$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02.cer File: 846d9d67-c485-4d9c-a479-6ee876000b02.cer (raw, json) Hash identifier: 7bXjGHPFewex2lIivP8hxCeJaQPJml7g9Uyy/N17yZs= Subject key identifier: 12:36:AB:D7:EF:ED:03:0C:83:79:19:64:A0:11:87:4E:85:FC:CA:6D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E11ACAEA9D03BE499A4840080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/846d9d67-c485-4d9c-a479-6ee876000b02.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 05 Jun 2026 08:45:11 +0000 Certificate not after: Thu 07 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 148.59.154.0/24 IP: 161.199.16.0/24 IP: 167.94.160.0/24 IP: 192.107.243.0/24 IP: 2602:ff1c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:ac:ae:a9:d0:3b:e4:99:a4:84:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 5 08:45:11 2026 GMT Not After : Sep 7 08:45:11 2028 GMT Subject: CN=846d9d67-c485-4d9c-a479-6ee876000b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a9:b6:e0:f6:63:7e:3b:2c:59:c2:0b:55:91: 94:ea:e3:18:b6:dc:d0:63:e7:bd:c7:e9:ff:aa:8c: f8:68:ac:76:a9:7f:10:66:d5:47:11:b9:f8:f8:7a: 40:59:d9:e1:08:53:a6:ec:a7:b9:67:e1:71:36:aa: c8:11:5a:a5:84:9e:95:d4:c0:f9:7f:1d:46:98:84: b1:f7:7e:aa:9b:c1:09:3b:94:41:8f:97:67:5c:7b: 84:00:d0:91:a7:16:98:20:94:3d:57:24:fc:cb:43: c8:d5:af:14:db:d4:c7:60:4e:eb:53:28:99:91:7c: 92:a6:c2:61:b7:d1:5d:62:6f:36:bd:d1:bc:49:f5: 80:6b:ae:b7:65:a7:69:39:63:a7:3e:47:13:3f:e0: 70:7a:30:55:8b:f5:c7:63:9b:83:93:8b:74:2c:b2: 74:84:4d:9d:00:a0:5c:cc:9f:7b:ef:58:8e:c8:8a: 2d:dc:72:50:aa:6b:aa:74:b1:78:0d:21:71:0b:96: 7a:0d:ad:c9:62:be:5f:79:e0:b4:95:b8:10:68:34: 35:67:59:9e:3d:ba:22:04:6a:de:db:60:c0:8b:12: f5:3f:7e:09:47:84:13:5c:a9:21:ad:45:65:de:ec: 5c:ce:52:56:1c:2b:64:15:a5:e5:6f:3f:c1:34:bc: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:36:AB:D7:EF:ED:03:0C:83:79:19:64:A0:11:87:4E:85:FC:CA:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/846d9d67-c485-4d9c-a479-6ee876000b02/846d9d67-c485-4d9c-a479-6ee876000b02.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 148.59.154.0/24 161.199.16.0/24 167.94.160.0/24 192.107.243.0/24 IPv6: 2602:ff1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:42:59:7c:5b:74:a5:01:36:99:cf:08:81:d0:db:bf:bc:af: a3:f3:11:60:ac:30:99:df:96:69:85:d4:20:3e:32:da:9b:83: 68:a3:84:fd:c8:15:aa:01:c3:30:36:6b:08:ad:80:ed:81:20: c0:ba:44:ce:f9:67:55:b4:dc:a8:84:8f:6e:00:fb:81:08:a8: 30:07:cb:6f:eb:ea:ea:d2:22:14:51:45:fa:ad:1c:de:b5:e4: 18:86:d2:cc:92:ab:f8:4f:20:92:57:df:97:50:91:f3:cd:43: 42:4e:3a:80:7a:20:13:ee:39:83:fb:5a:fe:02:b3:a0:65:56: 1b:52:d8:e4:06:93:5b:2d:3d:b4:c5:d5:e0:23:a9:9e:2f:04: 93:f9:e5:a0:bf:b3:66:0e:6d:ed:63:61:93:28:d2:37:4f:d2: 2b:36:aa:47:0b:91:d3:3f:b4:d3:08:f9:fa:f1:d1:b9:10:58: f8:80:b4:43:ea:e7:50:0c:ef:65:4a:65:aa:4c:de:5a:72:fc: 5a:28:b0:2f:db:bf:56:53:fb:17:92:65:ea:6a:af:4d:4e:21: 3b:ad:dd:ca:43:90:71:b2:58:a1:d2:a3:74:9b:da:a0:f2:88: 47:7d:d6:bd:f6:0f:e5:c8:5e:b9:3a:64:7f:7a:dd:72:33:4d: 09:a3:b2:16 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE4RrK6p0DvkmaSEAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYwNTA4NDUxMVoXDTI4MDkwNzA4NDUxMVowLzEtMCsGA1UEAxMk ODQ2ZDlkNjctYzQ4NS00ZDljLWE0NzktNmVlODc2MDAwYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyam24PZjfjssWcILVZGU6uMYttzQY+e9x+n/ qoz4aKx2qX8QZtVHEbn4+HpAWdnhCFOm7Ke5Z+FxNqrIEVqlhJ6V1MD5fx1GmISx 936qm8EJO5RBj5dnXHuEANCRpxaYIJQ9VyT8y0PI1a8U29THYE7rUyiZkXySpsJh t9FdYm82vdG8SfWAa663ZadpOWOnPkcTP+BwejBVi/XHY5uDk4t0LLJ0hE2dAKBc zJ9771iOyIot3HJQqmuqdLF4DSFxC5Z6Da3JYr5feeC0lbgQaDQ1Z1mePboiBGre 22DAixL1P34JR4QTXKkhrUVl3uxczlJWHCtkFaXlbz/BNLzhxwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFBI2q9fv7QMMg3kZZKARh06F/MptMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 NDZkOWQ2Ny1jNDg1LTRkOWMtYTQ3OS02ZWU4NzYwMDBiMDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzg0NmQ5ZDY3LWM0ODUtNGQ5Yy1h NDc5LTZlZTg3NjAwMGIwMi84NDZkOWQ2Ny1jNDg1LTRkOWMtYTQ3OS02ZWU4NzYw MDBiMDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBACUO5oDBAChxxADBACnXqADBADAa/MwDgQCAAIw CAMGBCYC/xwAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHxCWXxbdKUBNpnPCIHQ27+8r6PzEWCsMJnflmmF 1CA+Mtqbg2ijhP3IFaoBwzA2awitgO2BIMC6RM75Z1W03KiEj24A+4EIqDAHy2/r 6urSIhRRRfqtHN615BiG0sySq/hPIJJX35dQkfPNQ0JOOoB6IBPuOYP7Wv4Cs6Bl VhtS2OQGk1stPbTF1eAjqZ4vBJP55aC/s2YObe1jYZMo0jdP0is2qkcLkdM/tNMI +frx0bkQWPiAtEPq51AM72VKZapM3lpy/FoosC/bv1ZT+xeSZepqr01OITut3cpD kHGyWKHSo3Sb2qDyiEd91r32D+XIXrk6ZH963XIzTQmjshY= -----END CERTIFICATE-----Generated at Sat Jun 13 10:07:21 2026 by rpki-client