$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer File: 8020a399-7e83-4bb5-8d8d-e424e2edac2b.cer (raw, json) Hash identifier: 03BI7zutZMTjmNQwRD0YtSXmhEzGVAMXNoTU1nm+FIM= Subject key identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F6820998F01E1300BE39BD63E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 06 Oct 2026 00:45:12 +0000 Certificate not after: Mon 08 Jan 2029 01:45:12 +0000 Subordinate resources: AS: 27022 IP: 66.81.136.0/21 IP: 158.62.192.0/22 IP: 162.221.178.0/23 IP: 174.34.236.0/22 IP: 216.122.108.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:20:99:8f:01:e1:30:0b:e3:9b:d6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 6 00:45:12 2026 GMT Not After : Jan 8 01:45:12 2029 GMT Subject: CN=8020a399-7e83-4bb5-8d8d-e424e2edac2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:42:54:3a:94:b0:31:de:5c:bd:ec:be:bb:b7: 87:94:31:a4:4b:52:68:11:be:1e:73:e9:43:e5:00: 16:af:eb:4c:c2:a2:75:c1:9c:fb:09:4f:6e:dd:01: 4b:e2:ad:45:6c:07:92:77:0d:f3:6c:4c:63:aa:17: 50:c7:42:42:24:7b:3c:56:e3:5f:86:8b:a5:51:79: 64:1b:b0:38:a5:c4:a2:02:36:f1:96:23:b9:e6:7f: 0e:1d:dc:0b:d8:1d:b3:ab:36:17:7b:0c:6d:ab:e3: 9d:e7:d0:69:90:70:91:7c:b9:1b:8f:11:2c:b0:33: 1e:27:bc:38:bc:64:8b:ab:0d:2d:a3:31:33:ff:6a: a4:d9:29:85:50:ad:96:e8:31:15:bb:04:d1:60:97: e0:4f:64:51:84:c3:5b:6a:d5:3b:dc:bf:f9:de:12: 08:c6:d8:8a:b4:83:5e:04:d8:b7:09:5d:d9:55:72: 7e:bd:b7:c9:c5:e1:ea:b0:c4:50:7b:2e:9e:63:00: d6:65:c6:3e:36:61:7e:08:46:e5:f9:29:5b:97:ee: 63:8e:00:80:67:83:40:a0:2b:a3:c8:98:32:16:0e: 5b:76:d9:ba:4b:86:66:d0:21:f9:9c:7b:04:8b:a3: 74:24:71:48:44:d5:3b:3a:47:1f:93:f8:dc:c0:89: 5f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1C:53:12:72:CE:30:30:49:2D:50:6B:99:A9:7F:E9:F6:4C:E5:7D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8020a399-7e83-4bb5-8d8d-e424e2edac2b/8020a399-7e83-4bb5-8d8d-e424e2edac2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 66.81.136.0/21 158.62.192.0/22 162.221.178.0/23 174.34.236.0/22 216.122.108.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27022 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:85:dc:3b:81:8b:a3:e8:91:c4:97:ec:8b:7b:7d:01:c2:fa: 75:63:64:5f:1d:00:e9:09:15:bf:22:be:7a:3f:bc:af:15:a2: 57:02:80:2d:13:41:8d:be:50:34:15:fc:2f:68:bc:d8:f7:40: e1:e0:30:b3:49:82:6d:63:1d:bb:2a:bc:81:33:f3:72:7e:a9: 4b:b0:69:cd:29:f6:2d:f1:15:be:0f:88:db:99:bb:e2:30:58: a9:3b:a0:7c:c9:5f:57:f2:b4:93:b2:91:c7:7a:c7:c7:9b:d4: 20:7b:f5:fe:65:62:02:60:53:db:4d:57:9e:1e:41:37:59:1c: 84:10:34:d1:c7:22:fc:74:62:36:87:37:82:73:68:40:fe:7b: 0b:59:68:47:3c:2d:f8:75:03:cf:af:cc:6d:c4:19:12:7b:91: 0f:d8:ab:08:8c:36:4b:80:75:11:5d:cd:9e:3b:75:24:e7:0c: 28:b3:f7:64:45:56:49:d7:b9:a4:39:d7:c2:df:40:48:17:31: 27:9a:27:dc:ab:74:bb:31:01:86:5e:01:94:3e:e5:c3:7c:26: de:04:64:57:e5:cf:9c:a8:9a:5b:02:c3:0c:b1:d6:87:e2:14: f0:ee:04:02:b5:8c:ed:00:96:02:6c:c7:2b:57:01:5b:0c:0e: aa:4e:a2:9e -----BEGIN CERTIFICATE----- MIIHIDCCBgigAwIBAgIUAQ0Mn0MoWE9oIJmPAeEwC+Ob1j4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MTAwNjAwNDUxMloXDTI5MDEwODAxNDUxMlowLzEtMCsGA1UEAxMk ODAyMGEzOTktN2U4My00YmI1LThkOGQtZTQyNGUyZWRhYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kJUOpSwMd5cvey+u7eHlDGkS1JoEb4ec+lD 5QAWr+tMwqJ1wZz7CU9u3QFL4q1FbAeSdw3zbExjqhdQx0JCJHs8VuNfhoulUXlk G7A4pcSiAjbxliO55n8OHdwL2B2zqzYXewxtq+Od59BpkHCRfLkbjxEssDMeJ7w4 vGSLqw0tozEz/2qk2SmFUK2W6DEVuwTRYJfgT2RRhMNbatU73L/53hIIxtiKtINe BNi3CV3ZVXJ+vbfJxeHqsMRQey6eYwDWZcY+NmF+CEbl+Slbl+5jjgCAZ4NAoCuj yJgyFg5bdtm6S4Zm0CH5nHsEi6N0JHFIRNU7Okcfk/jcwIlfwwIDAQABo4IEMjCC BC4wHQYDVR0OBBYEFHgcUxJyzjAwSS1Qa5mpf+n2TOV9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJlZGFjMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzgwMjBhMzk5LTdlODMtNGJiNS04 ZDhkLWU0MjRlMmVkYWMyYi84MDIwYTM5OS03ZTgzLTRiYjUtOGQ4ZC1lNDI0ZTJl ZGFjMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMCQEAgABMB4DBANCUYgDBAKePsADBAGi3bIDBAKuIuwDBALYemww GQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICaY4wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAj4XcO4GLo+iRxJfs i3t9AcL6dWNkXx0A6QkVvyK+ej+8rxWiVwKALRNBjb5QNBX8L2i82PdA4eAws0mC bWMduyq8gTPzcn6pS7BpzSn2LfEVvg+I25m74jBYqTugfMlfV/K0k7KRx3rHx5vU IHv1/mViAmBT201Xnh5BN1kchBA00cci/HRiNoc3gnNoQP57C1loRzwt+HUDz6/M bcQZEnuRD9irCIw2S4B1EV3Nnjt1JOcMKLP3ZEVWSde5pDnXwt9ASBcxJ5on3Kt0 uzEBhl4BlD7lw3wm3gRkV+XPnKiaWwLDDLHWh+IU8O4EArWM7QCWAmzHK1cBWwwO qk6ing== -----END CERTIFICATE-----Generated at Sat Oct 10 22:42:37 2026 by rpki-client