$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer File: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer (raw, json) Hash identifier: RPp3f2rBOotboBCaiezLGLu721pwlzJ68f2LrMXGPhw= Subject key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EDDEFBB1B05A01E5BC3089140 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 17 Aug 2026 12:45:11 +0000 Certificate not after: Sun 19 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 193.149.145.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:ef:bb:1b:05:a0:1e:5b:c3:08:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 17 12:45:11 2026 GMT Not After : Nov 19 13:45:11 2028 GMT Subject: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f8:89:05:6a:9a:dd:39:39:e8:fb:0b:34:37: 05:04:c2:0d:74:f5:d2:42:e5:65:b3:75:06:d5:96: 21:9e:f9:aa:d6:58:51:6a:1f:44:d7:4e:fb:9a:bb: 1c:f3:31:e3:19:ee:aa:ce:35:99:e8:47:ce:3c:99: 90:17:a7:17:b0:12:53:69:9d:53:06:c1:1b:b5:52: 36:94:d1:f4:51:ff:92:a7:53:3a:b7:e3:dd:67:ca: 24:e2:a2:4a:08:02:6f:30:81:03:6d:54:9c:b1:25: ba:78:47:02:b8:1a:63:e5:00:fd:e9:15:01:50:50: f0:dc:be:b2:b7:84:78:a9:2b:1a:81:88:08:f9:49: 81:05:49:a3:70:eb:8c:a5:a2:7c:1f:fb:d5:10:fa: c9:2f:dc:eb:50:c4:ef:0a:8d:76:f0:4c:12:be:e0: 03:e6:d4:03:60:9e:43:65:38:4d:69:c4:c2:8a:27: 90:3b:8f:65:94:36:0a:12:cc:ef:c0:69:56:61:5d: 1e:79:fd:82:6b:57:7b:ca:42:8d:ec:47:54:ce:6d: 03:88:f1:7d:6d:ca:eb:21:68:1d:16:28:f8:a9:cd: 11:93:57:81:27:b9:1e:64:59:0e:79:8a:27:f7:cd: 79:91:34:77:6a:d4:c7:43:d8:d5:62:d4:21:1c:bf: 61:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 193.149.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:20:6b:7d:80:e5:bc:73:e7:8b:e7:e4:9d:c4:89:a0:c7:31: 30:66:f7:af:1c:2e:31:75:37:d4:4e:22:23:2c:07:06:8e:d0: 8c:98:77:8c:2e:e5:99:c0:41:95:d1:a6:ed:0a:5c:d8:75:d7: 4d:62:22:cc:8e:88:ff:12:ab:f8:80:64:e0:8d:37:d6:26:a4: 7e:af:33:d6:04:2c:da:e2:ad:06:de:34:db:73:67:5e:91:53: ad:15:38:35:61:78:2b:c1:06:68:5d:e7:8c:2b:15:2f:af:33: 01:b0:9f:c7:ef:39:7f:dc:ae:80:e1:14:06:11:8d:23:8e:76: 39:f0:5b:ab:14:a4:ba:4f:28:d4:93:68:4f:ff:c7:3c:1e:9f: 3f:fe:7b:c4:b4:82:38:04:0f:fd:6c:38:02:b5:40:68:73:66: 97:23:17:42:c3:72:1f:b0:45:e2:17:8b:09:7f:6a:ad:23:2b: ad:a3:ad:df:5e:44:b6:28:81:b3:62:e7:69:ce:21:55:24:59: f2:5c:c3:24:d6:48:eb:b4:23:da:ea:b9:8d:f6:b0:5a:c8:1e: 5f:a8:ff:95:5b:da:18:a1:f4:c8:60:e6:18:7b:92:63:dc:2f: fd:6c:51:e7:55:40:6c:07:96:f8:04:e6:40:34:fd:90:14:6a: b2:f5:05:fa -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE7d77sbBaAeW8MIkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgxNzEyNDUxMVoXDTI4MTExOTEzNDUxMVowLzEtMCsGA1UEAxMk M2YyOGI2MmMtN2M1MC00Y2NmLWJhYzUtYTZjZWQ5YzUxMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPiJBWqa3Tk56PsLNDcFBMINdPXSQuVls3UG 1ZYhnvmq1lhRah9E1077mrsc8zHjGe6qzjWZ6EfOPJmQF6cXsBJTaZ1TBsEbtVI2 lNH0Uf+Sp1M6t+PdZ8ok4qJKCAJvMIEDbVScsSW6eEcCuBpj5QD96RUBUFDw3L6y t4R4qSsagYgI+UmBBUmjcOuMpaJ8H/vVEPrJL9zrUMTvCo128EwSvuAD5tQDYJ5D ZThNacTCiieQO49llDYKEszvwGlWYV0eef2Ca1d7ykKN7EdUzm0DiPF9bcrrIWgd Fij4qc0Rk1eBJ7keZFkOeYon9815kTR3atTHQ9jVYtQhHL9h6QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMeNYJEKe7o5In6+bOYvBY7SZv2GMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8z ZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDljNTEwYWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzNmMjhiNjJjLTdjNTAtNGNjZi1i YWM1LWE2Y2VkOWM1MTBhZS8zZjI4YjYyYy03YzUwLTRjY2YtYmFjNS1hNmNlZDlj NTEwYWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADBlZEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWyBrfYDlvHPni+fkncSJ oMcxMGb3rxwuMXU31E4iIywHBo7QjJh3jC7lmcBBldGm7Qpc2HXXTWIizI6I/xKr +IBk4I031iakfq8z1gQs2uKtBt4023NnXpFTrRU4NWF4K8EGaF3njCsVL68zAbCf x+85f9yugOEUBhGNI452OfBbqxSkuk8o1JNoT//HPB6fP/57xLSCOAQP/Ww4ArVA aHNmlyMXQsNyH7BF4heLCX9qrSMrraOt315EtiiBs2Lnac4hVSRZ8lzDJNZI67Qj 2uq5jfawWsgeX6j/lVvaGKH0yGDmGHuSY9wv/WxR51VAbAeW+ATmQDT9kBRqsvUF +g== -----END CERTIFICATE-----Generated at Sun Sep 20 15:40:22 2026 by rpki-client