$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11.cer File: cea06048-7bc3-4b65-8443-4c600b73bc11.cer (raw, json) Hash identifier: LjTxsjYrMn52T0OFe7bWRnds+G2t1B2UYrcp5ubseNY= Subject key identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EF70FE3C8AED243AA3F6EE0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 26 Aug 2026 12:45:11 +0000 Certificate not after: Tue 28 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 159.91.0.0/16 IP: 192.76.179.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:0f:e3:c8:ae:d2:43:aa:3f:6e:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 26 12:45:11 2026 GMT Not After : Nov 28 13:45:11 2028 GMT Subject: CN=cea06048-7bc3-4b65-8443-4c600b73bc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:cf:3a:26:f9:88:35:24:26:40:11:d2:52: 2c:0e:fe:fa:6f:10:a8:3c:c0:fe:3d:81:83:27:34: f2:ec:87:5c:12:4a:f9:b1:29:ae:23:71:a5:fa:3f: d8:62:77:e2:db:de:b9:06:11:8e:a3:0a:33:87:07: 77:d1:7e:fb:9b:d9:bd:9c:23:2a:92:73:7a:ca:d0: 09:f1:58:f8:1a:fc:15:6b:51:f8:43:fd:d3:f1:d7: 45:d5:88:f4:a4:b1:e4:35:7e:ff:a2:a2:3f:db:8d: 4f:da:24:ea:3e:0b:2f:f5:70:bc:93:d1:7b:7e:c6: 4a:7c:8e:a4:5a:f5:47:a1:1e:e4:3e:f2:2c:9b:7c: 75:fe:03:29:2d:4e:7e:18:b5:dc:90:51:08:ae:34: 30:77:c7:63:ea:a9:e6:7b:d5:54:aa:59:50:9a:d3: 25:51:ca:18:56:7a:b7:58:e8:d2:5b:66:17:0c:8c: 74:f3:57:fe:5c:ef:1b:63:bb:14:61:4d:7b:26:77: 41:38:3e:50:d8:60:f1:18:2e:0f:40:dd:89:e3:27: 2d:18:eb:18:19:44:6e:4b:3b:e3:dc:6b:fb:16:8e: ef:fc:c5:09:16:7a:8a:15:ed:f7:50:11:a3:71:8e: f4:e5:f1:fd:c4:6f:1d:35:b9:1c:d1:ee:3e:81:e4: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:FE:7D:19:0B:57:9A:DE:DB:61:5E:D5:D8:CB:60:5D:1F:50:AE:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cea06048-7bc3-4b65-8443-4c600b73bc11/cea06048-7bc3-4b65-8443-4c600b73bc11.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 159.91.0.0/16 192.76.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:36:50:c7:43:15:0d:aa:56:75:f3:5c:ec:fd:25:e9:d0:37: 73:25:6b:11:b5:84:d3:89:52:7a:a3:1c:21:70:ce:50:4d:96: e1:2e:c2:71:fb:4b:d3:7f:65:f0:5d:fe:b1:ad:c3:23:2f:af: 5a:a4:cc:22:0d:24:fc:2b:df:93:b9:82:14:ab:59:50:4e:8f: 63:75:b2:1d:eb:d2:ce:ae:04:54:4b:f7:b0:1d:2e:f1:d0:e3: 62:4e:d8:98:e1:10:e9:b1:d7:00:90:74:f2:e3:8e:d8:c9:83: 65:a1:58:d6:a0:29:10:b5:a3:b1:f6:92:b4:b0:ac:fe:d8:9e: 5a:59:a6:0e:ee:1f:1f:2c:50:6d:81:51:50:18:20:7f:ff:6d: da:c3:a4:23:ea:16:a2:a0:af:f4:2b:7e:62:6b:ac:e3:1f:f7: 8d:d9:e4:f0:61:49:ac:9f:0f:d3:98:38:8f:9c:57:3d:a4:f1: 5b:d2:2a:b8:86:80:d0:30:78:5a:ba:ff:02:99:1d:32:25:b9: af:ef:fc:10:75:7a:a1:9d:94:7e:12:6d:1e:11:98:ef:e2:a6: f3:87:30:f7:6c:bf:98:14:2d:ec:99:41:51:fa:85:b1:6e:7d: c6:66:58:cb:f3:98:94:6b:4a:93:c2:a7:49:ee:c7:f0:9c:ea: 0b:82:32:99 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWE73D+PIrtJDqj9u4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgyNjEyNDUxMVoXDTI4MTEyODEzNDUxMVowLzEtMCsGA1UEAxMk Y2VhMDYwNDgtN2JjMy00YjY1LTg0NDMtNGM2MDBiNzNiYzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB/POib5iDUkJkAR0lIsDv76bxCoPMD+PYGD JzTy7IdcEkr5sSmuI3Gl+j/YYnfi2965BhGOowozhwd30X77m9m9nCMqknN6ytAJ 8Vj4GvwVa1H4Q/3T8ddF1Yj0pLHkNX7/oqI/241P2iTqPgsv9XC8k9F7fsZKfI6k WvVHoR7kPvIsm3x1/gMpLU5+GLXckFEIrjQwd8dj6qnme9VUqllQmtMlUcoYVnq3 WOjSW2YXDIx081f+XO8bY7sUYU17JndBOD5Q2GDxGC4PQN2J4yctGOsYGURuSzvj 3Gv7Fo7v/MUJFnqKFe33UBGjcY705fH9xG8dNbkc0e4+geShcQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFHL+fRkLV5re22Fe1djLYF0fUK7ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9j ZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3M2JjMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2NlYTA2MDQ4LTdiYzMtNGI2NS04 NDQzLTRjNjAwYjczYmMxMS9jZWEwNjA0OC03YmMzLTRiNjUtODQ0My00YzYwMGI3 M2JjMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCfWwMEAMBMszBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB0NlDHQxUNqlZ1 81zs/SXp0DdzJWsRtYTTiVJ6oxwhcM5QTZbhLsJx+0vTf2XwXf6xrcMjL69apMwi DST8K9+TuYIUq1lQTo9jdbId69LOrgRUS/ewHS7x0ONiTtiY4RDpsdcAkHTy447Y yYNloVjWoCkQtaOx9pK0sKz+2J5aWaYO7h8fLFBtgVFQGCB//23aw6Qj6haioK/0 K35ia6zjH/eN2eTwYUmsnw/TmDiPnFc9pPFb0iq4hoDQMHhauv8CmR0yJbmv7/wQ dXqhnZR+Em0eEZjv4qbzhzD3bL+YFC3smUFR+oWxbn3GZljL85iUa0qTwqdJ7sfw nOoLgjKZ -----END CERTIFICATE-----Generated at Sun Sep 20 11:52:42 2026 by rpki-client