$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer File: 9ac09e11-24a9-4451-9633-b772a7a11960.cer (raw, json) Hash identifier: 47aglXH517BW33WLQuQJhrZmuuIlyGEo+Sz0uHMN5nQ= Subject key identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584DD2B41FC69313E53AED8D6480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 13 May 2026 19:24:15 +0000 Certificate not after: Thu 22 Jul 2027 00:45:34 +0000 Subordinate resources: AS: 194 AS: 14041 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d2:b4:1f:c6:93:13:e5:3a:ed:8d:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: May 13 19:24:15 2026 GMT Not After : Jul 22 00:45:34 2027 GMT Subject: CN=9ac09e11-24a9-4451-9633-b772a7a11960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:e3:f4:bd:9b:9b:5e:7b:ea:c9:6a:ad:bb: 38:e7:d7:b5:4c:90:c5:03:34:57:de:c0:22:29:73: 59:fc:a0:fb:5e:15:85:19:46:2c:81:3d:3f:42:f7: 57:fc:a3:b5:aa:ed:36:cf:df:2c:12:1c:c1:b1:0b: 94:8c:9b:63:a7:e3:1b:0e:3e:de:e7:3b:1b:a9:4a: f5:e2:e1:e5:8d:08:e3:6b:31:55:ca:ad:48:d6:34: 9c:cd:fb:20:41:a3:9e:c4:ef:ab:a7:5c:7d:d6:9d: 3b:7d:d7:ba:6e:ec:a2:d0:fc:60:5f:5f:8d:ba:c2: 04:23:7f:97:96:97:3f:3a:43:62:1d:b9:00:3e:e6: 5e:2d:2f:7a:3a:14:9f:d6:57:70:26:72:84:43:3a: a6:54:22:88:e0:75:39:09:47:86:65:5d:19:9c:a8: 1b:c9:fd:a5:1a:6d:83:d8:38:cb:e3:6c:e8:f3:1a: f1:d1:60:63:d8:5a:35:e8:24:47:7d:3c:df:9a:fc: 80:d7:b2:dd:4d:ec:bd:39:6c:66:2c:97:e2:7b:1a: 61:6b:ca:68:7c:ca:b1:a4:2a:7b:c6:01:43:0f:fa: 3a:59:68:5e:97:5b:b0:b0:f0:c7:47:0c:cc:f8:e9: 56:24:df:0d:9a:fc:24:42:e1:52:b3:f4:48:00:3c: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 194 14041 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:5f:52:fe:58:43:f7:3c:98:7e:07:ad:9b:c8:17:52:71:63: 62:7c:4b:c8:01:e1:1e:56:37:29:3f:83:b8:6e:4e:3b:06:04: d9:cc:6d:dd:64:c0:b1:91:a9:30:5f:9d:dd:77:80:01:10:17: 15:69:d9:33:3a:f2:28:4e:77:c9:d1:96:39:42:cf:32:50:d1: b3:a6:25:e4:df:2f:9b:26:3a:b0:d9:ba:31:d4:dc:5a:37:47: 68:c1:54:fb:58:a8:b5:df:98:50:30:0d:18:30:2c:2d:14:26: 0b:b6:e4:c3:1b:dd:73:ad:4b:3d:be:9e:85:4c:5c:40:98:4b: e3:f2:ef:86:e6:fe:38:2e:d1:bc:f8:d4:1b:6b:fa:31:df:e7: a6:14:04:6d:bf:69:d0:c7:38:ec:f8:a3:fa:28:2e:3f:a1:38: 40:0f:17:57:50:17:b2:6d:e3:e2:6e:78:d1:74:8f:0e:48:f8: e4:45:82:63:ef:4b:fb:d6:9c:f0:7e:ea:e4:69:0e:94:23:dc: d5:be:03:2f:b7:cd:e6:7d:cf:4b:fc:eb:6c:e3:42:d9:b7:71: 47:8a:08:d1:de:63:0a:03:12:9b:14:6a:66:66:83:68:e6:28: a1:8b:06:52:9c:d4:95:52:5a:2d:e0:3c:db:30:22:d1:16:38: b1:29:f9:3f -----BEGIN CERTIFICATE----- MIIG6zCCBdOgAwIBAgIUAQ0Mn0MoWE3StB/GkxPlOu2NZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDUxMzE5MjQxNVoXDTI3MDcyMjAwNDUzNFowLzEtMCsGA1UEAxMk OWFjMDllMTEtMjRhOS00NDUxLTk2MzMtYjc3MmE3YTExOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gbj9L2bm1576slqrbs459e1TJDFAzRX3sAi KXNZ/KD7XhWFGUYsgT0/QvdX/KO1qu02z98sEhzBsQuUjJtjp+MbDj7e5zsbqUr1 4uHljQjjazFVyq1I1jSczfsgQaOexO+rp1x91p07fde6buyi0PxgX1+NusIEI3+X lpc/OkNiHbkAPuZeLS96OhSf1ldwJnKEQzqmVCKI4HU5CUeGZV0ZnKgbyf2lGm2D 2DjL42zo8xrx0WBj2Fo16CRHfTzfmvyA17LdTey9OWxmLJfiexpha8pofMqxpCp7 xgFDD/o6WWhel1uwsPDHRwzM+OlWJN8NmvwkQuFSs/RIADwnHwIDAQABo4ID/TCC A/kwHQYDVR0OBBYEFDc7i8Wntvby80LSqh5Dnpk/W4TmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdhMTE5NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzlhYzA5ZTExLTI0YTktNDQ1MS05 NjMzLWI3NzJhN2ExMTk2MC85YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdh MTE5NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHQYIKwYBBQUH AQgBAf8EDjAMoAowCAICAMICAjbZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHlfUv5YQ/c8mH4HrZvIF1Jx Y2J8S8gB4R5WNyk/g7huTjsGBNnMbd1kwLGRqTBfnd13gAEQFxVp2TM68ihOd8nR ljlCzzJQ0bOmJeTfL5smOrDZujHU3Fo3R2jBVPtYqLXfmFAwDRgwLC0UJgu25MMb 3XOtSz2+noVMXECYS+Py74bm/jgu0bz41Btr+jHf56YUBG2/adDHOOz4o/ooLj+h OEAPF1dQF7Jt4+JueNF0jw5I+ORFgmPvS/vWnPB+6uRpDpQj3NW+Ay+3zeZ9z0v8 62zjQtm3cUeKCNHeYwoDEpsUamZmg2jmKKGLBlKc1JVSWi3gPNswItEWOLEp+T8= -----END CERTIFICATE-----Generated at Sat Jun 13 06:02:41 2026 by rpki-client