$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer File: dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer (raw, json) Hash identifier: LGEJnLuSWMtSxhGi1+tivL+Q1vzcAKky0+hmWaIZRNI= Subject key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CFB1542768F6D5898554CFF60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Feb 2026 13:45:22 +0000 Certificate not after: Tue 30 May 2028 12:45:22 +0000 Subordinate resources: AS: 62468 IP: 23.251.32.0/19 IP: 69.165.64.0/20 IP: 107.151.192.0/18 IP: 198.44.160.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:15:42:76:8f:6d:58:98:55:4c:ff:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 25 13:45:22 2026 GMT Not After : May 30 12:45:22 2028 GMT Subject: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c8:e8:62:f3:27:fb:64:8c:ae:ca:17:de:b9: 9e:ae:14:51:32:c7:b1:46:1c:c0:96:12:29:39:f9: fe:60:1e:7f:12:84:9c:40:f2:db:1f:e3:b7:2a:4e: 9c:c4:dd:b3:9e:49:97:ff:49:e7:5c:2a:8c:4a:94: 95:34:58:16:fc:ac:af:fb:04:f3:51:04:87:d4:88: fc:e1:29:2c:d5:dc:ce:e0:f6:1a:86:86:7c:95:b1: ae:be:9c:9c:1b:c7:f4:d1:25:41:b3:b6:76:de:9c: e0:5d:fc:f5:41:5f:82:fc:35:e1:c9:6b:cb:5c:32: ec:71:4a:0d:ef:b0:78:4f:0b:ae:1e:bf:40:6f:5c: 00:65:e7:49:88:fa:64:89:dc:55:e0:5d:68:77:be: 9d:dc:cd:29:3f:e5:b2:e2:3a:9b:46:2a:42:a9:98: 3e:18:d1:27:65:e0:64:c5:79:86:bb:b8:39:3a:8b: 8c:59:ca:8d:61:f3:f3:a4:f5:ab:b5:b3:4c:91:e3: 3c:03:01:59:1e:c8:3a:87:5e:1f:84:e2:6c:71:fd: df:79:03:8b:31:22:b6:58:1e:e8:21:e7:85:b2:5d: df:7b:75:ef:43:1b:ce:8d:1c:f7:22:fd:46:8b:f1: 7c:42:8e:42:50:3b:4e:b9:97:a8:ce:bc:55:2e:09: 89:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.251.32.0/19 69.165.64.0/20 107.151.192.0/18 198.44.160.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62468 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:8e:62:8a:ba:45:48:7c:e2:38:07:f8:66:08:2c:d1:d9:ba: b7:e2:c5:06:6a:e6:b6:f6:05:33:8b:1e:3d:a0:c6:80:18:dc: 8c:90:f5:b4:e9:a6:3b:3a:01:a4:fa:6f:1a:98:91:8f:62:9f: b8:68:ab:a3:38:76:98:7d:20:e2:03:59:77:b2:cc:5d:c1:cf: 56:54:ce:d7:e7:f9:31:43:44:95:98:fd:a3:eb:64:04:c5:b6: 13:96:2d:b1:e2:1b:b1:14:fb:ba:d4:87:77:a7:0e:09:8d:70: 92:dd:58:ff:90:78:8f:9b:cd:79:da:52:35:c2:f4:ef:ad:f9: ef:8e:32:58:34:30:1b:91:0d:5e:1e:a6:89:8f:18:31:5c:22: 57:b6:3b:e1:0a:da:db:80:4d:13:a8:71:c9:28:e9:86:60:fa: 7b:a1:f6:3f:3f:78:4e:7d:43:6f:82:43:6c:fa:62:8f:88:fe: d3:71:06:d0:ed:99:15:5b:23:70:e2:8e:bb:e0:e2:04:c3:2b: 76:97:b3:e3:03:5a:52:2e:ca:f0:82:cd:17:b9:32:39:92:6e: 77:9e:7e:55:65:3b:33:a4:07:6f:bf:67:a5:ec:2c:6c:72:c9: f2:5f:c6:e4:8a:56:06:d7:67:42:d5:8f:c6:59:e0:1c:83:50: 54:3d:81:9c -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWEz7FUJ2j21YmFVM/2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIyNTEzNDUyMloXDTI4MDUzMDEyNDUyMlowLzEtMCsGA1UEAxMk ZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMzZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosjoYvMn+2SMrsoX3rmerhRRMsexRhzAlhIp Ofn+YB5/EoScQPLbH+O3Kk6cxN2znkmX/0nnXCqMSpSVNFgW/Kyv+wTzUQSH1Ij8 4Sks1dzO4PYahoZ8lbGuvpycG8f00SVBs7Z23pzgXfz1QV+C/DXhyWvLXDLscUoN 77B4TwuuHr9Ab1wAZedJiPpkidxV4F1od76d3M0pP+Wy4jqbRipCqZg+GNEnZeBk xXmGu7g5OouMWcqNYfPzpPWrtbNMkeM8AwFZHsg6h14fhOJscf3feQOLMSK2WB7o IeeFsl3fe3XvQxvOjRz3Iv1Gi/F8Qo5CUDtOuZeozrxVLgmJGQIDAQABo4IELTCC BCkwHQYDVR0OBBYEFKfpjWgb3rUA5wwIjPThGkEHC2NeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k Y2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RjZjQ4ZWI1LWMwOGEtNDc5My04 ZGQ4LWE4M2Y2NjBjM2Y4Mi9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYw YzNmODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAUX+yADBARFpUADBAZrl8ADBAXGLKAwGgYIKwYB BQUHAQgBAf8ECzAJoAcwBQIDAPQEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC2OYoq6RUh84jgH+GYILNHZ urfixQZq5rb2BTOLHj2gxoAY3IyQ9bTppjs6AaT6bxqYkY9in7hoq6M4dph9IOID WXeyzF3Bz1ZUztfn+TFDRJWY/aPrZATFthOWLbHiG7EU+7rUh3enDgmNcJLdWP+Q eI+bzXnaUjXC9O+t+e+OMlg0MBuRDV4epomPGDFcIle2O+EK2tuATROoccko6YZg +nuh9j8/eE59Q2+CQ2z6Yo+I/tNxBtDtmRVbI3Dijrvg4gTDK3aXs+MDWlIuyvCC zRe5MjmSbneeflVlOzOkB2+/Z6XsLGxyyfJfxuSKVgbXZ0LVj8ZZ4ByDUFQ9gZw= -----END CERTIFICATE-----Generated at Sun Mar 1 20:27:24 2026 by rpki-client