$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer File: 804b1e4b-89d3-4769-bab1-38df1d9bb72e.cer (raw, json) Hash identifier: dcdIFoVsmBTizOTWX3GgJkUqPHsImZFW9hKiKTbnRpw= Subject key identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E9D42E3078A5B478128D9FA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 25 Jul 2026 08:45:11 +0000 Certificate not after: Fri 27 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 18903 IP: 208.80.128.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:42:e3:07:8a:5b:47:81:28:d9:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 25 08:45:11 2026 GMT Not After : Oct 27 08:45:11 2028 GMT Subject: CN=804b1e4b-89d3-4769-bab1-38df1d9bb72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:11:02:de:8c:d0:31:6d:90:a3:08:18:68:1c: b9:24:0e:67:0b:74:5b:01:85:33:a4:b8:17:a0:42: 59:70:fd:84:e9:44:cd:1e:7a:00:df:a2:7b:e6:17: 7c:ff:d7:e6:40:80:85:c2:a6:d7:55:0b:d3:e3:fb: af:b5:f2:b2:a0:9d:3e:74:c6:43:5c:ae:0c:5b:fb: f7:c2:a8:c6:20:3d:0e:9e:0f:62:d9:30:17:66:2f: b3:71:51:78:7d:f6:33:36:8c:e0:51:14:53:db:54: 2b:20:04:b2:31:a4:25:d5:a6:4f:97:78:5a:55:fa: 66:7f:53:96:66:5b:fb:16:91:f3:c1:41:ed:75:ea: 26:ee:e7:21:f0:23:b5:ee:59:60:61:00:5c:1f:7d: 5f:dc:20:53:db:7d:69:3d:65:3d:96:26:07:8a:83: 90:96:1c:82:e2:63:34:46:2b:de:e2:9d:aa:19:3a: e8:cf:56:0d:78:f6:79:a5:5c:1b:fe:c2:bf:77:00: 50:f6:73:7c:3a:79:3a:af:60:a9:ad:b0:71:1f:de: 79:41:89:16:57:2c:70:55:23:81:fa:04:77:ad:7e: cf:e2:98:f0:65:e0:81:95:41:91:08:3e:c6:b1:65: 42:a6:a5:d5:f5:ce:bd:8d:2a:fb:76:f2:bb:55:a3: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:03:65:2A:F7:7F:0C:AF:50:52:FA:C9:87:C9:4F:62:04:2F:B8:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/804b1e4b-89d3-4769-bab1-38df1d9bb72e/804b1e4b-89d3-4769-bab1-38df1d9bb72e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.80.128.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18903 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:73:ae:2f:ec:ad:7f:4d:1d:1d:ea:1c:dd:ef:3a:0c:64:5b: 14:bf:8e:8a:1b:cc:f0:56:12:1d:66:e0:6b:34:e3:37:2b:39: 96:03:50:47:b3:fc:83:e5:cf:67:0c:d6:a3:e7:f1:ef:b9:ce: 2c:1e:c8:1b:a4:cc:2b:bd:48:d6:db:55:f4:13:fa:cb:5f:f4: 7d:a3:49:8f:c0:66:52:f1:6e:b8:a4:a7:62:3b:9a:f4:d7:fe: f9:1d:c4:b3:26:c4:10:4d:c6:72:22:f3:4e:cd:77:e4:af:6e: 70:94:b6:25:cc:d1:97:40:19:85:a2:bb:87:aa:b8:c7:b9:7a: 23:48:a0:2a:bd:c6:28:62:f1:14:1c:ff:de:3a:d1:bc:3f:55: 38:2f:e5:1e:8a:1e:71:6b:40:62:f2:4c:61:75:cd:f5:79:1d: d2:ea:4c:24:92:2a:9b:8a:d6:5c:15:6a:b2:1b:89:ce:f2:cc: 80:c3:d8:c7:fb:95:9c:54:6e:cd:e1:dc:3f:26:5f:f8:39:7f: fd:e5:30:55:7a:a6:71:ab:16:97:05:45:7e:88:4e:a1:71:37: 57:71:2d:1a:00:b4:f9:ec:c8:e9:1c:94:eb:d9:9a:9b:9b:2d: ed:ae:39:94:b8:3f:ae:a8:60:a0:1b:a2:10:f8:34:75:cd:2e: cb:b8:df:9c -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE6dQuMHiltHgSjZ+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcyNTA4NDUxMVoXDTI4MTAyNzA4NDUxMVowLzEtMCsGA1UEAxMk ODA0YjFlNGItODlkMy00NzY5LWJhYjEtMzhkZjFkOWJiNzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxREC3ozQMW2QowgYaBy5JA5nC3RbAYUzpLgX oEJZcP2E6UTNHnoA36J75hd8/9fmQICFwqbXVQvT4/uvtfKyoJ0+dMZDXK4MW/v3 wqjGID0Ong9i2TAXZi+zcVF4ffYzNozgURRT21QrIASyMaQl1aZPl3haVfpmf1OW Zlv7FpHzwUHtdeom7uch8CO17llgYQBcH31f3CBT231pPWU9liYHioOQlhyC4mM0 Rive4p2qGTroz1YNePZ5pVwb/sK/dwBQ9nN8Onk6r2CprbBxH955QYkWVyxwVSOB +gR3rX7P4pjwZeCBlUGRCD7GsWVCpqXV9c69jSr7dvK7VaOTKwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFUDZSr3fwyvUFL6yYfJT2IEL7g6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5YmI3MmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgwNGIxZTRiLTg5ZDMtNDc2OS1i YWIxLTM4ZGYxZDliYjcyZS84MDRiMWU0Yi04OWQzLTQ3NjktYmFiMS0zOGRmMWQ5 YmI3MmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPQUIAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC SdcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJHOuL+ytf00dHeoc3e86DGRbFL+OihvM8FYSHWbgazTjNys5 lgNQR7P8g+XPZwzWo+fx77nOLB7IG6TMK71I1ttV9BP6y1/0faNJj8BmUvFuuKSn Yjua9Nf++R3EsybEEE3GciLzTs135K9ucJS2JczRl0AZhaK7h6q4x7l6I0igKr3G KGLxFBz/3jrRvD9VOC/lHooecWtAYvJMYXXN9Xkd0upMJJIqm4rWXBVqshuJzvLM gMPYx/uVnFRuzeHcPyZf+Dl//eUwVXqmcasWlwVFfohOoXE3V3EtGgC0+ezI6RyU 69mam5st7a45lLg/rqhgoBuiEPg0dc0uy7jfnA== -----END CERTIFICATE-----Generated at Tue Jul 28 17:16:31 2026 by rpki-client