$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e81c528-a7ea-44f3-82b6-ab8207c14eef.cer File: 2e81c528-a7ea-44f3-82b6-ab8207c14eef.cer (raw, json) Hash identifier: qZu+YiohQiZgWs1s5dudiDhDZY4woUm79r+fxkbuM94= Subject key identifier: 18:19:27:C3:13:00:ED:A6:AC:5D:F7:AC:C3:D4:97:72:0C:8D:9D:C5 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E2ECFBB36ECEF915B530E7B20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e81c528-a7ea-44f3-82b6-ab8207c14eef/2e81c528-a7ea-44f3-82b6-ab8207c14eef.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e81c528-a7ea-44f3-82b6-ab8207c14eef/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Jun 2026 19:14:15 +0000 Certificate not after: Sun 17 Sep 2028 19:14:15 +0000 Subordinate resources: AS: 22395 IP: 204.13.212.0/22 IP: 2606:8480::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2e:cf:bb:36:ec:ef:91:5b:53:0e:7b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 15 19:14:15 2026 GMT Not After : Sep 17 19:14:15 2028 GMT Subject: CN=2e81c528-a7ea-44f3-82b6-ab8207c14eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:26:5b:5b:4b:d0:64:8c:fb:f9:7d:31:df:14: 3f:3c:4a:d0:89:50:d0:20:49:9a:0b:55:0c:af:70: e0:fb:cd:af:35:eb:a7:d4:3e:d9:6a:89:4a:62:1f: fc:48:19:64:62:a0:66:68:55:d8:3e:b8:ee:2a:44: 4c:41:43:56:26:a1:90:cf:fa:0e:0d:9b:34:07:03: 5f:5c:e8:ab:1f:2a:18:c7:a5:0d:76:f0:a1:ee:0d: 9c:a3:4a:1b:9e:38:3b:22:2e:bb:b2:da:08:6a:c3: 13:d4:7b:46:61:2a:19:fc:56:05:3d:02:51:23:28: dc:b2:51:a7:e4:f8:9c:20:bd:e7:5d:24:1f:99:91: f9:66:6e:b5:61:8e:77:50:5f:fc:35:66:fb:44:b7: 5d:49:ca:ed:69:b9:fd:95:ea:d2:73:e3:f9:fa:65: 7c:06:73:5c:70:60:99:b9:1c:d3:48:ed:da:d7:86: 53:c1:33:70:9c:e9:76:d2:eb:78:77:74:d9:e5:97: 99:97:3a:c4:ef:e4:4e:1b:76:3b:18:ff:fd:33:bd: d7:b9:ea:43:3e:a6:4e:57:ec:af:eb:8b:6a:0e:b2: 6c:b0:06:5d:d1:3b:a3:ec:a8:40:ed:fe:73:65:a0: 30:f6:f7:af:d1:88:11:15:c9:95:82:6b:1b:94:e0: 4d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:19:27:C3:13:00:ED:A6:AC:5D:F7:AC:C3:D4:97:72:0C:8D:9D:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e81c528-a7ea-44f3-82b6-ab8207c14eef/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e81c528-a7ea-44f3-82b6-ab8207c14eef/2e81c528-a7ea-44f3-82b6-ab8207c14eef.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 204.13.212.0/22 IPv6: 2606:8480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22395 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a4:5e:aa:09:7e:43:00:78:5f:b3:b4:98:b2:6b:6f:7d:22: ac:6c:b4:8d:2c:ab:50:2e:a0:bd:bf:80:8e:00:6c:87:b0:01: 36:df:d6:6a:22:6e:bd:0d:3f:ab:db:72:b3:24:37:49:f8:05: 22:93:d7:50:2c:fe:d5:85:0a:f6:9b:3b:32:c8:7e:0d:ff:f2: e8:07:ea:3d:3f:9e:e9:d1:9d:c3:a6:cd:3c:45:62:12:65:b0: ff:95:c2:aa:5e:12:8a:9b:73:73:a8:2d:38:c4:21:9d:04:18: cd:12:7b:a2:cb:1a:7d:68:b7:01:1b:cc:06:0d:3b:46:a3:a0: f0:47:0b:4e:ae:70:4f:d1:5c:f0:bd:48:7b:b2:56:d5:57:ed: 58:e3:65:39:83:2c:3e:3e:8a:11:6b:38:a0:83:e2:90:de:bb: 6c:33:8b:18:f6:71:cb:63:3b:74:79:be:a3:78:c1:e3:c1:f1: 0c:72:c3:27:4b:2c:69:a0:83:bd:ef:1c:52:2b:c3:54:9f:d9: fc:59:8f:2a:f9:e5:ab:20:b7:27:18:55:06:b8:02:c8:00:af: a8:6d:e7:a0:94:77:57:0c:43:d1:10:27:f6:31:86:e6:5a:d4: 61:85:8f:9e:96:66:14:09:03:fd:72:5b:06:9a:0b:6e:96:05: 86:88:7c:c8 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE4uz7s27O+RW1MOeyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYxNTE5MTQxNVoXDTI4MDkxNzE5MTQxNVowLzEtMCsGA1UEAxMk MmU4MWM1MjgtYTdlYS00NGYzLTgyYjYtYWI4MjA3YzE0ZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSZbW0vQZIz7+X0x3xQ/PErQiVDQIEmaC1UM r3Dg+82vNeun1D7ZaolKYh/8SBlkYqBmaFXYPrjuKkRMQUNWJqGQz/oODZs0BwNf XOirHyoYx6UNdvCh7g2co0obnjg7Ii67stoIasMT1HtGYSoZ/FYFPQJRIyjcslGn 5PicIL3nXSQfmZH5Zm61YY53UF/8NWb7RLddScrtabn9lerSc+P5+mV8BnNccGCZ uRzTSO3a14ZTwTNwnOl20ut4d3TZ5ZeZlzrE7+ROG3Y7GP/9M73XuepDPqZOV+yv 64tqDrJssAZd0Tuj7KhA7f5zZaAw9vev0YgRFcmVgmsblOBN8wIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFBgZJ8MTAO2mrF33rMPUl3IMjZ3FMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8y ZTgxYzUyOC1hN2VhLTQ0ZjMtODJiNi1hYjgyMDdjMTRlZWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzJlODFjNTI4LWE3ZWEtNDRmMy04 MmI2LWFiODIwN2MxNGVlZi8yZTgxYzUyOC1hN2VhLTQ0ZjMtODJiNi1hYjgyMDdj MTRlZWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBALMDdQwDQQCAAIwBwMFACYGhIAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICV3swVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQaReqgl+QwB4X7O0mLJrb30irGy0 jSyrUC6gvb+AjgBsh7ABNt/WaiJuvQ0/q9tysyQ3SfgFIpPXUCz+1YUK9ps7Msh+ Df/y6AfqPT+e6dGdw6bNPEViEmWw/5XCql4Siptzc6gtOMQhnQQYzRJ7ossafWi3 ARvMBg07RqOg8EcLTq5wT9Fc8L1Ie7JW1VftWONlOYMsPj6KEWs4oIPikN67bDOL GPZxy2M7dHm+o3jB48HxDHLDJ0ssaaCDve8cUivDVJ/Z/FmPKvnlqyC3JxhVBrgC yACvqG3noJR3VwxD0RAn9jGG5lrUYYWPnpZmFAkD/XJbBpoLbpYFhoh8yA== -----END CERTIFICATE-----Generated at Sun Jun 28 15:19:35 2026 by rpki-client