$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466.cer File: fc86cd18-054a-47bf-a16d-4e9618460466.cer (raw, json) Hash identifier: dK8mzMdz1Kiu1pTYhVzQQCkUQQGs0mxIPX7Ou6OdI3k= Subject key identifier: 2E:C3:F5:FB:33:41:4B:3C:84:57:C0:F2:B3:E8:05:C9:B9:62:4C:AC Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E1D6B302E2E07FB181EFF0900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/fc86cd18-054a-47bf-a16d-4e9618460466.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 09 Jun 2026 13:42:56 +0000 Certificate not after: Mon 11 Sep 2028 13:42:56 +0000 Subordinate resources: IP: 161.38.252.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 18 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1d:6b:30:2e:2e:07:fb:18:1e:ff:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 9 13:42:56 2026 GMT Not After : Sep 11 13:42:56 2028 GMT Subject: CN=fc86cd18-054a-47bf-a16d-4e9618460466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e8:3c:da:93:08:db:f0:d3:a9:fe:85:63:09: 8e:da:b3:60:e4:27:19:5d:21:e2:f3:7f:d6:df:e3: 12:aa:02:1c:cd:d1:f8:ab:e6:25:e5:76:7f:55:10: 08:1d:45:f0:6c:51:ba:40:b2:ff:cb:c0:f1:d3:0d: f9:ca:74:ee:89:21:91:fb:4d:32:90:1e:19:6e:58: 09:2d:78:5c:0d:3e:dd:23:2d:c9:0b:79:51:af:a4: d7:d9:b7:38:08:4a:5e:d4:d1:02:e8:0c:7b:22:6d: 7a:79:be:b2:26:85:88:52:06:ea:26:f5:ac:f2:15: 67:52:4f:92:9a:09:e0:9d:91:8b:2f:38:74:32:57: f6:fb:d3:ad:8d:75:31:8f:7c:b7:92:32:29:83:0c: 7c:16:b1:19:9e:ee:99:a9:fb:24:aa:69:6a:79:36: a2:cf:7a:3f:24:83:82:6c:ca:61:19:b6:d2:46:7f: 65:72:5e:5a:2e:7b:f6:52:21:21:6e:b6:46:e7:08: 49:bf:25:e3:0a:55:f9:14:0b:2c:ec:8f:3a:47:3f: 4b:03:49:40:97:26:a1:3a:be:cd:c6:cc:f2:0c:d3: f0:d6:68:68:26:ba:2b:34:62:0e:cf:1b:94:12:83: 9a:e5:14:e0:19:7f:d1:76:1c:f8:cf:6f:09:f3:ba: a2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C3:F5:FB:33:41:4B:3C:84:57:C0:F2:B3:E8:05:C9:B9:62:4C:AC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fc86cd18-054a-47bf-a16d-4e9618460466/fc86cd18-054a-47bf-a16d-4e9618460466.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 161.38.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:d3:ca:2e:52:6e:8d:98:42:23:83:08:2e:1d:17:9c:35:7c: aa:b0:3d:1d:0a:11:c1:30:04:6d:3e:27:3c:85:ef:eb:64:37: f0:20:65:f8:e2:ef:41:6c:da:5c:32:85:3e:67:a9:a6:a1:b3: d2:13:a0:66:e8:17:31:99:2e:86:a5:db:31:45:a7:3b:1b:f0: ab:eb:31:f3:4f:fb:6c:7a:b8:f5:07:34:e8:b0:71:38:5d:74: 87:1e:05:10:b7:1b:2a:e7:0f:a9:23:40:38:1a:40:c8:77:12: ac:50:e5:8f:54:dd:6a:e9:ba:53:83:65:1b:2f:12:0f:81:c3: cb:7a:21:c4:93:d4:cd:22:5c:f8:4e:b5:93:12:df:f0:fe:cf: 5a:4b:9b:43:7d:5f:59:d7:07:34:22:f0:16:5a:bb:99:ff:d2: e3:ae:f1:d0:d4:e3:86:2c:94:6a:1b:4c:f0:5d:b8:cf:aa:2b: d7:3c:38:f7:83:a8:89:75:1e:3c:f5:aa:0b:b9:a4:bd:94:e3: ab:8a:1a:1f:bf:87:c5:91:86:4a:6f:f2:74:04:45:81:3d:a5: 31:fe:03:99:e9:17:2d:11:0f:37:f3:70:39:bd:63:bd:07:47: b3:18:32:06:ac:26:0b:9f:b9:c1:c7:02:64:15:7d:e4:08:67: 82:e3:63:b3 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4dazAuLgf7GB7/CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYwOTEzNDI1NloXDTI4MDkxMTEzNDI1NlowLzEtMCsGA1UEAxMk ZmM4NmNkMTgtMDU0YS00N2JmLWExNmQtNGU5NjE4NDYwNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseg82pMI2/DTqf6FYwmO2rNg5CcZXSHi83/W 3+MSqgIczdH4q+Yl5XZ/VRAIHUXwbFG6QLL/y8Dx0w35ynTuiSGR+00ykB4ZblgJ LXhcDT7dIy3JC3lRr6TX2bc4CEpe1NEC6Ax7Im16eb6yJoWIUgbqJvWs8hVnUk+S mgngnZGLLzh0Mlf2+9OtjXUxj3y3kjIpgwx8FrEZnu6ZqfskqmlqeTaiz3o/JIOC bMphGbbSRn9lcl5aLnv2UiEhbrZG5whJvyXjClX5FAss7I86Rz9LA0lAlyahOr7N xszyDNPw1mhoJrorNGIOzxuUEoOa5RTgGX/Rdhz4z28J87qi4QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFC7D9fszQUs8hFfA8rPoBcm5YkysMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m Yzg2Y2QxOC0wNTRhLTQ3YmYtYTE2ZC00ZTk2MTg0NjA0NjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZjODZjZDE4LTA1NGEtNDdiZi1h MTZkLTRlOTYxODQ2MDQ2Ni9mYzg2Y2QxOC0wNTRhLTQ3YmYtYTE2ZC00ZTk2MTg0 NjA0NjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAGhJvwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALdPKLlJujZhCI4MILh0X nDV8qrA9HQoRwTAEbT4nPIXv62Q38CBl+OLvQWzaXDKFPmeppqGz0hOgZugXMZku hqXbMUWnOxvwq+sx80/7bHq49Qc06LBxOF10hx4FELcbKucPqSNAOBpAyHcSrFDl j1Tdaum6U4NlGy8SD4HDy3ohxJPUzSJc+E61kxLf8P7PWkubQ31fWdcHNCLwFlq7 mf/S467x0NTjhiyUahtM8F24z6or1zw494OoiXUePPWqC7mkvZTjq4oaH7+HxZGG Sm/ydARFgT2lMf4DmekXLREPN/NwOb1jvQdHsxgyBqwmC5+5wccCZBV95AhnguNj sw== -----END CERTIFICATE-----Generated at Wed Jun 17 13:40:37 2026 by rpki-client