$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer File: 5937a29a-1b30-48a0-ad3c-37d4a97ffe18.cer (raw, json) Hash identifier: PtHkrioNB22MV6GKfgggXM0FME7s1b/PT58oZucnQ4c= Subject key identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F20F0257DC55887AE63E40500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 10 Sep 2026 12:45:11 +0000 Certificate not after: Wed 13 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 40860 AS: 53920 IP: 198.186.167.0/24 IP: 208.93.108.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f0:25:7d:c5:58:87:ae:63:e4:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 10 12:45:11 2026 GMT Not After : Dec 13 13:45:11 2028 GMT Subject: CN=5937a29a-1b30-48a0-ad3c-37d4a97ffe18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ea:dd:35:57:19:13:a9:4b:f2:09:a6:20:06: a7:6c:b1:29:5a:8d:28:04:03:c6:57:8c:87:a4:eb: fe:ee:b5:cf:b4:84:fc:29:60:10:97:f7:54:25:41: aa:5c:1b:c7:80:56:da:8b:52:99:3c:45:26:a4:9c: d0:07:e5:31:6f:dc:35:8b:c5:00:2a:12:38:b5:18: e3:b1:4c:e6:34:6a:b2:e4:c6:5c:cf:0e:f0:8d:a4: 58:d3:bc:d7:e1:ec:fe:e5:84:35:41:65:75:ea:d4: 7d:f6:ab:d0:4b:6f:de:0f:6c:30:5f:16:b9:53:ad: 26:ea:6e:d6:37:39:82:87:34:8d:fe:84:b8:4f:7f: 2e:13:df:27:86:1f:fb:ff:51:1c:8f:3e:50:f6:90: 02:62:f7:93:fe:e3:a3:28:c7:04:d9:25:01:d4:a5: e9:bb:ac:59:cc:c5:06:85:d1:ad:92:d3:07:f2:d9: 83:e0:a1:dd:0c:c8:4d:9c:4f:12:e0:d8:4f:25:34: 4d:ec:5c:3e:7e:d7:ac:c8:d7:d7:b4:be:7b:84:ab: 89:8a:fc:6e:42:a1:c3:31:c6:be:89:25:9b:3f:51: f4:62:bc:ec:d7:76:55:8e:2a:96:22:c7:58:c3:6d: 90:72:7e:3c:e7:cc:84:e1:9b:51:1b:26:ac:3c:dc: 70:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9F:E5:51:A0:D2:09:AB:21:3E:8D:4D:B5:CD:63:25:6C:B1:B4:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5937a29a-1b30-48a0-ad3c-37d4a97ffe18/5937a29a-1b30-48a0-ad3c-37d4a97ffe18.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 198.186.167.0/24 208.93.108.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40860 53920 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:3e:cf:a4:56:91:91:62:c1:6a:36:50:c5:63:d0:0f:cc:2f: 40:79:b9:88:5e:96:c2:1b:8c:7a:ee:a9:98:f0:be:c0:16:6b: fd:42:34:e2:b6:2f:96:61:9d:3e:cf:a4:55:50:02:30:50:98: 3b:b2:99:47:02:a9:69:9b:6c:95:89:f0:ff:b7:7e:60:66:d4: 93:75:84:ab:ec:17:f3:81:aa:3d:cd:cc:f1:85:ce:7e:c9:f4: b6:97:88:17:8c:34:03:35:e1:a4:a2:5d:a9:97:6e:59:02:a8: d4:fd:65:7d:d5:fa:12:2f:57:23:3e:ea:8d:76:25:52:3b:3d: bf:94:08:0a:a9:a1:38:f1:54:df:76:c4:5e:09:b2:1e:bd:00: 3a:96:02:39:5f:f2:b8:70:2e:1e:86:10:f9:a8:87:a3:4e:c9: f3:67:5b:39:b3:49:94:4f:5f:08:4b:0d:56:8f:7c:e7:42:ce: d1:7a:7d:c7:d5:94:71:df:e3:05:b7:76:2c:41:40:20:1b:00: 88:83:1d:29:55:6e:f5:76:20:7a:bf:66:b3:6b:68:65:bc:af: 83:6b:fb:4c:cd:13:c3:06:12:b5:7e:41:2f:97:dd:5a:b2:d5: cc:c4:bf:ce:9d:40:25:d5:9f:b0:f3:7a:cd:3a:bd:47:f1:a5: 38:38:d9:80 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE8g8CV9xViHrmPkBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkxMDEyNDUxMVoXDTI4MTIxMzEzNDUxMVowLzEtMCsGA1UEAxMk NTkzN2EyOWEtMWIzMC00OGEwLWFkM2MtMzdkNGE5N2ZmZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAverdNVcZE6lL8gmmIAanbLEpWo0oBAPGV4yH pOv+7rXPtIT8KWAQl/dUJUGqXBvHgFbai1KZPEUmpJzQB+Uxb9w1i8UAKhI4tRjj sUzmNGqy5MZczw7wjaRY07zX4ez+5YQ1QWV16tR99qvQS2/eD2wwXxa5U60m6m7W NzmChzSN/oS4T38uE98nhh/7/1Ecjz5Q9pACYveT/uOjKMcE2SUB1KXpu6xZzMUG hdGtktMH8tmD4KHdDMhNnE8S4NhPJTRN7Fw+ftesyNfXtL57hKuJivxuQqHDMca+ iSWbP1H0Yrzs13ZVjiqWIsdYw22Qcn4858yE4ZtRGyasPNxwXQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFIOf5VGg0gmrIT6NTbXNYyVssbTXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 OTM3YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0YTk3ZmZlMTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU5MzdhMjlhLTFiMzAtNDhhMC1h ZDNjLTM3ZDRhOTdmZmUxOC81OTM3YTI5YS0xYjMwLTQ4YTAtYWQzYy0zN2Q0YTk3 ZmZlMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGuqcDBALQXWwwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAJ+cAgMA0qAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAj7PpFaRkWLBajZQxWPQD8wvQHm5iF6W whuMeu6pmPC+wBZr/UI04rYvlmGdPs+kVVACMFCYO7KZRwKpaZtslYnw/7d+YGbU k3WEq+wX84GqPc3M8YXOfsn0tpeIF4w0AzXhpKJdqZduWQKo1P1lfdX6Ei9XIz7q jXYlUjs9v5QICqmhOPFU33bEXgmyHr0AOpYCOV/yuHAuHoYQ+aiHo07J82dbObNJ lE9fCEsNVo9850LO0Xp9x9WUcd/jBbd2LEFAIBsAiIMdKVVu9XYger9ms2toZbyv g2v7TM0TwwYStX5BL5fdWrLVzMS/zp1AJdWfsPN6zTq9R/GlODjZgA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:38:14 2026 by rpki-client