$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer File: ee195698-fb60-40ef-a454-85fcbf3381b9.cer (raw, json) Hash identifier: 7POfqLKfBs4lR1UJp/6Yp4Fp7gbe5OXYRqhST9nMDss= Subject key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F37459FACF28AE56E9F802C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 18 Sep 2026 12:45:11 +0000 Certificate not after: Thu 21 Dec 2028 13:45:11 +0000 Subordinate resources: IP: 137.216.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:45:9f:ac:f2:8a:e5:6e:9f:80:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 18 12:45:11 2026 GMT Not After : Dec 21 13:45:11 2028 GMT Subject: CN=ee195698-fb60-40ef-a454-85fcbf3381b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:20:9d:47:e8:b0:27:3a:0d:2f:ac:bb:61:35: 5c:e6:a9:85:fc:fd:8e:63:d1:d2:0e:58:24:52:4a: c3:9c:a8:b2:7b:b1:d3:24:11:09:00:77:7c:7d:f6: ab:a3:bb:a9:fc:19:56:33:a8:af:e4:52:2d:0a:45: 72:00:37:5a:61:aa:1f:dc:35:6a:e6:48:f1:d6:bb: c6:94:af:08:28:65:b9:5f:82:b0:47:6a:20:f6:b2: 1b:cc:6b:f4:0f:d8:1d:81:32:71:27:02:2d:50:9b: f8:02:ad:d0:08:f3:5f:72:2d:75:eb:c6:37:79:9a: ca:ad:67:8a:82:0b:68:a1:b6:3c:48:b1:3b:3b:e2: 44:19:8c:15:70:cc:c5:30:76:78:1f:ea:8b:55:68: 04:6e:07:92:52:64:bb:1d:a3:48:0b:48:2a:54:de: d7:06:7e:10:4c:26:cd:80:dc:67:84:2d:8b:03:3c: e2:4f:e0:3d:0c:d3:ee:e7:ba:63:75:c9:f8:54:ad: 55:09:58:d7:87:e3:b2:84:02:a6:56:86:97:42:95: 6d:7a:8c:bf:47:e0:04:46:97:03:ab:ff:10:90:38: b5:14:cd:96:27:85:56:59:23:fd:d4:eb:d2:21:7d: a9:4b:a9:95:d4:08:c4:83:5e:11:b0:1c:3f:db:e5: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 137.216.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:6b:a5:5a:15:3c:40:51:18:ca:a9:f5:f5:b4:8d:83:50:7e: 79:6a:04:fe:56:0d:b0:69:11:27:75:f6:83:0b:54:99:25:2f: 05:84:db:a4:d0:ae:95:71:33:7e:30:53:65:db:a8:61:5a:7c: d6:fe:82:0a:59:3b:00:ad:31:38:37:d4:06:ec:f2:0e:46:d2: 35:cb:ce:5d:6c:b3:91:79:40:09:e0:6b:7a:78:7b:a2:c3:b2: e1:13:0d:d7:23:bf:5c:d6:9d:93:ca:05:d8:b5:c3:cc:5c:9e: dc:b4:2d:5d:23:89:b3:6d:3b:84:6a:fd:d0:db:65:6c:5e:f6: 57:cd:bf:97:7b:92:00:6e:03:7f:e7:84:39:2d:f4:9e:7a:34: 57:5b:3f:66:6a:68:40:54:90:70:2f:52:6d:6b:0c:4e:e3:a7: f7:d9:1a:d9:dd:86:ea:d5:4e:88:84:b5:4a:e7:b7:58:2e:f3: 3e:2e:69:00:ec:59:78:90:16:3f:8c:1f:c7:e3:ab:c4:70:11: db:cd:b3:46:7b:99:63:09:2f:01:d3:84:3b:ea:3b:f9:f5:d4: cb:2d:81:37:52:ad:0c:26:fe:e1:9b:b4:d1:5a:c7:d1:c8:2e: 92:97:dd:9b:68:9f:87:96:6e:d0:ff:ed:ac:c7:2c:7f:2e:f7: ad:c1:61:09 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE83RZ+s8orlbp+ALIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkxODEyNDUxMVoXDTI4MTIyMTEzNDUxMVowLzEtMCsGA1UEAxMk ZWUxOTU2OTgtZmI2MC00MGVmLWE0NTQtODVmY2JmMzM4MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCCdR+iwJzoNL6y7YTVc5qmF/P2OY9HSDlgk UkrDnKiye7HTJBEJAHd8ffaro7up/BlWM6iv5FItCkVyADdaYaof3DVq5kjx1rvG lK8IKGW5X4KwR2og9rIbzGv0D9gdgTJxJwItUJv4Aq3QCPNfci1168Y3eZrKrWeK ggtoobY8SLE7O+JEGYwVcMzFMHZ4H+qLVWgEbgeSUmS7HaNIC0gqVN7XBn4QTCbN gNxnhC2LAzziT+A9DNPu57pjdcn4VK1VCVjXh+OyhAKmVoaXQpVteoy/R+AERpcD q/8QkDi1FM2WJ4VWWSP91OvSIX2pS6mV1AjEg14RsBw/2+VHewIDAQABo4ID/jCC A/owHQYDVR0OBBYEFD0XJfHbAqivzHPU4b+BWvb5jAgSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9l ZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYzMzgxYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2VlMTk1Njk4LWZiNjAtNDBlZi1h NDU0LTg1ZmNiZjMzODFiOS9lZTE5NTY5OC1mYjYwLTQwZWYtYTQ1NC04NWZjYmYz MzgxYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCJ2DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAja6VaFTxAURjKqfX1tI2D UH55agT+Vg2waREndfaDC1SZJS8FhNuk0K6VcTN+MFNl26hhWnzW/oIKWTsArTE4 N9QG7PIORtI1y85dbLOReUAJ4Gt6eHuiw7LhEw3XI79c1p2TygXYtcPMXJ7ctC1d I4mzbTuEav3Q22VsXvZXzb+Xe5IAbgN/54Q5LfSeejRXWz9mamhAVJBwL1JtawxO 46f32RrZ3Ybq1U6IhLVK57dYLvM+LmkA7Fl4kBY/jB/H46vEcBHbzbNGe5ljCS8B 04Q76jv59dTLLYE3Uq0MJv7hm7TRWsfRyC6Sl92baJ+Hlm7Q/+2sxyx/LvetwWEJ -----END CERTIFICATE-----Generated at Tue Sep 22 12:33:10 2026 by rpki-client