$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer File: 41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer (raw, json) Hash identifier: wnRO3V1A0J0iQySbT+/OpT67lU686+O1HuY2wNR3q24= Subject key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EA3E7457E8CBCA252DF82BE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 27 Jul 2026 17:51:15 +0000 Certificate not after: Wed 01 Mar 2028 01:45:23 +0000 Subordinate resources: AS: 8015 AS: 10464 AS: 18806 AS: 18982 AS: 19149 AS: 19528 AS: 26326 AS: 26554 AS: 54111 AS: 54519 IP: 64.141.128.0/18 IP: 64.186.32.0/19 IP: 65.23.64.0/19 IP: 67.59.0.0/18 IP: 67.218.32.0/20 IP: 69.7.16.0/20 IP: 70.34.128.0/18 IP: 74.204.0.0/17 IP: 74.209.184.0 -- 74.209.188.255 IP: 147.202.0.0/16 IP: 184.175.128.0/18 IP: 192.104.107.0 -- 192.104.110.255 IP: 208.42.0.0 -- 208.42.191.255 IP: 209.98.0.0/16 IP: 2001:18c8::/32 IP: 2605:14c0::/32 IP: 2607:1800::/32 IP: 2607:f7d8::/32 IP: 2620:a7:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a3:e7:45:7e:8c:bc:a2:52:df:82:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 27 17:51:15 2026 GMT Not After : Mar 1 01:45:23 2028 GMT Subject: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:cc:4e:b6:b9:a4:86:cb:08:8d:55:aa:6e:12: 57:95:fc:12:67:12:9a:8a:16:1c:f4:ea:b8:a5:26: fb:62:e8:47:be:50:c6:f0:a0:97:2b:78:51:24:a7: f0:43:94:b7:ac:b0:58:01:be:75:77:8d:c3:4b:dd: 12:20:f7:bb:85:e2:aa:e3:21:45:8b:ba:ee:e5:e3: 1a:a5:d2:47:62:0c:e2:b0:70:2e:40:11:88:f4:c0: c3:fb:b7:85:26:7f:c1:b1:65:c7:b7:1b:77:30:8e: 13:ce:14:f5:c5:28:c6:84:1b:1e:be:46:69:5a:b4: 4d:8a:57:52:9e:d4:e6:36:22:a6:68:fe:56:3c:f5: cd:8d:dd:76:83:8a:53:b1:43:c5:15:b9:86:9f:01: 99:0f:90:51:92:24:de:62:7d:2a:ec:52:b3:fa:35: b8:9f:23:2c:cf:0f:f0:54:b3:6c:9a:c2:95:a5:08: 82:1d:be:c2:2e:74:ca:fb:09:a2:e0:64:df:41:c4: 48:a6:df:9f:c4:5e:8b:26:0b:5a:b2:cd:00:eb:ed: b2:3b:2f:65:70:35:3c:3c:49:4d:ce:d3:b5:2e:dd: d6:7a:1c:00:b1:dc:26:84:65:7e:47:a0:2a:72:8b: 43:8f:d7:e2:3a:c6:23:50:f8:57:85:de:23:cd:83: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.141.128.0/18 64.186.32.0/19 65.23.64.0/19 67.59.0.0/18 67.218.32.0/20 69.7.16.0/20 70.34.128.0/18 74.204.0.0/17 74.209.184.0-74.209.188.255 147.202.0.0/16 184.175.128.0/18 192.104.107.0-192.104.110.255 208.42.0.0-208.42.191.255 209.98.0.0/16 IPv6: 2001:18c8::/32 2605:14c0::/32 2607:1800::/32 2607:f7d8::/32 2620:a7:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8015 10464 18806 18982 19149 19528 26326 26554 54111 54519 