$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f.cer File: 988579cf-7343-453f-ab13-f97f89eece8f.cer (raw, json) Hash identifier: KVVMUlgGsymAZvtsoyKiVGKPEp71O8zhSFbhTUFnUSU= Subject key identifier: 25:74:49:A1:95:F7:F2:D3:92:40:5F:18:DC:14:0E:BF:0F:16:2C:DD Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CF84A94F313A38FA7AE96D790 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f/988579cf-7343-453f-ab13-f97f89eece8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Feb 2026 13:45:22 +0000 Certificate not after: Mon 29 May 2028 12:45:22 +0000 Subordinate resources: AS: 394501 IP: 23.150.0.0/24 IP: 45.45.172.0/22 IP: 134.195.32.0/22 IP: 2605:1ec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:4a:94:f3:13:a3:8f:a7:ae:96:d7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 24 13:45:22 2026 GMT Not After : May 29 12:45:22 2028 GMT Subject: CN=988579cf-7343-453f-ab13-f97f89eece8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:0b:05:87:35:da:0e:a0:0d:63:88:a5:1b: 36:fa:9c:db:d8:e4:47:d7:e4:01:f4:e6:74:f9:b0: d5:cd:f2:21:66:2f:cc:ae:0b:6e:95:4e:71:e9:89: 4a:42:74:7f:cd:dd:77:7e:ad:e8:95:a1:26:07:fb: ab:29:43:ac:13:55:f8:16:fa:e6:37:09:4e:74:9c: ce:6d:b6:ec:0f:89:80:a2:11:5c:11:ea:78:15:16: 4b:6c:29:10:55:db:f7:74:57:47:30:4c:3c:38:7f: 2f:dc:1f:e5:47:61:99:0f:a3:a1:5d:79:2f:87:ff: cd:7d:d9:d6:d4:02:b3:2c:14:7c:fe:0a:c5:f3:04: 31:49:99:18:31:f4:2e:8f:e7:61:cd:0c:d8:6e:bd: 81:76:2f:48:a3:c1:37:8a:e5:45:f2:23:cd:5f:52: 1e:1f:77:7c:94:c4:7c:80:3f:87:91:71:13:5a:88: ff:c2:6f:dc:e6:e7:df:0d:61:b5:4d:fc:8e:df:e7: 22:dd:6f:e4:a8:7e:69:db:a1:6c:fe:b9:fb:bc:4a: 32:58:d4:a1:dd:0b:a5:39:f1:28:64:09:d9:33:0c: da:71:3a:61:cf:50:de:5f:da:02:9a:ae:db:d9:00: 5c:74:88:89:bb:6a:2b:f3:78:da:a7:3f:05:a0:97: f7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:74:49:A1:95:F7:F2:D3:92:40:5F:18:DC:14:0E:BF:0F:16:2C:DD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/988579cf-7343-453f-ab13-f97f89eece8f/988579cf-7343-453f-ab13-f97f89eece8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.150.0.0/24 45.45.172.0/22 134.195.32.0/22 IPv6: 2605:1ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394501 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:a9:46:91:ac:4e:58:8d:29:8d:f1:c0:00:05:88:1e:da:3b: e6:09:08:f4:5b:71:b6:06:8e:87:8e:b1:d1:67:ba:93:53:04: 7c:fa:4b:63:f9:6e:e6:f3:86:37:ca:02:ae:64:1a:4d:ad:3a: 59:c5:9a:7a:2c:25:f3:ca:7c:9a:0b:04:aa:32:2b:79:3d:ab: 03:70:8e:7d:d5:9e:cb:26:e8:0c:12:6c:20:ba:ae:ac:36:49: 17:18:97:f4:6c:f2:dd:50:9a:01:eb:a4:c0:8a:7c:bb:b7:8f: 17:56:3d:37:41:01:c9:67:4f:7c:e4:0a:42:5e:e0:ec:7d:49: 26:c4:2d:f0:f4:f4:2c:ba:2e:5b:c7:f9:e3:3b:b4:bf:6b:1a: 8f:07:64:04:ef:60:62:8e:af:16:a1:21:33:f9:de:9b:3a:bd: 5f:ec:63:5d:66:a3:fa:f9:bb:1f:f1:22:21:8a:3c:2f:57:dd: 93:84:3a:bf:35:9b:73:0d:0f:95:f8:73:b0:c4:ea:07:bb:d7: 18:36:a9:c6:00:cc:71:96:5e:b1:a9:50:d6:f0:32:28:6a:3d: a7:07:48:b2:04:5f:86:01:11:66:ff:dd:d8:dd:e9:71:21:12: 31:60:61:d7:96:63:b4:1f:11:42:2a:6f:01:cb:84:c5:fc:dd: 25:b3:ae:46 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEz4SpTzE6OPp66W15AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIyNDEzNDUyMloXDTI4MDUyOTEyNDUyMlowLzEtMCsGA1UEAxMk OTg4NTc5Y2YtNzM0My00NTNmLWFiMTMtZjk3Zjg5ZWVjZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndgLBYc12g6gDWOIpRs2+pzb2ORH1+QB9OZ0 +bDVzfIhZi/MrgtulU5x6YlKQnR/zd13fq3olaEmB/urKUOsE1X4FvrmNwlOdJzO bbbsD4mAohFcEep4FRZLbCkQVdv3dFdHMEw8OH8v3B/lR2GZD6OhXXkvh//NfdnW 1AKzLBR8/grF8wQxSZkYMfQuj+dhzQzYbr2Bdi9Io8E3iuVF8iPNX1IeH3d8lMR8 gD+HkXETWoj/wm/c5uffDWG1TfyO3+ci3W/kqH5p26Fs/rn7vEoyWNSh3QulOfEo ZAnZMwzacTphz1DeX9oCmq7b2QBcdIiJu2or83japz8FoJf3aQIDAQABo4IENjCC BDIwHQYDVR0OBBYEFCV0SaGV9/LTkkBfGNwUDr8PFizdMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 ODg1NzljZi03MzQzLTQ1M2YtYWIxMy1mOTdmODllZWNlOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk4ODU3OWNmLTczNDMtNDUzZi1h YjEzLWY5N2Y4OWVlY2U4Zi85ODg1NzljZi03MzQzLTQ1M2YtYWIxMy1mOTdmODll ZWNlOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAAXlgADBAItLawDBAKGwyAwDQQCAAIwBwMFACYF HsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgUFMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJOpRpGsTliN KY3xwAAFiB7aO+YJCPRbcbYGjoeOsdFnupNTBHz6S2P5bubzhjfKAq5kGk2tOlnF mnosJfPKfJoLBKoyK3k9qwNwjn3Vnssm6AwSbCC6rqw2SRcYl/Rs8t1QmgHrpMCK fLu3jxdWPTdBAclnT3zkCkJe4Ox9SSbELfD09Cy6LlvH+eM7tL9rGo8HZATvYGKO rxahITP53ps6vV/sY11mo/r5ux/xIiGKPC9X3ZOEOr81m3MND5X4c7DE6ge71xg2 qcYAzHGWXrGpUNbwMihqPacHSLIEX4YBEWb/3djd6XEhEjFgYdeWY7QfEUIqbwHL hMX83SWzrkY= -----END CERTIFICATE-----Generated at Sun Mar 1 23:30:17 2026 by rpki-client