$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619.cer File: fdccefde-032f-46cb-9138-30e7726ea619.cer (raw, json) Hash identifier: iUJOmgaMkCUuppQ7+dX5mXFVRpWqUS05scsK0KqIgR8= Subject key identifier: 5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584CAA1F69ED05B9390AA9430C40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 27 Jan 2026 13:45:21 +0000 Certificate not after: Mon 01 May 2028 12:45:21 +0000 Subordinate resources: AS: 32523 IP: 205.147.80.0/21 IP: 2604:f700::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:1f:69:ed:05:b9:39:0a:a9:43:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jan 27 13:45:21 2026 GMT Not After : May 1 12:45:21 2028 GMT Subject: CN=fdccefde-032f-46cb-9138-30e7726ea619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5f:44:4f:27:1b:8c:bb:0f:96:43:66:b1:40: 21:78:80:2f:91:23:07:13:33:1d:68:dc:0c:ea:10: 03:a8:45:13:8a:e5:3d:34:ef:8e:1c:66:18:11:70: 0b:11:cf:02:26:87:37:85:70:f4:47:19:ef:31:c5: 6a:13:05:ef:0c:c4:f4:32:29:3a:8e:47:36:b8:37: d5:f1:a5:52:8c:26:cf:3a:bf:95:ed:95:b4:b1:6a: 68:06:db:ed:f3:bd:df:74:d8:b3:01:49:ee:90:9a: 3a:c4:27:96:71:e7:b5:2b:e9:aa:6a:94:f2:60:48: 5d:1c:a3:d6:5b:9b:ec:14:0e:19:b5:98:14:c9:aa: ff:ca:ed:13:d1:33:66:20:42:0d:37:b3:ad:3b:79: 55:ff:91:a6:6c:c4:9d:79:58:d9:a5:39:b2:22:73: ce:99:48:4c:97:e7:f9:67:4d:aa:6a:f4:7f:85:f0: d3:c7:4c:d1:2b:a0:72:cb:5e:0a:8a:95:72:ee:62: bf:d7:5b:76:37:70:7d:db:2c:d5:1f:56:ce:97:b5: 69:4a:1e:75:19:3b:75:63:ad:6b:42:73:53:00:98: 37:bf:6e:20:4d:ec:14:a0:ec:bd:75:05:34:79:b0: d3:9a:d6:04:56:02:b7:4a:94:a9:59:a3:48:f4:95: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A5:1A:72:47:20:34:7B:88:DF:2F:72:09:BB:B4:81:84:CD:78:23 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdccefde-032f-46cb-9138-30e7726ea619/fdccefde-032f-46cb-9138-30e7726ea619.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 205.147.80.0/21 IPv6: 2604:f700::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32523 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:1a:fc:c8:a5:55:d3:ee:1b:d1:6f:a9:5b:6c:4e:9c:a2:42: 80:fb:5b:4a:fa:a5:a9:27:fd:ba:84:53:86:75:da:89:e0:10: 86:e8:31:0c:d3:ba:58:2b:fa:8d:6b:12:24:f5:b5:8b:c9:eb: 88:02:fb:9b:9b:49:32:fb:68:32:0f:82:21:9a:51:55:e4:93: a7:60:f3:e5:26:1b:c5:8c:80:67:ad:69:1b:23:a9:75:d1:bf: 25:5d:8f:fd:14:b9:2b:2d:a5:08:d1:fe:96:b5:b7:c2:d1:a1: e6:db:f0:7e:65:3c:94:ff:ae:77:77:59:8f:70:50:e9:61:99: 64:32:d6:bc:cb:8d:bc:8d:52:37:29:54:11:4a:67:34:99:d8: e7:23:79:93:52:e5:18:38:c1:34:a8:ef:94:f9:8c:20:ca:ef: 24:0d:00:ae:d9:42:6e:8f:d3:22:16:e5:93:df:15:bd:be:b1: 88:a6:e1:f5:3e:1e:ba:0e:28:a5:16:79:36:36:57:87:06:0f: fc:7f:77:e0:2c:6b:8a:45:9a:55:4f:eb:46:93:76:5c:c1:2f: 39:c4:9d:ee:05:2f:1d:aa:32:6a:a7:26:d5:21:9c:15:b6:32: 0b:1c:86:88:ce:e7:9f:52:ae:ce:58:4c:c3:9e:9a:d7:85:10: 90:c7:a2:80 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEyqH2ntBbk5CqlDDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDEyNzEzNDUyMVoXDTI4MDUwMTEyNDUyMVowLzEtMCsGA1UEAxMk ZmRjY2VmZGUtMDMyZi00NmNiLTkxMzgtMzBlNzcyNmVhNjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql9ETycbjLsPlkNmsUAheIAvkSMHEzMdaNwM 6hADqEUTiuU9NO+OHGYYEXALEc8CJoc3hXD0RxnvMcVqEwXvDMT0Mik6jkc2uDfV 8aVSjCbPOr+V7ZW0sWpoBtvt873fdNizAUnukJo6xCeWcee1K+mqapTyYEhdHKPW W5vsFA4ZtZgUyar/yu0T0TNmIEINN7OtO3lV/5GmbMSdeVjZpTmyInPOmUhMl+f5 Z02qavR/hfDTx0zRK6Byy14KipVy7mK/11t2N3B92yzVH1bOl7VpSh51GTt1Y61r QnNTAJg3v24gTewUoOy9dQU0ebDTmtYEVgK3SpSpWaNI9JVTVQIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFFqlGnJHIDR7iN8vcgm7tIGEzXgjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZGNjZWZkZS0wMzJmLTQ2Y2ItOTEzOC0zMGU3NzI2ZWE2MTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZkY2NlZmRlLTAzMmYtNDZjYi05 MTM4LTMwZTc3MjZlYTYxOS9mZGNjZWZkZS0wMzJmLTQ2Y2ItOTEzOC0zMGU3NzI2 ZWE2MTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPNk1AwDQQCAAIwBwMFACYE9wAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfwswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhxr8yKVV0+4b0W+pW2xOnKJCgPtb SvqlqSf9uoRThnXaieAQhugxDNO6WCv6jWsSJPW1i8nriAL7m5tJMvtoMg+CIZpR VeSTp2Dz5SYbxYyAZ61pGyOpddG/JV2P/RS5Ky2lCNH+lrW3wtGh5tvwfmU8lP+u d3dZj3BQ6WGZZDLWvMuNvI1SNylUEUpnNJnY5yN5k1LlGDjBNKjvlPmMIMrvJA0A rtlCbo/TIhblk98Vvb6xiKbh9T4eug4opRZ5NjZXhwYP/H934CxrikWaVU/rRpN2 XMEvOcSd7gUvHaoyaqcm1SGcFbYyCxyGiM7nn1KuzlhMw56a14UQkMeigA== -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:04 2026 by rpki-client