$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer File: 9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer (raw, json) Hash identifier: qsP99BKeJoGr59rIHW9VLgWP+qqdZbYekO+zOs9Pjuc= Subject key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E5AD16F866DD06ABC051E4100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Jul 2026 13:33:15 +0000 Certificate not after: Tue 31 Aug 2027 13:48:15 +0000 Subordinate resources: AS: 16968 AS: 26879 IP: 23.140.172.0/24 IP: 169.128.52.0/22 IP: 2602:f634::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5a:d1:6f:86:6d:d0:6a:bc:05:1e:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jul 1 13:33:15 2026 GMT Not After : Aug 31 13:48:15 2027 GMT Subject: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:c7:67:73:e6:78:4d:ba:0f:7f:61:f5:6a: b9:dd:fb:cd:0b:76:3c:ac:2b:4d:a0:02:b4:23:f9: f0:99:28:1e:26:bf:01:4c:93:26:f4:15:cc:c2:e4: b4:51:f9:57:99:c6:92:4c:c1:74:2d:42:8b:b8:5b: 5e:ac:97:20:0b:4c:ca:52:5b:bf:c0:41:ec:4d:ae: 36:ab:65:8a:b1:dc:b1:27:78:7c:63:65:05:75:ad: 4c:8c:30:5e:0b:17:89:1d:69:b7:4e:ca:78:d6:d3: 95:dd:53:fc:b4:2d:22:a8:64:3d:07:33:90:c9:e2: b3:77:d7:4f:da:90:c1:7e:12:fa:8f:16:cc:d9:83: ad:61:9c:a9:71:38:55:d2:7f:a5:7e:34:52:d6:73: 4e:e8:62:6d:94:35:d3:7a:cf:e4:36:aa:ed:06:7e: da:4f:39:b0:33:39:b0:d4:7b:6e:ed:29:dd:c7:05: e2:8d:d4:04:61:03:5c:f6:8e:5c:d6:67:19:61:c2: 0d:d0:b4:62:e2:40:a4:b4:57:b1:05:b9:69:83:e4: 49:3a:81:e8:23:fd:a5:f4:0d:ff:21:54:4f:27:a5: dc:22:50:cf:db:86:e8:25:42:b2:69:17:2d:63:63: 55:8c:b2:1f:15:59:7a:e6:6a:f8:db:bd:5c:07:d9: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.140.172.0/24 169.128.52.0/22 IPv6: 2602:f634::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16968 26879 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:10:78:94:c6:26:51:17:f8:0f:4e:ff:1d:82:0c:77:13:2d: 0c:17:f8:35:d2:03:1e:8e:88:1e:3a:0f:f1:80:77:97:8a:1d: 73:2a:e5:73:3c:67:7b:63:2e:d3:d6:1f:6a:48:88:0d:75:1b: 8b:a9:1d:0b:5d:f5:da:f8:0c:31:d7:87:2f:33:51:fb:cf:48: 21:a8:84:be:d2:05:01:1a:30:c7:01:0f:e0:35:63:f8:35:70: df:00:07:91:40:dd:d3:e1:95:82:14:a8:98:d9:bb:26:d2:75: 79:a6:6d:3d:83:5a:dc:4a:db:8f:2d:b0:f6:c8:dd:b6:f1:90: 83:18:80:95:c1:e4:cc:0a:60:58:cd:6b:18:df:9e:51:13:2c: 0c:84:af:88:34:98:de:4c:b3:c1:e2:c1:c3:11:fb:5d:01:e3: e6:bc:36:96:ca:41:64:bc:78:cf:d1:5d:0d:a8:05:b5:99:42: 50:11:d8:79:12:4d:82:44:a9:7c:5d:35:7c:7f:a4:67:5e:d2: 9d:a1:e2:eb:1a:71:bd:67:b7:b7:a1:52:60:84:ae:2e:d4:fb: 3b:c8:65:fb:42:6e:4b:1f:b0:b7:a5:2f:9b:ce:ac:b6:36:46: 15:14:1f:f6:d2:77:47:df:11:54:20:51:5e:fa:ba:f0:a2:37: aa:e3:f4:ad -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWE5a0W+GbdBqvAUeQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDcwMTEzMzMxNVoXDTI3MDgzMTEzNDgxNVowLzEtMCsGA1UEAxMk OWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIyNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRjHZ3PmeE26D39h9Wq53fvNC3Y8rCtNoAK0 I/nwmSgeJr8BTJMm9BXMwuS0UflXmcaSTMF0LUKLuFterJcgC0zKUlu/wEHsTa42 q2WKsdyxJ3h8Y2UFda1MjDBeCxeJHWm3Tsp41tOV3VP8tC0iqGQ9BzOQyeKzd9dP 2pDBfhL6jxbM2YOtYZypcThV0n+lfjRS1nNO6GJtlDXTes/kNqrtBn7aTzmwMzmw 1Htu7SndxwXijdQEYQNc9o5c1mcZYcIN0LRi4kCktFexBblpg+RJOoHoI/2l9A3/ IVRPJ6XcIlDP24boJUKyaRctY2NVjLIfFVl65mr4271cB9nVTwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFIqNgJcOk9GOZit7RrAu4kBFbIjuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzllNTZiZDkxLWNjOGQtNGE3My05 NTk3LTE3YWI5NDBiMjZkYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQw YjI2ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjKwDBAKpgDQwDgQCAAIwCAMGACYC9jQAMB0G CCsGAQUFBwEIAQH/BA4wDKAKMAgCAkJIAgJo/zBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCAEHiUxiZRF/gP Tv8dggx3Ey0MF/g10gMejogeOg/xgHeXih1zKuVzPGd7Yy7T1h9qSIgNdRuLqR0L XfXa+Awx14cvM1H7z0ghqIS+0gUBGjDHAQ/gNWP4NXDfAAeRQN3T4ZWCFKiY2bsm 0nV5pm09g1rcStuPLbD2yN228ZCDGICVweTMCmBYzWsY355REywMhK+INJjeTLPB 4sHDEftdAePmvDaWykFkvHjP0V0NqAW1mUJQEdh5Ek2CRKl8XTV8f6RnXtKdoeLr GnG9Z7e3oVJghK4u1Ps7yGX7Qm5LH7C3pS+bzqy2NkYVFB/20ndH3xFUIFFe+rrw ojeq4/St -----END CERTIFICATE-----Generated at Tue Jul 21 17:36:57 2026 by rpki-client