$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer File: f63fbc75-bfbc-423c-991c-efb130c5d3df.cer (raw, json) Hash identifier: /dmscXWpf2jn5mOAbNTCQQHdf5xSOg7FlzT3xLsMOgM= Subject key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CED1FD6357A18DDB061043F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Feb 2026 13:45:22 +0000 Certificate not after: Thu 25 May 2028 12:45:22 +0000 Subordinate resources: AS: 397873 IP: 45.42.140.0/22 IP: 64.20.208.0/22 IP: 66.248.240.0/22 IP: 69.5.52.0/22 IP: 104.247.120.0/22 IP: 2620:b9:e000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:1f:d6:35:7a:18:dd:b0:61:04:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Feb 20 13:45:22 2026 GMT Not After : May 25 12:45:22 2028 GMT Subject: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c1:89:57:44:ef:a3:a4:b1:05:38:17:5c:59: 75:da:f9:a6:44:76:80:1e:5d:16:13:37:93:3d:d5: 89:43:70:55:5d:78:49:7f:cb:4b:a0:c4:aa:6c:c0: f5:cd:ee:0a:87:df:21:a8:52:b1:af:ac:f0:c5:9d: 34:6c:d1:ec:05:50:99:84:61:f3:85:f8:1a:08:5d: 50:1e:a0:c8:df:91:41:1f:90:3a:fa:ee:04:7c:9f: 64:fd:ed:7f:a8:d4:71:6e:c5:40:f5:41:96:bb:27: 38:9a:b5:82:ab:b9:2d:aa:d2:2a:11:06:a0:aa:c3: f9:8e:e3:56:77:d9:96:55:7e:10:f0:0b:40:bf:69: 9c:28:54:35:a5:8e:17:25:3b:8f:93:ed:45:4e:6f: 95:66:89:06:4a:89:dd:ff:24:22:7b:56:52:1a:14: 57:ad:be:d0:10:a6:48:f8:80:d3:06:a8:63:2a:6b: 71:bb:5c:64:a3:1b:c6:a7:d4:3d:17:a5:32:b0:4a: 26:99:43:7c:05:b9:97:54:c1:3f:69:e0:1d:3d:72: 15:fb:88:e5:90:52:f1:4c:98:25:d0:f2:25:c8:c6: c7:e2:08:b9:ae:53:ca:4a:5f:68:5c:f2:e2:00:a7: d3:05:47:5a:39:9c:a0:e4:78:4c:39:89:3c:68:49: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.42.140.0/22 64.20.208.0/22 66.248.240.0/22 69.5.52.0/22 104.247.120.0/22 IPv6: 2620:b9:e000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397873 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b5:e8:08:ec:43:44:3e:4b:f8:91:23:16:32:c8:59:55:fe: 6a:7d:52:c8:97:ad:3c:14:9f:f6:02:a5:1b:b7:e8:11:00:d0: 96:98:9c:77:8e:31:59:5f:55:73:cd:a7:25:d8:a7:ec:b2:b9: 7f:64:2a:fd:81:d1:40:60:ee:b2:55:b1:ad:75:b9:27:0f:ab: 3c:b3:dc:9b:52:bb:24:3b:55:6f:4d:1a:66:6f:ee:e2:a7:3f: 59:a4:86:4d:c8:bc:77:61:9e:66:1e:da:4a:18:44:f2:4a:26: 66:e6:da:8c:f6:db:8c:da:7f:5c:ca:24:0d:be:73:c4:aa:40: 04:d9:5e:c7:0e:0b:3b:63:aa:55:f8:8c:e9:f0:80:ab:f2:91: 90:fb:63:a9:9c:a7:e5:cc:c9:9b:bf:28:c3:d6:34:b4:22:c5: 8e:3b:36:46:f6:b8:60:ce:35:24:f2:6f:d0:8f:7b:ed:f1:72: e5:7e:99:b0:4a:4b:e1:a7:42:30:60:26:9f:b5:b4:c1:1f:5c: 82:7d:e9:53:43:3a:7e:fb:95:82:f9:42:71:5e:ba:20:3d:df: a2:1d:74:81:21:86:f4:03:a7:fd:d0:ca:72:0e:b0:18:73:05: ec:52:e8:78:aa:4b:f3:9b:dc:1d:93:59:75:df:41:1b:61:09: 1c:0f:5c:9d -----BEGIN CERTIFICATE----- MIIHMjCCBhqgAwIBAgIUAQ0Mn0MoWEztH9Y1ehjdsGEEP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDIyMDEzNDUyMloXDTI4MDUyNTEyNDUyMlowLzEtMCsGA1UEAxMk ZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVkM2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8GJV0Tvo6SxBTgXXFl12vmmRHaAHl0WEzeT PdWJQ3BVXXhJf8tLoMSqbMD1ze4Kh98hqFKxr6zwxZ00bNHsBVCZhGHzhfgaCF1Q HqDI35FBH5A6+u4EfJ9k/e1/qNRxbsVA9UGWuyc4mrWCq7ktqtIqEQagqsP5juNW d9mWVX4Q8AtAv2mcKFQ1pY4XJTuPk+1FTm+VZokGSond/yQie1ZSGhRXrb7QEKZI +IDTBqhjKmtxu1xkoxvGp9Q9F6UysEommUN8BbmXVME/aeAdPXIV+4jlkFLxTJgl 0PIlyMbH4gi5rlPKSl9oXPLiAKfTBUdaOZyg5HhMOYk8aEncrwIDAQABo4IERDCC BEAwHQYDVR0OBBYEFB9MaRmDptkdrC1NPtq93ONM6YwyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m NjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2Y2M2ZiYzc1LWJmYmMtNDIzYy05 OTFjLWVmYjEzMGM1ZDNkZi9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBj NWQzZGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwSAYIKwYBBQUH AQcBAf8EOTA3MCQEAgABMB4DBAItKowDBAJAFNADBAJC+PADBAJFBTQDBAJo93gw DwQCAAIwCQMHACYgALngADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMGEjEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACrXoCOxDRD5L+JEjFjLIWVX+an1SyJetPBSf9gKlG7foEQDQlpicd44x WV9Vc82nJdin7LK5f2Qq/YHRQGDuslWxrXW5Jw+rPLPcm1K7JDtVb00aZm/u4qc/ WaSGTci8d2GeZh7aShhE8komZubajPbbjNp/XMokDb5zxKpABNlexw4LO2OqVfiM 6fCAq/KRkPtjqZyn5czJm78ow9Y0tCLFjjs2Rva4YM41JPJv0I977fFy5X6ZsEpL 4adCMGAmn7W0wR9cgn3pU0M6fvuVgvlCcV66ID3foh10gSGG9AOn/dDKcg6wGHMF 7FLoeKpL85vcHZNZdd9BG2EJHA9cnQ== -----END CERTIFICATE-----Generated at Mon Mar 2 09:03:49 2026 by rpki-client