$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer File: 324b7e1b-1c29-4331-b0f5-ca9e220fd74e.cer (raw, json) Hash identifier: /+qoznDlvV3Hef+BUFLSC1pNbTKKXc8u6umaK6Gjhcw= Subject key identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CF14FE00261298806EBA4A720 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Feb 2026 01:45:23 +0000 Certificate not after: Sat 27 May 2028 00:45:23 +0000 Subordinate resources: AS: 62592 IP: 162.219.128.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:4f:e0:02:61:29:88:06:eb:a4:a7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 22 01:45:23 2026 GMT Not After : May 27 00:45:23 2028 GMT Subject: CN=324b7e1b-1c29-4331-b0f5-ca9e220fd74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:95:95:13:ac:df:99:a3:46:ff:2a:e7:62:38: 2a:88:f3:2f:ff:b8:d0:44:d1:4f:89:8d:99:07:a0: 30:54:df:c5:98:1b:49:a4:e9:47:88:84:53:eb:8f: 09:c4:dc:cf:56:d0:3b:90:97:1a:c9:9b:5e:12:a9: 65:33:9b:0f:18:35:17:bf:f6:20:b2:0a:0d:4b:c4: 78:e3:a1:56:85:e4:fc:cb:25:69:d5:d4:ca:7b:c7: f7:04:ed:8a:62:2f:2a:1d:bb:00:1c:c9:9b:fe:d5: 03:83:fa:39:fd:85:0f:a0:62:78:e3:6a:35:6d:4f: 00:76:05:72:d9:b0:76:4d:70:8f:26:d2:9d:b8:7e: 4a:4a:0f:02:a8:3a:51:2a:f2:ce:34:cc:f6:a9:1c: ce:2d:25:c7:72:84:e7:cf:5e:4a:c8:12:15:38:09: 16:9b:fe:69:9e:01:b7:29:3c:3a:61:83:93:cb:ca: bf:fa:69:b9:7b:9e:ed:03:5f:aa:7b:6b:65:74:94: 0f:f1:80:3d:41:5f:9d:37:d1:06:44:1f:89:2a:81: b1:28:7c:d2:1d:73:12:8e:a8:20:04:36:51:e8:31: 74:40:5b:74:06:ed:d2:c0:19:0f:3e:4c:e8:0a:9b: 4f:f8:49:cb:25:6c:dd:bb:4a:ef:6f:cb:8f:6c:f8: 78:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:19:AE:3D:87:CE:60:27:13:D2:8A:29:7C:75:10:F7:B8:30:3E:84 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324b7e1b-1c29-4331-b0f5-ca9e220fd74e/324b7e1b-1c29-4331-b0f5-ca9e220fd74e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 162.219.128.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62592 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ed:e8:6a:b5:ec:f6:92:47:20:63:17:42:15:dd:80:c2:b7: db:9a:44:67:4a:c3:7d:fd:33:6c:bd:28:43:26:c2:0d:d0:bb: 18:43:17:36:35:ee:a8:e5:40:30:f5:af:c2:a7:af:bd:09:03: 7f:4b:e0:3a:57:4e:53:cf:48:7a:ce:28:f7:a3:28:b2:61:bc: ff:1c:6d:60:d3:5a:c2:42:d8:7e:bc:db:e6:e1:43:98:e0:4d: ba:49:26:21:30:dc:94:85:b8:96:02:34:ce:96:01:b1:44:30: 06:59:ab:17:5b:98:55:c5:6c:1e:aa:7d:79:f5:0b:14:37:9f: 79:b6:10:23:0b:9e:65:e4:dd:f1:18:f5:a5:71:1e:eb:75:72: 37:17:b6:b0:1a:2d:26:21:4e:23:9c:3f:5b:2c:90:e0:24:c7: fa:0b:df:52:1d:1c:9c:07:7f:64:4b:88:91:8a:94:8f:2e:b0: 0a:3f:2b:8b:ca:3e:7f:9d:5b:82:18:e8:5d:d3:e3:a0:2f:05: d2:16:72:86:bf:f5:5d:b1:d9:bc:be:97:c7:a8:bf:03:bf:5a: b4:1d:35:32:2a:ca:17:35:f1:ac:83:2d:f0:c5:1e:13:45:a3: 52:1a:b3:ad:d2:17:ae:ac:a8:f7:e9:3c:44:b9:d3:f0:6e:c9: d4:6a:f2:4a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEzxT+ACYSmIBuukpyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIyMjAxNDUyM1oXDTI4MDUyNzAwNDUyM1owLzEtMCsGA1UEAxMk MzI0YjdlMWItMWMyOS00MzMxLWIwZjUtY2E5ZTIyMGZkNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppWVE6zfmaNG/yrnYjgqiPMv/7jQRNFPiY2Z B6AwVN/FmBtJpOlHiIRT648JxNzPVtA7kJcayZteEqllM5sPGDUXv/YgsgoNS8R4 46FWheT8yyVp1dTKe8f3BO2KYi8qHbsAHMmb/tUDg/o5/YUPoGJ442o1bU8AdgVy 2bB2TXCPJtKduH5KSg8CqDpRKvLONMz2qRzOLSXHcoTnz15KyBIVOAkWm/5pngG3 KTw6YYOTy8q/+mm5e57tA1+qe2tldJQP8YA9QV+dN9EGRB+JKoGxKHzSHXMSjqgg BDZR6DF0QFt0Bu3SwBkPPkzoCptP+EnLJWzdu0rvb8uPbPh4swIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFMQZrj2HzmAnE9KKKXx1EPe4MD6EMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z MjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIwZmQ3NGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzMyNGI3ZTFiLTFjMjktNDMzMS1i MGY1LWNhOWUyMjBmZDc0ZS8zMjRiN2UxYi0xYzI5LTQzMzEtYjBmNS1jYTllMjIw ZmQ3NGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAOi24AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID APSAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABnt6Gq17PaSRyBjF0IV3YDCt9uaRGdKw339M2y9KEMmwg3Q uxhDFzY17qjlQDD1r8Knr70JA39L4DpXTlPPSHrOKPejKLJhvP8cbWDTWsJC2H68 2+bhQ5jgTbpJJiEw3JSFuJYCNM6WAbFEMAZZqxdbmFXFbB6qfXn1CxQ3n3m2ECML nmXk3fEY9aVxHut1cjcXtrAaLSYhTiOcP1sskOAkx/oL31IdHJwHf2RLiJGKlI8u sAo/K4vKPn+dW4IY6F3T46AvBdIWcoa/9V2x2by+l8eovwO/WrQdNTIqyhc18ayD LfDFHhNFo1Ias63SF66sqPfpPES50/BuydRq8ko= -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:32 2026 by rpki-client