$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615.cer File: c2ba26e3-e462-4c49-ad31-7dde2268b615.cer (raw, json) Hash identifier: DmBhQzAkKo0M3XqfqRaBiYQZ4dW252s4b5C5932iaOg= Subject key identifier: 73:98:01:5E:A6:CE:48:BF:99:89:7A:F2:98:17:FA:A0:0D:F8:A1:C5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CD9950F38C2D2CA531A1FF000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615/c2ba26e3-e462-4c49-ad31-7dde2268b615.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Feb 2026 13:45:23 +0000 Certificate not after: Thu 18 May 2028 12:45:23 +0000 Subordinate resources: AS: 18728 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:95:0f:38:c2:d2:ca:53:1a:1f:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 13 13:45:23 2026 GMT Not After : May 18 12:45:23 2028 GMT Subject: CN=c2ba26e3-e462-4c49-ad31-7dde2268b615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:ba:ea:4a:f3:e4:f2:cd:c7:b0:fd:00:16: 71:7d:5d:28:fa:df:11:08:f5:4b:64:46:92:a1:b1: 4e:f6:a8:ca:ac:c5:2c:7d:14:48:ac:5a:5e:d6:29: a1:04:82:0a:13:3e:2c:f7:9a:a3:57:45:0d:d8:31: 73:1d:9b:52:eb:67:dc:73:ad:43:15:cf:f5:85:b1: ed:31:5d:3c:4a:56:d1:55:5b:af:ef:ff:cc:f4:7a: b4:8f:5e:d2:94:4a:e1:95:c1:32:a6:ac:20:68:1f: 5c:60:10:eb:4b:fc:99:3d:50:14:6c:d9:85:fe:1d: c0:8a:b3:71:74:b5:23:46:1c:b9:22:eb:b5:b1:66: af:04:1e:a9:6f:67:11:32:21:a3:68:47:d9:f0:f8: cd:45:5a:b5:a0:d3:d8:15:a5:97:ba:d7:5d:71:df: fa:b8:ab:3d:4f:32:86:a4:34:0e:c8:aa:58:63:df: 18:5d:72:0f:8a:94:a3:27:51:21:8b:42:c8:c9:b3: 7e:79:e6:91:e1:dd:56:d9:a3:9e:bb:00:13:02:c5: 4e:8b:d8:b4:2f:1b:70:f3:e4:55:70:af:3c:cd:35: a0:fd:81:78:f0:98:1f:77:ac:f6:51:6b:a6:27:c3: 08:07:66:49:a7:97:db:61:90:f4:f4:3d:94:5b:ad: cf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:98:01:5E:A6:CE:48:BF:99:89:7A:F2:98:17:FA:A0:0D:F8:A1:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c2ba26e3-e462-4c49-ad31-7dde2268b615/c2ba26e3-e462-4c49-ad31-7dde2268b615.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 18728 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:88:55:fe:53:c7:5a:44:16:6d:9e:0d:72:9d:5a:1d:fa:c3: ba:c6:80:35:f4:35:67:2b:e6:41:de:03:a7:e9:46:d7:e5:76: a0:5d:d6:a1:c5:ba:df:32:ea:1e:cd:e2:02:fd:1d:ad:3b:d7: d6:c5:78:63:b1:82:f1:20:56:8d:99:8c:ce:a7:2c:c6:b8:d6: 7f:05:be:97:13:5c:85:d1:c2:ba:7d:6f:f3:d3:28:f0:d0:0c: b6:36:9b:85:55:4c:1b:ad:1d:cd:9e:53:65:e5:8a:87:9b:fd: 99:ed:93:a1:cd:52:b0:93:1b:c3:57:2a:63:6e:9d:ed:cd:57: 49:75:96:fa:31:49:8f:f2:7e:bd:a9:5c:01:b2:9f:d6:6c:ce: 22:65:84:84:cb:54:5d:03:0a:e7:88:73:26:9e:68:67:ec:60: 16:44:4a:60:9c:38:55:88:d1:58:4c:d7:88:26:c9:15:89:d8: f4:13:78:b3:38:4e:e4:bb:69:f9:f3:fc:63:4e:d0:6f:be:c2: c2:26:4b:3b:75:ff:6f:2d:90:df:c8:2f:b4:85:cf:0b:75:95: 7a:8b:34:3c:f7:f1:78:6e:ea:c5:23:4e:88:9b:a2:08:94:0d: 78:90:65:34:cd:ad:db:15:fd:c4:1c:66:49:32:4e:2f:1b:06: 41:da:d8:3e -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEzZlQ84wtLKUxof8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIxMzEzNDUyM1oXDTI4MDUxODEyNDUyM1owLzEtMCsGA1UEAxMk YzJiYTI2ZTMtZTQ2Mi00YzQ5LWFkMzEtN2RkZTIyNjhiNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2S66krz5PLNx7D9ABZxfV0o+t8RCPVLZEaS obFO9qjKrMUsfRRIrFpe1imhBIIKEz4s95qjV0UN2DFzHZtS62fcc61DFc/1hbHt MV08SlbRVVuv7//M9Hq0j17SlErhlcEypqwgaB9cYBDrS/yZPVAUbNmF/h3AirNx dLUjRhy5Iuu1sWavBB6pb2cRMiGjaEfZ8PjNRVq1oNPYFaWXutddcd/6uKs9TzKG pDQOyKpYY98YXXIPipSjJ1Ehi0LIybN+eeaR4d1W2aOeuwATAsVOi9i0Lxtw8+RV cK88zTWg/YF48Jgfd6z2UWumJ8MIB2ZJp5fbYZD09D2UW63PSQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFHOYAV6mzki/mYl68pgX+qAN+KHFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j MmJhMjZlMy1lNDYyLTRjNDktYWQzMS03ZGRlMjI2OGI2MTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2MyYmEyNmUzLWU0NjItNGM0OS1h ZDMxLTdkZGUyMjY4YjYxNS9jMmJhMjZlMy1lNDYyLTRjNDktYWQzMS03ZGRlMjI2 OGI2MTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICSSgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAYYhV/lPHWkQWbZ4Ncp1aHfrDusaA NfQ1ZyvmQd4Dp+lG1+V2oF3WocW63zLqHs3iAv0drTvX1sV4Y7GC8SBWjZmMzqcs xrjWfwW+lxNchdHCun1v89Mo8NAMtjabhVVMG60dzZ5TZeWKh5v9me2Toc1SsJMb w1cqY26d7c1XSXWW+jFJj/J+valcAbKf1mzOImWEhMtUXQMK54hzJp5oZ+xgFkRK YJw4VYjRWEzXiCbJFYnY9BN4szhO5Ltp+fP8Y07Qb77CwiZLO3X/by2Q38gvtIXP C3WVeos0PPfxeG7qxSNOiJuiCJQNeJBlNM2t2xX9xBxmSTJOLxsGQdrYPg== -----END CERTIFICATE-----Generated at Sun Mar 1 20:24:19 2026 by rpki-client