$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer File: 2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer (raw, json) Hash identifier: lIoLlqlNbei1RFCJNOcLDloL105Y5xFmXsk6CS/Hczk= Subject key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F777B5CBF2620E68C749A4A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 11 Oct 2026 12:45:12 +0000 Certificate not after: Sat 13 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 400427 IP: 66.33.58.0/23 IP: 66.33.78.0/23 IP: 72.51.12.0/22 IP: 206.225.0.0/22 IP: 216.120.144.0/23 IP: 2606:ad40::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:7b:5c:bf:26:20:e6:8c:74:9a:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 11 12:45:12 2026 GMT Not After : Jan 13 13:45:12 2029 GMT Subject: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:6f:38:b1:f2:f5:cd:fc:96:e2:0f:d1:4a:6a: b5:89:7f:aa:07:71:8e:1f:b8:89:2e:bd:b2:e9:21: b8:ab:09:18:6a:12:2a:90:64:ff:07:e4:0d:6a:2c: fe:74:24:f8:ce:2f:85:93:4d:20:01:f8:36:e3:fe: 2d:3c:95:d2:89:14:1c:1d:71:d7:88:a8:27:61:f2: 5e:9b:a9:70:8e:93:2f:25:29:50:9e:cf:f5:b6:65: 4b:83:13:c1:45:a0:05:32:f7:80:8f:aa:7e:8b:f3: a3:b8:2c:4e:11:5a:f6:d8:2e:64:77:1d:1f:42:18: 2b:75:7d:5a:22:33:f0:1d:86:36:86:59:28:12:cf: 9e:c2:de:05:49:87:fd:c2:3d:83:eb:c3:4f:41:66: 33:1e:f2:9b:94:65:65:ea:d7:92:8c:12:b8:7d:3e: 93:a3:e5:9c:46:41:c2:31:28:97:27:99:e9:7f:f2: e7:a7:b3:64:2b:6c:e5:ed:5c:83:fd:4e:0e:1f:33: 93:1c:33:a6:45:36:0a:f8:c4:b5:7d:28:77:a8:ae: f2:0c:36:ca:55:81:a5:15:68:17:0c:69:11:bf:cb: f0:61:81:65:19:8f:e3:0e:ad:79:6d:23:1d:42:7f: 39:ae:1e:9c:f1:08:82:69:cf:88:35:74:c9:ca:a7: 53:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.33.58.0/23 66.33.78.0/23 72.51.12.0/22 206.225.0.0/22 216.120.144.0/23 IPv6: 2606:ad40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400427 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c9:90:d5:9b:6b:be:7f:22:fb:a1:bd:eb:31:92:c1:d0:5a: b4:4c:25:9a:c0:eb:cc:7e:1d:b6:79:f4:46:5a:1e:92:ac:9a: bd:9d:21:f1:fd:9b:ac:86:ea:9f:0d:ec:94:11:9c:2b:e0:08: 5e:30:0a:f5:d0:7e:80:3e:66:9b:f7:34:98:23:1c:8d:06:be: 44:11:d3:f9:ab:80:1a:2f:fe:3f:4e:c2:6b:92:36:c2:61:7c: a9:b1:80:8a:36:af:c4:22:33:3a:cc:f9:cd:8c:53:9f:c5:9e: 4d:2f:36:b1:6e:bd:ae:9e:37:8e:a5:ed:72:c1:fd:4b:37:56: df:14:63:2c:02:b5:ed:06:5a:b0:94:2d:a9:03:2c:19:34:d6: a7:5c:b4:86:92:f4:5e:60:e6:b3:68:7c:d7:74:e9:70:08:2c: 19:f6:4d:72:96:c6:36:20:69:01:e2:bb:c4:37:bd:6d:61:6c: fa:99:6b:3d:40:ff:60:a8:2f:f9:02:2b:6c:71:ef:7c:1e:0b: ae:c0:73:e8:b1:f8:ba:33:a0:95:5b:32:a4:eb:6a:97:ba:25: c0:78:9d:ea:ef:a9:57:97:43:cd:13:7c:7e:93:cf:b1:47:61: 29:b8:76:e6:b9:0b:87:59:d4:20:09:8c:ec:03:d7:73:b2:21: 8a:43:80:8c -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWE93e1y/JiDmjHSaSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MTAxMTEyNDUxMloXDTI5MDExMzEzNDUxMlowLzEtMCsGA1UEAxMk MmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1NzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhW84sfL1zfyW4g/RSmq1iX+qB3GOH7iJLr2y 6SG4qwkYahIqkGT/B+QNaiz+dCT4zi+Fk00gAfg24/4tPJXSiRQcHXHXiKgnYfJe m6lwjpMvJSlQns/1tmVLgxPBRaAFMveAj6p+i/OjuCxOEVr22C5kdx0fQhgrdX1a IjPwHYY2hlkoEs+ewt4FSYf9wj2D68NPQWYzHvKblGVl6teSjBK4fT6To+WcRkHC MSiXJ5npf/Lnp7NkK2zl7VyD/U4OHzOTHDOmRTYK+MS1fSh3qK7yDDbKVYGlFWgX DGkRv8vwYYFlGY/jDq15bSMdQn85rh6c8QiCac+INXTJyqdTcQIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFOBGlZEoEy/VjmO4jypDUsTDoTmOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y ZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJlNjdhMzc0LWRiZDMtNGJmYS1i ODJjLTZkYmZkNjRlNTc4Zi8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0 ZTU3OGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAFCIToDBAFCIU4DBAJIMwwDBALO4QADBAHYeJAw DQQCAAIwBwMFACYGrUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhwrMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAD/JkNWba75/IvuhvesxksHQWrRMJZrA68x+HbZ59EZaHpKsmr2dIfH9m6yG 6p8N7JQRnCvgCF4wCvXQfoA+Zpv3NJgjHI0GvkQR0/mrgBov/j9OwmuSNsJhfKmx gIo2r8QiMzrM+c2MU5/Fnk0vNrFuva6eN46l7XLB/Us3Vt8UYywCte0GWrCULakD LBk01qdctIaS9F5g5rNofNd06XAILBn2TXKWxjYgaQHiu8Q3vW1hbPqZaz1A/2Co L/kCK2xx73weC67Ac+ix+LozoJVbMqTrape6JcB4nervqVeXQ80TfH6Tz7FHYSm4 dua5C4dZ1CAJjOwD13OyIYpDgIw= -----END CERTIFICATE-----Generated at Mon Oct 19 00:12:40 2026 by rpki-client