$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer File: a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.cer (raw, json) Hash identifier: uF72UwjLJXDR0Jzhl/SuOPKqznOCfBoytZhZ3nac6HM= Subject key identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E1CD76B53ABACF35794EB0F00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Jun 2026 08:45:11 +0000 Certificate not after: Mon 11 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 400422 IP: 104.249.160.0/22 IP: 134.65.198.0/23 IP: 2606:a440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1c:d7:6b:53:ab:ac:f3:57:94:eb:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 9 08:45:11 2026 GMT Not After : Sep 11 08:45:11 2028 GMT Subject: CN=a2b83ae7-52b6-45b4-92c9-c12f7bb009f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:4e:88:74:26:6b:01:ad:9b:90:8c:95:80: c0:51:1a:e5:a0:68:67:da:6e:ae:3f:65:23:49:32: 54:1f:52:6e:7e:a1:6a:f3:5a:52:9e:44:16:82:f1: 91:d7:26:dd:82:55:ad:99:b9:26:ef:a6:ee:b4:a8: 47:78:26:a7:24:40:99:40:00:d2:fa:86:ef:70:69: f1:75:4d:26:c7:4b:0a:88:ab:f7:84:84:db:b1:a0: 55:e6:c6:5a:e5:29:2b:54:fb:f0:f4:14:b3:8e:2a: 6f:7e:c0:e2:d9:5f:3b:22:9a:df:20:de:72:17:ee: 61:cb:e9:c3:95:be:c7:43:71:55:3c:d2:bd:78:51: 90:e0:27:e1:1e:f8:73:a3:63:cb:10:2c:9e:a5:52: 9a:51:d4:ad:f2:0a:b4:b0:2a:bd:fb:dc:16:1b:43: 1d:80:e0:53:66:2c:22:d2:2e:72:18:8d:34:ed:e7: a2:cb:b4:17:53:5d:35:90:a8:bd:c0:72:2a:3f:9d: 9e:9d:ca:2a:ba:45:14:3c:35:cf:5e:64:df:62:e0: bf:53:db:1a:93:87:e0:db:1f:eb:87:ec:b8:fc:62: a4:38:39:0f:ee:11:84:0a:d1:ee:30:e7:5e:d2:16: 23:4e:0d:75:80:11:95:b4:9f:d7:1c:de:54:e6:c7: df:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0C:93:71:9D:2F:15:4D:BE:12:71:AC:B5:BC:75:C8:03:28:0E:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4/a2b83ae7-52b6-45b4-92c9-c12f7bb009f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.249.160.0/22 134.65.198.0/23 IPv6: 2606:a440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400422 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:53:5a:4e:d0:e2:00:2b:69:75:1a:96:2e:ea:61:50:24:d2: 71:20:46:0b:dc:7c:5f:6f:34:94:55:23:cd:98:df:49:6d:1e: cf:50:9c:4e:19:64:c5:84:80:3f:82:c3:68:7e:5d:7d:27:3c: ec:c3:6e:7a:67:82:c5:ca:75:86:d2:19:d0:0d:aa:ed:25:dc: e1:68:47:67:db:c1:79:6b:2b:2c:e9:89:36:df:8c:c8:c2:6e: 67:89:e9:3e:89:16:d5:a2:a2:90:1d:51:d7:d5:6b:15:f1:81: 7a:4e:ea:c2:0e:2b:b6:41:59:56:26:99:5a:79:52:52:73:ef: 26:69:2c:11:14:a7:64:fe:07:e5:af:af:75:dc:5c:2b:86:63: ca:ef:d7:39:6e:7b:3e:59:fe:9d:86:55:e3:a3:9f:d0:d0:8d: 69:ab:4c:d0:64:03:a7:ed:83:1f:c0:e3:98:07:aa:91:83:7a: fb:0f:78:ca:91:0b:a5:4c:24:60:dd:15:71:2c:e4:1d:02:0e: c5:a4:5c:52:88:07:ab:8b:4d:ad:c0:5f:4c:ae:d8:83:fe:9e: 63:48:c1:28:3c:10:9e:4f:87:94:a4:89:c9:ed:d9:fe:d1:d2: f3:8c:d9:b5:d3:d1:e2:f5:d2:c3:b7:99:1b:d5:f2:58:77:e8: 08:5c:c7:6b -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE4c12tTq6zzV5TrDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYwOTA4NDUxMVoXDTI4MDkxMTA4NDUxMVowLzEtMCsGA1UEAxMk YTJiODNhZTctNTJiNi00NWI0LTkyYzktYzEyZjdiYjAwOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSlOiHQmawGtm5CMlYDAURrloGhn2m6uP2Uj STJUH1JufqFq81pSnkQWgvGR1ybdglWtmbkm76butKhHeCanJECZQADS+obvcGnx dU0mx0sKiKv3hITbsaBV5sZa5SkrVPvw9BSzjipvfsDi2V87IprfIN5yF+5hy+nD lb7HQ3FVPNK9eFGQ4CfhHvhzo2PLECyepVKaUdSt8gq0sCq9+9wWG0MdgOBTZiwi 0i5yGI007eeiy7QXU101kKi9wHIqP52encoqukUUPDXPXmTfYuC/U9sak4fg2x/r h+y4/GKkODkP7hGECtHuMOde0hYjTg11gBGVtJ/XHN5U5sffCwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBkMk3GdLxVNvhJxrLW8dcgDKA4rMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h MmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2JiMDA5ZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2EyYjgzYWU3LTUyYjYtNDViNC05 MmM5LWMxMmY3YmIwMDlmNC9hMmI4M2FlNy01MmI2LTQ1YjQtOTJjOS1jMTJmN2Ji MDA5ZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAJo+aADBAGGQcYwDQQCAAIwBwMFACYGpEAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADZTWk7Q4gAraXUali7q YVAk0nEgRgvcfF9vNJRVI82Y30ltHs9QnE4ZZMWEgD+Cw2h+XX0nPOzDbnpngsXK dYbSGdANqu0l3OFoR2fbwXlrKyzpiTbfjMjCbmeJ6T6JFtWiopAdUdfVaxXxgXpO 6sIOK7ZBWVYmmVp5UlJz7yZpLBEUp2T+B+Wvr3XcXCuGY8rv1zluez5Z/p2GVeOj n9DQjWmrTNBkA6ftgx/A45gHqpGDevsPeMqRC6VMJGDdFXEs5B0CDsWkXFKIB6uL Ta3AX0yu2IP+nmNIwSg8EJ5Ph5Skicnt2f7R0vOM2bXT0eL10sO3mRvV8lh36Ahc x2s= -----END CERTIFICATE-----Generated at Sat Jun 13 13:12:30 2026 by rpki-client