$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer File: 7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer (raw, json) Hash identifier: bq1fsF5Lro9RG9bmziIJnH37xl3A+eFZzDjlCcnqCAA= Subject key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E094CA05F8FE0798F5AF3D770 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 02 Jun 2026 08:45:11 +0000 Certificate not after: Mon 04 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 2013 IP: 130.19.0.0/16 IP: 131.89.0.0 -- 131.90.255.255 IP: 192.68.118.0 -- 192.68.125.255 IP: 192.80.215.0 -- 192.80.254.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:09:4c:a0:5f:8f:e0:79:8f:5a:f3:d7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 2 08:45:11 2026 GMT Not After : Sep 4 08:45:11 2028 GMT Subject: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:94:73:57:38:0f:2a:ac:ad:ab:ac:97:e0:f9: af:b9:ea:79:91:6a:23:4d:ef:e4:92:f8:95:ee:22: de:6b:7d:18:0f:21:24:64:b8:87:cd:03:be:6e:52: 5b:06:74:41:2f:b0:fd:e9:85:b6:81:5c:a9:71:58: 73:f9:70:68:80:e3:6b:c7:75:b3:51:11:b6:40:0f: 2b:ae:95:9e:6b:76:1a:1b:87:4a:8e:fb:3c:de:dc: 1d:67:54:ea:f4:0f:1a:d0:06:81:eb:70:40:a2:d5: f3:8d:58:a4:de:1d:49:0e:71:6a:68:30:dc:e6:d7: 2b:46:64:25:8e:89:db:88:45:de:20:45:22:37:f9: ac:8b:b4:91:f3:4a:4f:b9:91:ac:5d:bf:82:34:76: 9a:d9:b0:36:9f:4f:e6:f9:43:d1:49:49:93:b1:0a: f9:4e:1c:1f:42:1f:62:01:7e:e0:b5:74:d7:60:57: 71:0b:f0:9e:9c:37:ab:6b:3d:97:6c:63:c5:a5:91: ad:89:e7:70:42:19:ea:2d:ed:14:fa:3f:fb:bf:10: dd:94:21:52:47:65:79:21:f8:72:77:bb:3e:75:48: 1a:8b:df:f8:78:ae:0b:79:5c:a0:b1:9e:bc:ec:61: f5:52:d2:02:82:9d:fc:f9:4b:63:4d:d9:ce:f6:f9: d2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 130.19.0.0/16 131.89.0.0-131.90.255.255 192.68.118.0-192.68.125.255 192.80.215.0-192.80.254.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 2013 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:97:5e:13:65:49:d9:2b:0e:8e:8a:32:89:96:26:63:32:f9: f3:2c:e3:3b:a9:ab:18:07:46:c2:4e:43:58:5d:41:a5:98:75: e6:aa:b8:b2:e5:6d:3a:7d:2a:3d:84:4a:ae:ba:e4:0d:6a:13: b0:5b:2e:ed:d0:52:65:b8:87:cd:e3:9e:86:b3:f9:17:fc:c2: 9e:c6:ab:f3:39:fc:04:1f:aa:ad:05:e3:56:8e:2d:48:78:51: a8:b1:69:f3:9a:6a:b4:ea:78:d1:43:27:e2:63:91:4d:b6:4f: e2:04:e5:2f:6e:3e:f4:52:6e:76:03:34:87:ac:9f:08:7f:8f: e7:e1:07:e3:9e:5e:0d:15:26:2f:e0:57:11:95:a7:93:c3:1d: d9:18:c5:40:4f:91:c6:0c:f4:39:58:f1:39:08:d6:6d:ff:53: 6a:4c:9d:00:33:a2:3d:93:92:30:e5:ec:d0:15:97:ec:ac:a1: d9:52:1c:c3:78:92:f8:17:b7:dc:ad:31:2f:d7:82:0d:03:52: 51:62:0b:1c:69:b2:f1:a3:b9:7f:51:4b:19:36:a8:7a:91:8e: a0:31:ad:32:7d:02:da:7d:54:c9:1f:9d:50:9b:64:36:9f:f5: e1:cb:82:6c:a5:c9:f6:db:f5:77:14:b9:8e:b3:1e:55:b1:0d: b7:25:4e:f0 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWE4JTKBfj+B5j1rz13AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYwMjA4NDUxMVoXDTI4MDkwNDA4NDUxMVowLzEtMCsGA1UEAxMk N2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipRzVzgPKqytq6yX4Pmvuep5kWojTe/kkviV 7iLea30YDyEkZLiHzQO+blJbBnRBL7D96YW2gVypcVhz+XBogONrx3WzURG2QA8r rpWea3YaG4dKjvs83twdZ1Tq9A8a0AaB63BAotXzjVik3h1JDnFqaDDc5tcrRmQl jonbiEXeIEUiN/msi7SR80pPuZGsXb+CNHaa2bA2n0/m+UPRSUmTsQr5ThwfQh9i AX7gtXTXYFdxC/CenDeraz2XbGPFpZGtiedwQhnqLe0U+j/7vxDdlCFSR2V5Ifhy d7s+dUgai9/4eK4LeVygsZ687GH1UtICgp38+UtjTdnO9vnSRQIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFNnBDW3s+unEVYHWNQEewG3WcEqqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdiYTc0N2NlLTlhNGQtNDcwYy1i M2ExLWRmYzM2ZjljNzhkZC83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5 Yzc4ZGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MDMEAgABMC0DAwCCEzAKAwMAg1kDAwCDWjAMAwQBwER2AwQBwER8 MAwDBADAUNcDBADAUP4wGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICB90wVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAbZdeE2VJ2SsOjooyiZYmYzL58yzjO6mrGAdGwk5DWF1BpZh15qq4suVtOn0q PYRKrrrkDWoTsFsu7dBSZbiHzeOehrP5F/zCnsar8zn8BB+qrQXjVo4tSHhRqLFp 85pqtOp40UMn4mORTbZP4gTlL24+9FJudgM0h6yfCH+P5+EH455eDRUmL+BXEZWn k8Md2RjFQE+Rxgz0OVjxOQjWbf9TakydADOiPZOSMOXs0BWX7Kyh2VIcw3iS+Be3 3K0xL9eCDQNSUWILHGmy8aO5f1FLGTaoepGOoDGtMn0C2n1UyR+dUJtkNp/14cuC bKXJ9tv1dxS5jrMeVbENtyVO8A== -----END CERTIFICATE-----Generated at Sat Jun 13 07:15:36 2026 by rpki-client