$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd.cer File: df1c4d20-5b5b-4073-83b7-529a82c159fd.cer (raw, json) Hash identifier: zLjizuUvNqdvm/WNLnQm3gOIbeY8OXxvKm+h/iJ9Sy0= Subject key identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E1FA21B130DACFBA6E0891A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 10 Jun 2026 08:45:11 +0000 Certificate not after: Tue 12 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 22036 AS: 25854 AS: 46250 AS: 46271 AS: 393803 IP: 74.200.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a2:1b:13:0d:ac:fb:a6:e0:89:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 10 08:45:11 2026 GMT Not After : Sep 12 08:45:11 2028 GMT Subject: CN=df1c4d20-5b5b-4073-83b7-529a82c159fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:30:c3:e0:68:de:94:83:2d:c0:5c:28:8c:89: 0c:d4:d1:91:02:c5:21:40:b1:ba:7c:3a:d1:e6:77: f3:9f:4d:53:8b:06:d2:e5:12:88:9c:6a:b1:d4:39: 87:c4:e9:26:dd:80:34:c6:80:43:40:61:51:c2:ad: d1:aa:22:3d:d9:8a:49:f5:3e:0c:fa:d1:3d:5e:29: 3c:6e:fd:92:72:d9:54:24:33:5e:12:7e:26:f7:04: 58:f2:40:4d:39:1d:00:ea:ec:78:a9:57:a0:57:81: 84:66:c9:5c:ff:b8:a4:24:7f:9d:e5:c2:de:15:ff: f7:49:91:11:80:8d:4d:2d:09:7a:f3:e9:1e:6c:85: 54:5c:f6:d7:30:80:95:92:4a:c4:92:24:02:10:75: b8:f0:11:c4:a5:a2:18:35:60:a5:06:c7:84:10:a4: 1f:d0:a7:f4:f9:21:61:31:9a:d6:14:eb:83:48:26: 7f:4d:4f:78:0f:e8:df:60:63:fb:68:48:13:7c:c9: ff:7e:57:62:7d:49:5b:f9:1e:bc:61:c8:45:ce:66: 16:e9:de:d7:1b:2f:58:22:b5:2c:0a:5a:f6:6e:b9: 57:ea:3e:06:86:a2:08:c9:0d:2d:7a:6a:f1:43:c3: dc:c7:b5:4f:df:0c:39:e2:fd:6e:12:2a:2e:4c:c8: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BC:34:2B:29:CC:F9:16:AB:22:57:A6:43:73:73:7A:68:59:EB:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df1c4d20-5b5b-4073-83b7-529a82c159fd/df1c4d20-5b5b-4073-83b7-529a82c159fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.200.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22036 25854 46250 46271 393803 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ef:47:97:eb:bc:21:f7:ec:b5:54:59:79:c9:bd:04:f4:be: bd:8b:61:ec:7a:e7:36:3d:d8:dd:72:7f:b1:68:91:ad:39:05: 03:11:c1:13:55:d7:06:31:99:d6:c1:99:8e:26:fc:a1:74:a0: 45:89:ed:2a:f7:76:8f:76:9a:1c:12:56:1d:fb:cb:1b:a5:c5: 02:3e:60:1d:ea:b1:29:cc:71:5d:35:5b:4a:bf:62:c8:f4:14: 96:b5:04:71:70:61:de:1a:3e:06:d4:22:51:0c:a7:65:a9:78: ba:1d:3c:40:27:81:66:7f:e0:d8:de:e9:a4:b9:a6:32:cc:ab: d8:5c:6a:4c:2a:1e:58:a6:85:02:66:54:7f:39:bb:d2:fd:a5: 17:66:43:7b:f7:d2:1e:f3:8a:03:d3:42:fe:a7:87:e1:75:4a: 74:fa:fd:cf:18:2a:2a:72:6b:65:72:c0:0e:7d:23:46:0b:2e: a6:14:02:69:8f:e2:f7:cb:d5:c9:7a:75:fd:53:de:86:7a:56: 01:12:f3:df:e9:50:5a:29:32:40:8e:17:d3:c6:fe:70:67:52: d6:10:9f:b9:45:41:2c:f9:1b:5f:9f:1b:08:11:a3:e0:cc:e1: c6:b8:fc:dc:cb:6a:1c:bf:be:ac:8f:3c:c2:a2:39:4b:bd:a6: 46:3f:70:4c -----BEGIN CERTIFICATE----- MIIHGzCCBgOgAwIBAgIUAQ0Mn0MoWE4fohsTDaz7puCJGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYxMDA4NDUxMVoXDTI4MDkxMjA4NDUxMVowLzEtMCsGA1UEAxMk ZGYxYzRkMjAtNWI1Yi00MDczLTgzYjctNTI5YTgyYzE1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzDD4GjelIMtwFwojIkM1NGRAsUhQLG6fDrR 5nfzn01TiwbS5RKInGqx1DmHxOkm3YA0xoBDQGFRwq3RqiI92YpJ9T4M+tE9Xik8 bv2SctlUJDNeEn4m9wRY8kBNOR0A6ux4qVegV4GEZslc/7ikJH+d5cLeFf/3SZER gI1NLQl68+kebIVUXPbXMICVkkrEkiQCEHW48BHEpaIYNWClBseEEKQf0Kf0+SFh MZrWFOuDSCZ/TU94D+jfYGP7aEgTfMn/fldifUlb+R68YchFzmYW6d7XGy9YIrUs Clr2brlX6j4GhqIIyQ0temrxQ8Pcx7VP3ww54v1uEiouTMgRtwIDAQABo4IELTCC BCkwHQYDVR0OBBYEFDa8NCspzPkWqyJXpkNzc3poWetXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9k ZjFjNGQyMC01YjViLTQwNzMtODNiNy01MjlhODJjMTU5ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2RmMWM0ZDIwLTViNWItNDA3My04 M2I3LTUyOWE4MmMxNTlmZC9kZjFjNGQyMC01YjViLTQwNzMtODNiNy01MjlhODJj MTU5ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAVKyGAwLAYIKwYBBQUHAQgBAf8EHTAboBkwFwIC VhQCAmT+AgMAtKoCAwC0vwIDBgJLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAELvR5frvCH37LVUWXnJvQT0 vr2LYex65zY92N1yf7Foka05BQMRwRNV1wYxmdbBmY4m/KF0oEWJ7Sr3do92mhwS Vh37yxulxQI+YB3qsSnMcV01W0q/Ysj0FJa1BHFwYd4aPgbUIlEMp2WpeLodPEAn gWZ/4Nje6aS5pjLMq9hcakwqHlimhQJmVH85u9L9pRdmQ3v30h7zigPTQv6nh+F1 SnT6/c8YKipya2VywA59I0YLLqYUAmmP4vfL1cl6df1T3oZ6VgES89/pUFopMkCO F9PG/nBnUtYQn7lFQSz5G1+fGwgRo+DM4ca4/NzLahy/vqyPPMKiOUu9pkY/cEw= -----END CERTIFICATE-----Generated at Sat Jun 13 13:49:04 2026 by rpki-client