$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9.cer File: 7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9.cer (raw, json) Hash identifier: VhY5RLIwuvrFf/m/peK96552hZ1bTna591OVlZmm5U8= Subject key identifier: 63:3F:6D:CB:1F:AB:32:33:FC:26:A5:88:1C:DF:EA:81:97:81:9B:1D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F2AB589F9CD339C2830744C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9/7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 14 Sep 2026 00:45:11 +0000 Certificate not after: Sun 17 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 393736 AS: 394589 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:b5:89:f9:cd:33:9c:28:30:74:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 14 00:45:11 2026 GMT Not After : Dec 17 01:45:11 2028 GMT Subject: CN=7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:00:2a:09:5f:d3:d0:30:b8:d0:4a:86:00: 05:f2:97:80:1c:ce:d1:0d:87:65:9c:ca:9a:45:0c: fc:4c:6f:48:41:a4:2b:b6:f2:10:70:de:5b:b4:26: 16:36:fc:46:13:d9:37:ad:7b:8e:15:6a:96:b6:18: b3:e8:7d:b5:58:99:8a:26:54:24:10:45:00:4c:29: 2d:2c:47:ed:5b:6d:80:2f:9d:a9:d0:97:96:4e:c5: 09:8b:dc:63:13:9b:90:9c:87:16:9e:88:ba:a3:5b: 97:aa:bf:0c:bb:1a:11:86:76:45:59:8f:6a:87:cf: 2b:09:f5:b2:b3:13:82:83:63:ff:94:5f:65:86:62: a1:b2:02:14:4e:91:b0:3b:09:cd:5a:eb:bd:2e:27: cf:41:2a:50:9a:30:bc:ad:a6:26:2e:aa:05:22:4d: ea:9c:72:36:59:af:dd:16:59:be:c3:37:16:ba:c0: 56:92:b0:95:8c:06:f6:e3:30:a1:05:01:b3:3a:a5: 7f:83:fd:0d:a8:45:65:24:8b:6b:d0:15:74:e8:ef: 1a:fd:8b:72:23:f8:63:86:91:1e:fd:41:c5:02:66: 70:12:75:aa:bc:66:3b:92:69:12:a2:a4:59:ad:dd: ba:25:00:2a:4a:d0:57:06:b9:6a:e5:bb:02:5b:d8: 27:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3F:6D:CB:1F:AB:32:33:FC:26:A5:88:1C:DF:EA:81:97:81:9B:1D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9/7bc3b8a4-dfb3-4f57-a849-ed9ba25b4bd9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 393736 394589 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:0f:67:27:80:d5:23:71:71:70:2a:56:67:15:bc:fb:03:9e: cb:26:8e:d0:a9:ee:56:29:94:cb:aa:be:39:ce:b2:74:2e:ae: aa:a0:75:fc:95:97:87:3b:3f:ff:a3:40:a7:41:d5:c2:88:a5: 73:7c:40:87:59:a5:ec:52:a8:97:7c:d5:e2:37:6f:c3:69:e4: 8c:61:18:44:a6:4e:f9:95:39:2d:f2:bc:e8:22:fe:fd:29:3c: 1f:0a:e3:0a:26:02:26:eb:30:d1:f5:5b:9f:24:42:92:f5:b0: 01:a8:ec:17:d4:ac:75:b6:89:8e:88:41:5e:8a:d9:ee:2c:1f: 34:10:c1:91:1f:d9:76:fa:48:b8:a0:d4:63:6e:d5:a3:58:ed: f4:16:a1:a7:38:f8:00:e2:bd:46:e7:e8:91:3b:02:a0:1c:b6: 81:b1:87:b5:d9:f3:d8:6a:bd:25:af:6c:dc:ad:2d:9b:18:d3: ae:29:f4:d9:ee:6d:36:0f:4d:9d:cd:cb:a7:cd:b7:9c:45:f3: 67:b2:6e:8f:02:e4:14:6d:64:c8:61:9c:cd:46:9e:0c:65:09: e2:d9:8e:40:57:7b:31:c8:03:52:8a:ec:f7:52:c8:05:a3:f9: c2:4a:cc:4e:f7:51:b3:ee:a8:67:2e:d1:cb:60:97:bf:49:87: f8:df:72:40 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE8qtYn5zTOcKDB0TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkxNDAwNDUxMVoXDTI4MTIxNzAxNDUxMVowLzEtMCsGA1UEAxMk N2JjM2I4YTQtZGZiMy00ZjU3LWE4NDktZWQ5YmEyNWI0YmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTcAKglf09AwuNBKhgAF8peAHM7RDYdlnMqa RQz8TG9IQaQrtvIQcN5btCYWNvxGE9k3rXuOFWqWthiz6H21WJmKJlQkEEUATCkt LEftW22AL52p0JeWTsUJi9xjE5uQnIcWnoi6o1uXqr8MuxoRhnZFWY9qh88rCfWy sxOCg2P/lF9lhmKhsgIUTpGwOwnNWuu9LifPQSpQmjC8raYmLqoFIk3qnHI2Wa/d Flm+wzcWusBWkrCVjAb24zChBQGzOqV/g/0NqEVlJItr0BV06O8a/YtyI/hjhpEe /UHFAmZwEnWqvGY7kmkSoqRZrd26JQAqStBXBrlq5bsCW9gnIwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGM/bcsfqzIz/CaliBzf6oGXgZsdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 YmMzYjhhNC1kZmIzLTRmNTctYTg0OS1lZDliYTI1YjRiZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdiYzNiOGE0LWRmYjMtNGY1Ny1h ODQ5LWVkOWJhMjViNGJkOS83YmMzYjhhNC1kZmIzLTRmNTctYTg0OS1lZDliYTI1 YjRiZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDBgIIAgMGBV0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWw9nJ4DVI3FxcCpWZxW8 +wOeyyaO0KnuVimUy6q+Oc6ydC6uqqB1/JWXhzs//6NAp0HVwoilc3xAh1ml7FKo l3zV4jdvw2nkjGEYRKZO+ZU5LfK86CL+/Sk8HwrjCiYCJusw0fVbnyRCkvWwAajs F9SsdbaJjohBXorZ7iwfNBDBkR/ZdvpIuKDUY27Vo1jt9Bahpzj4AOK9RufokTsC oBy2gbGHtdnz2Gq9Ja9s3K0tmxjTrin02e5tNg9Nnc3Lp823nEXzZ7JujwLkFG1k yGGczUaeDGUJ4tmOQFd7McgDUors91LIBaP5wkrMTvdRs+6oZy7Ry2CXv0mH+N9y QA== -----END CERTIFICATE-----Generated at Sun Sep 20 14:43:23 2026 by rpki-client