$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer File: 7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer (raw, json) Hash identifier: QIdDVUn00xLnXsNRjaEfCjedTw66Ko3zm4QIA6jENtQ= Subject key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EB40F78C01AA6F9509924EE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 02 Aug 2026 12:45:11 +0000 Certificate not after: Sat 04 Nov 2028 12:45:11 +0000 Subordinate resources: AS: 22941 IP: 168.245.140.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:0f:78:c0:1a:a6:f9:50:99:24:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 2 12:45:11 2026 GMT Not After : Nov 4 12:45:11 2028 GMT Subject: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:75:85:2f:11:62:1f:b9:4a:5a:e6:43:b3:f7: 22:0e:cd:1d:8b:df:e0:3e:85:f8:3c:7c:ff:bc:9a: 23:a9:bf:8a:b2:22:d3:53:a0:a1:b2:7f:c2:80:6a: 52:36:dd:b6:88:91:58:31:3b:93:ea:e9:81:1c:10: 0a:d0:ab:20:94:ba:63:34:a6:5a:f0:0b:29:cc:75: fb:69:88:46:8a:37:a4:22:7c:99:8c:8d:51:4d:bb: 1b:f4:61:4f:c6:d3:84:9b:65:ff:e9:d6:cc:e8:e0: 78:58:73:b1:98:aa:52:36:ad:a3:b9:6e:94:b3:f1: d4:96:b1:37:a7:59:ca:8b:40:a1:80:ed:3e:2d:8d: fe:a6:8f:4d:3c:1b:bb:18:ac:7e:9e:bc:52:d0:17: 4c:09:e4:bc:c3:03:8e:a2:e2:62:b6:4a:89:73:de: 78:5a:b2:e8:d8:d9:3c:b1:f1:32:ba:2a:61:61:ff: 52:bc:c7:b8:f5:2c:42:6f:14:0a:c4:42:fc:29:b4: 45:1d:a9:49:95:ee:b5:10:4c:1e:30:b9:ca:9a:02: 0e:de:4c:63:b7:f4:62:99:c2:7c:67:5c:f5:89:de: 81:a9:7e:31:44:b9:80:1d:76:cf:ef:f9:44:a1:42: 1b:17:b2:3b:6f:a3:d5:94:2f:b8:be:a6:7e:99:97: fc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 168.245.140.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22941 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:de:02:c5:15:a8:ed:ec:49:22:44:56:76:bd:c5:bb:4e:e5: b6:0f:1e:40:b1:9a:b5:56:8e:01:db:80:b4:12:7a:33:d2:17: e7:d1:ac:03:58:15:f1:e4:48:f7:2d:db:90:3d:ea:b3:9c:e4: 9a:07:04:0f:77:3f:d2:5c:5e:8f:43:b4:2a:be:7c:78:79:19: 4a:ab:a9:6c:96:2f:a4:3f:1f:c9:13:c8:7d:2a:4c:5b:a2:b8: 0a:30:f9:c6:81:47:31:17:10:c3:17:39:ba:a0:3d:f3:1e:09: fc:0e:fc:60:1d:5a:30:07:e9:8a:54:3b:71:2e:29:14:22:41: 1f:5b:21:cc:89:5d:e3:d6:a6:6b:1a:8d:3b:32:73:8c:c7:b1: db:78:db:8d:31:98:05:66:93:6b:50:4d:43:b8:ed:b6:08:b9: 3b:56:5c:86:e9:23:73:f3:0a:07:c0:ed:f1:7d:84:4d:43:0d: 18:f6:22:ee:26:79:a0:0d:61:d6:d5:51:06:aa:f0:0d:2f:98: 7a:4d:23:e1:14:f5:a5:48:2f:76:5d:fe:0a:16:5b:92:0e:2f: 81:0a:93:6a:26:8c:d4:34:41:f0:be:8b:ab:f1:de:57:33:b0: 16:8b:a3:b6:4e:c9:22:40:d8:f6:8b:62:40:b7:29:f4:c7:48: 81:0e:0e:da -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE60D3jAGqb5UJkk7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgwMjEyNDUxMVoXDTI4MTEwNDEyNDUxMVowLzEtMCsGA1UEAxMk N2UwMTRjZGQtNGE3Ni00ZWVmLTg2ZjctNmI2YTgzNmUxZGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3WFLxFiH7lKWuZDs/ciDs0di9/gPoX4PHz/ vJojqb+KsiLTU6Chsn/CgGpSNt22iJFYMTuT6umBHBAK0KsglLpjNKZa8AspzHX7 aYhGijekInyZjI1RTbsb9GFPxtOEm2X/6dbM6OB4WHOxmKpSNq2juW6Us/HUlrE3 p1nKi0ChgO0+LY3+po9NPBu7GKx+nrxS0BdMCeS8wwOOouJitkqJc954WrLo2Nk8 sfEyuiphYf9SvMe49SxCbxQKxEL8KbRFHalJle61EEweMLnKmgIO3kxjt/RimcJ8 Z1z1id6BqX4xRLmAHXbP7/lEoUIbF7I7b6PVlC+4vqZ+mZf8rQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFPgYH8nIIC14WdSw70xLpY3H3JPpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2ZTFkYmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlMDE0Y2RkLTRhNzYtNGVlZi04 NmY3LTZiNmE4MzZlMWRiZi83ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2 ZTFkYmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACo9YwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WZ0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJd4CxRWo7exJIkRWdr3Fu07ltg8eQLGatVaOAduAtBJ6M9IX 59GsA1gV8eRI9y3bkD3qs5zkmgcED3c/0lxej0O0Kr58eHkZSqupbJYvpD8fyRPI fSpMW6K4CjD5xoFHMRcQwxc5uqA98x4J/A78YB1aMAfpilQ7cS4pFCJBH1shzIld 49amaxqNOzJzjMex23jbjTGYBWaTa1BNQ7jttgi5O1Zchukjc/MKB8Dt8X2ETUMN GPYi7iZ5oA1h1tVRBqrwDS+Yek0j4RT1pUgvdl3+ChZbkg4vgQqTaiaM1DRB8L6L q/HeVzOwFoujtk7JIkDY9otiQLcp9MdIgQ4O2g== -----END CERTIFICATE-----Generated at Tue Aug 25 16:59:35 2026 by rpki-client