$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c.cer File: 604dd155-d846-413d-9d18-9c6d0f03ee8c.cer (raw, json) Hash identifier: svP74eMz5scG/M/RoDfAC1ARPnW2vH4MYsrPAlU/PJI= Subject key identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EFCA542549DFE4F6C1D6F2040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Aug 2026 12:45:11 +0000 Certificate not after: Thu 30 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 14098 IP: 209.205.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:a5:42:54:9d:fe:4f:6c:1d:6f:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 28 12:45:11 2026 GMT Not After : Nov 30 13:45:11 2028 GMT Subject: CN=604dd155-d846-413d-9d18-9c6d0f03ee8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:3a:0f:8f:6f:43:8c:22:68:5c:bd:74:5b: 07:7f:9b:7c:60:c3:fb:a2:cc:29:6a:ec:95:e7:c7: ed:6c:51:45:93:13:6c:4e:24:35:44:32:c3:1e:04: b2:a1:0e:0d:bd:f8:ac:ad:80:a4:5c:9e:8c:7b:22: 35:46:ac:03:b2:ac:a6:92:44:2a:1e:40:c5:ed:0b: e9:89:0d:ee:b0:3d:7c:e9:3f:17:34:0e:dd:b7:e5: 3a:87:7a:06:64:d9:d2:6f:aa:eb:9b:0b:24:14:ba: 8a:81:bf:2d:34:df:82:16:18:ec:58:4c:54:d8:c3: 3e:8a:63:fe:82:f0:0f:af:df:c4:58:40:4e:42:0b: e3:95:54:a2:f0:64:7f:e6:e9:6b:95:38:c4:b8:f5: ca:86:74:b7:f7:e9:d3:0f:17:1c:8e:ac:42:f4:c7: 91:08:8f:cc:1c:b4:86:01:1d:ad:81:e8:bc:7c:40: 3a:72:f3:80:59:80:86:9e:5c:db:04:d4:43:66:20: 99:10:84:07:49:18:82:60:66:65:dd:7f:53:b7:67: db:d9:41:12:47:56:4d:6c:8f:fb:9b:e1:f9:89:9e: fe:64:e4:c6:3a:26:cb:e4:73:48:b2:7b:37:60:b1: 95:e7:4f:6f:3c:0c:4e:04:8e:bd:0d:28:58:39:09: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:51:50:EB:64:2D:CF:14:38:42:64:24:75:FB:18:0E:0E:43:B1:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604dd155-d846-413d-9d18-9c6d0f03ee8c/604dd155-d846-413d-9d18-9c6d0f03ee8c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 209.205.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14098 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f3:6f:36:ce:b4:7d:e2:70:e2:a6:cc:15:5d:f1:f7:13:16: 0a:ae:cc:07:8a:c4:57:3e:a4:05:f3:d6:bf:2b:ea:b1:a4:9f: d1:c4:d8:18:5d:8e:1f:1f:8f:6f:c9:01:df:4c:70:18:d9:34: e5:76:fd:fd:3f:e3:63:1d:5c:55:f8:3a:d9:c9:9f:97:40:ba: ba:30:59:81:c7:10:d7:b3:ca:b3:1a:ff:58:48:3c:a9:ee:98: 64:e5:35:57:cd:05:a2:bf:a4:c0:67:ae:64:a3:72:08:dc:76: 66:69:1f:0c:6c:db:2d:be:0d:0a:ed:39:48:02:f7:a0:10:c9: 21:b5:72:4b:01:68:36:e3:90:c9:76:c3:b7:9e:94:21:df:1d: 78:1e:a0:d4:37:5c:58:2b:7d:b9:03:a4:29:42:97:55:44:59: b4:40:82:dd:41:40:4c:70:11:96:47:21:ac:81:32:9b:b3:6c: 24:68:28:9f:dd:22:d3:c4:d4:fa:00:13:3a:8c:47:cc:98:f1: fd:13:6d:9b:b3:d3:79:c5:fc:b3:7d:61:04:7e:38:71:26:31: fc:2c:ac:5d:4c:cd:a4:fd:ea:49:d6:df:59:35:56:aa:75:6c: 5b:7a:9d:a3:27:6d:25:4e:58:27:d1:89:95:9c:49:3e:48:a3: 60:a6:b1:26 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE78pUJUnf5PbB1vIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgyODEyNDUxMVoXDTI4MTEzMDEzNDUxMVowLzEtMCsGA1UEAxMk NjA0ZGQxNTUtZDg0Ni00MTNkLTlkMTgtOWM2ZDBmMDNlZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgo6D49vQ4wiaFy9dFsHf5t8YMP7oswpauyV 58ftbFFFkxNsTiQ1RDLDHgSyoQ4NvfisrYCkXJ6MeyI1RqwDsqymkkQqHkDF7Qvp iQ3usD186T8XNA7dt+U6h3oGZNnSb6rrmwskFLqKgb8tNN+CFhjsWExU2MM+imP+ gvAPr9/EWEBOQgvjlVSi8GR/5ulrlTjEuPXKhnS39+nTDxccjqxC9MeRCI/MHLSG AR2tgei8fEA6cvOAWYCGnlzbBNRDZiCZEIQHSRiCYGZl3X9Tt2fb2UESR1ZNbI/7 m+H5iZ7+ZOTGOibL5HNIsns3YLGV509vPAxOBI69DShYOQm7RwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFABRUOtkLc8UOEJkJHX7GA4OQ7HXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82 MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYwM2VlOGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzYwNGRkMTU1LWQ4NDYtNDEzZC05 ZDE4LTljNmQwZjAzZWU4Yy82MDRkZDE1NS1kODQ2LTQxM2QtOWQxOC05YzZkMGYw M2VlOGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATRzfAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC NxIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAYfNvNs60feJw4qbMFV3x9xMWCq7MB4rEVz6kBfPWvyvqsaSf 0cTYGF2OHx+Pb8kB30xwGNk05Xb9/T/jYx1cVfg62cmfl0C6ujBZgccQ17PKsxr/ WEg8qe6YZOU1V80For+kwGeuZKNyCNx2ZmkfDGzbLb4NCu05SAL3oBDJIbVySwFo NuOQyXbDt56UId8deB6g1DdcWCt9uQOkKUKXVURZtECC3UFATHARlkchrIEym7Ns JGgon90i08TU+gATOoxHzJjx/RNtm7PTecX8s31hBH44cSYx/CysXUzNpP3qSdbf WTVWqnVsW3qdoydtJU5YJ9GJlZxJPkijYKaxJg== -----END CERTIFICATE-----Generated at Mon Sep 21 02:16:15 2026 by rpki-client