$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5.cer File: edca2973-b815-4276-ae56-405cc9e280b5.cer (raw, json) Hash identifier: kvnhg5avJt/C6EPZ6d9GCfY1c6FfFuDZ6BMGiWzzEEs= Subject key identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584FB239824452845852C29D4E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Nov 2026 13:45:12 +0000 Certificate not after: Sat 03 Feb 2029 13:45:12 +0000 Subordinate resources: AS: 13727 IP: 104.247.80.0 -- 104.247.85.255 IP: 142.147.67.0/24 IP: 2606:7080::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b2:39:82:44:52:84:58:52:c2:9d:4e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Nov 1 13:45:12 2026 GMT Not After : Feb 3 13:45:12 2029 GMT Subject: CN=edca2973-b815-4276-ae56-405cc9e280b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:ba:4c:f7:dd:71:4f:9e:06:cc:a8:69:ed: 90:d2:37:c6:73:89:31:3b:85:36:aa:55:65:63:10: 47:67:cc:ab:dc:09:54:61:5b:da:71:3c:b7:42:24: 6e:4c:df:c9:78:1d:2e:36:e2:2b:cd:1f:58:c5:5a: bc:c3:f7:a9:63:99:5c:91:1f:cd:02:f3:0c:23:20: 80:f4:f4:19:2c:43:0c:1a:92:3c:c2:82:7c:18:8e: 8d:ba:1b:e6:f1:60:de:7b:c7:42:f5:fc:8b:c8:71: 2e:cf:61:d3:87:df:7e:f8:03:7c:50:95:71:c0:f3: 8a:51:7e:57:e1:a0:bc:ac:dc:50:76:fd:af:ef:78: 41:53:d5:9e:af:45:9d:5a:63:c4:de:ca:e5:2c:e9: f1:68:f8:c3:0a:a6:bb:06:a2:ce:12:b7:e8:94:ed: 01:a9:0f:6e:15:55:92:c8:b7:af:da:65:1a:e3:25: 4b:9b:b0:b0:22:b7:34:c7:e9:e6:f6:d1:18:e6:d2: 78:e8:ad:e7:53:d4:08:82:a6:c0:c7:e7:67:c8:c3: 08:88:9a:aa:3a:cc:34:b8:06:cc:76:04:05:94:13: a7:7d:c4:19:14:1f:56:51:33:93:13:c6:c2:2a:1f: 14:7d:14:4a:41:e3:a1:0d:d0:d2:ae:8a:e2:af:de: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:81:36:B0:D5:E5:62:6E:3C:57:D3:5B:4F:FB:39:6D:25:0D:23:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/edca2973-b815-4276-ae56-405cc9e280b5/edca2973-b815-4276-ae56-405cc9e280b5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 104.247.80.0-104.247.85.255 142.147.67.0/24 IPv6: 2606:7080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13727 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:38:ec:12:1f:4b:fd:4f:a8:f6:69:03:33:44:c5:78:cf:34: 8b:bf:70:01:19:8e:44:4a:ae:e8:1a:1e:36:df:c3:25:8c:a5: ea:dc:7d:10:b9:67:cf:1e:6b:3e:46:68:19:37:27:75:c5:46: 15:58:34:51:4b:9e:6c:ba:15:7d:f8:72:d4:79:60:e2:d1:a9: 25:93:54:ab:42:0e:7e:c7:23:10:2c:87:5b:18:4e:56:4b:a1: d4:13:bd:0b:3e:ee:c3:ec:f9:2c:31:b0:5e:7e:3d:85:8d:16: 42:a4:a2:bc:6c:27:86:52:58:61:c6:24:35:27:2f:9c:0e:f9: 7d:f8:cc:ff:ad:59:c0:19:b6:96:45:2c:c4:af:c2:dd:6a:f1: 6d:06:5d:3b:37:ee:58:6a:77:ac:86:4d:39:27:dd:f9:b4:97: 8c:bd:42:8f:e0:6a:6b:19:d3:6d:df:50:bb:0e:27:59:77:bc: e9:e7:1e:d1:04:75:3c:53:4a:f0:bb:79:be:ec:26:72:73:7f: 64:e2:5d:aa:83:d0:5e:ad:77:a0:af:98:33:f5:3c:cc:4e:5a: 11:d7:78:49:93:9f:af:1d:80:35:5c:4d:ee:c7:d6:35:f7:67: 27:a7:91:cd:7e:24:58:c8:9b:9e:51:7f:0d:4a:78:d3:86:f2: 4c:4f:ba:9a -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE+yOYJEUoRYUsKdTgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MTEwMTEzNDUxMloXDTI5MDIwMzEzNDUxMlowLzEtMCsGA1UEAxMk ZWRjYTI5NzMtYjgxNS00Mjc2LWFlNTYtNDA1Y2M5ZTI4MGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG+6TPfdcU+eBsyoae2Q0jfGc4kxO4U2qlVl YxBHZ8yr3AlUYVvacTy3QiRuTN/JeB0uNuIrzR9YxVq8w/epY5lckR/NAvMMIyCA 9PQZLEMMGpI8woJ8GI6Nuhvm8WDee8dC9fyLyHEuz2HTh99++AN8UJVxwPOKUX5X 4aC8rNxQdv2v73hBU9Wer0WdWmPE3srlLOnxaPjDCqa7BqLOErfolO0BqQ9uFVWS yLev2mUa4yVLm7CwIrc0x+nm9tEY5tJ46K3nU9QIgqbAx+dnyMMIiJqqOsw0uAbM dgQFlBOnfcQZFB9WUTOTE8bCKh8UfRRKQeOhDdDSrorir96SvwIDAQABo4IENzCC BDMwHQYDVR0OBBYEFPCBNrDV5WJuPFfTW0/7OW0lDSMaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ZGNhMjk3My1iODE1LTQyNzYtYWU1Ni00MDVjYzllMjgwYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VkY2EyOTczLWI4MTUtNDI3Ni1h ZTU2LTQwNWNjOWUyODBiNS9lZGNhMjk3My1iODE1LTQyNzYtYWU1Ni00MDVjYzll MjgwYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwPAYIKwYBBQUH AQcBAf8ELTArMBoEAgABMBQwDAMEBGj3UAMEAWj3VAMEAI6TQzANBAIAAjAHAwUA JgZwgDAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgI1nzBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABOOwSH0v9 T6j2aQMzRMV4zzSLv3ABGY5ESq7oGh4238MljKXq3H0QuWfPHms+RmgZNyd1xUYV WDRRS55suhV9+HLUeWDi0aklk1SrQg5+xyMQLIdbGE5WS6HUE70LPu7D7PksMbBe fj2FjRZCpKK8bCeGUlhhxiQ1Jy+cDvl9+Mz/rVnAGbaWRSzEr8LdavFtBl07N+5Y aneshk05J935tJeMvUKP4GprGdNt31C7DidZd7zp5x7RBHU8U0rwu3m+7CZyc39k 4l2qg9BerXegr5gz9TzMTloR13hJk5+vHYA1XE3ux9Y192cnp5HNfiRYyJueUX8N SnjThvJMT7qa -----END CERTIFICATE-----Generated at Thu Nov 5 14:59:27 2026 by rpki-client