$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960.cer File: 9ac09e11-24a9-4451-9633-b772a7a11960.cer (raw, json) Hash identifier: OSKRA+GZQCmGjDBywL1S0eU7RCkcH5xyBr5O2ALRryY= Subject key identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584EA97E22620D87EA7FAD31E300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Jul 2026 17:54:16 +0000 Certificate not after: Tue 24 Oct 2028 08:45:11 +0000 Subordinate resources: AS: 194 AS: 14041 IP: 2620:117:2000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a9:7e:22:62:0d:87:ea:7f:ad:31:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 29 17:54:16 2026 GMT Not After : Oct 24 08:45:11 2028 GMT Subject: CN=9ac09e11-24a9-4451-9633-b772a7a11960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:e3:f4:bd:9b:9b:5e:7b:ea:c9:6a:ad:bb: 38:e7:d7:b5:4c:90:c5:03:34:57:de:c0:22:29:73: 59:fc:a0:fb:5e:15:85:19:46:2c:81:3d:3f:42:f7: 57:fc:a3:b5:aa:ed:36:cf:df:2c:12:1c:c1:b1:0b: 94:8c:9b:63:a7:e3:1b:0e:3e:de:e7:3b:1b:a9:4a: f5:e2:e1:e5:8d:08:e3:6b:31:55:ca:ad:48:d6:34: 9c:cd:fb:20:41:a3:9e:c4:ef:ab:a7:5c:7d:d6:9d: 3b:7d:d7:ba:6e:ec:a2:d0:fc:60:5f:5f:8d:ba:c2: 04:23:7f:97:96:97:3f:3a:43:62:1d:b9:00:3e:e6: 5e:2d:2f:7a:3a:14:9f:d6:57:70:26:72:84:43:3a: a6:54:22:88:e0:75:39:09:47:86:65:5d:19:9c:a8: 1b:c9:fd:a5:1a:6d:83:d8:38:cb:e3:6c:e8:f3:1a: f1:d1:60:63:d8:5a:35:e8:24:47:7d:3c:df:9a:fc: 80:d7:b2:dd:4d:ec:bd:39:6c:66:2c:97:e2:7b:1a: 61:6b:ca:68:7c:ca:b1:a4:2a:7b:c6:01:43:0f:fa: 3a:59:68:5e:97:5b:b0:b0:f0:c7:47:0c:cc:f8:e9: 56:24:df:0d:9a:fc:24:42:e1:52:b3:f4:48:00:3c: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3B:8B:C5:A7:B6:F6:F2:F3:42:D2:AA:1E:43:9E:99:3F:5B:84:E6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9ac09e11-24a9-4451-9633-b772a7a11960/9ac09e11-24a9-4451-9633-b772a7a11960.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2620:117:2000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 194 14041 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:dc:50:85:e0:a5:7e:2f:ed:8e:e1:04:72:bc:46:62:0c:de: 10:f7:10:79:66:70:ab:b9:4c:20:9c:b9:91:7d:3b:7a:c5:4c: 5d:0e:0f:83:c9:51:d5:69:19:54:e3:07:cd:fb:49:ec:96:1a: 38:f3:9a:0d:95:ed:26:b6:6a:4a:bb:ad:bb:63:d3:69:1f:84: c6:4c:47:60:c8:24:49:c0:c3:a1:da:5b:2d:87:eb:3e:0f:b3: 2e:e0:0f:ab:62:92:83:1b:c3:65:17:33:b6:3f:bb:3b:67:19: ca:1f:82:85:45:5f:c5:69:4a:eb:8a:a3:0f:9b:c4:6c:a5:63: 07:dd:1a:d1:85:98:24:e9:8c:f9:9e:10:9a:f7:1b:3f:c7:82: f8:b4:ad:c5:37:b8:d3:97:d4:3a:a4:e8:62:75:c3:24:97:d6: 0f:7e:d6:1f:6d:e2:65:bc:21:7a:27:e5:d4:8a:f9:3d:04:3f: c3:b4:5b:d2:d0:27:ee:6a:ea:7e:f4:f4:16:4b:6b:85:bf:1c: 79:f2:e3:24:35:5c:ad:ad:6a:62:22:3d:38:82:86:0e:06:2f: c9:d4:58:be:6e:57:d5:87:46:2f:d8:07:c5:df:d2:57:8a:c3: 5b:5b:52:4f:ee:88:7a:ad:bd:02:8e:6f:bd:a9:fe:e7:8b:55: 52:0b:bd:63 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWE6pfiJiDYfqf60x4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcyOTE3NTQxNloXDTI4MTAyNDA4NDUxMVowLzEtMCsGA1UEAxMk OWFjMDllMTEtMjRhOS00NDUxLTk2MzMtYjc3MmE3YTExOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gbj9L2bm1576slqrbs459e1TJDFAzRX3sAi KXNZ/KD7XhWFGUYsgT0/QvdX/KO1qu02z98sEhzBsQuUjJtjp+MbDj7e5zsbqUr1 4uHljQjjazFVyq1I1jSczfsgQaOexO+rp1x91p07fde6buyi0PxgX1+NusIEI3+X lpc/OkNiHbkAPuZeLS96OhSf1ldwJnKEQzqmVCKI4HU5CUeGZV0ZnKgbyf2lGm2D 2DjL42zo8xrx0WBj2Fo16CRHfTzfmvyA17LdTey9OWxmLJfiexpha8pofMqxpCp7 xgFDD/o6WWhel1uwsPDHRwzM+OlWJN8NmvwkQuFSs/RIADwnHwIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFDc7i8Wntvby80LSqh5Dnpk/W4TmMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdhMTE5NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzlhYzA5ZTExLTI0YTktNDQ1MS05 NjMzLWI3NzJhN2ExMTk2MC85YWMwOWUxMS0yNGE5LTQ0NTEtOTYzMy1iNzcyYTdh MTE5NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIQYIKwYBBQUH AQcBAf8EEjAQMA4EAgACMAgDBgAmIAEXIDAdBggrBgEFBQcBCAEB/wQOMAygCjAI AgIAwgICNtkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAW9xQheClfi/tjuEEcrxGYgzeEPcQeWZwq7lMIJy5 kX07esVMXQ4Pg8lR1WkZVOMHzftJ7JYaOPOaDZXtJrZqSrutu2PTaR+ExkxHYMgk ScDDodpbLYfrPg+zLuAPq2KSgxvDZRcztj+7O2cZyh+ChUVfxWlK64qjD5vEbKVj B90a0YWYJOmM+Z4QmvcbP8eC+LStxTe405fUOqToYnXDJJfWD37WH23iZbwheifl 1Ir5PQQ/w7Rb0tAn7mrqfvT0Fktrhb8cefLjJDVcra1qYiI9OIKGDgYvydRYvm5X 1YdGL9gHxd/SV4rDW1tST+6Ieq29Ao5vvan+54tVUgu9Yw== -----END CERTIFICATE-----Generated at Mon Aug 10 07:44:27 2026 by rpki-client