$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer File: a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.cer (raw, json) Hash identifier: 065J6cyEtw7jT3qBCwd7GD2dtvglu4XPsT+aFt/j1OM= Subject key identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EF17A866297A291AB71868380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 24 Aug 2026 12:45:12 +0000 Certificate not after: Sun 26 Nov 2028 13:45:12 +0000 Subordinate resources: AS: 46969 IP: 205.178.192.0/18 IP: 2602:80c:a000::/40 IP: 2607:4f40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:7a:86:62:97:a2:91:ab:71:86:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 24 12:45:12 2026 GMT Not After : Nov 26 13:45:12 2028 GMT Subject: CN=a6b33052-e5a8-4f63-b264-b55c1ae1ed5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:7e:58:ae:99:04:97:73:b4:9a:5e:d0:79: e2:7f:41:bc:b0:19:04:83:4d:a8:b3:4b:da:f0:f5: 00:4e:8c:c6:13:b0:33:10:37:0d:6c:1a:66:c5:2b: b3:f0:1b:c1:c2:26:11:d4:f5:31:b4:e2:fc:72:97: 35:3b:56:ab:42:f1:d5:62:5e:d6:f8:d3:97:be:5e: fe:82:44:ef:02:c7:2b:a9:34:8a:c9:c9:07:39:65: 3d:6c:5d:ad:27:9b:cf:5c:10:cf:f7:b4:4e:d2:4d: 7a:88:c6:c5:38:bc:c8:d5:53:69:56:84:de:69:ad: 7e:fb:6c:b0:39:36:1b:46:7a:b4:18:5e:52:2b:df: 76:42:1e:08:e5:07:f5:ab:7a:f2:2b:24:9b:16:6f: 83:a4:8b:c8:c2:89:81:16:f3:32:e5:44:96:43:b4: 1c:8b:4e:aa:12:a0:93:b8:d3:fb:24:f6:dc:cf:3e: b4:05:df:14:83:e5:b7:7f:d8:05:ce:f4:e7:0b:50: c6:7d:c0:7e:a3:3d:e9:24:fd:f8:af:6b:95:dd:ae: 2e:29:aa:1d:2e:5e:e8:e3:4b:1f:54:c2:c3:bb:5b: de:ba:16:a2:cd:92:ac:37:88:c2:07:c8:59:ea:e3: 4f:ef:0e:29:69:97:43:d3:23:00:3b:82:8f:46:cf: 0b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D1:67:33:F8:B7:06:E1:FB:F7:F7:C0:07:44:45:81:80:71:DC:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b/a6b33052-e5a8-4f63-b264-b55c1ae1ed5b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 205.178.192.0/18 IPv6: 2602:80c:a000::/40 2607:4f40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46969 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:45:8f:67:cf:2e:a0:08:28:00:4d:20:c3:80:75:47:a4:46: e5:cc:0c:4d:2d:08:c4:55:5a:fe:c9:e4:3e:05:00:bc:f4:e1: 76:51:d7:34:9d:32:59:13:09:e8:11:7c:23:93:7e:28:91:22: e5:c6:31:d9:c5:3b:9b:6f:34:1c:c2:84:f6:cf:7c:08:b1:93: 36:35:41:89:64:7e:04:fb:1f:92:06:3d:15:21:ba:52:aa:cb: c8:c4:f5:e8:29:e4:68:57:56:61:51:58:84:03:53:92:27:df: 2e:cb:5e:dc:e7:93:0d:c9:99:d9:64:24:67:60:42:10:96:c0: b0:9c:53:94:d5:0b:b8:e9:68:a2:e4:8c:32:86:cf:8c:0d:61: ca:65:44:cb:eb:8d:64:7b:73:f2:5a:fa:dd:9d:eb:9e:87:12: 89:a9:3e:03:95:04:d2:54:8b:64:50:e8:02:b7:4c:f0:72:5a: 68:5d:71:65:cd:67:16:dd:88:89:3c:f3:25:d7:85:02:ce:c3: 74:14:cf:96:71:53:90:29:34:69:8b:6a:d3:e2:f2:11:41:9c: b8:bc:e4:38:92:43:6c:85:9a:98:72:6c:74:0a:57:75:19:79: ab:55:2b:dd:35:5c:66:dc:e0:9c:5c:22:5d:47:21:3b:1f:74: 81:1f:42:f2 -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE7xeoZil6KRq3GGg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgyNDEyNDUxMloXDTI4MTEyNjEzNDUxMlowLzEtMCsGA1UEAxMk YTZiMzMwNTItZTVhOC00ZjYzLWIyNjQtYjU1YzFhZTFlZDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIZ+WK6ZBJdztJpe0Hnif0G8sBkEg02os0va 8PUATozGE7AzEDcNbBpmxSuz8BvBwiYR1PUxtOL8cpc1O1arQvHVYl7W+NOXvl7+ gkTvAscrqTSKyckHOWU9bF2tJ5vPXBDP97RO0k16iMbFOLzI1VNpVoTeaa1++2yw OTYbRnq0GF5SK992Qh4I5Qf1q3ryKySbFm+DpIvIwomBFvMy5USWQ7Qci06qEqCT uNP7JPbczz60Bd8Ug+W3f9gFzvTnC1DGfcB+oz3pJP34r2uV3a4uKaodLl7o40sf VMLDu1veuhaizZKsN4jCB8hZ6uNP7w4paZdD0yMAO4KPRs8LQQIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFJjRZzP4twbh+/f3wAdERYGAcdx0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9h NmIzMzA1Mi1lNWE4LTRmNjMtYjI2NC1iNTVjMWFlMWVkNWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2E2YjMzMDUyLWU1YTgtNGY2My1i MjY0LWI1NWMxYWUxZWQ1Yi9hNmIzMzA1Mi1lNWE4LTRmNjMtYjI2NC1iNTVjMWFl MWVkNWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMAwEAgABMAYDBAbNssAwFQQCAAIwDwMGACYCCAygAwUAJgdPQDAa BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAt3kwVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmUWPZ88uoAgoAE0g w4B1R6RG5cwMTS0IxFVa/snkPgUAvPThdlHXNJ0yWRMJ6BF8I5N+KJEi5cYx2cU7 m280HMKE9s98CLGTNjVBiWR+BPsfkgY9FSG6UqrLyMT16CnkaFdWYVFYhANTkiff Lste3OeTDcmZ2WQkZ2BCEJbAsJxTlNULuOloouSMMobPjA1hymVEy+uNZHtz8lr6 3Z3rnocSiak+A5UE0lSLZFDoArdM8HJaaF1xZc1nFt2IiTzzJdeFAs7DdBTPlnFT kCk0aYtq0+LyEUGcuLzkOJJDbIWamHJsdApXdRl5q1Ur3TVcZtzgnFwiXUchOx90 gR9C8g== -----END CERTIFICATE-----Generated at Sun Sep 20 12:44:46 2026 by rpki-client