$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer File: 5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer (raw, json) Hash identifier: P73pL/5BsCo0K4/jfGRN/o5SIJtugeVIjBs43Q1aG3o= Subject key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EEBE52690D0DB7FD8D5BE3334 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 22 Aug 2026 12:45:11 +0000 Certificate not after: Fri 24 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 400226 IP: 23.128.248.0/24 IP: 204.197.168.0/22 IP: 2602:fc05::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:eb:e5:26:90:d0:db:7f:d8:d5:be:33:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 22 12:45:11 2026 GMT Not After : Nov 24 13:45:11 2028 GMT Subject: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:eb:dc:12:40:51:91:69:fb:fe:b8:b5:1d:85: 5b:ba:6c:f7:ea:11:1c:c4:e7:55:c7:7a:2b:60:b4: ff:99:88:77:b7:3a:a5:81:0a:e0:e6:1c:9b:17:73: b5:50:40:da:91:df:01:bd:71:c9:3a:fb:70:63:1a: 24:c6:88:cb:7d:a6:1f:dc:cf:ec:8c:77:6b:5e:c1: 40:aa:ec:6e:72:6b:d2:bc:4a:d7:8f:e9:b5:1c:29: 67:e6:15:b1:39:79:07:e6:d4:37:87:6b:4d:4a:d5: 46:60:0a:9c:0d:16:04:48:76:85:8e:1f:35:73:fd: bd:db:b4:97:e9:00:65:77:2e:a4:b3:02:95:6f:2c: c3:1c:cf:6a:bf:7a:93:e7:18:c5:39:fc:51:57:09: 16:22:d2:33:71:be:34:7a:26:0b:74:1e:f8:8d:8d: 6a:67:d1:55:3a:ef:f1:0e:fe:1e:68:19:50:48:f5: 69:90:98:71:ff:86:12:be:76:b3:6e:35:45:8e:7b: 49:1f:fa:ec:5e:5e:33:9b:9f:e8:3f:f1:f0:46:3f: d0:6e:77:62:52:21:de:f0:94:70:39:28:5c:17:2a: 9c:d7:f9:96:21:c5:d4:ab:15:eb:fd:60:7b:04:7e: 91:62:0c:b8:69:ab:30:17:5a:73:66:4f:6e:de:d1: 01:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.128.248.0/24 204.197.168.0/22 IPv6: 2602:fc05::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400226 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3e:c0:35:ae:ff:a8:6c:1b:d3:4d:57:ed:f1:2a:d7:be:41: af:38:09:76:e1:50:a3:90:6a:76:cd:36:df:f9:7c:f6:0c:c6: 13:b7:f2:db:80:ef:b9:19:cf:d5:d5:e8:e5:12:98:b2:09:7b: f8:e8:08:09:bc:60:a9:53:54:98:08:71:5d:06:a7:48:6e:96: e5:82:d8:2e:66:3f:c5:2e:26:d6:a4:c5:ee:4e:df:46:6d:0e: 60:35:a7:15:6b:c0:a2:38:a3:7d:37:ea:84:b4:77:ba:03:2e: 9c:7e:49:fb:1f:7b:7e:f9:f3:5d:61:b8:a0:6e:14:1f:6a:ac: 55:3f:2e:1c:76:a4:78:76:71:9b:47:bf:10:34:cf:58:cd:00: ed:a0:d6:4f:da:6c:43:f2:ec:61:d7:53:0f:4c:a1:79:32:0a: 83:65:4e:c1:be:2e:36:ea:a2:b4:cc:b0:e9:ae:78:1f:c7:13: 16:52:46:bc:15:80:e1:cb:71:c9:96:9c:79:95:cd:7b:d0:96: 0b:28:2b:09:5a:fd:da:08:0c:dd:4e:65:3c:97:7e:99:d4:81: f7:32:77:99:96:36:16:0c:35:76:1c:9b:20:92:75:cb:d4:3d: 97:0a:9e:8d:15:ed:76:83:f4:e3:8b:e3:98:4e:50:5e:75:4f: e9:e7:ea:8c -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE7r5SaQ0Nt/2NW+MzQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgyMjEyNDUxMVoXDTI4MTEyNDEzNDUxMVowLzEtMCsGA1UEAxMk NTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2MxZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+vcEkBRkWn7/ri1HYVbumz36hEcxOdVx3or YLT/mYh3tzqlgQrg5hybF3O1UEDakd8BvXHJOvtwYxokxojLfaYf3M/sjHdrXsFA quxucmvSvErXj+m1HCln5hWxOXkH5tQ3h2tNStVGYAqcDRYESHaFjh81c/2927SX 6QBldy6kswKVbyzDHM9qv3qT5xjFOfxRVwkWItIzcb40eiYLdB74jY1qZ9FVOu/x Dv4eaBlQSPVpkJhx/4YSvnazbjVFjntJH/rsXl4zm5/oP/HwRj/QbndiUiHe8JRw OShcFyqc1/mWIcXUqxXr/WB7BH6RYgy4aaswF1pzZk9u3tEBiQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFF9KYq8ux4Qq4MXa5raU2IkXT9UaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81 OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzU5MzNhZjcwLWZhZTQtNDRjNi05 ZTQyLTJiOWVkYTNjMWUwZS81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEz YzFlMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgPgDBALMxagwDgQCAAIwCAMGACYC/AUAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYbYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAnPsA1rv+obBvTTVft 8SrXvkGvOAl24VCjkGp2zTbf+Xz2DMYTt/LbgO+5Gc/V1ejlEpiyCXv46AgJvGCp U1SYCHFdBqdIbpblgtguZj/FLibWpMXuTt9GbQ5gNacVa8CiOKN9N+qEtHe6Ay6c fkn7H3t++fNdYbigbhQfaqxVPy4cdqR4dnGbR78QNM9YzQDtoNZP2mxD8uxh11MP TKF5MgqDZU7Bvi426qK0zLDprngfxxMWUka8FYDhy3HJlpx5lc170JYLKCsJWv3a CAzdTmU8l36Z1IH3MneZljYWDDV2HJsgknXL1D2XCp6NFe12g/Tji+OYTlBedU/p 5+qM -----END CERTIFICATE-----Generated at Sun Sep 13 17:30:04 2026 by rpki-client