$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ad13f6b-f1ad-451c-a480-9c9d181cb0da.cer File: 4ad13f6b-f1ad-451c-a480-9c9d181cb0da.cer (raw, json) Hash identifier: 7O12ET38KQseB/hrkJP8u8Xg2PaWCW0yRR9Uu5QgfTg= Subject key identifier: B8:55:D9:4F:06:FD:76:60:93:11:BE:C1:99:AC:4A:F1:68:15:6D:98 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584ECD79CD3E537965EA94F7D8C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ad13f6b-f1ad-451c-a480-9c9d181cb0da/4ad13f6b-f1ad-451c-a480-9c9d181cb0da.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ad13f6b-f1ad-451c-a480-9c9d181cb0da/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 11 Aug 2026 15:14:38 +0000 Certificate not after: Mon 13 Nov 2028 16:14:38 +0000 Subordinate resources: AS: 21959 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cd:79:cd:3e:53:79:65:ea:94:f7:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 11 15:14:38 2026 GMT Not After : Nov 13 16:14:38 2028 GMT Subject: CN=4ad13f6b-f1ad-451c-a480-9c9d181cb0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:ba:be:ab:fd:61:93:8c:44:fd:4c:79:ad: 9e:c4:7e:f9:38:f2:f2:2e:78:e4:d0:9c:b9:0d:b2: 18:7d:b5:67:5e:79:1d:c5:3b:13:a9:c4:3f:f9:9e: 0a:e4:f7:a5:75:30:d0:29:0d:8b:7f:e1:e7:e4:2c: ea:00:d7:a8:00:b0:a3:63:3b:d1:2b:54:c6:c5:6e: c4:ba:fe:b8:b5:76:23:b4:8b:82:99:3a:96:ea:c8: 54:c4:28:81:ec:dc:25:c3:e0:46:49:08:af:48:53: d5:72:e3:83:96:7c:86:38:34:2d:49:bb:13:eb:ab: 37:e5:4e:27:a1:03:d1:22:c6:4a:8c:d1:e8:a0:61: e6:57:fd:05:7b:7e:84:d2:b4:ef:d5:7b:45:f4:46: bf:58:e1:ee:c6:77:ac:7d:4e:5e:f6:9c:42:87:40: 2c:7e:11:18:69:94:74:f7:2d:0e:d1:7c:74:72:1d: 5b:0a:8a:1d:d8:6d:59:2c:e4:03:a4:17:e1:92:09: 29:e0:13:3e:16:86:81:30:49:64:c3:6a:07:68:e7: c6:48:b7:94:57:ae:60:43:8e:25:c2:37:35:96:71: 81:61:22:55:56:20:44:dd:8b:06:be:ea:7f:df:e0: 9c:8e:74:c7:79:09:44:e2:e9:a5:81:2d:ee:9d:f0: d4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:55:D9:4F:06:FD:76:60:93:11:BE:C1:99:AC:4A:F1:68:15:6D:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ad13f6b-f1ad-451c-a480-9c9d181cb0da/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ad13f6b-f1ad-451c-a480-9c9d181cb0da/4ad13f6b-f1ad-451c-a480-9c9d181cb0da.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 21959 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:be:f9:a9:8e:00:66:1f:bc:65:d5:ec:77:d0:58:34:37:cd: 54:96:1c:a3:dd:5e:3c:9e:5e:45:89:c4:73:8f:b8:09:f9:19: d8:38:ac:b0:c9:9d:b7:63:4b:29:4c:f3:e3:07:a0:8a:02:ab: c0:98:3d:27:d8:44:de:e5:fe:d4:b1:c8:fe:bf:a9:47:69:09: a8:9d:69:19:28:23:9c:71:b4:20:56:1f:36:14:1b:3e:2d:6a: 98:3a:fc:66:67:95:3f:ea:e4:44:3e:cd:8c:95:cb:9c:92:9f: 27:90:1a:06:63:f0:5c:90:f0:62:4c:da:6d:da:73:e6:f6:34: 3a:c7:0f:13:63:6a:e5:88:2f:0a:b0:b7:02:ad:1c:76:fb:92: 8d:b7:b4:3a:b1:df:ce:75:e6:59:9c:71:0f:5a:db:08:4d:5d: ba:25:15:e5:df:6b:f7:1e:70:56:50:cd:bb:c0:03:1f:ff:54: dd:6d:77:5f:85:c9:69:1a:52:26:2b:5b:ba:20:99:2a:91:f3: b1:6e:58:3f:0a:64:77:34:6f:86:58:eb:1a:97:40:ce:2c:4e: 83:97:ce:c3:01:66:a1:a8:13:b2:27:32:fb:30:7d:6f:0e:a4: 81:3d:b7:90:4f:75:32:8e:5b:db:3a:1b:6a:e8:d3:bc:ab:ea: 6f:9b:b0:8c -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE7Nec0+U3ll6pT32MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgxMTE1MTQzOFoXDTI4MTExMzE2MTQzOFowLzEtMCsGA1UEAxMk NGFkMTNmNmItZjFhZC00NTFjLWE0ODAtOWM5ZDE4MWNiMGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI+6vqv9YZOMRP1Mea2exH75OPLyLnjk0Jy5 DbIYfbVnXnkdxTsTqcQ/+Z4K5PeldTDQKQ2Lf+Hn5CzqANeoALCjYzvRK1TGxW7E uv64tXYjtIuCmTqW6shUxCiB7Nwlw+BGSQivSFPVcuODlnyGODQtSbsT66s35U4n oQPRIsZKjNHooGHmV/0Fe36E0rTv1XtF9Ea/WOHuxnesfU5e9pxCh0AsfhEYaZR0 9y0O0Xx0ch1bCood2G1ZLOQDpBfhkgkp4BM+FoaBMElkw2oHaOfGSLeUV65gQ44l wjc1lnGBYSJVViBE3YsGvup/3+CcjnTHeQlE4umlgS3unfDUPQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFLhV2U8G/XZgkxG+wZmsSvFoFW2YMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80 YWQxM2Y2Yi1mMWFkLTQ1MWMtYTQ4MC05YzlkMTgxY2IwZGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzRhZDEzZjZiLWYxYWQtNDUxYy1h NDgwLTljOWQxODFjYjBkYS80YWQxM2Y2Yi1mMWFkLTQ1MWMtYTQ4MC05YzlkMTgx Y2IwZGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVccwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAAr75qY4AZh+8ZdXsd9BYNDfNVJYc o91ePJ5eRYnEc4+4CfkZ2DissMmdt2NLKUzz4wegigKrwJg9J9hE3uX+1LHI/r+p R2kJqJ1pGSgjnHG0IFYfNhQbPi1qmDr8ZmeVP+rkRD7NjJXLnJKfJ5AaBmPwXJDw Ykzabdpz5vY0OscPE2Nq5YgvCrC3Aq0cdvuSjbe0OrHfznXmWZxxD1rbCE1duiUV 5d9r9x5wVlDNu8ADH/9U3W13X4XJaRpSJitbuiCZKpHzsW5YPwpkdzRvhljrGpdA zixOg5fOwwFmoagTsicy+zB9bw6kgT23kE91Mo5b2zobaujTvKvqb5uwjA== -----END CERTIFICATE-----Generated at Tue Aug 25 21:27:42 2026 by rpki-client