$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03.cer File: 74aa5b22-bda2-4141-8bdf-98a78696dd03.cer (raw, json) Hash identifier: fqafLiVO7YlMxux49XRj2nNibNs4+qgI/qbdWug6TSY= Subject key identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D5FDEC50052AAA10A58AAA200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Apr 2026 16:12:13 +0000 Certificate not after: Sun 10 Oct 2027 00:45:37 +0000 Subordinate resources: AS: 400402 IP: 23.134.168.0/24 IP: 192.225.216.0/22 IP: 2602:fb94::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:de:c5:00:52:aa:a1:0a:58:aa:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 2 16:12:13 2026 GMT Not After : Oct 10 00:45:37 2027 GMT Subject: CN=74aa5b22-bda2-4141-8bdf-98a78696dd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:69:d0:fc:2e:8f:78:44:cb:95:5f:33:66: 1c:76:da:6a:12:fe:ea:83:51:76:57:e7:3a:8b:fb: a8:72:78:76:c3:80:90:94:59:49:42:9f:e1:63:df: 03:02:bb:da:aa:62:fb:66:e4:f0:28:1d:94:6f:47: f7:de:fc:99:b8:6f:8b:7e:6b:d2:58:73:60:3f:7f: 40:95:0e:d0:17:92:b9:99:61:85:7b:f4:75:de:b8: cf:7f:76:68:86:d1:4a:49:e7:aa:8e:cd:99:02:ab: c9:c2:4b:e5:0d:31:44:72:52:98:ce:89:22:bc:12: ab:30:cb:ef:ad:ee:32:54:f1:8c:c0:67:b5:22:b1: 4b:45:b1:34:7f:65:74:4b:eb:c9:ed:b6:c6:f2:7a: e3:e5:10:1f:3c:4c:a1:4b:ec:1f:f1:85:56:30:24: 7e:1c:74:52:05:da:08:23:a4:72:00:a0:62:8e:29: 67:87:bf:58:52:39:87:6f:07:14:30:fe:9c:cc:0d: d8:03:32:a2:0b:d0:26:df:76:40:17:4a:4e:6c:2f: 67:83:b0:3d:38:56:0a:99:26:13:3b:24:54:8f:17: d1:1f:04:51:31:c0:46:ae:59:a3:f2:e4:56:c6:76: 09:c3:7e:48:ea:cd:9f:4b:d9:8d:c2:de:1d:9b:ce: ba:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AA:7D:B1:45:23:40:13:01:BE:78:B7:DA:FF:CE:CF:CF:D4:F3:AF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74aa5b22-bda2-4141-8bdf-98a78696dd03/74aa5b22-bda2-4141-8bdf-98a78696dd03.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.134.168.0/24 192.225.216.0/22 IPv6: 2602:fb94::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400402 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:2b:0c:25:28:6f:55:1e:80:c9:3b:d1:db:68:7f:62:68:f4: de:77:60:81:ed:4a:3b:8e:dd:0e:3c:28:9f:68:34:42:41:d4: 64:7e:f4:9d:ce:2c:fc:8e:38:40:df:0d:73:82:18:33:b8:31: 13:18:91:08:8e:52:17:7c:8f:d3:51:b8:c9:c2:0e:2d:49:14: 4f:94:b3:1c:fe:04:0d:06:5b:7c:d8:e6:be:14:cc:9a:4b:1f: 97:45:8e:42:64:19:aa:29:76:c4:a3:1e:f7:28:01:2f:7d:2e: b9:4e:bc:1b:70:57:b3:a6:a4:a8:9d:73:48:d9:4e:58:3a:3d: 42:25:c7:e5:86:41:00:76:9b:45:34:ad:be:77:50:50:09:c5: 5e:91:ae:96:74:7a:06:e7:9e:05:f3:a7:91:64:d5:d2:df:1b: e3:4b:f1:e2:c6:59:54:f7:ce:8c:7f:03:62:7f:bd:de:c9:7a: 1d:8a:24:1e:16:3f:f4:ba:cb:a4:ed:f5:52:a5:3f:23:3e:ba: 6d:f6:3d:e9:68:2c:b2:f3:08:0c:7a:26:2d:fa:80:97:6f:2c: d1:f5:96:ed:dd:44:7f:b5:ef:7e:b6:a8:d7:3d:4c:5d:90:9c: 1e:c8:37:c2:90:b4:ac:0c:bf:1d:71:3c:78:bb:0f:2f:60:00: c5:d1:94:b7 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE1f3sUAUqqhCliqogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDQwMjE2MTIxM1oXDTI3MTAxMDAwNDUzN1owLzEtMCsGA1UEAxMk NzRhYTViMjItYmRhMi00MTQxLThiZGYtOThhNzg2OTZkZDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBVp0Pwuj3hEy5VfM2YcdtpqEv7qg1F2V+c6 i/uocnh2w4CQlFlJQp/hY98DArvaqmL7ZuTwKB2Ub0f33vyZuG+LfmvSWHNgP39A lQ7QF5K5mWGFe/R13rjPf3ZohtFKSeeqjs2ZAqvJwkvlDTFEclKYzokivBKrMMvv re4yVPGMwGe1IrFLRbE0f2V0S+vJ7bbG8nrj5RAfPEyhS+wf8YVWMCR+HHRSBdoI I6RyAKBijilnh79YUjmHbwcUMP6czA3YAzKiC9Am33ZAF0pObC9ng7A9OFYKmSYT OyRUjxfRHwRRMcBGrlmj8uRWxnYJw35I6s2fS9mNwt4dm8669QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFN6qfbFFI0ATAb54t9r/zs/P1POvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 NGFhNWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3ODY5NmRkMDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc0YWE1YjIyLWJkYTItNDE0MS04 YmRmLTk4YTc4Njk2ZGQwMy83NGFhNWIyMi1iZGEyLTQxNDEtOGJkZi05OGE3ODY5 NmRkMDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXhqgDBALA4dgwDgQCAAIwCAMGACYC+5QAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYcEjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLKwwlKG9VHoDJO9Hb aH9iaPTed2CB7Uo7jt0OPCifaDRCQdRkfvSdziz8jjhA3w1zghgzuDETGJEIjlIX fI/TUbjJwg4tSRRPlLMc/gQNBlt82Oa+FMyaSx+XRY5CZBmqKXbEox73KAEvfS65 TrwbcFezpqSonXNI2U5YOj1CJcflhkEAdptFNK2+d1BQCcVeka6WdHoG554F86eR ZNXS3xvjS/HixllU986MfwNif73eyXodiiQeFj/0usuk7fVSpT8jPrpt9j3paCyy 8wgMeiYt+oCXbyzR9Zbt3UR/te9+tqjXPUxdkJweyDfCkLSsDL8dcTx4uw8vYADF 0ZS3 -----END CERTIFICATE-----Generated at Fri Apr 17 08:11:45 2026 by rpki-client