$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer File: b3f53674-93ef-439e-9019-e6308b1c1738.cer (raw, json) Hash identifier: oUUJZBdQ54wCSRo0iTiBPRz6V5s9gr0aEPWv8n48RWA= Subject key identifier: 16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F6F1B4F3BDBD5E053D6F74C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 08 Oct 2026 12:45:12 +0000 Certificate not after: Wed 10 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 397156 IP: 141.193.239.0/24 IP: 148.59.73.0/24 IP: 216.116.134.0/24 IP: 2602:fe24::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:1b:4f:3b:db:d5:e0:53:d6:f7:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 8 12:45:12 2026 GMT Not After : Jan 10 13:45:12 2029 GMT Subject: CN=b3f53674-93ef-439e-9019-e6308b1c1738 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:aa:6e:8e:78:34:0a:ee:0f:32:73:3b:a9:cc: 78:a4:77:77:e3:be:47:8a:32:34:df:0a:37:80:d8: b9:31:e1:99:a5:13:40:ef:ea:71:b7:dc:ef:a8:f3: 69:5b:24:f0:5b:8c:2f:82:ba:6b:a3:55:49:9b:a6: f8:d8:09:b9:0a:60:a5:25:61:93:dc:f1:0a:9d:c1: ae:43:7c:cd:b9:d2:79:f9:ec:78:5a:b9:13:a0:00: a3:c8:05:29:d0:a6:15:92:78:ff:6f:48:4b:32:7f: b8:8b:25:43:85:7d:1f:df:32:da:0a:35:46:83:ed: 31:f9:cc:d3:4a:43:b2:31:20:14:7d:52:3a:c3:af: 30:65:ca:fa:e2:2f:8f:7d:57:92:f0:78:93:57:01: 81:6a:07:ce:73:8c:df:00:32:0d:41:1b:72:9f:47: c2:a5:df:e0:51:1d:e7:0b:65:81:dd:b5:9e:ed:00: 3d:ae:88:33:95:37:b7:eb:8f:ac:53:e8:27:3e:84: 34:53:92:db:84:6d:13:c6:b7:8c:e4:36:61:85:6b: 37:98:0b:57:82:64:b9:0e:4b:c1:b0:54:0a:95:bc: 5b:74:55:94:a7:aa:86:59:3f:2a:97:82:ad:e3:fd: 7e:4a:88:2a:d0:a4:2e:ce:23:5a:2a:41:cf:1d:67: 9c:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 141.193.239.0/24 148.59.73.0/24 216.116.134.0/24 IPv6: 2602:fe24::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397156 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:71:a4:8c:6e:e4:f8:4b:78:e1:a0:60:cb:c6:0c:e3:6c:c3: aa:95:ea:66:9a:ed:26:e9:67:e9:1d:ea:ec:1c:f2:b9:2e:72: e1:4f:6a:15:ff:17:99:09:6c:a4:ba:38:9a:cf:ad:7f:83:1d: 92:2a:63:93:5c:1b:c8:23:04:59:71:4a:dc:50:2f:45:df:0c: 8a:ab:0b:da:4e:8f:08:d4:28:a7:8a:1e:b3:7a:de:c0:e9:6a: 02:0e:72:24:db:d7:5d:56:79:6a:bd:c9:5e:11:97:b4:5a:ff: 73:cd:ab:8d:bc:5b:e3:45:72:91:04:dd:24:78:ba:13:67:08: 62:24:be:5a:aa:81:2c:ef:1e:f7:c1:25:bd:69:49:0c:91:12: e7:49:6c:5f:25:b8:c6:78:6e:f8:22:b0:5f:c7:39:40:f4:d8: 70:0b:ea:90:48:dc:5c:0e:9f:fe:e2:a0:6e:e0:ab:76:a5:72: ef:5c:5a:63:20:4e:51:8a:73:f6:f4:50:9f:8b:b5:24:f7:1d: 9d:79:3a:e4:20:74:e2:39:c8:1b:32:34:1c:d7:6a:4b:e0:e6: 3a:25:42:55:e6:f0:2b:66:23:22:e3:4b:1f:7f:46:37:ac:dc: a0:0b:9f:9b:e6:b5:82:9a:c1:63:72:9b:f6:ef:3d:53:88:c7: 13:96:0d:4a -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE9vG08729XgU9b3TIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MTAwODEyNDUxMloXDTI5MDExMDEzNDUxMlowLzEtMCsGA1UEAxMk YjNmNTM2NzQtOTNlZi00MzllLTkwMTktZTYzMDhiMWMxNzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kpujng0Cu4PMnM7qcx4pHd3475HijI03wo3 gNi5MeGZpRNA7+pxt9zvqPNpWyTwW4wvgrpro1VJm6b42Am5CmClJWGT3PEKncGu Q3zNudJ5+ex4WrkToACjyAUp0KYVknj/b0hLMn+4iyVDhX0f3zLaCjVGg+0x+czT SkOyMSAUfVI6w68wZcr64i+PfVeS8HiTVwGBagfOc4zfADINQRtyn0fCpd/gUR3n C2WB3bWe7QA9rogzlTe364+sU+gnPoQ0U5LbhG0TxreM5DZhhWs3mAtXgmS5DkvB sFQKlbxbdFWUp6qGWT8ql4Kt4/1+Sogq0KQuziNaKkHPHWeciQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFBZCnfjfuZZOpaQU5rZCca6b/yzGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i M2Y1MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMwOGIxYzE3MzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2IzZjUzNjc0LTkzZWYtNDM5ZS05 MDE5LWU2MzA4YjFjMTczOC9iM2Y1MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMwOGIx YzE3MzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwOwYIKwYBBQUH AQcBAf8ELDAqMBgEAgABMBIDBACNwe8DBACUO0kDBADYdIYwDgQCAAIwCAMGBCYC /iQAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwYPZDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwcaSMbuT4 S3jhoGDLxgzjbMOqlepmmu0m6WfpHersHPK5LnLhT2oV/xeZCWykujiaz61/gx2S KmOTXBvIIwRZcUrcUC9F3wyKqwvaTo8I1Cinih6zet7A6WoCDnIk29ddVnlqvcle EZe0Wv9zzauNvFvjRXKRBN0keLoTZwhiJL5aqoEs7x73wSW9aUkMkRLnSWxfJbjG eG74IrBfxzlA9NhwC+qQSNxcDp/+4qBu4Kt2pXLvXFpjIE5RinP29FCfi7Uk9x2d eTrkIHTiOcgbMjQc12pL4OY6JUJV5vArZiMi40sff0Y3rNygC5+b5rWCmsFjcpv2 7z1TiMcTlg1K -----END CERTIFICATE-----Generated at Thu Nov 5 01:06:34 2026 by rpki-client