$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f.cer File: 48e1915e-1132-4c62-a522-0f196fb03c8f.cer (raw, json) Hash identifier: EiXWEUC1q5I+ql8BHVrIL0g6t0oMkKuKa2fSxQM6tYY= Subject key identifier: 92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EF44534EC710201FB70840B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 25 Aug 2026 12:45:11 +0000 Certificate not after: Mon 27 Nov 2028 13:45:11 +0000 Subordinate resources: IP: 141.214.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:45:34:ec:71:02:01:fb:70:84:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 25 12:45:11 2026 GMT Not After : Nov 27 13:45:11 2028 GMT Subject: CN=48e1915e-1132-4c62-a522-0f196fb03c8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bd:7c:1b:c4:f3:34:5b:a2:a1:2e:73:8f:32: 85:ce:3a:19:bf:e9:c1:0a:ff:1d:30:24:ed:b7:65: fe:af:62:bc:a7:77:a0:5a:2d:cb:a4:d6:0e:e2:07: 6f:2a:f7:72:db:93:80:b4:b9:5f:ea:cd:25:ea:96: 82:43:67:2b:f9:87:24:17:f0:8f:9c:87:13:1d:c2: c6:89:e6:28:d8:a5:34:f0:98:7c:6a:b5:f5:bf:77: a7:6a:12:da:2e:37:4b:62:99:00:e5:bf:6f:4a:10: 76:a6:f7:d0:43:cb:18:b0:03:22:06:e8:34:5b:50: e1:bf:f8:1f:46:5d:08:7b:37:ca:6d:3f:1d:22:db: b4:94:18:4a:3a:01:52:c4:01:ac:ff:45:e0:f0:72: b2:62:98:f8:1b:62:1d:f5:16:51:85:bb:b9:44:da: 3a:14:4e:7c:e9:dd:e4:c3:1a:d2:71:66:40:ed:95: ac:ab:bf:c9:61:39:c0:82:b0:1c:92:6b:cd:69:69: 58:ee:20:86:49:26:11:e6:02:65:6d:1d:fd:99:2a: b9:41:59:00:3d:e7:ec:2d:84:95:fd:6f:e0:a0:c2: d2:3b:25:38:80:1d:51:26:3a:05:72:3a:36:5e:71: 2b:cc:11:b3:05:2f:b3:32:94:82:f0:64:9a:36:97: 68:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:6F:EC:EE:CB:0A:F9:03:6A:02:62:DB:0B:D9:11:2A:0B:43:81:57 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48e1915e-1132-4c62-a522-0f196fb03c8f/48e1915e-1132-4c62-a522-0f196fb03c8f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 141.214.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fb:69:31:e8:0e:8c:f7:b7:d7:bf:ba:74:25:e7:60:bc:a9: d7:20:34:3a:c9:c1:e7:1b:66:c0:d4:87:6b:b7:1b:5d:ee:0f: 5a:9b:a2:20:48:a9:35:2f:51:1e:1f:ac:2d:55:92:db:7c:5b: 2b:82:62:62:4c:d7:4f:63:21:6e:77:0d:61:08:9c:e8:d7:c4: aa:08:35:91:e6:da:fa:75:29:8e:68:20:e2:ca:9d:95:43:2a: 25:f8:89:8b:2c:c1:11:9b:77:89:cc:2e:26:4d:c5:63:7b:12: a8:a3:fb:35:67:7a:de:29:96:bf:1f:11:09:bd:d3:3e:7c:14: a3:bf:01:b5:2c:01:02:9b:8b:a1:90:61:d5:69:ef:26:07:4e: 67:91:1f:1b:5b:e6:4a:5b:12:72:54:56:30:05:c3:21:33:86: ec:5f:ea:83:3a:a2:42:cc:ba:3d:61:70:75:06:92:dd:8b:45: 17:4d:22:d2:e4:f1:c7:4e:40:7d:9b:9d:9b:7d:11:9e:d3:9f: e5:81:9e:8f:66:96:ac:e6:37:35:d7:5c:1a:94:65:38:16:ab: 3a:35:e5:62:58:16:0a:80:10:18:e7:f4:d6:d7:0b:fb:b0:aa: 32:da:17:1c:a4:c2:41:3e:bf:05:26:8f:bc:c1:5f:5c:64:f9: e8:c0:74:41 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE70RTTscQIB+3CECwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgyNTEyNDUxMVoXDTI4MTEyNzEzNDUxMVowLzEtMCsGA1UEAxMk NDhlMTkxNWUtMTEzMi00YzYyLWE1MjItMGYxOTZmYjAzYzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb18G8TzNFuioS5zjzKFzjoZv+nBCv8dMCTt t2X+r2K8p3egWi3LpNYO4gdvKvdy25OAtLlf6s0l6paCQ2cr+YckF/CPnIcTHcLG ieYo2KU08Jh8arX1v3enahLaLjdLYpkA5b9vShB2pvfQQ8sYsAMiBug0W1Dhv/gf Rl0IezfKbT8dItu0lBhKOgFSxAGs/0Xg8HKyYpj4G2Id9RZRhbu5RNo6FE586d3k wxrScWZA7ZWsq7/JYTnAgrAckmvNaWlY7iCGSSYR5gJlbR39mSq5QVkAPefsLYSV /W/goMLSOyU4gB1RJjoFcjo2XnErzBGzBS+zMpSC8GSaNpdo0QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJJv7O7LCvkDagJi2wvZESoLQ4FXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 OGUxOTE1ZS0xMTMyLTRjNjItYTUyMi0wZjE5NmZiMDNjOGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ4ZTE5MTVlLTExMzItNGM2Mi1h NTIyLTBmMTk2ZmIwM2M4Zi80OGUxOTE1ZS0xMTMyLTRjNjItYTUyMi0wZjE5NmZi MDNjOGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCN1jBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCV+2kx6A6M97fXv7p0Jedg vKnXIDQ6ycHnG2bA1Idrtxtd7g9am6IgSKk1L1EeH6wtVZLbfFsrgmJiTNdPYyFu dw1hCJzo18SqCDWR5tr6dSmOaCDiyp2VQyol+ImLLMERm3eJzC4mTcVjexKoo/s1 Z3reKZa/HxEJvdM+fBSjvwG1LAECm4uhkGHVae8mB05nkR8bW+ZKWxJyVFYwBcMh M4bsX+qDOqJCzLo9YXB1BpLdi0UXTSLS5PHHTkB9m52bfRGe05/lgZ6PZpas5jc1 11walGU4Fqs6NeViWBYKgBAY5/TW1wv7sKoy2hccpMJBPr8FJo+8wV9cZPnowHRB -----END CERTIFICATE-----Generated at Sun Sep 13 17:23:51 2026 by rpki-client