$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6.cer File: 4a74ffe6-3c09-4633-b8de-781dfa287da6.cer (raw, json) Hash identifier: tRJW6PvKgP2iKgHSECxxe44+EFTK2T7TZIPpEmxZHbA= Subject key identifier: C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EA00D91001A8CDFB1AF1EEFF0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 26 Jul 2026 08:45:11 +0000 Certificate not after: Sat 28 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 398266 IP: 130.51.202.0/23 IP: 167.253.84.0/22 IP: 216.230.18.0/24 IP: 2602:feae::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a0:0d:91:00:1a:8c:df:b1:af:1e:ef:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 26 08:45:11 2026 GMT Not After : Oct 28 08:45:11 2028 GMT Subject: CN=4a74ffe6-3c09-4633-b8de-781dfa287da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:c2:58:05:01:86:dc:38:55:d9:8b:30:5f: 11:26:c8:13:a5:fe:f6:fc:50:6a:69:be:f9:35:a6: 7a:33:14:77:d8:7e:60:48:ea:66:6d:17:3c:58:60: 47:88:e4:37:87:e0:70:0c:06:8c:1d:13:28:98:41: f9:a0:11:69:0b:7e:80:7c:69:2b:f7:a2:96:a1:0f: 4e:96:d6:c2:77:8c:e2:9f:a4:a5:a3:bd:77:00:7d: 93:37:92:78:2c:12:0d:4a:ee:42:4f:94:20:02:62: 1c:24:df:50:b8:84:8f:ed:1e:f0:3e:6d:d4:4f:00: bb:88:1c:04:d8:7b:3b:7e:18:78:f4:5a:a7:b6:07: 9f:ec:a0:b6:a0:e4:53:c9:86:bb:87:b9:fd:fc:4a: 03:03:10:57:df:56:1e:e4:27:82:24:a9:7c:dd:02: c5:a2:6c:a4:2b:24:54:33:6b:55:21:f8:74:17:d0: 6b:43:24:99:a5:d3:5c:9e:78:5b:2b:29:38:2e:ab: ea:b5:72:84:a6:26:b3:24:b6:7c:3d:6b:89:db:2e: 6f:9f:44:58:aa:1f:20:c1:9c:7c:bd:22:e0:2f:c2: 86:72:b3:81:bb:4d:c0:46:54:b9:60:b2:3e:7e:eb: d5:9f:e2:25:6e:ba:f8:4d:4c:0b:08:c9:57:1a:25: a1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:6F:C4:11:30:E8:F2:88:A4:88:91:C8:03:A6:37:EA:A2:1C:A5:30 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4a74ffe6-3c09-4633-b8de-781dfa287da6/4a74ffe6-3c09-4633-b8de-781dfa287da6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 130.51.202.0/23 167.253.84.0/22 216.230.18.0/24 IPv6: 2602:feae::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398266 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:9b:b8:3e:d9:e3:0d:2d:e7:e2:b1:31:05:5b:c7:cd:b3:62: 14:ad:cb:6f:69:1b:56:18:85:fa:13:9c:2d:33:a3:76:f7:6a: 1d:be:d9:b6:b3:e4:61:71:6b:b3:7c:b6:69:8b:28:1d:de:5b: a9:8e:ec:1e:94:9c:4c:d5:2f:d4:30:ac:1b:41:a5:fc:7e:96: 4a:f1:95:fb:a3:c7:4d:8a:fa:ac:91:ea:67:84:ad:73:24:d8: 4f:a6:6d:36:e5:14:2e:78:e8:f6:2d:bf:c0:33:fc:14:83:8e: 77:5d:23:9a:64:cd:e7:94:84:e6:75:df:85:33:c5:b9:fd:1c: 4a:12:ff:ea:44:63:22:b5:3e:54:a7:c6:3d:af:02:1e:6f:a5: 01:df:28:c0:a6:0a:03:66:ce:a4:65:0a:26:a2:1c:fd:08:e2: 28:e5:5f:c1:79:01:12:48:29:cf:6b:4d:73:b2:88:50:43:f3: be:2d:9f:1c:52:d2:c2:53:da:2b:17:d8:39:83:28:69:16:5f: 76:82:30:98:56:d2:a3:b8:99:bf:5d:dd:cb:a1:65:a1:54:06: 6a:e5:fe:0c:1a:b9:7a:19:21:6f:7a:6c:8b:e8:10:ce:88:1a: c4:d7:bd:0e:0f:55:67:ac:94:1a:9e:83:c9:1b:10:e7:16:29: bb:f7:36:b4 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE6gDZEAGozfsa8e7/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcyNjA4NDUxMVoXDTI4MTAyODA4NDUxMVowLzEtMCsGA1UEAxMk NGE3NGZmZTYtM2MwOS00NjMzLWI4ZGUtNzgxZGZhMjg3ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqj/CWAUBhtw4VdmLMF8RJsgTpf72/FBqab75 NaZ6MxR32H5gSOpmbRc8WGBHiOQ3h+BwDAaMHRMomEH5oBFpC36AfGkr96KWoQ9O ltbCd4zin6Slo713AH2TN5J4LBINSu5CT5QgAmIcJN9QuISP7R7wPm3UTwC7iBwE 2Hs7fhh49Fqntgef7KC2oORTyYa7h7n9/EoDAxBX31Ye5CeCJKl83QLFomykKyRU M2tVIfh0F9BrQySZpdNcnnhbKyk4LqvqtXKEpiazJLZ8PWuJ2y5vn0RYqh8gwZx8 vSLgL8KGcrOBu03ARlS5YLI+fuvVn+Ilbrr4TUwLCMlXGiWhNQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFMlvxBEw6PKIpIiRyAOmN+qiHKUwMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 YTc0ZmZlNi0zYzA5LTQ2MzMtYjhkZS03ODFkZmEyODdkYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRhNzRmZmU2LTNjMDktNDYzMy1i OGRlLTc4MWRmYTI4N2RhNi80YTc0ZmZlNi0zYzA5LTQ2MzMtYjhkZS03ODFkZmEy ODdkYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBAGCM8oDBAKn/VQDBADY5hIwDgQCAAIwCAMGBCYC /q4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYTujBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA0m7g+2eMN LefisTEFW8fNs2IUrctvaRtWGIX6E5wtM6N292odvtm2s+RhcWuzfLZpiygd3lup juwelJxM1S/UMKwbQaX8fpZK8ZX7o8dNivqskepnhK1zJNhPpm025RQueOj2Lb/A M/wUg453XSOaZM3nlITmdd+FM8W5/RxKEv/qRGMitT5Up8Y9rwIeb6UB3yjApgoD Zs6kZQomohz9COIo5V/BeQESSCnPa01zsohQQ/O+LZ8cUtLCU9orF9g5gyhpFl92 gjCYVtKjuJm/Xd3LoWWhVAZq5f4MGrl6GSFvemyL6BDOiBrE170OD1VnrJQanoPJ GxDnFim79za0 -----END CERTIFICATE-----Generated at Tue Jul 28 16:03:56 2026 by rpki-client