$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer File: 7f900e4e-5f0a-4b14-98c0-6647bff5e64e.cer (raw, json) Hash identifier: +62HQXuNSy7XQ8PS/GvhuTjhcEv8xPgcPpsE/V91EY4= Subject key identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CFDDFF20C42EBECC2A53D7900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Feb 2026 13:45:22 +0000 Certificate not after: Wed 31 May 2028 12:45:22 +0000 Subordinate resources: IP: 192.55.228.0/24 IP: 192.236.32.0/19 IP: 206.209.0.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:df:f2:0c:42:eb:ec:c2:a5:3d:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 26 13:45:22 2026 GMT Not After : May 31 12:45:22 2028 GMT Subject: CN=7f900e4e-5f0a-4b14-98c0-6647bff5e64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:a9:1e:58:0d:9b:39:b1:fc:8f:e3:7a:a0: 09:f2:e8:97:e1:de:51:05:3b:03:0d:d4:40:18:4c: e5:46:40:b7:99:59:c4:45:47:f6:5e:00:1d:77:92: b3:86:7a:81:ec:89:e1:19:4f:ad:bd:0b:17:de:ea: ff:06:f3:5d:40:e1:d1:71:bf:38:2d:8c:62:fe:5b: e6:a1:42:33:4b:19:bd:49:2f:23:82:26:4b:32:c2: 39:d6:45:d9:11:db:9d:62:04:2a:73:bf:4e:e6:cb: 75:36:5e:09:86:18:92:36:68:07:a3:f0:e2:29:ab: b6:ab:17:75:1a:85:66:09:ef:d1:27:61:40:38:d0: 89:c6:18:fe:e0:3d:02:2c:60:09:8f:a5:55:ba:66: 43:a5:66:f2:32:bd:49:d0:2a:6a:2d:35:57:5b:d3: 1a:ec:78:7c:49:76:65:37:f2:7f:0c:22:4b:07:14: 3a:ac:f6:27:5b:4c:76:a9:49:6f:60:94:18:99:71: aa:5e:10:e5:47:c0:fa:1f:d1:62:41:4c:6d:d9:1b: 14:ac:72:39:78:a4:be:d5:64:2a:70:4b:92:fd:ca: ac:36:62:52:de:d3:ec:01:d8:e2:8c:ac:05:6e:24: e7:53:7b:61:ed:40:84:6e:e1:25:37:51:56:cc:46: 57:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E5:8A:D2:B8:EF:87:D7:3E:80:88:32:FE:7B:A3:A3:0B:F5:C4:A0 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7f900e4e-5f0a-4b14-98c0-6647bff5e64e/7f900e4e-5f0a-4b14-98c0-6647bff5e64e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.55.228.0/24 192.236.32.0/19 206.209.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:05:1b:eb:18:92:c3:76:ac:2e:ec:9b:d1:ba:a1:0f:71:b7: 1c:71:aa:c0:93:32:59:99:1f:61:57:7b:cb:6c:81:f4:ad:26: ec:19:37:0b:5c:19:14:6d:0e:1a:7f:df:2a:08:09:2c:f5:51: 68:af:8c:04:21:6e:60:a0:f6:61:43:0a:a2:e9:0f:fd:b8:18: 76:7a:0e:48:2a:5b:05:13:e2:a6:69:79:71:1f:c9:62:44:39: 0e:64:64:a2:05:14:3f:0d:e7:ec:69:13:06:f4:f2:92:7a:08: 76:b7:54:68:57:00:6a:f8:7e:89:e5:3c:35:5c:fc:df:d0:a7: 4f:3b:e1:d4:23:a8:67:45:d3:e6:25:7d:05:75:d0:44:e9:f6: 13:56:26:8e:21:b5:d9:1a:69:dc:3c:f8:5f:04:8a:08:e8:d5: 06:ff:5b:78:98:0b:03:f4:e5:95:67:ce:48:1e:5f:77:7e:b2: fc:75:7b:60:da:5c:24:8a:5f:b9:cc:56:e8:75:d6:4f:c4:38: af:e0:9c:da:0a:bc:36:2d:60:4a:17:b3:18:32:5b:1e:5d:55: 26:62:c0:2a:0b:46:ca:80:fe:97:06:c0:68:a5:8d:8c:dc:f1: 0d:72:27:e8:57:3c:d3:55:83:25:a2:56:6f:88:6c:39:9c:d9: a1:f6:6d:53 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWEz93/IMQuvswqU9eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIyNjEzNDUyMloXDTI4MDUzMTEyNDUyMlowLzEtMCsGA1UEAxMk N2Y5MDBlNGUtNWYwYS00YjE0LTk4YzAtNjY0N2JmZjVlNjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDipHlgNmzmx/I/jeqAJ8uiX4d5RBTsDDdRA GEzlRkC3mVnERUf2XgAdd5KzhnqB7InhGU+tvQsX3ur/BvNdQOHRcb84LYxi/lvm oUIzSxm9SS8jgiZLMsI51kXZEdudYgQqc79O5st1Nl4JhhiSNmgHo/DiKau2qxd1 GoVmCe/RJ2FAONCJxhj+4D0CLGAJj6VVumZDpWbyMr1J0CpqLTVXW9Ma7Hh8SXZl N/J/DCJLBxQ6rPYnW0x2qUlvYJQYmXGqXhDlR8D6H9FiQUxt2RsUrHI5eKS+1WQq cEuS/cqsNmJS3tPsAdjijKwFbiTnU3th7UCEbuElN1FWzEZX4wIDAQABo4IECzCC BAcwHQYDVR0OBBYEFPPlitK474fXPoCIMv57o6ML9cSgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZmNWU2NGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdmOTAwZTRlLTVmMGEtNGIxNC05 OGMwLTY2NDdiZmY1ZTY0ZS83ZjkwMGU0ZS01ZjBhLTRiMTQtOThjMC02NjQ3YmZm NWU2NGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADAN+QDBAXA7CADBATO0QAwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALQUb 6xiSw3asLuyb0bqhD3G3HHGqwJMyWZkfYVd7y2yB9K0m7Bk3C1wZFG0OGn/fKggJ LPVRaK+MBCFuYKD2YUMKoukP/bgYdnoOSCpbBRPipml5cR/JYkQ5DmRkogUUPw3n 7GkTBvTyknoIdrdUaFcAavh+ieU8NVz839CnTzvh1COoZ0XT5iV9BXXQROn2E1Ym jiG12Rpp3Dz4XwSKCOjVBv9beJgLA/TllWfOSB5fd36y/HV7YNpcJIpfucxW6HXW T8Q4r+Cc2gq8Ni1gShezGDJbHl1VJmLAKgtGyoD+lwbAaKWNjNzxDXIn6Fc801WD JaJWb4hsOZzZofZtUw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:17:22 2026 by rpki-client