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:86:ef:e8:8c:28:00:27:f8:e2:ed:12:a4:08:96:ee:94:5b: d9:0d:7f:5f:1c:80:e1:44:16:40:ec:30:e2:9e:45:87:e0:72: 1c:4a:9b:09:81:7a:70:cd:18:5d:d2:85:24:89:81:97:dc:84: e6:34:ac:57:f0:e6:4e:6c:6b:aa:2f:f5:62:fa:68:d7:fb:d0: 1c:7d:e2:24:27:78:86:63:d3:c5:3c:14:41:d9:a2:1f:ea:5d: 31:58:f2:39:ec:b2:55:c5:d6:6b:af:7c:c4:39:d1:56:77:c8: a4:32:bf:2b:38:07:f3:5e:97:ab:39:d2:48:7e:b4:f0:40:fb: ae:9a:a5:e0:44:69:97:71:e6:be:dc:72:3b:ec:98:fa:ad:60: 89:fe:56:14:27:d8:c7:9a:26:a0:3b:dd:f8:79:d0:2b:fa:83: aa:3d:43:ed:7c:2a:fe:87:0b:1d:bf:cf:4f:c3:60:56:76:d1: 44:55:53:6c:aa:1b:97:da:3a:ed:86:14:f5:1a:e1:f8:50:0a: 6e:f0:c5:63:df:63:27:18:47:27:f8:9a:8d:00:c8:b5:0a:d6: c9:d9:a7:3d:e0:fb:7f:bf:2a:0b:86:2d:4e:f5:5b:ad:65:70: 58:cf:6a:c5:8e:bb:f1:2b:57:05:ee:8f:e2:f8:85:7e:79:60: 6f:37:08:4b -----BEGIN CERTIFICATE----- MIIHwTCCBqmgAwIBAgIUAQ0Mn0MoWE6j50V+jLyiUt+CvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcyNzE3NTExNVoXDTI4MDMwMTAxNDUyM1owLzEtMCsGA1UEAxMk NDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMyZDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8xOtrmkhssIjVWqbhJXlfwSZxKaihYc9Oq4 pSb7YuhHvlDG8KCXK3hRJKfwQ5S3rLBYAb51d43DS90SIPe7heKq4yFFi7ru5eMa pdJHYgzisHAuQBGI9MDD+7eFJn/BsWXHtxt3MI4TzhT1xSjGhBsevkZpWrRNildS ntTmNiKmaP5WPPXNjd12g4pTsUPFFbmGnwGZD5BRkiTeYn0q7FKz+jW4nyMszw/w VLNsmsKVpQiCHb7CLnTK+wmi4GTfQcRIpt+fxF6LJgtass0A6+2yOy9lcDU8PElN ztO1Lt3WehwAsdwmhGV+R6AqcotDj9fiOsYjUPhXhd4jzYMM7wIDAQABo4IE0zCC BM8wHQYDVR0OBBYEFL95Fr63j2n7/WOmv4kZfZ6o8sq3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQxZTM4ZGE1LWRlNGYtNDAwZC04 M2FiLTY1ZWUyZTJjMmQyNC80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUy YzJkMjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgbEGCCsGAQUF BwEHAQH/BIGhMIGeMG8EAgABMGkDBAZAjYADBAVAuiADBAVBF0ADBAZDOwADBARD 2iADBARFBxADBAZGIoADBAdKzAAwDAMEA0rRuAMEAErRvAMDAJPKAwQGuK+AMAwD BADAaGsDBADAaG4wCwMDAdAqAwQG0CqAAwMA0WIwKwQCAAIwJQMFACABGMgDBQAm BRTAAwUAJgcYAAMFACYH99gDBwAmIACngAAwPwYIKwYBBQUHAQgBAf8EMDAuoCww KgICH08CAijgAgJJdgICSiYCAkrNAgJMSAICZtYCAme6AgMA018CAwDU9zBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAchu/ojCgAJ/ji7RKkCJbulFvZDX9fHIDhRBZA7DDinkWH4HIcSpsJgXpw zRhd0oUkiYGX3ITmNKxX8OZObGuqL/Vi+mjX+9AcfeIkJ3iGY9PFPBRB2aIf6l0x WPI57LJVxdZrr3zEOdFWd8ikMr8rOAfzXperOdJIfrTwQPuumqXgRGmXcea+3HI7 7Jj6rWCJ/lYUJ9jHmiagO934edAr+oOqPUPtfCr+hwsdv89Pw2BWdtFEVVNsqhuX 2jrthhT1GuH4UApu8MVj32MnGEcn+JqNAMi1CtbJ2ac94Pt/vyoLhi1O9VutZXBY z2rFjrvxK1cF7o/i+IV+eWBvNwhL -----END CERTIFICATE-----Generated at Tue Jul 28 19:30:20 2026 by rpki-client