$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326.cer File: e3604708-3e0f-4ea6-b151-4d2f7408d326.cer (raw, json) Hash identifier: W13PkNfEj9eKtOCbNWLYLmtAvlAz7DyWNDqsc8sWswA= Subject key identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D7CC840D879D5A5C819D98A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Apr 2026 00:45:18 +0000 Certificate not after: Sun 16 Jul 2028 00:45:18 +0000 Subordinate resources: AS: 40788 IP: 23.182.0.0/24 IP: 45.40.64.0/20 IP: 64.140.112.0/20 IP: 96.46.192.0/20 IP: 96.47.176.0/20 IP: 104.153.24.0/22 IP: 104.193.64.0/21 IP: 104.243.80.0/20 IP: 162.250.196.0/22 IP: 162.255.112.0/22 IP: 172.87.80.0/20 IP: 184.171.208.0/20 IP: 192.64.8.0/22 IP: 2600:1600::/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:c8:40:d8:79:d5:a5:c8:19:d9:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 13 00:45:18 2026 GMT Not After : Jul 16 00:45:18 2028 GMT Subject: CN=e3604708-3e0f-4ea6-b151-4d2f7408d326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:a1:d5:03:e4:31:9a:75:2b:54:3c:50:58: 1f:dd:b8:ba:09:3c:14:e1:a1:61:b6:e4:fe:de:83: 51:e9:4f:76:b8:bb:c5:cc:b3:ba:99:7a:1b:3d:c6: 4d:b0:1e:8a:d8:8e:e6:f8:05:b3:1e:cc:04:5a:91: a8:76:e2:36:a5:29:ca:81:f0:71:1c:cb:b8:35:bd: 25:b9:50:5b:29:e9:00:1c:cc:30:97:1c:5a:40:dc: 08:dd:b4:92:40:6e:cb:e3:b5:34:83:50:51:3f:49: be:ab:89:9a:30:11:e2:ef:bb:12:63:f6:3d:cd:d2: 45:22:b9:93:81:21:b8:af:70:85:71:27:60:32:aa: 5b:4f:96:ea:b2:12:e3:6e:45:49:f8:88:5c:86:57: ed:8d:1f:e9:07:6b:11:f3:4b:82:6f:a1:d8:d5:08: 7c:4e:c2:ec:b9:09:46:16:b4:cd:41:ef:6e:a0:00: 7d:c0:80:77:d4:e1:d3:8e:df:66:c0:81:e4:f4:22: 74:c3:38:85:62:61:ba:e6:28:12:89:de:85:35:97: 49:9b:b4:17:20:13:80:60:01:2e:31:7c:31:b0:d8: fb:7f:73:48:85:74:c0:0d:36:2b:59:b0:5c:42:1c: 6b:64:4b:a6:b0:16:bf:03:5f:bc:5d:e8:1e:79:33: 98:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B9:55:5F:75:21:90:9A:18:32:0D:38:54:E4:21:BA:27:60:E9:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e3604708-3e0f-4ea6-b151-4d2f7408d326/e3604708-3e0f-4ea6-b151-4d2f7408d326.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.182.0.0/24 45.40.64.0/20 64.140.112.0/20 96.46.192.0/20 96.47.176.0/20 104.153.24.0/22 104.193.64.0/21 104.243.80.0/20 162.250.196.0/22 162.255.112.0/22 172.87.80.0/20 184.171.208.0/20 192.64.8.0/22 IPv6: 2600:1600::/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40788 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:37:64:9a:47:11:70:88:93:46:69:eb:0d:5e:b7:f0:d8:73: 