$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer File: 9e56bd91-cc8d-4a73-9597-17ab940b26dc.cer (raw, json) Hash identifier: U3yN/H8tpp5nv+h6C69EWuxfnocgJoNgzTL+sEaF/FM= Subject key identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F066AA6D0B1929ECDB529B000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 01 Sep 2026 00:45:11 +0000 Certificate not after: Mon 04 Dec 2028 01:45:11 +0000 Subordinate resources: AS: 16968 AS: 26879 IP: 23.140.172.0/24 IP: 169.128.52.0/22 IP: 2602:f634::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:6a:a6:d0:b1:92:9e:cd:b5:29:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Sep 1 00:45:11 2026 GMT Not After : Dec 4 01:45:11 2028 GMT Subject: CN=9e56bd91-cc8d-4a73-9597-17ab940b26dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:18:c7:67:73:e6:78:4d:ba:0f:7f:61:f5:6a: b9:dd:fb:cd:0b:76:3c:ac:2b:4d:a0:02:b4:23:f9: f0:99:28:1e:26:bf:01:4c:93:26:f4:15:cc:c2:e4: b4:51:f9:57:99:c6:92:4c:c1:74:2d:42:8b:b8:5b: 5e:ac:97:20:0b:4c:ca:52:5b:bf:c0:41:ec:4d:ae: 36:ab:65:8a:b1:dc:b1:27:78:7c:63:65:05:75:ad: 4c:8c:30:5e:0b:17:89:1d:69:b7:4e:ca:78:d6:d3: 95:dd:53:fc:b4:2d:22:a8:64:3d:07:33:90:c9:e2: b3:77:d7:4f:da:90:c1:7e:12:fa:8f:16:cc:d9:83: ad:61:9c:a9:71:38:55:d2:7f:a5:7e:34:52:d6:73: 4e:e8:62:6d:94:35:d3:7a:cf:e4:36:aa:ed:06:7e: da:4f:39:b0:33:39:b0:d4:7b:6e:ed:29:dd:c7:05: e2:8d:d4:04:61:03:5c:f6:8e:5c:d6:67:19:61:c2: 0d:d0:b4:62:e2:40:a4:b4:57:b1:05:b9:69:83:e4: 49:3a:81:e8:23:fd:a5:f4:0d:ff:21:54:4f:27:a5: dc:22:50:cf:db:86:e8:25:42:b2:69:17:2d:63:63: 55:8c:b2:1f:15:59:7a:e6:6a:f8:db:bd:5c:07:d9: d5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8D:80:97:0E:93:D1:8E:66:2B:7B:46:B0:2E:E2:40:45:6C:88:EE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9e56bd91-cc8d-4a73-9597-17ab940b26dc/9e56bd91-cc8d-4a73-9597-17ab940b26dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 23.140.172.0/24 169.128.52.0/22 IPv6: 2602:f634::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16968 26879 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:21:20:d2:ce:c5:50:54:55:6d:d3:6f:73:53:8f:52:64:f8: 1d:47:d0:72:14:63:02:b0:0c:c0:c7:4e:05:a2:ee:8a:bc:7d: f8:05:54:75:84:25:ca:2c:df:09:73:1d:b8:9f:c8:96:7c:4e: e9:b7:85:e5:f5:43:c6:2e:88:cf:22:21:9c:2f:cf:30:09:ce: 17:66:9a:09:93:36:50:80:79:2c:16:4a:d0:68:11:09:1e:f4: 22:09:07:08:44:19:2e:69:95:27:ec:88:59:45:58:15:03:15: 43:1b:e7:50:25:03:11:10:45:2a:f8:48:1e:27:5a:c6:35:ba: dd:f3:fd:91:b1:27:5a:01:20:6e:bd:39:28:15:d9:e0:5c:09: 16:3f:ec:f8:24:57:5d:9c:8e:23:a8:75:50:5e:d9:66:a8:57: cb:96:a2:d1:e3:53:fa:99:e2:23:25:b6:8a:f5:88:fc:ba:76: c7:ae:91:61:fe:20:b9:92:de:b1:66:f0:bd:a6:01:e3:d1:fd: 25:d7:1f:41:d3:84:a5:90:55:b7:03:9d:a3:53:0e:46:aa:ec: af:06:1e:9e:1b:14:47:17:a3:a7:69:b1:88:29:44:2c:a3:6b: 66:d0:55:9d:84:a4:f6:3e:a1:ee:a8:c0:31:b5:68:83:ee:63: 22:8f:ad:67 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWE8GaqbQsZKezbUpsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDkwMTAwNDUxMVoXDTI4MTIwNDAxNDUxMVowLzEtMCsGA1UEAxMk OWU1NmJkOTEtY2M4ZC00YTczLTk1OTctMTdhYjk0MGIyNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRjHZ3PmeE26D39h9Wq53fvNC3Y8rCtNoAK0 I/nwmSgeJr8BTJMm9BXMwuS0UflXmcaSTMF0LUKLuFterJcgC0zKUlu/wEHsTa42 q2WKsdyxJ3h8Y2UFda1MjDBeCxeJHWm3Tsp41tOV3VP8tC0iqGQ9BzOQyeKzd9dP 2pDBfhL6jxbM2YOtYZypcThV0n+lfjRS1nNO6GJtlDXTes/kNqrtBn7aTzmwMzmw 1Htu7SndxwXijdQEYQNc9o5c1mcZYcIN0LRi4kCktFexBblpg+RJOoHoI/2l9A3/ IVRPJ6XcIlDP24boJUKyaRctY2NVjLIfFVl65mr4271cB9nVTwIDAQABo4IENDCC BDAwHQYDVR0OBBYEFIqNgJcOk9GOZit7RrAu4kBFbIjuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85 ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQwYjI2ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzllNTZiZDkxLWNjOGQtNGE3My05 NTk3LTE3YWI5NDBiMjZkYy85ZTU2YmQ5MS1jYzhkLTRhNzMtOTU5Ny0xN2FiOTQw YjI2ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXjKwDBAKpgDQwDgQCAAIwCAMGACYC9jQAMB0G CCsGAQUFBwEIAQH/BA4wDKAKMAgCAkJIAgJo/zBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBAISDSzsVQVFVt 029zU49SZPgdR9ByFGMCsAzAx04Fou6KvH34BVR1hCXKLN8Jcx24n8iWfE7pt4Xl 9UPGLojPIiGcL88wCc4XZpoJkzZQgHksFkrQaBEJHvQiCQcIRBkuaZUn7IhZRVgV AxVDG+dQJQMREEUq+EgeJ1rGNbrd8/2RsSdaASBuvTkoFdngXAkWP+z4JFddnI4j qHVQXtlmqFfLlqLR41P6meIjJbaK9Yj8unbHrpFh/iC5kt6xZvC9pgHj0f0l1x9B 04SlkFW3A52jUw5GquyvBh6eGxRHF6OnabGIKUQso2tm0FWdhKT2PqHuqMAxtWiD 7mMij61n -----END CERTIFICATE-----Generated at Sat Sep 5 00:23:39 2026 by rpki-client