$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312.cer File: d00749ed-70ef-447c-b17c-da6be8d7f312.cer (raw, json) Hash identifier: WE2/Eh+p8JuQ+yyYqdoZzlF7clYjAVr7bh43kXuwRNs= Subject key identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F31B040715C87BEE394E644C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 16 Sep 2026 12:45:11 +0000 Certificate not after: Tue 19 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 16686 IP: 64.68.192.0/20 IP: 198.38.0.0/22 IP: 205.233.216.0/24 IP: 2620:49::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b0:40:71:5c:87:be:e3:94:e6:44:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 16 12:45:11 2026 GMT Not After : Dec 19 13:45:11 2028 GMT Subject: CN=d00749ed-70ef-447c-b17c-da6be8d7f312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:35:80:f5:83:3b:ef:eb:61:96:71:29:64:15: e2:1f:02:32:c8:4e:7c:32:ef:30:88:e6:5b:0e:5d: fc:0f:5f:ac:be:dd:70:ed:7e:7d:32:35:56:a8:68: 0b:99:e0:9f:d6:c9:96:3e:81:98:9d:b9:ae:8f:78: 56:ed:1f:84:68:92:62:76:88:87:9a:30:fb:51:bb: 5e:f2:37:62:c2:8b:16:69:85:5f:a7:30:5a:ce:3d: f5:e4:36:0d:8d:8e:99:f6:43:8a:d4:1f:91:27:dd: 2f:04:0f:1e:99:d4:3c:7a:0b:95:ab:c3:99:bc:b0: bd:ee:bf:fd:8b:d9:ba:c2:4a:b6:9e:76:d1:82:9a: 25:d1:3f:14:a1:8e:05:24:2f:88:9d:11:c8:e5:8c: 7f:be:92:e1:a5:5b:3f:3f:80:4f:5a:35:34:d4:63: 64:da:2d:15:fe:d1:1d:9f:1d:75:d0:4e:ea:18:87: 05:20:d0:54:20:62:27:3a:62:85:b9:bd:97:7e:88: d6:85:1d:c9:98:ab:1b:60:f6:68:33:0a:df:4e:f1: 01:1a:39:bf:cf:78:87:d2:15:1d:b0:65:f4:49:8b: ec:c0:7c:b0:83:de:53:d2:7b:c7:a1:a4:f2:0a:a8: 36:60:b9:2a:4b:c5:0e:0a:2d:05:37:4a:1e:15:59: ec:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:20:15:87:33:58:C5:12:78:64:66:F3:B0:E3:5D:8A:F4:78:79:74 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d00749ed-70ef-447c-b17c-da6be8d7f312/d00749ed-70ef-447c-b17c-da6be8d7f312.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.68.192.0/20 198.38.0.0/22 205.233.216.0/24 IPv6: 2620:49::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16686 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:98:3a:de:e7:02:b4:65:cc:aa:23:1a:39:0f:03:66:4d:3c: df:0d:6b:d9:92:cc:09:88:5a:eb:a5:0c:e2:a0:36:1a:a5:dc: 11:c4:d3:83:45:74:19:44:a6:83:e0:4b:ef:1b:90:0e:81:42: b0:57:a1:ac:65:f4:dd:c8:67:30:d4:00:6d:48:79:fe:71:5d: fe:75:58:b0:dd:33:9a:8c:30:4f:37:09:6c:9f:a7:b8:2d:bd: c1:83:33:3a:ef:dc:59:00:b6:4f:50:f7:60:2f:d0:c2:49:75: 2a:c8:7a:4b:98:9b:17:b4:c0:06:62:3d:fb:8e:6e:9e:12:08: a6:33:17:fc:3f:d8:d1:0e:d9:ec:d7:5a:12:49:d0:89:f6:a8: 24:63:b8:e4:d9:0f:e7:b0:38:b0:27:8b:63:ab:e8:d7:bc:55: b8:35:91:c4:f6:8e:2c:98:14:1e:73:92:0c:87:f2:6b:e8:2d: 01:14:b2:0d:88:75:cb:af:1b:b3:67:26:3f:df:a0:d0:89:a2: f1:56:fd:8f:14:2e:e3:a8:be:48:84:83:53:93:73:5e:01:2e: a7:6f:d4:52:db:e2:6e:fc:a7:b7:73:d1:17:34:b6:e4:8a:98: c2:b9:e7:17:3b:d5:20:a4:91:cb:10:f0:a9:0b:88:dd:8a:9b: fa:ce:ca:f8 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE8xsEBxXIe+45TmRMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkxNjEyNDUxMVoXDTI4MTIxOTEzNDUxMVowLzEtMCsGA1UEAxMk ZDAwNzQ5ZWQtNzBlZi00NDdjLWIxN2MtZGE2YmU4ZDdmMzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjWA9YM77+thlnEpZBXiHwIyyE58Mu8wiOZb Dl38D1+svt1w7X59MjVWqGgLmeCf1smWPoGYnbmuj3hW7R+EaJJidoiHmjD7Ubte 8jdiwosWaYVfpzBazj315DYNjY6Z9kOK1B+RJ90vBA8emdQ8eguVq8OZvLC97r/9 i9m6wkq2nnbRgpol0T8UoY4FJC+InRHI5Yx/vpLhpVs/P4BPWjU01GNk2i0V/tEd nx110E7qGIcFINBUIGInOmKFub2XfojWhR3JmKsbYPZoMwrfTvEBGjm/z3iH0hUd sGX0SYvswHywg95T0nvHoaTyCqg2YLkqS8UOCi0FN0oeFVnsTQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFPUgFYczWMUSeGRm87DjXYr0eHl0MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k MDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThkN2YzMTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2QwMDc0OWVkLTcwZWYtNDQ3Yy1i MTdjLWRhNmJlOGQ3ZjMxMi9kMDA3NDllZC03MGVmLTQ0N2MtYjE3Yy1kYTZiZThk N2YzMTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBgEAgABMBIDBARARMADBALGJgADBADN6dgwDwQCAAIwCQMHBCYg AEkAADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJBLjBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAWmDre5wK0 ZcyqIxo5DwNmTTzfDWvZkswJiFrrpQzioDYapdwRxNODRXQZRKaD4EvvG5AOgUKw V6GsZfTdyGcw1ABtSHn+cV3+dViw3TOajDBPNwlsn6e4Lb3BgzM679xZALZPUPdg L9DCSXUqyHpLmJsXtMAGYj37jm6eEgimMxf8P9jRDtns11oSSdCJ9qgkY7jk2Q/n sDiwJ4tjq+jXvFW4NZHE9o4smBQec5IMh/Jr6C0BFLINiHXLrxuzZyY/36DQiaLx Vv2PFC7jqL5IhINTk3NeAS6nb9RS2+Ju/Ke3c9EXNLbkipjCuecXO9UgpJHLEPCp C4jdipv6zsr4 -----END CERTIFICATE-----Generated at Sun Sep 20 15:54:13 2026 by rpki-client