$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5317640e-840b-4f7f-9078-b6640d411c47.cer File: 5317640e-840b-4f7f-9078-b6640d411c47.cer (raw, json) Hash identifier: giDQCYXW6mceZBrDJkL7eZcINidZ8yctXBG19VYBpFM= Subject key identifier: 51:37:8D:85:FA:DA:77:02:1B:27:E5:4D:6A:A1:27:F4:87:FC:1A:B7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CDF2A6DC5C7451E8E0C3F64C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5317640e-840b-4f7f-9078-b6640d411c47/5317640e-840b-4f7f-9078-b6640d411c47.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5317640e-840b-4f7f-9078-b6640d411c47/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Feb 2026 13:45:23 +0000 Certificate not after: Sat 20 May 2028 12:45:23 +0000 Subordinate resources: AS: 11757 IP: 2620:5d:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:2a:6d:c5:c7:45:1e:8e:0c:3f:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 15 13:45:23 2026 GMT Not After : May 20 12:45:23 2028 GMT Subject: CN=5317640e-840b-4f7f-9078-b6640d411c47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bb:47:c7:65:17:1c:9b:aa:a8:96:a1:e9:82: 30:06:1e:6f:fe:8e:2d:2b:79:70:76:8c:61:88:2e: 8e:f8:f2:a6:16:ad:a0:35:44:66:97:47:d5:2d:69: a7:9f:8b:36:df:fd:88:66:5f:f3:0c:9f:6b:82:f3: c8:fb:d9:c9:91:dd:06:09:b6:75:04:b6:e2:34:8f: 85:bf:e5:aa:9d:b0:31:d8:a6:04:a1:2b:ea:6c:89: c5:03:91:27:12:9f:52:5e:cf:23:ea:31:f0:15:c5: 3b:d3:50:61:38:e1:e3:32:56:a1:06:ab:c2:2b:7a: 9a:c5:cf:27:7c:63:04:fb:7f:66:e6:cf:d8:de:de: 01:66:58:38:e0:22:cb:6d:af:2c:94:9c:4a:52:08: 61:b2:69:c6:4a:f7:a9:d7:be:8a:77:67:31:31:d5: c5:8c:8a:c9:2a:c1:67:07:a4:6f:9a:75:e3:12:0f: 8e:3d:1b:4c:19:ed:4e:2c:17:3b:5d:32:5c:a0:de: d5:79:9b:42:98:7d:cc:19:88:9f:2c:9b:f5:0c:49: 10:bd:db:0c:90:b7:96:05:e7:37:40:03:25:c2:33: a1:bf:7b:ee:13:88:f2:0d:54:aa:c7:d5:04:82:2e: 14:f1:75:ab:cf:d1:8a:06:3a:c6:4b:c7:d2:bd:91: 01:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:37:8D:85:FA:DA:77:02:1B:27:E5:4D:6A:A1:27:F4:87:FC:1A:B7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5317640e-840b-4f7f-9078-b6640d411c47/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5317640e-840b-4f7f-9078-b6640d411c47/5317640e-840b-4f7f-9078-b6640d411c47.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2620:5d:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11757 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:52:05:16:de:76:f7:8a:ee:42:85:26:c3:28:c2:d4:08:d1: 2c:9b:55:e7:2a:a4:e3:6b:46:00:ef:5c:3f:12:03:64:72:59: 02:9f:78:ba:33:ad:4a:16:82:2c:d8:1f:f3:0e:95:13:6c:63: 43:d3:7f:c7:33:dc:46:40:5e:7d:be:42:78:ff:53:20:03:28: b8:d9:53:b7:b7:46:7e:19:fd:e9:39:79:6e:d1:7d:3e:94:a9: 58:51:00:67:e4:c6:9b:aa:24:11:6f:af:a4:b1:15:f3:a3:60: be:2b:3c:bc:61:e4:aa:56:81:26:ed:57:2e:75:a2:c5:60:1d: ae:0d:0e:f5:89:e2:05:b0:a5:59:af:9f:13:f7:70:87:eb:a8: 46:60:86:05:e9:27:c3:c7:c3:11:08:6b:2b:b1:3e:7a:98:b9: d6:f3:84:a4:c7:86:d5:8d:85:95:84:b5:f4:97:77:49:ce:8c: 16:bf:f6:d4:0d:04:c5:ce:3a:f6:85:28:44:b4:c0:67:96:a8: c8:2e:4f:36:41:53:10:21:d2:31:7b:2b:cd:cb:02:00:4d:2d: 12:ba:71:d5:65:0c:c5:0d:c2:01:17:40:8a:aa:04:e6:6f:c6: f0:42:1f:47:ed:c5:f7:fe:28:35:7e:4d:39:91:dc:d0:83:85: a6:5c:11:14 -----BEGIN CERTIFICATE----- MIIHCzCCBfOgAwIBAgIUAQ0Mn0MoWEzfKm3Fx0Uejgw/ZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIxNTEzNDUyM1oXDTI4MDUyMDEyNDUyM1owLzEtMCsGA1UEAxMk NTMxNzY0MGUtODQwYi00ZjdmLTkwNzgtYjY2NDBkNDExYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrtHx2UXHJuqqJah6YIwBh5v/o4tK3lwdoxh iC6O+PKmFq2gNURml0fVLWmnn4s23/2IZl/zDJ9rgvPI+9nJkd0GCbZ1BLbiNI+F v+WqnbAx2KYEoSvqbInFA5EnEp9SXs8j6jHwFcU701BhOOHjMlahBqvCK3qaxc8n fGME+39m5s/Y3t4BZlg44CLLba8slJxKUghhsmnGSvep176Kd2cxMdXFjIrJKsFn B6RvmnXjEg+OPRtMGe1OLBc7XTJcoN7VeZtCmH3MGYifLJv1DEkQvdsMkLeWBec3 QAMlwjOhv3vuE4jyDVSqx9UEgi4U8XWrz9GKBjrGS8fSvZEBowIDAQABo4IEHTCC BBkwHQYDVR0OBBYEFFE3jYX62ncCGyflTWqhJ/SH/Bq3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 MzE3NjQwZS04NDBiLTRmN2YtOTA3OC1iNjY0MGQ0MTFjNDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzUzMTc2NDBlLTg0MGItNGY3Zi05 MDc4LWI2NjQwZDQxMWM0Ny81MzE3NjQwZS04NDBiLTRmN2YtOTA3OC1iNjY0MGQ0 MTFjNDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIABdgAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICLe0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAUFIFFt5294ruQoUmwyjC1AjRLJtV5yqk42tGAO9cPxID ZHJZAp94ujOtShaCLNgf8w6VE2xjQ9N/xzPcRkBefb5CeP9TIAMouNlTt7dGfhn9 6Tl5btF9PpSpWFEAZ+TGm6okEW+vpLEV86Ngvis8vGHkqlaBJu1XLnWixWAdrg0O 9YniBbClWa+fE/dwh+uoRmCGBeknw8fDEQhrK7E+epi51vOEpMeG1Y2FlYS19Jd3 Sc6MFr/21A0Exc469oUoRLTAZ5aoyC5PNkFTECHSMXsrzcsCAE0tErpx1WUMxQ3C ARdAiqoE5m/G8EIfR+3F9/4oNX5NOZHc0IOFplwRFA== -----END CERTIFICATE-----Generated at Sun Mar 1 23:05:12 2026 by rpki-client