$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer File: 98b2490c-dcb7-4b1f-a79f-05a43608aa62.cer (raw, json) Hash identifier: fq77gr26vlxJPkusFeTBCg5t/2Jck2+lihZkvU0Qzlg= Subject key identifier: F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D00AAA2378350E3E04D44BAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Feb 2026 13:45:22 +0000 Certificate not after: Thu 01 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 18665 IP: 204.10.116.0/22 IP: 2602:fd7f::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:aa:a2:37:83:50:e3:e0:4d:44:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 27 13:45:22 2026 GMT Not After : Jun 1 12:45:22 2028 GMT Subject: CN=98b2490c-dcb7-4b1f-a79f-05a43608aa62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f8:36:29:87:16:ef:af:81:fa:07:a3:de:1e: ee:76:51:a4:0a:b9:58:cd:f6:6e:c5:be:52:90:44: ae:b0:7b:ab:7f:a6:a9:7b:a7:12:86:7c:66:59:b9: 0b:7a:fb:2e:65:1d:e5:42:cc:66:8c:fa:69:4b:ae: 8b:d1:d4:4f:98:28:22:73:ef:c0:d9:78:cf:f4:30: 45:8a:84:9e:43:7d:6c:c9:c3:4a:7b:eb:2b:7d:25: d8:05:bb:ed:5c:cf:b0:f2:84:93:ac:39:0f:53:6c: f5:3b:8f:d4:4b:29:d3:50:3f:53:d3:35:94:89:94: b0:be:a7:71:e4:75:f2:57:d2:40:46:c7:d8:72:8d: d1:34:d7:4c:08:27:09:0e:65:60:0f:b1:92:9f:e1: 26:be:0d:c4:e1:fd:b3:df:6c:6a:54:14:5d:f0:ad: c0:50:a3:c3:50:1b:94:77:3d:d5:cb:c5:1e:04:7e: 2e:0e:84:46:7d:ef:13:82:00:0e:a6:6f:ed:d4:7e: ed:6a:d8:5c:c6:7e:09:5c:cb:7a:c6:7d:da:66:20: 67:69:7f:aa:3b:bb:64:c1:39:2b:28:2b:84:9e:cc: 62:5b:dc:60:7e:31:40:d8:3f:c8:a1:25:e3:a9:5f: d4:ba:55:2f:e8:8e:18:27:ca:04:3a:66:76:8b:35: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:6C:F4:7D:86:7C:AA:80:5E:AA:BC:71:DD:F6:FD:02:40:BE:41:EF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/98b2490c-dcb7-4b1f-a79f-05a43608aa62/98b2490c-dcb7-4b1f-a79f-05a43608aa62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.10.116.0/22 IPv6: 2602:fd7f::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18665 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:7f:79:24:83:52:78:5a:e4:f6:36:f3:c7:e6:2a:9e:c1:8b: b5:9a:b5:5c:f3:e3:fd:c9:f8:6c:9b:aa:76:b4:00:a0:c3:7b: 39:84:03:f1:c0:14:f9:4a:49:a2:2e:ef:9f:1d:4e:70:f6:19: 71:62:d5:83:f3:c5:80:5a:d1:52:4d:8e:2b:76:50:95:68:f1: 6e:f3:69:60:75:d5:87:3d:3b:2b:cc:90:5a:d9:1a:61:42:ee: 38:b3:73:e2:2c:30:8d:f7:86:fe:de:b0:57:c2:71:66:c5:46: 0b:d9:db:1e:d9:70:6e:25:96:1b:db:be:81:3d:ed:d5:5d:6e: 4e:be:8e:fc:86:2c:02:74:a9:72:f5:9f:37:99:3d:0d:19:39: 00:34:90:80:f8:83:7d:9e:cf:9f:4b:db:9e:ad:e5:b7:24:c0: ae:4e:e1:be:a5:e4:65:45:7d:e6:54:c8:d4:2b:f1:0e:dd:b2: 69:18:29:9f:6e:df:dd:ce:b2:84:9d:8a:bf:08:ab:48:fc:b5: 04:4d:d2:13:76:22:09:34:33:32:b3:4b:69:18:b1:99:c2:53: 53:06:a4:8b:9c:ae:ac:4e:0b:02:42:50:10:cd:e0:60:dc:f7: be:b8:e5:00:7a:06:f5:a7:1b:85:41:d3:7a:9a:9e:40:49:01: 58:e5:3d:6a -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0AqqI3g1Dj4E1EusAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIyNzEzNDUyMloXDTI4MDYwMTEyNDUyMlowLzEtMCsGA1UEAxMk OThiMjQ5MGMtZGNiNy00YjFmLWE3OWYtMDVhNDM2MDhhYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvg2KYcW76+B+gej3h7udlGkCrlYzfZuxb5S kESusHurf6ape6cShnxmWbkLevsuZR3lQsxmjPppS66L0dRPmCgic+/A2XjP9DBF ioSeQ31sycNKe+srfSXYBbvtXM+w8oSTrDkPU2z1O4/USynTUD9T0zWUiZSwvqdx 5HXyV9JARsfYco3RNNdMCCcJDmVgD7GSn+Emvg3E4f2z32xqVBRd8K3AUKPDUBuU dz3Vy8UeBH4uDoRGfe8TggAOpm/t1H7tathcxn4JXMt6xn3aZiBnaX+qO7tkwTkr KCuEnsxiW9xgfjFA2D/IoSXjqV/UulUv6I4YJ8oEOmZ2izWGCwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPhs9H2GfKqAXqq8cd32/QJAvkHvMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 OGIyNDkwYy1kY2I3LTRiMWYtYTc5Zi0wNWE0MzYwOGFhNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzk4YjI0OTBjLWRjYjctNGIxZi1h NzlmLTA1YTQzNjA4YWE2Mi85OGIyNDkwYy1kY2I3LTRiMWYtYTc5Zi0wNWE0MzYw OGFhNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALMCnQwDgQCAAIwCAMGBCYC/X8AMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAkjpMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJV/eSSDUnha5PY288fmKp7Bi7Wa tVzz4/3J+Gybqna0AKDDezmEA/HAFPlKSaIu758dTnD2GXFi1YPzxYBa0VJNjit2 UJVo8W7zaWB11Yc9OyvMkFrZGmFC7jizc+IsMI33hv7esFfCcWbFRgvZ2x7ZcG4l lhvbvoE97dVdbk6+jvyGLAJ0qXL1nzeZPQ0ZOQA0kID4g32ez59L256t5bckwK5O 4b6l5GVFfeZUyNQr8Q7dsmkYKZ9u393OsoSdir8Iq0j8tQRN0hN2Igk0MzKzS2kY sZnCU1MGpIucrqxOCwJCUBDN4GDc97645QB6BvWnG4VB03qankBJAVjlPWo= -----END CERTIFICATE-----Generated at Sun Mar 1 22:36:10 2026 by rpki-client