$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405.cer File: 798bf3ed-aca7-485e-a776-a77340c2d405.cer (raw, json) Hash identifier: DmZEDWqxbVO4IyZnZN/EOU21tv8oQFWeWSXidf9BC8Y= Subject key identifier: D1:44:2B:A8:9B:8C:FB:3D:5C:F9:24:39:9B:B5:F0:38:D1:B3:E7:AC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584FB8195D179EF7258EEAA3F580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/798bf3ed-aca7-485e-a776-a77340c2d405.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Nov 2026 16:15:17 +0000 Certificate not after: Wed 31 Jan 2029 18:57:23 +0000 Subordinate resources: AS: 11968 AS: 14197 AS: 25923 AS: 30286 IP: 66.241.32.0/19 IP: 192.225.156.0/22 IP: 198.62.62.0/23 IP: 199.101.156.0/22 IP: 216.19.96.0/20 IP: 2620:f3::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:19:5d:17:9e:f7:25:8e:ea:a3:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 3 16:15:17 2026 GMT Not After : Jan 31 18:57:23 2029 GMT Subject: CN=798bf3ed-aca7-485e-a776-a77340c2d405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4f:04:87:76:31:a7:40:1c:44:2a:a9:8a:a0: 67:73:79:a8:65:4b:d3:de:cb:1e:76:85:3e:bc:0e: 9d:da:f2:cf:29:f6:b9:64:09:e3:00:16:65:13:45: c1:1b:c1:ad:94:7d:fb:98:0d:77:1f:29:80:0b:26: 8f:1b:b1:9b:69:cb:42:f7:79:e9:82:da:00:e2:bd: 17:45:0d:45:52:ac:ad:79:d4:a1:c9:b4:20:59:0a: 63:58:83:65:83:7c:23:19:6f:de:d6:7d:68:18:64: 73:c1:44:09:1c:19:74:9d:82:8e:a2:1b:df:c6:e6: 00:56:aa:83:93:41:2e:26:80:77:be:50:a6:14:29: 46:c1:df:b0:46:91:15:bc:00:99:a7:0a:f2:58:a0: bd:44:68:d0:75:d0:a6:2d:5a:db:e5:01:53:e5:c1: 8f:bf:0a:78:a8:aa:90:a1:d8:dd:60:b8:2e:f5:e1: 05:7c:cf:81:38:82:e6:fc:86:02:69:5e:a1:bd:b1: 14:17:44:9c:b4:c2:42:87:39:9f:48:fb:f9:60:a2: 39:4f:bc:96:5e:82:e0:a4:ac:1b:0a:5a:9d:a0:2b: 84:8f:47:a0:b2:03:d6:81:32:ee:ab:fe:c2:b1:1c: 01:aa:7f:2d:1b:31:45:32:74:3d:ab:11:68:19:75: 3f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:44:2B:A8:9B:8C:FB:3D:5C:F9:24:39:9B:B5:F0:38:D1:B3:E7:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/798bf3ed-aca7-485e-a776-a77340c2d405/798bf3ed-aca7-485e-a776-a77340c2d405.