$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/10225e14-6043-4aa6-8ee8-d55fd634d2b1.cer File: 10225e14-6043-4aa6-8ee8-d55fd634d2b1.cer (raw, json) Hash identifier: IpHz+M+38WCEe7POTyxyFKBkax5327zssT69uV1A6v0= Subject key identifier: F3:A0:C0:51:1E:0F:12:7C:1C:AD:75:B2:1B:52:46:4A:DA:29:B9:4E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D980E0DE9BF1F75CE1DB22B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/10225e14-6043-4aa6-8ee8-d55fd634d2b1/10225e14-6043-4aa6-8ee8-d55fd634d2b1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/10225e14-6043-4aa6-8ee8-d55fd634d2b1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 22 Apr 2026 19:12:46 +0000 Certificate not after: Tue 25 Jul 2028 19:12:46 +0000 Subordinate resources: IP: 74.188.244.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:0e:0d:e9:bf:1f:75:ce:1d:b2:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Apr 22 19:12:46 2026 GMT Not After : Jul 25 19:12:46 2028 GMT Subject: CN=10225e14-6043-4aa6-8ee8-d55fd634d2b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:97:09:80:56:f2:95:36:17:12:44:72:c0:01: 22:61:26:c4:7e:c5:87:6a:cb:18:c9:d6:3d:dc:7c: 67:42:d4:22:96:66:d0:5a:d3:d6:6b:32:8d:b2:41: ff:1d:1c:34:47:fc:28:5c:55:f1:08:9d:bf:e3:b1: ae:7e:a8:56:ad:b7:ad:9c:32:12:c3:34:a9:a7:55: f4:c2:31:ea:19:24:c8:dd:86:a6:e4:83:47:ee:95: ca:5a:65:04:ac:66:27:9a:e8:47:44:a8:aa:f7:81: 57:d3:f4:77:f4:44:83:5d:04:fd:41:8a:6c:fb:d2: 03:cd:9d:6d:61:a5:7c:d9:ab:d8:49:cc:d5:3b:c6: 4d:ff:de:38:87:15:57:e9:e0:2b:f2:8f:6d:ca:77: fc:df:3c:5f:f4:b6:3e:3e:f3:10:c8:70:63:09:cd: d2:26:45:09:35:87:f3:c5:c4:50:d3:e6:c2:12:8c: c2:5a:30:cf:e4:9d:ac:ef:3c:19:84:3e:d3:e3:a6: da:83:64:49:35:d0:f7:78:26:38:a5:6c:99:5e:52: 01:a3:e6:a7:9b:65:ae:55:71:00:64:95:c2:21:d2: b8:98:e5:95:3c:17:96:6a:fa:e4:6d:35:6e:44:3c: 85:49:81:7d:4e:35:02:80:d3:53:c7:3c:7d:65:5f: da:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A0:C0:51:1E:0F:12:7C:1C:AD:75:B2:1B:52:46:4A:DA:29:B9:4E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/10225e14-6043-4aa6-8ee8-d55fd634d2b1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/10225e14-6043-4aa6-8ee8-d55fd634d2b1/10225e14-6043-4aa6-8ee8-d55fd634d2b1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.188.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:da:f9:40:be:a2:00:12:76:99:c1:82:8a:ca:40:3d:74:27: 5d:aa:c6:33:a4:21:6a:ee:7f:e6:a2:b9:a3:0d:25:cf:76:7c: c3:87:65:ec:0f:26:6f:fd:8a:30:a7:4a:33:4d:7c:7f:e2:64: 95:87:d8:ff:15:1a:17:ff:8e:ba:f6:8f:8d:87:64:ab:1a:b7: 48:c0:5a:74:ae:62:53:06:3d:f3:7c:51:76:04:4e:89:ac:07: b7:07:70:33:fe:38:58:fd:f8:c0:f6:c2:2a:6c:50:4d:a9:ca: 35:ed:66:28:ec:48:31:7e:6e:d7:15:22:32:bc:37:83:72:db: ef:6f:72:20:92:2a:fb:a5:f6:cb:2a:d4:b6:f1:38:62:56:d9: 13:1b:ad:29:b1:44:71:5c:7b:2b:e9:d2:d8:54:dc:e4:4a:b4: e8:2c:9c:d1:b2:3a:d2:b3:c8:26:30:cb:2a:35:8a:7e:df:86: 4e:11:f3:c6:4e:fb:c2:1f:ac:e2:a1:cd:08:8b:1c:d1:eb:7e: 49:97:d0:12:4e:3c:ed:44:17:34:05:a5:bf:c0:7b:c2:a8:85: d8:68:ea:6c:b0:f4:18:45:54:de:d7:f9:57:c4:74:af:59:1b: 0e:ef:6c:71:b8:db:45:12:29:66:2d:6e:7b:fb:95:69:64:84: 57:30:8d:22 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE2YDg3pvx91zh2yKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDQyMjE5MTI0NloXDTI4MDcyNTE5MTI0NlowLzEtMCsGA1UEAxMk MTAyMjVlMTQtNjA0My00YWE2LThlZTgtZDU1ZmQ2MzRkMmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5cJgFbylTYXEkRywAEiYSbEfsWHassYydY9 3HxnQtQilmbQWtPWazKNskH/HRw0R/woXFXxCJ2/47GufqhWrbetnDISwzSpp1X0 wjHqGSTI3Yam5INH7pXKWmUErGYnmuhHRKiq94FX0/R39ESDXQT9QYps+9IDzZ1t YaV82avYSczVO8ZN/944hxVX6eAr8o9tynf83zxf9LY+PvMQyHBjCc3SJkUJNYfz xcRQ0+bCEozCWjDP5J2s7zwZhD7T46bag2RJNdD3eCY4pWyZXlIBo+anm2WuVXEA ZJXCIdK4mOWVPBeWavrkbTVuRDyFSYF9TjUCgNNTxzx9ZV/axQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPOgwFEeDxJ8HK11shtSRkraKblOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8x MDIyNWUxNC02MDQzLTRhYTYtOGVlOC1kNTVmZDYzNGQyYjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzEwMjI1ZTE0LTYwNDMtNGFhNi04 ZWU4LWQ1NWZkNjM0ZDJiMS8xMDIyNWUxNC02MDQzLTRhYTYtOGVlOC1kNTVmZDYz NGQyYjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKvPQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAfdr5QL6iABJ2mcGCispA PXQnXarGM6Qhau5/5qK5ow0lz3Z8w4dl7A8mb/2KMKdKM018f+JklYfY/xUaF/+O uvaPjYdkqxq3SMBadK5iUwY983xRdgROiawHtwdwM/44WP34wPbCKmxQTanKNe1m KOxIMX5u1xUiMrw3g3Lb729yIJIq+6X2yyrUtvE4YlbZExutKbFEcVx7K+nS2FTc 5Eq06Cyc0bI60rPIJjDLKjWKft+GThHzxk77wh+s4qHNCIsc0et+SZfQEk487UQX NAWlv8B7wqiF2GjqbLD0GEVU3tf5V8R0r1kbDu9scbjbRRIpZi1ue/uVaWSEVzCN Ig== -----END CERTIFICATE-----Generated at Mon Apr 27 08:24:19 2026 by rpki-client