$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer File: 8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.cer (raw, json) Hash identifier: fpt9bnc8eVQiwh/FXTTiik0fOScNgoLfs6A5mcjK1b8= Subject key identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F58C5D5DE6D2D234743FAA940 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 30 Sep 2026 12:45:12 +0000 Certificate not after: Tue 02 Jan 2029 13:45:12 +0000 Subordinate resources: AS: 21505 AS: 400264 IP: 74.117.40.0/21 IP: 206.109.128.0/19 IP: 209.172.5.0/24 IP: 209.188.98.0/24 IP: 2602:f53c::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:c5:d5:de:6d:2d:23:47:43:fa:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 30 12:45:12 2026 GMT Not After : Jan 2 13:45:12 2029 GMT Subject: CN=8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0c:7f:1c:bf:36:26:53:75:d6:7e:91:c2:dd: b9:2e:be:af:fd:4b:50:d5:37:5c:3e:26:b4:53:fc: 45:07:e1:9d:49:9f:57:80:84:12:32:e6:92:6e:c3: d9:30:50:9c:c8:b6:98:19:7f:f8:d8:04:f4:81:01: 5d:45:73:bd:98:73:09:11:37:c3:fc:46:a7:b5:87: 40:80:b5:a5:52:78:20:0d:8b:4e:c1:53:81:31:3e: 11:39:a3:72:3c:df:23:aa:1a:3d:cd:66:01:2a:13: 32:0c:eb:60:92:10:0e:57:65:41:1a:d0:52:aa:5b: 9a:a6:19:7d:e5:11:93:cf:03:46:67:be:85:da:8b: a7:88:47:69:47:2e:06:d3:ec:58:8c:22:75:63:f4: d8:4e:a8:36:e9:53:d5:72:02:0e:cb:ff:cb:e9:48: 12:14:ac:df:4c:c8:6b:11:1a:94:4e:94:5d:f2:18: 08:d3:68:f2:81:9f:97:9a:06:ee:13:b4:0e:59:c0: e5:a4:f1:b0:a2:d3:57:23:2d:25:c7:b2:ad:cc:16: f2:e1:1f:5c:4b:47:43:94:77:9e:40:1b:b6:0c:65: b1:5a:60:cd:68:d4:81:e9:38:e1:e6:f9:c7:03:06: ca:5c:a2:1a:18:57:be:04:6e:6c:0c:30:be:21:4a: 9e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:27:C8:6E:2F:06:AC:4E:AE:62:5D:34:43:F4:B8:F5:E6:0A:6C:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c/8e5ac5bd-26c8-4eca-9f15-fd23276c0d4c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 74.117.40.0/21 206.109.128.0/19 209.172.5.0/24 209.188.98.0/24 IPv6: 2602:f53c::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21505 400264 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:5e:25:dd:cd:f9:e9:97:7d:f7:61:bd:17:f5:06:5a:b3:11: 7c:8b:97:1e:ed:06:6a:ce:67:e3:14:bb:07:11:ae:6e:2c:0e: a6:d3:7e:42:e5:ae:61:28:51:ce:d0:ea:a0:9e:ca:6d:9c:ce: 7c:5e:9a:c0:53:b6:93:4f:a1:d3:07:1a:a5:ff:1d:57:39:12: d2:8d:fd:0f:dc:dd:8a:c1:c3:14:1f:4e:72:b4:ed:27:66:36: 09:34:cb:22:70:0e:98:78:56:e6:72:89:ce:8c:0a:1b:f3:ad: ed:b8:2f:77:03:cf:2e:53:0c:3f:ca:e0:e0:e8:f3:a9:a4:b8: ab:45:c8:e6:d1:22:57:50:79:52:56:33:8e:e1:65:a0:b4:78: 60:13:f9:e3:4c:d6:c5:b0:fd:3b:7a:ee:eb:b5:5a:c5:06:b8: 57:a6:49:00:b4:31:16:4f:ee:8c:5e:e4:ec:6c:3c:cd:d8:62: 02:8c:22:b1:9d:4f:8b:d3:7b:8b:0a:a5:3a:98:de:26:6b:62: 64:75:c6:72:ac:23:12:36:1b:5a:be:8b:ab:16:00:a7:a5:2e: 4f:c4:dd:e5:e1:92:3b:b2:10:96:1a:a1:8c:f0:01:85:21:7a: b0:25:bc:af:f1:56:ea:df:48:e2:ec:77:4d:59:79:96:09:e1: 3d:12:ee:e5 -----BEGIN CERTIFICATE----- MIIHLzCCBhegAwIBAgIUAQ0Mn0MoWE9YxdXebS0jR0P6qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkzMDEyNDUxMloXDTI5MDEwMjEzNDUxMlowLzEtMCsGA1UEAxMk OGU1YWM1YmQtMjZjOC00ZWNhLTlmMTUtZmQyMzI3NmMwZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAx/HL82JlN11n6Rwt25Lr6v/UtQ1TdcPia0 U/xFB+GdSZ9XgIQSMuaSbsPZMFCcyLaYGX/42AT0gQFdRXO9mHMJETfD/EantYdA gLWlUnggDYtOwVOBMT4ROaNyPN8jqho9zWYBKhMyDOtgkhAOV2VBGtBSqluaphl9 5RGTzwNGZ76F2ouniEdpRy4G0+xYjCJ1Y/TYTqg26VPVcgIOy//L6UgSFKzfTMhr ERqUTpRd8hgI02jygZ+XmgbuE7QOWcDlpPGwotNXIy0lx7KtzBby4R9cS0dDlHee QBu2DGWxWmDNaNSB6Tjh5vnHAwbKXKIaGFe+BG5sDDC+IUqelwIDAQABo4IEQTCC BD0wHQYDVR0OBBYEFLMnyG4vBqxOrmJdNEP0uPXmCmybMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2YzBkNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhlNWFjNWJkLTI2YzgtNGVjYS05 ZjE1LWZkMjMyNzZjMGQ0Yy84ZTVhYzViZC0yNmM4LTRlY2EtOWYxNS1mZDIzMjc2 YzBkNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwQQYIKwYBBQUH AQcBAf8EMjAwMB4EAgABMBgDBANKdSgDBAXObYADBADRrAUDBADRvGIwDgQCAAIw CAMGBCYC9TwAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAlQBAgMGG4gwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAHF4l3c356Zd992G9F/UGWrMRfIuXHu0Gas5n4xS7BxGubiwOptN+QuWuYShR ztDqoJ7KbZzOfF6awFO2k0+h0wcapf8dVzkS0o39D9zdisHDFB9OcrTtJ2Y2CTTL InAOmHhW5nKJzowKG/Ot7bgvdwPPLlMMP8rg4OjzqaS4q0XI5tEiV1B5UlYzjuFl oLR4YBP540zWxbD9O3ru67VaxQa4V6ZJALQxFk/ujF7k7Gw8zdhiAowisZ1Pi9N7 iwqlOpjeJmtiZHXGcqwjEjYbWr6LqxYAp6UuT8Td5eGSO7IQlhqhjPABhSF6sCW8 r/FW6t9I4ux3TVl5lgnhPRLu5Q== -----END CERTIFICATE-----Generated at Sun Oct 11 06:12:56 2026 by rpki-client