$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer File: 40b5920b-1ba8-48a4-adf7-f6bcf0864b18.cer (raw, json) Hash identifier: 8Z03/kYjDLpuZFVPy1oqgeeq0ItyymuKe3vVkybydBY= Subject key identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F1B44C3F3BA21FA1F9F77D380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 08 Sep 2026 12:00:50 +0000 Certificate not after: Mon 11 Dec 2028 13:00:50 +0000 Subordinate resources: AS: 25767 IP: 192.111.54.0/23 IP: 199.16.184.0/21 IP: 199.102.68.0/22 IP: 204.11.32.0/22 IP: 208.64.36.0/22 IP: 208.79.208.0/21 IP: 208.92.216.0/21 IP: 2604:cc00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:44:c3:f3:ba:21:fa:1f:9f:77:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 8 12:00:50 2026 GMT Not After : Dec 11 13:00:50 2028 GMT Subject: CN=40b5920b-1ba8-48a4-adf7-f6bcf0864b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:73:41:1b:47:97:bb:26:0b:16:75:b9:02: 07:67:2f:b2:b9:e9:4f:8d:62:82:a0:0d:55:fe:81: 05:28:38:96:f9:89:9b:8e:a4:98:4c:e1:1b:1f:dc: 09:d8:e4:29:03:fb:b0:7f:87:ba:54:f5:ea:45:dc: d9:08:e1:5b:e7:80:41:53:e9:62:b6:81:d4:14:df: 71:1b:93:72:97:67:a6:2a:b0:6c:fa:db:23:e2:9d: 4f:9e:a4:79:c9:99:55:c0:b7:e4:5c:91:bb:23:e9: 11:dd:c2:58:2c:8c:15:7b:8c:2e:89:a6:30:2b:26: 53:8d:82:bc:02:9e:c7:99:9a:04:9d:3c:30:9b:c1: 70:61:33:56:74:be:eb:c1:8a:44:7a:97:0f:85:2c: 8f:8a:bd:e0:06:8a:80:c6:da:2e:a2:21:3b:15:d3: 85:90:4a:d7:4d:c9:06:3f:3a:e1:1d:1b:c3:1f:17: ca:65:89:c1:37:20:a8:4f:34:b5:19:4e:f3:d3:63: 45:bc:3d:ce:17:b9:71:10:6c:69:5a:97:90:ee:fe: e2:16:52:c2:a0:d7:48:f6:01:5d:3c:36:ed:6a:5b: ab:22:e8:79:61:02:cf:46:4e:28:ab:e6:78:3b:18: a3:c9:98:1b:c6:19:e4:74:8e:bd:61:04:7d:17:f7: 66:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:6F:D8:CE:AB:B0:5C:6B:B8:81:7F:FE:0A:F0:EB:23:CE:E4:3A:EA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40b5920b-1ba8-48a4-adf7-f6bcf0864b18/40b5920b-1ba8-48a4-adf7-f6bcf0864b18.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.111.54.0/23 199.16.184.0/21 199.102.68.0/22 204.11.32.0/22 208.64.36.0/22 208.79.208.0/21 208.92.216.0/21 IPv6: 2604:cc00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25767 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fd:92:7a:6e:32:f4:e8:c7:4e:df:32:be:2e:73:07:5e:41: da:fd:20:98:98:55:7e:2e:10:6f:d9:a2:84:2b:f5:ce:6e:79: 0c:a5:15:3c:26:a3:e7:9b:1c:64:ad:bc:d4:98:2f:bf:e2:21: f1:50:12:2e:a5:9a:4b:de:25:de:9e:62:a8:5b:b9:09:e3:9f: 8d:18:a2:37:04:b3:f3:a7:52:c9:bb:ba:47:d4:57:f3:83:94: 4c:e1:d4:a9:c5:a2:06:37:68:34:21:ff:3c:c2:d2:a2:63:74: 64:11:0d:41:63:fd:0d:fe:b6:b8:14:43:49:ae:1e:c7:db:f9: c8:31:42:fe:51:fe:42:8a:9d:67:86:fb:64:af:a3:c3:3d:34: 07:84:81:ae:bd:7d:de:4d:05:da:6a:96:e7:87:f8:4d:1b:c9: 98:1f:48:b5:b4:36:fc:f6:16:24:38:36:f2:c2:07:77:c8:7c: 3a:60:3d:00:b7:e7:c5:a6:7d:43:b0:bf:e1:89:68:70:cc:4d: 12:2f:c9:a7:7e:4c:09:f6:ad:a4:54:08:a5:1d:11:d9:02:38: 81:bf:01:36:70:cb:57:6f:38:4a:9a:ec:bf:5c:5a:c4:2c:89: e3:8f:7d:2c:2e:47:20:82:21:ce:10:6b:1e:67:94:c1:03:62: 36:8b:5f:a8 -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWE8bRMPzuiH6H59304AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkwODEyMDA1MFoXDTI4MTIxMTEzMDA1MFowLzEtMCsGA1UEAxMk NDBiNTkyMGItMWJhOC00OGE0LWFkZjctZjZiY2YwODY0YjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt5zQRtHl7smCxZ1uQIHZy+yuelPjWKCoA1V /oEFKDiW+YmbjqSYTOEbH9wJ2OQpA/uwf4e6VPXqRdzZCOFb54BBU+litoHUFN9x G5Nyl2emKrBs+tsj4p1PnqR5yZlVwLfkXJG7I+kR3cJYLIwVe4wuiaYwKyZTjYK8 Ap7HmZoEnTwwm8FwYTNWdL7rwYpEepcPhSyPir3gBoqAxtouoiE7FdOFkErXTckG PzrhHRvDHxfKZYnBNyCoTzS1GU7z02NFvD3OF7lxEGxpWpeQ7v7iFlLCoNdI9gFd PDbtalurIuh5YQLPRk4oq+Z4OxijyZgbxhnkdI69YQR9F/dmVQIDAQABo4IETTCC BEkwHQYDVR0OBBYEFBpv2M6rsFxruIF//grw6yPO5DrqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4NjRiMTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQwYjU5MjBiLTFiYTgtNDhhNC1h ZGY3LWY2YmNmMDg2NGIxOC80MGI1OTIwYi0xYmE4LTQ4YTQtYWRmNy1mNmJjZjA4 NjRiMTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAHAbzYDBAPHELgDBALHZkQDBALMCyADBALQQCQD BAPQT9ADBAPQXNgwDQQCAAIwBwMFACYEzAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICZKcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAC/2Sem4y9OjHTt8yvi5zB15B2v0gmJhVfi4Qb9mihCv1 zm55DKUVPCaj55scZK281Jgvv+Ih8VASLqWaS94l3p5iqFu5CeOfjRiiNwSz86dS ybu6R9RX84OUTOHUqcWiBjdoNCH/PMLSomN0ZBENQWP9Df62uBRDSa4ex9v5yDFC /lH+QoqdZ4b7ZK+jwz00B4SBrr193k0F2mqW54f4TRvJmB9ItbQ2/PYWJDg28sIH d8h8OmA9ALfnxaZ9Q7C/4YlocMxNEi/Jp35MCfatpFQIpR0R2QI4gb8BNnDLV284 Sprsv1xaxCyJ4499LC5HIIIhzhBrHmeUwQNiNotfqA== -----END CERTIFICATE-----Generated at Sun Sep 13 13:19:32 2026 by rpki-client