$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.cer File: d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.cer (raw, json) Hash identifier: 0ngI3LMkERjmTeZvmRw/N3/2W4RizqxohMCMctXKflk= Subject key identifier: E1:46:05:2B:BA:EC:68:8F:50:73:C6:6F:64:3F:F1:CE:F1:DD:4A:71 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EFD920F5F8973146043BCA1C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 28 Aug 2026 20:42:19 +0000 Certificate not after: Thu 30 Nov 2028 21:42:19 +0000 Subordinate resources: AS: 29893 IP: 208.93.228.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fd:92:0f:5f:89:73:14:60:43:bc:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 28 20:42:19 2026 GMT Not After : Nov 30 21:42:19 2028 GMT Subject: CN=d4f5bbf3-704e-4cc5-b232-3cd3a653dce8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:69:94:51:78:67:44:a1:61:92:91:71:76:07: c5:a4:30:6f:bc:7f:99:ab:aa:10:ae:89:a0:c2:40: ac:55:54:f4:4b:ac:1d:4b:7e:1f:80:22:ec:48:39: ec:73:18:b0:27:64:e1:00:78:aa:92:14:27:d4:98: 74:ae:6e:eb:59:83:7a:fb:d5:ae:cd:b7:0b:b9:ee: 18:c9:23:71:60:f7:ca:3c:8d:8e:c6:08:e6:cc:f4: 4c:22:db:c9:54:46:7f:d2:8f:6b:a7:e9:8d:96:5d: e1:73:16:36:49:a4:61:82:ae:61:00:8a:34:7c:d9: b5:28:e0:3a:65:ed:58:cc:fe:36:32:4b:4b:f7:ec: 9c:5d:f5:9c:e2:28:dd:80:d4:87:6c:68:7e:91:75: 6a:54:b9:f4:25:98:a5:05:a6:fd:68:f9:6d:e7:bf: a7:5a:29:aa:6e:c6:ea:03:95:a0:4e:ba:c4:75:29: 5b:9a:70:86:2f:9a:0e:c2:37:ee:0f:99:67:9a:c1: 38:91:b7:fe:8c:af:a2:89:be:09:db:52:32:62:3d: 35:ae:d4:c5:6c:5d:6d:65:37:a5:72:44:2a:1c:15: 5d:6c:73:cf:1a:75:bb:ab:0b:2d:14:79:26:71:a4: 74:6d:a9:83:72:34:91:d1:85:59:8c:27:03:90:b2: 98:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:46:05:2B:BA:EC:68:8F:50:73:C6:6F:64:3F:F1:CE:F1:DD:4A:71 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8/d4f5bbf3-704e-4cc5-b232-3cd3a653dce8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 208.93.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 29893 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e5:c1:05:9e:86:b5:7f:16:e2:85:05:3d:fc:1e:10:21:c5: bc:b1:8a:ab:32:36:23:39:51:e0:d3:17:1b:e7:a5:71:69:f5: fc:c2:14:14:b8:c8:3d:5a:30:22:52:c0:ba:e6:29:e5:7f:57: be:e3:72:8e:95:3e:ec:94:18:2b:fb:32:39:dc:36:ef:b1:2f: 11:bd:03:6c:1b:10:1c:82:9f:9f:26:0d:94:a0:f7:3d:26:d8: b8:33:6c:36:85:fb:69:bc:cb:94:bf:ca:f2:dc:f0:52:94:4d: f6:d6:cc:ee:d1:1a:b2:1e:59:ad:05:3c:02:b6:a2:54:7e:e9: ba:73:8b:73:2d:cc:c7:e5:f8:12:c7:ee:91:41:1b:2e:ca:19: ba:ff:83:4b:46:27:92:4d:65:8b:1c:53:6f:c0:8a:9f:32:27: 62:9b:bf:5d:40:e7:75:2a:90:b9:7b:ed:aa:bb:e8:3c:14:4f: f6:9c:c8:53:f4:ce:60:29:85:88:30:01:7d:c6:d1:df:16:95: ef:ec:01:bb:dc:93:fc:31:d1:7d:0a:7b:fb:6e:48:bd:32:49: c6:f4:80:85:eb:b3:2f:c9:df:97:e3:e3:19:ca:95:7b:6c:84: b3:db:94:bc:a3:23:44:94:3c:7c:52:a6:6e:60:50:22:e6:f4: 29:32:29:07 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE79kg9fiXMUYEO8ocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgyODIwNDIxOVoXDTI4MTEzMDIxNDIxOVowLzEtMCsGA1UEAxMk ZDRmNWJiZjMtNzA0ZS00Y2M1LWIyMzItM2NkM2E2NTNkY2U4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGmUUXhnRKFhkpFxdgfFpDBvvH+Zq6oQromg wkCsVVT0S6wdS34fgCLsSDnscxiwJ2ThAHiqkhQn1Jh0rm7rWYN6+9WuzbcLue4Y ySNxYPfKPI2OxgjmzPRMItvJVEZ/0o9rp+mNll3hcxY2SaRhgq5hAIo0fNm1KOA6 Ze1YzP42MktL9+ycXfWc4ijdgNSHbGh+kXVqVLn0JZilBab9aPlt57+nWimqbsbq A5WgTrrEdSlbmnCGL5oOwjfuD5lnmsE4kbf+jK+iib4J21IyYj01rtTFbF1tZTel ckQqHBVdbHPPGnW7qwstFHkmcaR0bamDcjSR0YVZjCcDkLKYRQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFOFGBSu67GiPUHPGb2Q/8c7x3UpxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k NGY1YmJmMy03MDRlLTRjYzUtYjIzMi0zY2QzYTY1M2RjZTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Q0ZjViYmYzLTcwNGUtNGNjNS1i MjMyLTNjZDNhNjUzZGNlOC9kNGY1YmJmMy03MDRlLTRjYzUtYjIzMi0zY2QzYTY1 M2RjZTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQXeQwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC dMUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAHOXBBZ6GtX8W4oUFPfweECHFvLGKqzI2IzlR4NMXG+elcWn1 /MIUFLjIPVowIlLAuuYp5X9XvuNyjpU+7JQYK/syOdw277EvEb0DbBsQHIKfnyYN lKD3PSbYuDNsNoX7abzLlL/K8tzwUpRN9tbM7tEash5ZrQU8AraiVH7punOLcy3M x+X4EsfukUEbLsoZuv+DS0Ynkk1lixxTb8CKnzInYpu/XUDndSqQuXvtqrvoPBRP 9pzIU/TOYCmFiDABfcbR3xaV7+wBu9yT/DHRfQp7+25IvTJJxvSAheuzL8nfl+Pj GcqVe2yEs9uUvKMjRJQ8fFKmbmBQIub0KTIpBw== -----END CERTIFICATE-----Generated at Sun Sep 20 19:20:50 2026 by rpki-client