$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e715c83-e01d-4f69-8a13-36bb2163f95a.cer File: 8e715c83-e01d-4f69-8a13-36bb2163f95a.cer (raw, json) Hash identifier: oUxJ5i9dhWaFjZQ2OB9yer3Mq2+8T0gOHW7YOLHa5Z8= Subject key identifier: 84:50:E8:0E:25:81:3E:A1:05:B3:2F:D1:C4:DC:E0:70:F5:C6:4F:22 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584ED58FAE7FC4F9DE30BC90B400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e715c83-e01d-4f69-8a13-36bb2163f95a/8e715c83-e01d-4f69-8a13-36bb2163f95a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e715c83-e01d-4f69-8a13-36bb2163f95a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 14 Aug 2026 12:45:11 +0000 Certificate not after: Thu 16 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 27220 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d5:8f:ae:7f:c4:f9:de:30:bc:90:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 14 12:45:11 2026 GMT Not After : Nov 16 13:45:11 2028 GMT Subject: CN=8e715c83-e01d-4f69-8a13-36bb2163f95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:a9:86:e5:9a:51:fb:57:6c:b9:8c:a9:05: 6b:25:a0:b8:8d:0f:99:ef:e2:ee:13:d4:31:55:96: cd:e1:65:79:4e:f9:bc:03:ba:8b:eb:e6:70:4b:25: 46:81:8f:26:7d:ac:89:97:1c:86:d7:c4:b0:65:09: e8:18:db:1c:0b:fe:d3:91:f2:73:35:97:1b:c3:18: 1c:61:ca:59:81:44:51:0f:fb:41:55:15:5e:d6:10: 06:6a:17:b4:4a:8d:14:db:a5:66:05:f2:f9:f7:5e: fc:5f:65:76:a7:82:dd:e5:01:95:29:2f:36:0a:70: 1b:28:0c:d5:23:2f:61:6c:47:4f:0e:f4:0a:cd:56: 98:0c:51:ac:10:5e:19:79:60:41:60:2c:3d:96:91: 28:b2:e6:68:63:ef:9a:7f:02:6d:aa:11:46:d3:6f: 5b:a9:aa:33:68:b7:10:74:82:fd:26:54:cf:cf:ca: b8:39:c7:74:e2:00:6b:3f:cf:26:bb:07:c4:69:83: 9a:c9:6b:ef:46:b0:d0:13:ea:c7:67:09:ec:04:50: b3:4f:08:32:75:1c:93:b8:bd:3f:57:9e:65:34:3b: fe:93:10:15:05:4c:44:65:3c:1c:63:a3:85:ad:ff: 48:12:24:b9:6c:f9:83:f9:0c:17:30:7f:af:7f:e8: 14:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:50:E8:0E:25:81:3E:A1:05:B3:2F:D1:C4:DC:E0:70:F5:C6:4F:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e715c83-e01d-4f69-8a13-36bb2163f95a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8e715c83-e01d-4f69-8a13-36bb2163f95a/8e715c83-e01d-4f69-8a13-36bb2163f95a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 27220 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:dc:7b:c8:76:52:1d:1f:9a:16:b3:0a:e3:a0:af:fd:a2:18: cf:97:fd:59:45:7c:4a:35:f1:9d:49:09:a1:1a:97:02:e4:31: 13:17:64:20:c8:3c:9c:fa:b3:04:d9:de:a1:5d:f0:9c:ba:1e: f5:60:38:f5:0e:1e:c3:7c:9f:7a:40:87:86:59:2a:72:8f:58: 8f:8e:c8:bf:93:5d:f5:c2:71:c7:bd:51:2f:f2:06:81:19:e6: 35:1d:cd:28:79:2f:b0:c7:cd:4d:35:e3:b9:7b:7c:44:4f:50: 80:c2:d9:22:9a:2b:6f:e8:10:c8:74:78:c8:77:57:c0:03:0a: 88:9b:2f:61:f2:aa:64:32:28:12:a1:1b:58:49:db:55:3b:d5: 27:37:e1:55:d4:82:26:44:c1:9f:5c:4f:f0:da:c8:97:eb:8b: 1b:c2:10:0c:35:8c:b4:9a:21:de:7b:bc:57:a2:78:42:14:fe: fd:6e:e0:96:91:75:c2:98:e4:0d:89:f9:5a:be:65:ae:4c:03: 20:48:28:73:54:8e:e7:3c:a0:53:43:c5:5e:0a:83:6e:54:86: a5:26:fe:b1:69:fb:8f:d5:ae:f1:39:7b:59:d8:6e:1d:74:2a: bc:ca:ce:fb:eb:c4:11:c7:2c:d3:d4:73:16:43:de:bd:ea:e8: 45:f6:b3:aa -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE7Vj65/xPneMLyQtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgxNDEyNDUxMVoXDTI4MTExNjEzNDUxMVowLzEtMCsGA1UEAxMk OGU3MTVjODMtZTAxZC00ZjY5LThhMTMtMzZiYjIxNjNmOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykWphuWaUftXbLmMqQVrJaC4jQ+Z7+LuE9Qx VZbN4WV5Tvm8A7qL6+ZwSyVGgY8mfayJlxyG18SwZQnoGNscC/7TkfJzNZcbwxgc YcpZgURRD/tBVRVe1hAGahe0So0U26VmBfL59178X2V2p4Ld5QGVKS82CnAbKAzV Iy9hbEdPDvQKzVaYDFGsEF4ZeWBBYCw9lpEosuZoY++afwJtqhFG029bqaozaLcQ dIL9JlTPz8q4Ocd04gBrP88muwfEaYOayWvvRrDQE+rHZwnsBFCzTwgydRyTuL0/ V55lNDv+kxAVBUxEZTwcY6OFrf9IEiS5bPmD+QwXMH+vf+gUOQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFIRQ6A4lgT6hBbMv0cTc4HD1xk8iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84 ZTcxNWM4My1lMDFkLTRmNjktOGExMy0zNmJiMjE2M2Y5NWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzhlNzE1YzgzLWUwMWQtNGY2OS04 YTEzLTM2YmIyMTYzZjk1YS84ZTcxNWM4My1lMDFkLTRmNjktOGExMy0zNmJiMjE2 M2Y5NWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICalQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOdx7yHZSHR+aFrMK46Cv/aIYz5f9 WUV8SjXxnUkJoRqXAuQxExdkIMg8nPqzBNneoV3wnLoe9WA49Q4ew3yfekCHhlkq co9Yj47Iv5Nd9cJxx71RL/IGgRnmNR3NKHkvsMfNTTXjuXt8RE9QgMLZIporb+gQ yHR4yHdXwAMKiJsvYfKqZDIoEqEbWEnbVTvVJzfhVdSCJkTBn1xP8NrIl+uLG8IQ DDWMtJoh3nu8V6J4QhT+/W7glpF1wpjkDYn5Wr5lrkwDIEgoc1SO5zygU0PFXgqD blSGpSb+sWn7j9Wu8Tl7WdhuHXQqvMrO++vEEccs09RzFkPeveroRfazqg== -----END CERTIFICATE-----Generated at Wed Aug 26 02:16:55 2026 by rpki-client