$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer File: dab76c6b-0e86-4a03-a59a-f3fc77dbba62.cer (raw, json) Hash identifier: mZnq6v4q0Mag8Gmoor76XTdswoMYHduM1cKLQFo8cWk= Subject key identifier: 9C:77:72:FB:97:A5:A6:54:A3:5A:56:7D:13:E7:B9:9C:AA:CB:6A:9E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F12FABB8C1A422542D1A8B680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 05 Sep 2026 12:45:11 +0000 Certificate not after: Fri 08 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 55158 IP: 23.159.160.0/24 IP: 2605:9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:12:fa:bb:8c:1a:42:25:42:d1:a8:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 5 12:45:11 2026 GMT Not After : Dec 8 13:45:11 2028 GMT Subject: CN=dab76c6b-0e86-4a03-a59a-f3fc77dbba62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:93:73:a8:bd:a1:b0:e5:f8:23:88:a8:de: 42:ba:78:83:0f:c1:3e:52:86:c9:4c:bd:f9:69:7e: b7:ab:29:64:ff:30:e4:86:8e:9c:13:ae:2f:ab:d1: ca:4a:03:44:99:c6:c7:36:57:0e:79:5f:27:fa:df: 80:c3:4d:66:35:f6:5f:23:03:e9:e0:04:39:68:48: ef:a4:39:2b:c8:33:98:f6:33:16:e0:8f:66:5b:9a: 09:1c:6c:83:92:82:5a:f0:21:ae:6f:e1:8f:29:f1: 81:b0:24:b2:6b:f3:bd:7c:a6:7b:10:a9:dd:3f:8d: a0:f4:6b:e0:73:fa:5a:80:f3:d4:9d:e0:93:4b:b5: 16:df:c2:c6:dd:2b:8c:d5:92:61:e1:10:17:9c:f0: 14:38:ad:66:34:03:5b:2e:70:68:af:60:c1:23:a1: bf:ad:58:1e:6d:06:fe:be:33:27:1a:6e:14:4d:8b: 4a:e5:1f:0f:83:e5:2c:47:76:ab:70:eb:f0:78:65: d9:24:c1:df:0d:78:5e:5b:6a:18:70:cb:30:04:77: cb:cd:4d:c7:5a:c7:7c:1c:b9:8b:4b:12:b6:a2:62: 74:8b:e5:a9:c4:10:79:a1:c5:6c:8c:23:5a:f2:79: 8d:ef:3e:fe:2e:99:fa:6d:d8:fb:37:04:6f:1d:fa: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:77:72:FB:97:A5:A6:54:A3:5A:56:7D:13:E7:B9:9C:AA:CB:6A:9E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dab76c6b-0e86-4a03-a59a-f3fc77dbba62/dab76c6b-0e86-4a03-a59a-f3fc77dbba62.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.159.160.0/24 IPv6: 2605:9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55158 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:e4:d6:79:3d:50:80:bd:67:c1:d8:c8:5e:cf:8d:ab:ea:c8: a4:e7:72:14:c5:29:73:4e:7c:39:4b:0e:0e:15:74:e7:d0:64: 93:32:0d:c9:bc:60:e0:57:2a:f8:31:a8:b9:cc:4f:32:4e:aa: 60:9b:c5:ad:3f:fb:ce:43:b6:17:4a:e3:24:56:91:6d:4b:04: c5:29:56:fe:1c:55:81:5f:9d:d4:68:1e:f7:d6:87:b2:a5:50: 00:b8:50:5b:67:70:46:23:73:7a:27:aa:c1:b8:ba:02:08:f6: 41:53:a8:73:0f:ca:22:28:9a:29:61:86:62:f2:1e:6e:64:53: b3:65:f6:b1:73:dc:eb:b8:a9:08:9d:a6:97:38:6d:5b:ea:ae: a3:98:00:e4:f3:80:5b:0f:e4:95:52:ef:f6:12:fe:7b:42:66: 09:35:79:42:d5:2e:86:3b:f2:dc:f4:3d:9e:31:59:56:32:4f: 1a:29:cd:86:84:f6:fa:71:e4:97:22:73:92:30:12:95:ad:3a: fc:3f:ed:c7:73:bb:ce:25:35:ac:e5:7c:c8:5e:ea:fc:15:ac: 9f:a4:dc:7e:ca:e1:ad:25:6a:fb:d2:7d:cb:2c:93:bc:d8:02: 90:1a:71:40:96:2a:71:c5:02:9b:fe:6a:64:9a:9b:d3:20:c2: ca:eb:6d:a5 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE8S+ruMGkIlQtGotoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkwNTEyNDUxMVoXDTI4MTIwODEzNDUxMVowLzEtMCsGA1UEAxMk ZGFiNzZjNmItMGU4Ni00YTAzLWE1OWEtZjNmYzc3ZGJiYTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoiTc6i9obDl+COIqN5CuniDD8E+UobJTL35 aX63qylk/zDkho6cE64vq9HKSgNEmcbHNlcOeV8n+t+Aw01mNfZfIwPp4AQ5aEjv pDkryDOY9jMW4I9mW5oJHGyDkoJa8CGub+GPKfGBsCSya/O9fKZ7EKndP42g9Gvg c/pagPPUneCTS7UW38LG3SuM1ZJh4RAXnPAUOK1mNANbLnBor2DBI6G/rVgebQb+ vjMnGm4UTYtK5R8Pg+UsR3arcOvweGXZJMHfDXheW2oYcMswBHfLzU3HWsd8HLmL SxK2omJ0i+WpxBB5ocVsjCNa8nmN7z7+Lpn6bdj7NwRvHfqRoQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFJx3cvuXpaZUo1pWfRPnuZyqy2qeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k YWI3NmM2Yi0wZTg2LTRhMDMtYTU5YS1mM2ZjNzdkYmJhNjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RhYjc2YzZiLTBlODYtNGEwMy1h NTlhLWYzZmM3N2RiYmE2Mi9kYWI3NmM2Yi0wZTg2LTRhMDMtYTU5YS1mM2ZjNzdk YmJhNjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXn6AwDQQCAAIwBwMFACYFCcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDANd2MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJnk1nk9UIC9Z8HYyF7PjavqyKTn chTFKXNOfDlLDg4VdOfQZJMyDcm8YOBXKvgxqLnMTzJOqmCbxa0/+85DthdK4yRW kW1LBMUpVv4cVYFfndRoHvfWh7KlUAC4UFtncEYjc3onqsG4ugII9kFTqHMPyiIo milhhmLyHm5kU7Nl9rFz3Ou4qQidppc4bVvqrqOYAOTzgFsP5JVS7/YS/ntCZgk1 eULVLoY78tz0PZ4xWVYyTxopzYaE9vpx5Jcic5IwEpWtOvw/7cdzu84lNazlfMhe 6vwVrJ+k3H7K4a0lavvSfcssk7zYApAacUCWKnHFApv+amSam9MgwsrrbaU= -----END CERTIFICATE-----Generated at Sun Sep 20 15:53:05 2026 by rpki-client