31:8b:6c:11:0c:e2:e3:c7:e8:d1:da:1b:ec:a2:e3:3d:71:b9: 92:48:17:42:97:af:83:96:af:63:cf:b9:6a:f4:81:83:6c:e0: d1:2a:8e:b7:5b:26:a1:72:c9:cf:3c:d4:72:72:16:88:88:c0: 3b:90:c8:f8:3f:24:23:fd:63:16:45:40:c7:4f:60:1c:82:47: a4:c0:f4:37:09:8f:b8:25:84:f6:2e:8b:3f:c9:41:2f:4a:2b: 25:d0:5f:77:6a:cc:2e:b2:64:97:ff:2a:89:1c:c7:0f:ce:a5: fa:d6:55:d7:74:32:54:6b:13:00:0e:c4:53:94:0e:87:0b:2f: 6e:af:24:a0:91:2f:2a:28:37:4f:ee:33:75:e0:8e:15:1a:eb: 51:4a:16:43:b0:17:c7:69:9d:15:71:9e:a5:29:fc:bf:ff:7d: 25:7b:6d:50:8d:45:41:7e:fe:b2:6e:93:87:03:28:7d:08:50: 4a:53:b3:a0:70:9f:c5:10:d9:eb:05:21:bc:92:c3:f2:58:1b: 1a:9c:d0:cd:33:26:e4:d9:23:22:34:ad:fb:7c:71:a0:c1:6a: 88:a0:f7:3f:eb:85:ac:41:ee:a5:cc:55:ec:b2:90:ea:8d:47: 5f:4e:ce:45 -----BEGIN CERTIFICATE----- MIIHXzCCBkegAwIBAgIUAQ0Mn0MoWE18yEDYedWlyBnZigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDQxMzAwNDUxOFoXDTI4MDcxNjAwNDUxOFowLzEtMCsGA1UEAxMk ZTM2MDQ3MDgtM2UwZi00ZWE2LWIxNTEtNGQyZjc0MDhkMzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFGh1QPkMZp1K1Q8UFgf3bi6CTwU4aFhtuT+ 3oNR6U92uLvFzLO6mXobPcZNsB6K2I7m+AWzHswEWpGoduI2pSnKgfBxHMu4Nb0l uVBbKekAHMwwlxxaQNwI3bSSQG7L47U0g1BRP0m+q4maMBHi77sSY/Y9zdJFIrmT gSG4r3CFcSdgMqpbT5bqshLjbkVJ+IhchlftjR/pB2sR80uCb6HY1Qh8TsLsuQlG FrTNQe9uoAB9wIB31OHTjt9mwIHk9CJ0wziFYmG65igSid6FNZdJm7QXIBOAYAEu MXwxsNj7f3NIhXTADTYrWbBcQhxrZEumsBa/A1+8XegeeTOYBwIDAQABo4IEcTCC BG0wHQYDVR0OBBYEFOS5VV91IZCaGDINOFTkIbonYOkUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l MzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQwOGQzMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2UzNjA0NzA4LTNlMGYtNGVhNi1i MTUxLTRkMmY3NDA4ZDMyNi9lMzYwNDcwOC0zZTBmLTRlYTYtYjE1MS00ZDJmNzQw OGQzMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwdQYIKwYBBQUH AQcBAf8EZjBkMFQEAgABME4DBAAXtgADBAQtKEADBARAjHADBARgLsADBARgL7AD BAJomRgDBANowUADBARo81ADBAKi+sQDBAKi/3ADBASsV1ADBAS4q9ADBALAQAgw DAQCAAIwBgMEACYAFjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMAn1QwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEADzdkmkcRcIiTRmnrDV638NhzMYtsEQzi48fo0dob7KLjPXG5kkgXQpevg5av Y8+5avSBg2zg0SqOt1smoXLJzzzUcnIWiIjAO5DI+D8kI/1jFkVAx09gHIJHpMD0 NwmPuCWE9i6LP8lBL0orJdBfd2rMLrJkl/8qiRzHD86l+tZV13QyVGsTAA7EU5QO hwsvbq8koJEvKig3T+4zdeCOFRrrUUoWQ7AXx2mdFXGepSn8v/99JXttUI1FQX7+ sm6ThwMofQhQSlOzoHCfxRDZ6wUhvJLD8lgbGpzQzTMm5NkjIjSt+3xxoMFqiKD3 P+uFrEHupcxV7LKQ6o1HX07ORQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:33:27 2026 by rpki-client