$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.cer File: 19e853ae-8c54-460c-a726-cbd1c7fc5ba2.cer (raw, json) Hash identifier: 1Q/9efHpQuhBpqb4lD8MpCPoLAytYwmRf7Hm3RhzYAs= Subject key identifier: 06:46:9E:1C:CA:FC:41:CE:1C:37:CC:73:CF:75:34:01:50:0A:10:5E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D6D589766D1077D751721F280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 07 Apr 2026 12:03:11 +0000 Certificate not after: Mon 10 Jul 2028 12:03:11 +0000 Subordinate resources: AS: 402359 IP: 2602:f406::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6d:58:97:66:d1:07:7d:75:17:21:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 7 12:03:11 2026 GMT Not After : Jul 10 12:03:11 2028 GMT Subject: CN=19e853ae-8c54-460c-a726-cbd1c7fc5ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fb:2d:60:43:f4:cd:a6:40:36:23:11:3c:f1: b4:ce:d6:1c:6b:64:5b:f8:8c:7d:52:21:b3:0d:34: 2e:96:d1:19:5b:aa:e6:dd:9b:87:8c:34:68:8f:09: 8a:0a:8e:8f:31:e2:67:21:79:db:35:35:b9:a8:c6: 26:72:8a:bd:cf:85:27:55:e5:88:01:ba:0b:a9:de: 24:d6:19:37:7a:15:14:ce:12:a2:e7:f7:01:f3:0c: 49:af:f0:24:d2:a5:1f:48:2a:f0:af:68:7b:3b:9b: 94:0c:ca:68:a0:8e:d7:e1:a9:e0:a9:27:fc:a9:de: c8:e2:51:2d:3c:5b:1b:7c:3a:f8:d6:b2:bd:f1:e2: 67:a0:48:63:8d:ff:33:84:e2:09:d9:29:d9:18:f1: 92:d9:3a:e5:d0:17:15:40:3e:2f:7a:c8:a7:96:f1: 04:e8:53:a0:6e:d1:4b:65:91:48:90:97:80:27:8b: c2:bc:a9:92:ec:bf:19:ea:54:36:60:d1:3c:95:37: 32:1b:f0:63:19:a5:93:72:8b:83:56:72:a2:25:2d: ca:17:cb:9b:f0:ee:f2:ba:dc:46:bd:7f:1c:aa:63: 81:18:56:3c:6e:8a:e7:21:88:73:e1:c6:27:b4:52: 5e:71:11:ef:df:33:15:4c:64:a2:23:93:73:db:eb: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:46:9E:1C:CA:FC:41:CE:1C:37:CC:73:CF:75:34:01:50:0A:10:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/19e853ae-8c54-460c-a726-cbd1c7fc5ba2/19e853ae-8c54-460c-a726-cbd1c7fc5ba2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2602:f406::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402359 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:78:2a:c8:e6:ac:0d:ae:48:70:4a:99:65:ff:ed:8f:9e:e9: d3:b2:e6:97:4c:58:43:7e:d3:98:3d:ad:30:58:60:8e:7d:99: 54:2d:99:bd:6b:92:8f:8b:1c:4e:a5:7e:d3:f7:2f:56:63:3e: f5:a4:83:b6:63:1f:5e:4a:ec:6f:0c:7f:35:6c:00:6d:db:a0: 99:e3:19:e6:b9:02:c4:41:b3:eb:c8:4a:65:cf:e3:64:29:98: b2:70:26:8d:92:d4:d9:a9:4d:aa:e9:6a:7a:62:74:b5:dd:a1: 6d:5c:ad:1b:98:95:41:2c:3b:aa:f6:de:b7:10:59:d2:6e:72: 10:a9:2e:23:ec:4c:f0:2c:64:c9:4b:9b:ce:93:2b:00:15:9f: 31:e3:5d:b3:59:32:ce:2b:41:cd:e9:db:da:9d:f0:ae:5b:34: 79:22:8a:50:92:67:e8:91:f2:40:a2:ea:51:a8:74:e4:a6:20: 2f:c7:c3:b1:4d:ec:19:c7:e0:52:19:4a:3d:01:2f:c5:f6:80: 04:ed:53:6c:43:d9:6b:3e:0a:d8:15:2e:c6:1a:fc:37:68:21: f7:81:4b:66:07:c8:d0:59:a5:12:a6:13:d1:0d:13:f9:52:d9: 76:1d:b4:c3:3a:2e:88:32:bb:db:7a:63:df:35:ca:80:6d:de: ed:9c:7c:7a -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWE1tWJdm0Qd9dRch8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDQwNzEyMDMxMVoXDTI4MDcxMDEyMDMxMVowLzEtMCsGA1UEAxMk MTllODUzYWUtOGM1NC00NjBjLWE3MjYtY2JkMWM3ZmM1YmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPstYEP0zaZANiMRPPG0ztYca2Rb+Ix9UiGz DTQultEZW6rm3ZuHjDRojwmKCo6PMeJnIXnbNTW5qMYmcoq9z4UnVeWIAboLqd4k 1hk3ehUUzhKi5/cB8wxJr/Ak0qUfSCrwr2h7O5uUDMpooI7X4angqSf8qd7I4lEt PFsbfDr41rK98eJnoEhjjf8zhOIJ2SnZGPGS2Trl0BcVQD4vesinlvEE6FOgbtFL ZZFIkJeAJ4vCvKmS7L8Z6lQ2YNE8lTcyG/BjGaWTcouDVnKiJS3KF8ub8O7yutxG vX8cqmOBGFY8bornIYhz4cYntFJecRHv3zMVTGSiI5Nz2+vP0wIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFAZGnhzK/EHOHDfMc891NAFQChBeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x OWU4NTNhZS04YzU0LTQ2MGMtYTcyNi1jYmQxYzdmYzViYTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzE5ZTg1M2FlLThjNTQtNDYwYy1h NzI2LWNiZDFjN2ZjNWJhMi8xOWU4NTNhZS04YzU0LTQ2MGMtYTcyNi1jYmQxYzdm YzViYTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmAvQGADAaBggrBgEFBQcBCAEB/wQLMAmgBzAF AgMGI7cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEATngqyOasDa5IcEqZZf/tj57p07Lml0xYQ37TmD2tMFhg jn2ZVC2ZvWuSj4scTqV+0/cvVmM+9aSDtmMfXkrsbwx/NWwAbdugmeMZ5rkCxEGz 68hKZc/jZCmYsnAmjZLU2alNqulqemJ0td2hbVytG5iVQSw7qvbetxBZ0m5yEKku I+xM8CxkyUubzpMrABWfMeNds1kyzitBzenb2p3wrls0eSKKUJJn6JHyQKLqUah0 5KYgL8fDsU3sGcfgUhlKPQEvxfaABO1TbEPZaz4K2BUuxhr8N2gh94FLZgfI0Fml EqYT0Q0T+VLZdh20wzouiDK723pj3zXKgG3e7Zx8eg== -----END CERTIFICATE-----Generated at Fri Apr 17 03:07:00 2026 by rpki-client