$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer File: 499450bd-6432-4e5d-a29f-1c38c1ea14c6.cer (raw, json) Hash identifier: SiuG0QbY8Erag88lrD7IQr3u9dzlZvQruydkjuuhj28= Subject key identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F5E5B3572EDAA19449FEA21C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 12:45:12 +0000 Certificate not after: Thu 04 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 20149 IP: 69.72.16.0/21 IP: 98.97.192.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:5b:35:72:ed:aa:19:44:9f:ea:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 2 12:45:12 2026 GMT Not After : Jan 4 13:45:12 2029 GMT Subject: CN=499450bd-6432-4e5d-a29f-1c38c1ea14c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fa:91:51:20:6f:34:42:ab:3b:a7:aa:52:66: 63:b7:b1:f0:4e:b5:77:f9:b2:93:34:10:a3:9a:78: 50:a3:03:fb:8d:22:ef:b5:67:9e:96:86:8f:a0:72: 04:2b:54:49:98:fb:e1:56:16:65:4d:01:be:34:58: 8a:3e:ac:f3:98:16:bd:84:1a:73:34:ee:e6:c7:bd: 69:b6:4e:73:64:15:91:db:90:43:99:bc:e7:12:7f: 86:de:cc:70:f4:67:ec:1a:68:06:d9:6a:2b:96:5c: 6f:25:ec:72:c7:02:92:3a:0b:e0:33:59:62:40:4e: 8f:5d:1b:f9:7e:e8:8d:8a:14:ff:00:d1:ca:d3:35: d4:18:7c:df:00:d5:33:c1:c8:7b:a9:a8:93:5c:e7: 61:c2:fa:f8:b0:da:7f:1f:43:29:d0:d8:0b:f3:7d: b6:e6:5c:9e:02:c7:b7:ac:ae:0d:42:86:56:10:f1: 55:d9:96:b2:a5:51:7b:e2:d3:ee:8a:19:bb:8c:72: be:f0:63:b1:9d:86:ec:95:57:b5:0f:f7:e5:13:5d: 8a:a7:f5:6b:1e:e0:18:7d:a2:69:7c:ec:9f:60:8c: 33:63:89:78:5c:fa:9f:ad:8f:4e:2d:bf:4b:ff:2d: c9:75:c5:3e:3f:aa:d6:86:92:7d:9b:e5:94:c7:01: 67:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:9C:7D:FD:87:30:04:B7:B4:47:8D:03:30:59:10:5D:94:93:79:F1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/499450bd-6432-4e5d-a29f-1c38c1ea14c6/499450bd-6432-4e5d-a29f-1c38c1ea14c6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 69.72.16.0/21 98.97.192.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20149 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ff:97:51:d1:c0:1f:95:bb:ce:0d:a0:67:b6:04:c4:d1:b2: 45:9c:ff:f0:d3:94:6a:0c:26:c4:a4:12:27:83:f3:29:df:b0: 58:24:20:34:73:5c:4b:5b:0a:ee:17:c5:17:30:dc:32:fc:b5: f7:fb:5b:de:bd:9c:ef:1e:bd:61:65:73:8d:37:cb:0e:50:e4: bd:4b:55:1a:ec:bd:04:82:09:77:39:d9:d6:cc:49:17:18:8e: cc:45:cb:47:df:24:b3:22:80:2d:53:4b:d7:8b:88:4a:3e:fe: c0:22:42:ff:01:f2:57:62:e3:0e:f1:45:24:87:e4:65:b5:60: 92:46:32:61:62:f4:7b:37:7d:ae:3e:aa:d4:d9:78:e5:a4:3e: 43:fe:72:cf:d4:b6:56:db:55:0d:52:55:35:c1:fe:b7:71:3e: 38:c8:7c:2a:37:db:3b:e8:d8:1b:c8:45:b0:31:b9:68:f7:ed: 96:4e:c8:a1:85:3d:48:33:b2:0d:49:0a:04:2d:19:af:bd:35: a0:61:d3:cb:87:f2:93:d8:7e:40:26:d6:48:4d:00:a8:f1:8a: 12:69:76:15:65:78:12:0a:6f:91:0e:64:8d:c0:83:df:36:41: 05:09:d6:22:5a:2a:66:ca:3c:a8:37:f1:61:d2:3d:79:83:3d: 01:0f:81:13 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE9eWzVy7aoZRJ/qIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MTAwMjEyNDUxMloXDTI5MDEwNDEzNDUxMlowLzEtMCsGA1UEAxMk NDk5NDUwYmQtNjQzMi00ZTVkLWEyOWYtMWMzOGMxZWExNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofqRUSBvNEKrO6eqUmZjt7HwTrV3+bKTNBCj mnhQowP7jSLvtWeeloaPoHIEK1RJmPvhVhZlTQG+NFiKPqzzmBa9hBpzNO7mx71p tk5zZBWR25BDmbznEn+G3sxw9GfsGmgG2WorllxvJexyxwKSOgvgM1liQE6PXRv5 fuiNihT/ANHK0zXUGHzfANUzwch7qaiTXOdhwvr4sNp/H0Mp0NgL83225lyeAse3 rK4NQoZWEPFV2ZaypVF74tPuihm7jHK+8GOxnYbslVe1D/flE12Kp/VrHuAYfaJp fOyfYIwzY4l4XPqfrY9OLb9L/y3JdcU+P6rWhpJ9m+WUxwFnTQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFFecff2HMAS3tEeNAzBZEF2Uk3nxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFlYTE0YzYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzQ5OTQ1MGJkLTY0MzItNGU1ZC1h MjlmLTFjMzhjMWVhMTRjNi80OTk0NTBiZC02NDMyLTRlNWQtYTI5Zi0xYzM4YzFl YTE0YzYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANFSBADBAViYcAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICTrUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEABv+XUdHAH5W7zg2gZ7YExNGyRZz/8NOUagwmxKQS J4PzKd+wWCQgNHNcS1sK7hfFFzDcMvy19/tb3r2c7x69YWVzjTfLDlDkvUtVGuy9 BIIJdznZ1sxJFxiOzEXLR98ksyKALVNL14uISj7+wCJC/wHyV2LjDvFFJIfkZbVg kkYyYWL0ezd9rj6q1Nl45aQ+Q/5yz9S2VttVDVJVNcH+t3E+OMh8KjfbO+jYG8hF sDG5aPftlk7IoYU9SDOyDUkKBC0Zr701oGHTy4fyk9h+QCbWSE0AqPGKEml2FWV4 EgpvkQ5kjcCD3zZBBQnWIloqZso8qDfxYdI9eYM9AQ+BEw== -----END CERTIFICATE-----Generated at Sun Oct 11 06:13:03 2026 by rpki-client