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.241.32.0/19 192.225.156.0/22 198.62.62.0/23 199.101.156.0/22 216.19.96.0/20 IPv6: 2620:f3::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11968 14197 25923 30286 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:dc:3f:08:b2:82:77:f3:03:44:35:2a:ff:3d:35:c9:05:db: 94:d1:13:44:30:91:86:f7:18:56:62:1a:23:2e:d7:c1:32:43: 96:72:4e:31:ce:d9:7e:42:3c:f9:72:08:e5:4b:0c:99:0e:aa: 29:ea:29:77:f9:2f:b4:08:a3:ee:2a:1c:a0:f9:f2:6a:0d:54: c2:1f:2e:49:1b:4c:54:95:b4:5c:77:55:5d:7e:bc:18:af:69: 31:4d:23:8f:11:e3:2e:b0:6a:96:0c:bd:0e:d5:cf:30:b5:37: 1b:9b:da:8c:a5:33:1a:c4:ac:d5:64:3e:4c:71:c4:65:37:0f: c0:2f:1b:8f:36:c1:15:97:69:19:f7:c2:9e:9a:55:11:47:2b: 25:97:d9:2d:1f:5d:99:fd:3a:8c:77:96:ee:5d:45:23:36:46: f9:da:27:f4:1e:f1:72:da:71:10:5f:a0:53:ba:5f:67:27:b2: ea:b8:e8:0c:84:06:54:2d:2d:79:c6:99:b5:ff:70:6a:ff:0a: 05:f4:d8:da:56:26:00:dd:33:bd:5e:c2:dc:df:54:95:92:a5: bd:da:26:8b:b0:59:05:b0:07:7f:43:73:d4:5b:f1:92:80:e3: 12:60:f7:53:85:b0:2e:03:3b:b0:fd:12:68:4c:47:35:db:8b: 9f:4f:e6:2f -----BEGIN CERTIFICATE----- MIIHPTCCBiWgAwIBAgIUAQ0Mn0MoWE+4GV0Xnvcljuqj9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MTEwMzE2MTUxN1oXDTI5MDEzMTE4NTcyM1owLzEtMCsGA1UEAxMk Nzk4YmYzZWQtYWNhNy00ODVlLWE3NzYtYTc3MzQwYzJkNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU8Eh3Yxp0AcRCqpiqBnc3moZUvT3ssedoU+ vA6d2vLPKfa5ZAnjABZlE0XBG8GtlH37mA13HymACyaPG7GbactC93npgtoA4r0X RQ1FUqytedShybQgWQpjWINlg3wjGW/e1n1oGGRzwUQJHBl0nYKOohvfxuYAVqqD k0EuJoB3vlCmFClGwd+wRpEVvACZpwryWKC9RGjQddCmLVrb5QFT5cGPvwp4qKqQ odjdYLgu9eEFfM+BOILm/IYCaV6hvbEUF0SctMJChzmfSPv5YKI5T7yWXoLgpKwb ClqdoCuEj0egsgPWgTLuq/7CsRwBqn8tGzFFMnQ9qxFoGXU/rQIDAQABo4IETzCC BEswHQYDVR0OBBYEFNFEK6ibjPs9XPkkOZu18DjRs+esMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 OThiZjNlZC1hY2E3LTQ4NWUtYTc3Ni1hNzczNDBjMmQ0MDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzc5OGJmM2VkLWFjYTctNDg1ZS1h Nzc2LWE3NzM0MGMyZDQwNS83OThiZjNlZC1hY2E3LTQ4NWUtYTc3Ni1hNzczNDBj MmQ0MDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBAVC8SADBALA4ZwDBAHGPj4DBALHZZwDBATYE2Aw DwQCAAIwCQMHBCYgAPMAADAlBggrBgEFBQcBCAEB/wQWMBSgEjAQAgIuwAICN3UC AmVDAgJ2TjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEW LGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0G CSqGSIb3DQEBCwUAA4IBAQAG3D8IsoJ38wNENSr/PTXJBduU0RNEMJGG9xhWYhoj LtfBMkOWck4xztl+Qjz5cgjlSwyZDqop6il3+S+0CKPuKhyg+fJqDVTCHy5JG0xU lbRcd1VdfrwYr2kxTSOPEeMusGqWDL0O1c8wtTcbm9qMpTMaxKzVZD5MccRlNw/A LxuPNsEVl2kZ98KemlURRysll9ktH12Z/TqMd5buXUUjNkb52if0HvFy2nEQX6BT ul9nJ7LquOgMhAZULS15xpm1/3Bq/woF9NjaViYA3TO9XsLc31SVkqW92iaLsFkF sAd/Q3PUW/GSgOMSYPdThbAuAzuw/RJoTEc124ufT+Yv -----END CERTIFICATE-----Generated at Thu Nov 5 01:17:32 2026 by rpki-client