$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer File: 1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer (raw, json) Hash identifier: agqZkBLIovsHQZEl5Zjs//ARRvCFraO52/DJOlyZEgg= Subject key identifier: D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CE78A7A867290F645194E2080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Feb 2026 13:45:23 +0000 Certificate not after: Tue 23 May 2028 12:45:23 +0000 Subordinate resources: AS: 40739 AS: 400888 IP: 23.135.184.0/24 IP: 192.55.85.0/24 IP: 206.168.60.0/22 IP: 2620:33:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e7:8a:7a:86:72:90:f6:45:19:4e:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 18 13:45:23 2026 GMT Not After : May 23 12:45:23 2028 GMT Subject: CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d3:d4:de:2c:08:d7:40:2d:c6:ac:da:17:ff: 49:47:3b:01:0c:51:88:1d:e8:f7:70:d2:64:70:9b: c1:b0:26:c1:33:2b:55:4c:b9:94:e9:ac:7f:6f:12: 5b:f7:75:48:0d:b6:df:8b:7c:18:00:87:2a:5f:2c: 2a:23:81:18:bc:d0:00:53:6d:64:9a:c1:e6:35:53: 99:92:2d:66:ae:6b:55:3e:5f:70:bd:a7:2b:c1:94: 45:04:45:9e:0e:b2:f1:90:3f:41:d2:5b:92:32:0d: af:d4:45:20:39:f6:53:a0:22:ed:3f:66:26:a0:93: e1:c0:15:64:92:0c:d9:f8:e4:0d:be:61:f5:84:07: 76:8e:e4:98:e6:3e:35:46:46:22:7a:f2:80:c6:48: 20:07:e2:bc:3f:92:0c:da:e0:1b:f8:43:df:9e:93: fe:50:f1:c6:3b:0e:77:1f:4a:c0:ef:58:72:ae:c4: e1:c6:95:b0:0b:98:bf:21:bc:1f:fb:7d:d5:e3:5c: 0f:66:27:46:33:64:74:60:d5:c2:ce:76:25:37:97: b4:f9:bc:9c:8a:dd:85:78:4d:16:c6:b5:86:2f:44: 07:be:8b:26:51:a5:3c:94:68:a8:73:b8:a7:74:42: 2a:be:24:b9:b5:b7:5e:ff:c7:04:9f:c3:ff:65:6c: d1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.135.184.0/24 192.55.85.0/24 206.168.60.0/22 IPv6: 2620:33:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40739 400888 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c3:cd:80:70:ef:3b:aa:59:29:ae:25:1d:47:8f:d4:d6:36: a6:ae:9d:7a:06:87:a2:a2:67:3a:e7:93:c9:ac:3d:75:72:17: 13:80:15:56:d0:e3:e8:97:39:7b:ee:e3:c8:4d:07:43:ac:6f: 27:ba:2e:6b:ab:dd:45:7c:0b:6c:21:52:ae:ad:57:09:b0:ee: be:74:56:d9:c4:28:e9:1d:32:84:af:da:dd:fe:d9:10:45:b8: 86:53:5d:e8:66:ae:74:1e:4c:83:f6:84:d2:6b:2f:a1:59:76: 41:81:ba:12:f4:ca:e5:11:22:a4:f2:c3:81:78:34:5d:04:c0: f2:7f:41:28:50:60:91:8e:f0:09:bc:de:4e:ca:9f:60:ea:f6: 5e:21:23:0e:f8:6d:9e:63:97:ba:d9:fb:3a:69:79:58:ac:0b: 64:b5:ba:57:b3:14:93:87:e8:de:d0:38:de:dd:ea:80:62:e5: 72:cc:92:ae:e1:40:2f:a2:97:94:08:ca:84:45:07:fa:20:3c: d1:02:51:2a:78:eb:11:f8:20:cb:75:ba:84:5d:09:1b:42:45: 5d:c9:2e:2a:69:78:b4:d1:e7:21:4f:6b:8a:3c:60:ba:fb:4e: 2a:10:fb:6e:a3:c1:23:e7:08:a1:ee:a7:3b:33:0f:f3:c6:47: c7:8f:23:f2 -----BEGIN CERTIFICATE----- MIIHKzCCBhOgAwIBAgIUAQ0Mn0MoWEzninqGcpD2RRlOIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIxODEzNDUyM1oXDTI4MDUyMzEyNDUyM1owLzEtMCsGA1UEAxMk MWU2YjFlNGMtYmUxMS00ZTQ4LWEwZWUtMTkwYWM1ODIwOWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktPU3iwI10AtxqzaF/9JRzsBDFGIHej3cNJk cJvBsCbBMytVTLmU6ax/bxJb93VIDbbfi3wYAIcqXywqI4EYvNAAU21kmsHmNVOZ ki1mrmtVPl9wvacrwZRFBEWeDrLxkD9B0luSMg2v1EUgOfZToCLtP2YmoJPhwBVk kgzZ+OQNvmH1hAd2juSY5j41RkYievKAxkggB+K8P5IM2uAb+EPfnpP+UPHGOw53 H0rA71hyrsThxpWwC5i/Ibwf+33V41wPZidGM2R0YNXCznYlN5e0+bycit2FeE0W xrWGL0QHvosmUaU8lGioc7indEIqviS5tbde/8cEn8P/ZWzRgwIDAQABo4IEPTCC BDkwHQYDVR0OBBYEFNCCXnoTuaNfKju2w9dCkY3E6z0bMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x ZTZiMWU0Yy1iZTExLTRlNDgtYTBlZS0xOTBhYzU4MjA5YTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzFlNmIxZTRjLWJlMTEtNGU0OC1h MGVlLTE5MGFjNTgyMDlhNi8xZTZiMWU0Yy1iZTExLTRlNDgtYTBlZS0xOTBhYzU4 MjA5YTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBAAXh7gDBADAN1UDBALOqDwwDwQCAAIwCQMHBCYg ADOgADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMAnyMCAwYd+DBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA1 w82AcO87qlkpriUdR4/U1jamrp16Boeiomc655PJrD11chcTgBVW0OPolzl77uPI TQdDrG8nui5rq91FfAtsIVKurVcJsO6+dFbZxCjpHTKEr9rd/tkQRbiGU13oZq50 HkyD9oTSay+hWXZBgboS9MrlESKk8sOBeDRdBMDyf0EoUGCRjvAJvN5Oyp9g6vZe ISMO+G2eY5e62fs6aXlYrAtktbpXsxSTh+je0Dje3eqAYuVyzJKu4UAvopeUCMqE RQf6IDzRAlEqeOsR+CDLdbqEXQkbQkVdyS4qaXi00echT2uKPGC6+04qEPtuo8Ej 5wih7qc7Mw/zxkfHjyPy -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:49 2026 by rpki-client