$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3.cer File: 764e6cce-009d-4ab5-89d3-96e0c12500b3.cer (raw, json) Hash identifier: iZhIY6NdQ8k0rmHbH7HK29Z0wMZdknJvkbhWpcj1OGA= Subject key identifier: 18:8B:2D:45:11:18:1C:1B:43:F4:60:08:D3:0E:DF:00:F8:75:47:E9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CD9950F6BB52676B3F66B2E60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/764e6cce-009d-4ab5-89d3-96e0c12500b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Feb 2026 13:45:23 +0000 Certificate not after: Thu 18 May 2028 12:45:23 +0000 Subordinate resources: AS: 53414 IP: 74.121.244.0/22 IP: 192.155.69.0/24 IP: 2606:16c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:95:0f:6b:b5:26:76:b3:f6:6b:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 13 13:45:23 2026 GMT Not After : May 18 12:45:23 2028 GMT Subject: CN=764e6cce-009d-4ab5-89d3-96e0c12500b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ef:71:15:c4:73:10:8d:3f:bb:f2:6d:56:ac: 83:49:7d:27:0c:01:aa:d5:6b:21:7a:7d:04:94:99: ce:18:eb:36:c0:20:42:e3:3c:db:01:a1:73:b2:3d: d2:ad:23:96:e1:a1:aa:12:6c:8c:95:35:32:f2:1b: 7e:f0:9c:3e:2f:13:2d:79:7e:6b:66:24:d4:12:86: 1e:aa:8b:ce:3a:c5:11:9a:3e:c6:b4:3f:54:3e:4d: 9a:bc:88:03:84:d9:e5:cd:52:68:17:c8:13:f9:ca: 0d:63:0e:e0:82:ca:5c:5a:c0:c9:af:a5:35:37:49: 38:e5:fe:4a:5b:b8:f0:18:d5:c5:1f:53:82:84:e7: 3e:67:36:c8:8c:49:ae:f6:04:09:de:a4:83:a3:2e: de:4a:3f:56:b6:0a:97:2a:00:8b:87:2e:ee:c8:29: 80:a4:8a:42:de:73:af:aa:c9:55:f7:f1:59:ce:8a: fa:ca:c6:c9:05:b5:5a:28:a4:24:34:f3:f4:8e:b5: 92:77:37:c1:32:15:3c:54:ba:0e:dd:05:cb:cf:95: e3:f8:72:6b:92:04:52:a1:95:3b:7c:14:e7:8c:b7: b1:f8:5e:b8:76:de:4f:3e:dc:9f:ec:5a:13:80:0d: 09:1b:da:9b:c6:9a:5e:2f:79:03:09:36:58:18:6a: c8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:8B:2D:45:11:18:1C:1B:43:F4:60:08:D3:0E:DF:00:F8:75:47:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/764e6cce-009d-4ab5-89d3-96e0c12500b3/764e6cce-009d-4ab5-89d3-96e0c12500b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.121.244.0/22 192.155.69.0/24 IPv6: 2606:16c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53414 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:71:bd:e1:9d:5d:10:b1:c7:c9:12:eb:44:0c:c7:2f:c3:b4: 04:29:df:0a:5b:d9:d8:f8:6e:fb:7b:92:e5:02:99:c0:46:e9: 3b:2c:ce:2f:33:39:72:80:21:c5:70:dd:6c:61:62:86:9c:10: ad:0f:bf:fa:9f:b9:21:9a:0e:ee:7a:07:78:07:d8:cd:2c:49: b7:a8:b7:85:eb:fe:ff:05:ee:6d:e2:27:1d:3c:ff:cd:94:d2: 3e:d3:db:19:d5:39:bf:c3:fe:cd:d2:5e:aa:ea:da:c5:9b:0a: 33:ab:e3:ec:81:94:40:ca:68:c0:e3:62:48:56:62:71:aa:18: 4b:6a:40:46:31:59:98:1b:57:76:f0:bf:6e:7f:c1:72:df:31: 28:de:ae:50:16:84:a4:ff:f4:6e:6a:7b:76:a8:1f:b7:90:47: 89:1a:d6:e7:3b:99:00:dc:61:d9:48:7f:d1:8d:5e:00:a1:be: 6a:b5:b5:fe:9d:b4:00:ac:fe:71:0c:0c:4b:31:e9:22:f4:92: 82:46:48:4b:e8:d4:43:f4:b8:93:de:b9:54:02:87:2c:56:1a: 3e:02:9a:7b:57:a6:88:0c:ec:57:25:58:2a:c8:08:d5:39:f3: d3:19:03:bb:67:a3:39:e3:27:ee:39:5b:8b:0a:bd:df:4a:27: 13:27:14:0d -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEzZlQ9rtSZ2s/ZrLmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIxMzEzNDUyM1oXDTI4MDUxODEyNDUyM1owLzEtMCsGA1UEAxMk NzY0ZTZjY2UtMDA5ZC00YWI1LTg5ZDMtOTZlMGMxMjUwMGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu9xFcRzEI0/u/JtVqyDSX0nDAGq1Wshen0E lJnOGOs2wCBC4zzbAaFzsj3SrSOW4aGqEmyMlTUy8ht+8Jw+LxMteX5rZiTUEoYe qovOOsURmj7GtD9UPk2avIgDhNnlzVJoF8gT+coNYw7ggspcWsDJr6U1N0k45f5K W7jwGNXFH1OChOc+ZzbIjEmu9gQJ3qSDoy7eSj9WtgqXKgCLhy7uyCmApIpC3nOv qslV9/FZzor6ysbJBbVaKKQkNPP0jrWSdzfBMhU8VLoO3QXLz5Xj+HJrkgRSoZU7 fBTnjLex+F64dt5PPtyf7FoTgA0JG9qbxppeL3kDCTZYGGrIFwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBiLLUURGBwbQ/RgCNMO3wD4dUfpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 NjRlNmNjZS0wMDlkLTRhYjUtODlkMy05NmUwYzEyNTAwYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc2NGU2Y2NlLTAwOWQtNGFiNS04 OWQzLTk2ZTBjMTI1MDBiMy83NjRlNmNjZS0wMDlkLTRhYjUtODlkMy05NmUwYzEy NTAwYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJKefQDBADAm0UwDQQCAAIwBwMFACYGFsAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDANCmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJVxveGdXRCxx8kS60QM xy/DtAQp3wpb2dj4bvt7kuUCmcBG6Tsszi8zOXKAIcVw3WxhYoacEK0Pv/qfuSGa Du56B3gH2M0sSbeot4Xr/v8F7m3iJx08/82U0j7T2xnVOb/D/s3SXqrq2sWbCjOr 4+yBlEDKaMDjYkhWYnGqGEtqQEYxWZgbV3bwv25/wXLfMSjerlAWhKT/9G5qe3ao H7eQR4ka1uc7mQDcYdlIf9GNXgChvmq1tf6dtACs/nEMDEsx6SL0koJGSEvo1EP0 uJPeuVQChyxWGj4CmntXpogM7FclWCrICNU589MZA7tnoznjJ+45W4sKvd9KJxMn FA0= -----END CERTIFICATE-----Generated at Sun Mar 1 20:26:21 2026 by rpki-client