$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.cer File: eda66d50-f8db-4ce4-92d6-1b50bf737a3c.cer (raw, json) Hash identifier: fXcAihd85yjgmb6/x1q6AAVFjIn2WkQ6OdccTtrBwgg= Subject key identifier: 9B:14:D1:09:B9:F6:F4:B1:82:3D:CD:CB:77:9C:B7:B8:46:D8:87:22 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F1B5AC8A494795AC30CD1B540 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Sep 2026 12:45:11 +0000 Certificate not after: Mon 11 Dec 2028 13:45:11 +0000 Subordinate resources: AS: 54368 IP: 204.174.75.0 -- 204.174.79.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:5a:c8:a4:94:79:5a:c3:0c:d1:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 8 12:45:11 2026 GMT Not After : Dec 11 13:45:11 2028 GMT Subject: CN=eda66d50-f8db-4ce4-92d6-1b50bf737a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d0:5b:d4:ea:c2:2a:f4:60:83:45:4c:f8:f6: 53:60:e3:77:1a:af:a9:db:76:a9:ad:4f:0b:ad:72: 6e:c6:b4:9b:3f:cd:74:5c:10:74:72:f1:d0:f7:34: df:53:be:fa:63:d3:79:1c:1b:43:00:6f:f2:87:1b: 5c:48:ae:d5:18:f5:0b:00:51:8d:57:08:bd:60:c4: 0c:4b:eb:62:9d:1f:13:73:a6:1e:cc:d9:a1:d1:bc: a0:3e:57:1b:28:7d:5a:bc:10:34:9e:f0:83:fe:72: 15:eb:a5:7e:da:65:3b:08:eb:6c:30:46:8b:c9:73: c0:64:5b:79:27:69:ff:41:63:d0:9d:81:45:9d:c7: 89:83:21:cf:75:e0:da:0f:5c:39:04:f3:ef:07:58: 19:32:44:76:29:9e:2f:92:4f:5a:61:ec:52:1e:7f: b3:3b:8d:21:d0:06:8b:e2:9d:55:6e:a0:83:8a:bb: 04:17:4f:23:9c:31:72:6c:f4:37:e9:33:2f:2f:2f: a1:b7:47:0a:6c:10:69:ab:51:3c:31:ef:6b:c8:06: 95:9d:fe:82:bf:c0:08:e5:3c:82:45:77:ab:e3:73: 58:64:c0:0d:14:9e:10:59:07:cb:e3:16:b6:41:7f: 96:c4:6f:42:86:3e:46:15:00:a1:b4:ed:26:48:e5: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:14:D1:09:B9:F6:F4:B1:82:3D:CD:CB:77:9C:B7:B8:46:D8:87:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eda66d50-f8db-4ce4-92d6-1b50bf737a3c/eda66d50-f8db-4ce4-92d6-1b50bf737a3c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.174.75.0-204.174.79.255 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:12:8a:1a:54:8d:b5:69:1c:cb:3d:6a:3d:7c:eb:55:88:5a: c0:a1:3c:23:73:7c:fb:ad:33:03:16:08:5d:c2:24:83:b9:1f: 6e:23:68:28:34:09:a5:47:85:3e:d2:4c:39:1c:30:83:46:05: 25:bc:52:d3:e8:ef:4d:c9:aa:61:7f:1c:3f:07:6f:5c:ea:4b: d2:68:c4:e4:f1:b5:2f:e1:d2:83:43:87:73:7f:aa:50:26:16: ab:66:b9:eb:b2:36:8f:84:6c:b0:65:c3:83:fb:08:68:5e:e7: 9b:7f:16:d5:fe:fc:c8:9b:b1:8a:22:d1:47:7f:8c:9b:a9:e9: 6b:44:f7:ea:02:6d:d1:45:fe:89:37:2a:9b:e5:29:9e:5f:29: 84:6d:83:7f:8f:de:11:6f:b7:ed:e6:84:b9:d0:20:ed:7b:e1: de:33:5c:4c:1b:52:d2:6b:df:0d:dc:76:ad:b2:66:73:d3:67: 90:77:ae:be:f6:e0:94:14:d0:d9:25:87:77:e3:3e:16:78:94: e7:64:49:b3:38:0d:83:15:c2:b5:e8:12:bc:33:d7:3b:1e:ed: a1:2c:17:c9:d9:e1:dd:58:d0:7c:29:50:05:f6:16:2e:73:57: bb:19:f5:a4:df:7b:d3:9f:7d:bd:af:1f:69:43:e4:23:ad:65: f9:36:59:f6 -----BEGIN CERTIFICATE----- MIIHETCCBfmgAwIBAgIUAQ0Mn0MoWE8bWsiklHlawwzRtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkwODEyNDUxMVoXDTI4MTIxMTEzNDUxMVowLzEtMCsGA1UEAxMk ZWRhNjZkNTAtZjhkYi00Y2U0LTkyZDYtMWI1MGJmNzM3YTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdBb1OrCKvRgg0VM+PZTYON3Gq+p23aprU8L rXJuxrSbP810XBB0cvHQ9zTfU776Y9N5HBtDAG/yhxtcSK7VGPULAFGNVwi9YMQM S+tinR8Tc6YezNmh0bygPlcbKH1avBA0nvCD/nIV66V+2mU7COtsMEaLyXPAZFt5 J2n/QWPQnYFFnceJgyHPdeDaD1w5BPPvB1gZMkR2KZ4vkk9aYexSHn+zO40h0AaL 4p1VbqCDirsEF08jnDFybPQ36TMvLy+ht0cKbBBpq1E8Me9ryAaVnf6Cv8AI5TyC RXer43NYZMANFJ4QWQfL4xa2QX+WxG9Chj5GFQChtO0mSOWb5wIDAQABo4IEIzCC BB8wHQYDVR0OBBYEFJsU0Qm59vSxgj3Ny3ect7hG2IciMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ZGE2NmQ1MC1mOGRiLTRjZTQtOTJkNi0xYjUwYmY3MzdhM2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VkYTY2ZDUwLWY4ZGItNGNlNC05 MmQ2LTFiNTBiZjczN2EzYy9lZGE2NmQ1MC1mOGRiLTRjZTQtOTJkNi0xYjUwYmY3 MzdhM2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEAMyuSwMEBMyuQDAaBggrBgEFBQcBCAEB/wQL MAmgBzAFAgMA1GAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAIRKKGlSNtWkcyz1qPXzrVYhawKE8I3N8+60z AxYIXcIkg7kfbiNoKDQJpUeFPtJMORwwg0YFJbxS0+jvTcmqYX8cPwdvXOpL0mjE 5PG1L+HSg0OHc3+qUCYWq2a567I2j4RssGXDg/sIaF7nm38W1f78yJuxiiLRR3+M m6npa0T36gJt0UX+iTcqm+Upnl8phG2Df4/eEW+37eaEudAg7Xvh3jNcTBtS0mvf Ddx2rbJmc9NnkHeuvvbglBTQ2SWHd+M+FniU52RJszgNgxXCtegSvDPXOx7toSwX ydnh3VjQfClQBfYWLnNXuxn1pN970599va8faUPkI61l+TZZ9g== -----END CERTIFICATE-----Generated at Tue Sep 22 13:02:44 2026 by rpki-client