$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17.cer File: 7e70a287-ad97-4c1e-9564-9ca069f57b17.cer (raw, json) Hash identifier: 6Xz0aVZeuZXn+1BvYkvW30TF5XiPIJNkS37wo1H6Pno= Subject key identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E2D97866512ECBC9DBE0AF500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 15 Jun 2026 08:45:11 +0000 Certificate not after: Sun 17 Sep 2028 08:45:11 +0000 Subordinate resources: AS: 399769 IP: 45.45.158.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 30 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:97:86:65:12:ec:bc:9d:be:0a:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 15 08:45:11 2026 GMT Not After : Sep 17 08:45:11 2028 GMT Subject: CN=7e70a287-ad97-4c1e-9564-9ca069f57b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dc:be:de:dd:c0:4a:91:df:10:96:21:f1:c9: b5:bb:f6:71:56:3b:dc:64:6c:64:49:c2:aa:cf:4d: 91:39:16:e8:e6:57:63:10:17:a6:ad:a6:91:ff:44: b9:92:b7:3f:8f:f7:78:1a:ce:61:be:ea:4f:d6:41: 55:99:39:d4:4e:83:7d:04:e2:6e:ff:51:46:66:b5: 8a:b4:35:dd:8d:8c:22:c0:0d:6c:43:0a:70:4d:b8: b3:be:f0:71:7a:8b:e9:65:28:0c:b5:3b:96:f7:f9: b4:e3:20:34:c0:1e:40:23:e6:71:11:9c:5c:0f:5a: 4d:a5:b1:b6:5e:d7:f9:e2:b8:b7:6a:48:02:e5:e8: 1b:47:0f:f2:14:fa:43:66:d1:95:7f:06:ae:f0:3c: 2b:5d:c0:37:6b:33:b9:c8:40:64:61:95:da:a0:99: c3:86:b9:8a:ba:a9:eb:5a:e3:38:73:36:e6:39:1f: 49:62:1a:b9:a1:0c:a4:59:d7:7d:df:1f:ba:fa:55: 8a:8f:aa:8e:5c:b8:c8:6b:1a:72:2a:b4:c9:a0:9e: c6:24:96:eb:25:3e:a1:dd:ef:f2:4f:15:1d:38:54: 89:f7:47:cb:c0:c5:e7:42:e7:28:f4:ef:4c:04:e6: 22:ff:6f:1c:7b:eb:55:d6:2b:e9:a3:ec:8a:b7:40: e8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:18:AB:BD:5B:F4:2E:18:F7:06:3D:1F:45:3F:35:13:54:9A:F9:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e70a287-ad97-4c1e-9564-9ca069f57b17/7e70a287-ad97-4c1e-9564-9ca069f57b17.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 45.45.158.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399769 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:eb:3f:0c:dc:45:27:b0:09:66:c2:53:f2:4f:98:a0:6b:15: 80:08:21:e3:98:04:7e:d6:aa:dc:b1:22:f9:dd:4b:c5:36:1e: f0:2e:29:cf:b9:50:a1:20:80:d6:ab:cb:1a:fb:0b:e1:c8:23: fd:6a:85:1f:67:b5:86:70:b5:1a:93:51:5b:28:6f:62:0e:27: a6:ac:2f:1c:f2:f1:36:9f:ea:c7:4e:21:80:19:72:2e:25:9c: 2b:23:88:df:e8:ac:71:3b:23:0f:4c:d3:99:fe:35:17:ca:dc: c3:37:f9:78:21:51:f1:87:71:30:49:a0:77:76:4b:1c:39:6a: 94:ec:bb:7e:ea:b7:06:5d:2c:b6:0f:28:e2:30:66:20:ac:6b: 98:6f:f7:cd:2f:47:58:52:3c:65:20:11:fa:6b:a5:63:f5:74: 5d:7d:c6:ed:9f:d6:3d:57:ab:9d:08:09:f4:05:a5:f6:c2:1b: 7a:c9:81:c4:e9:29:4e:78:7c:90:16:87:26:5d:c7:cb:15:1b: b0:3a:49:e7:6b:d8:13:22:f6:ac:91:c1:b7:15:4e:cf:0a:cb: f6:2b:4e:b2:d8:57:5a:cb:24:91:5f:03:59:8a:27:d9:f9:e6: 8a:5e:c3:72:34:b4:89:d3:11:2e:15:b6:c2:65:90:65:09:6c: 0b:74:f1:f4 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE4tl4ZlEuy8nb4K9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYxNTA4NDUxMVoXDTI4MDkxNzA4NDUxMVowLzEtMCsGA1UEAxMk N2U3MGEyODctYWQ5Ny00YzFlLTk1NjQtOWNhMDY5ZjU3YjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9y+3t3ASpHfEJYh8cm1u/ZxVjvcZGxkScKq z02RORbo5ldjEBemraaR/0S5krc/j/d4Gs5hvupP1kFVmTnUToN9BOJu/1FGZrWK tDXdjYwiwA1sQwpwTbizvvBxeovpZSgMtTuW9/m04yA0wB5AI+ZxEZxcD1pNpbG2 Xtf54ri3akgC5egbRw/yFPpDZtGVfwau8DwrXcA3azO5yEBkYZXaoJnDhrmKuqnr WuM4czbmOR9JYhq5oQykWdd93x+6+lWKj6qOXLjIaxpyKrTJoJ7GJJbrJT6h3e/y TxUdOFSJ90fLwMXnQuco9O9MBOYi/28ce+tV1ivpo+yKt0DoTwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCEYq71b9C4Y9wY9H0U/NRNUmvlgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83 ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlmNTdiMTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzdlNzBhMjg3LWFkOTctNGMxZS05 NTY0LTljYTA2OWY1N2IxNy83ZTcwYTI4Ny1hZDk3LTRjMWUtOTU2NC05Y2EwNjlm NTdiMTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAEtLZ4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhmZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACvrPwzcRSewCWbCU/JPmKBrFYAIIeOYBH7WqtyxIvndS8U2 HvAuKc+5UKEggNaryxr7C+HII/1qhR9ntYZwtRqTUVsob2IOJ6asLxzy8Taf6sdO IYAZci4lnCsjiN/orHE7Iw9M05n+NRfK3MM3+XghUfGHcTBJoHd2Sxw5apTsu37q twZdLLYPKOIwZiCsa5hv980vR1hSPGUgEfprpWP1dF19xu2f1j1Xq50ICfQFpfbC G3rJgcTpKU54fJAWhyZdx8sVG7A6Sedr2BMi9qyRwbcVTs8Ky/YrTrLYV1rLJJFf A1mKJ9n55opew3I0tInTES4VtsJlkGUJbAt08fQ= -----END CERTIFICATE-----Generated at Sun Jun 28 15:24:00 2026 by rpki-client