0:be:16:c8:6e:0c:0f:43:c5:cb:83:f9: 88:a9:4f:35:8b:f4:2c:c1:d8:46:09:ab:a1:ed:09:95:9e:bd: ae:9f:01:0c:19:80:2f:26:06:91:cf:0d:3c:32:7b:d5:cc:10: 5b:bc:46:cf:0c:45:91:a8:a2:ee:c8:16:a9:4b:48:cb:3a:b8: f9:27:46:5f:73:00:2c:9a:5d:ac:71:f3:d6:64:5c:f2:64:ec: ea:ea:da:b8:e7:0b:fa:f3:91:f9:ae:7b:2c:ff:51:5e:c3:d1: 09:21:8a:fe:35:df:42:dc:69:4e:59:11:ca:07:0f:bf:a0:16: 15:3c:c7:f9 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEzRNP6GtV5WZ+s0JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIxMDEzNDUyMVoXDTI4MDUxNTEyNDUyMVowLzEtMCsGA1UEAxMk MGY2M2ZkOTYtODkwNy00NTc0LThlMDctNzlhOGM3ZmQ4YzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQ5MMrIS9A9ULy8qphD2Y857RrXAw59Z/45q 54VDBS8xR2xT6/VNyXDYzsUWGduVjJJFpR6VW0eiuQhP3p/eH5dKPjzpPboSP5e4 Afop1DRwnvZELuRLGzl7nya4sI1spEbxV1+u5eDHaCUr6AB6BworUFqef1E+tI2W 0yNJQnEEgc13HgQUJNSscdNxW24PoluA4FF0JJAZ5W96UmPzAVCFOJPlk5WFx+Dy IqhzNCEgE+tVlMEZG5VDS5g748TsgcvBHePTsxPXZEypCohyMQ3ZP544qPJKN9Li VRYbD3Xh75rHpAUfh1zQ4WVgaYSnbwtrZK0/B5onzsOuu5wZcQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFFd2DtIrSa8bVaAJ+D/AcYgvQ+n1MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8w ZjYzZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4YzdmZDhjN2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzBmNjNmZDk2LTg5MDctNDU3NC04 ZTA3LTc5YThjN2ZkOGM3YS8wZjYzZmQ5Ni04OTA3LTQ1NzQtOGUwNy03OWE4Yzdm ZDhjN2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARgLnADBAKi+AAwDQQCAAIwBwMFACYGlIAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDALSeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAERq0vNnF0cT9xSx4pFB JVh24dI/2Llo6eahWXCuINjlwe4DBI+og55mbLnJ/ytoi0V6KQIFIAGMUtkAhdbL C/jS+WW9YPqfIBGr/QqKnNL3Nww3aAEZuylVa5m8Avl97ZrmxyX/cRrCY5eWzhf9 13DKToa3L68fiwc/I+v/CRfPhg7O17C+FshuDA9DxcuD+YipTzWL9CzB2EYJq6Ht CZWeva6fAQwZgC8mBpHPDTwye9XMEFu8Rs8MRZGoou7IFqlLSMs6uPknRl9zACya Xaxx89ZkXPJk7Orq2rjnC/rzkfmueyz/UV7D0Qkhiv4130LcaU5ZEcoHD7+gFhU8 x/k= -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:25 2026 by rpki-client