$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer File: ba691a44-20cf-450c-8abe-c548dd6bd5be.cer (raw, json) Hash identifier: yXNYjosRXwy/2nmy6RE9lQUt+775fszXgZa2PVi7jlQ= Subject key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584F5EC4F4F0896B50021C2E0280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 16:18:17 +0000 Certificate not after: Mon 12 Jun 2028 15:48:58 +0000 Subordinate resources: AS: 402258 IP: 192.94.126.0/24 IP: 2620:a4:8860::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:c4:f4:f0:89:6b:50:02:1c:2e:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Oct 2 16:18:17 2026 GMT Not After : Jun 12 15:48:58 2028 GMT Subject: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:57:16:cb:93:7c:06:f7:c8:e9:ce:6e:0a:ee: d6:4e:af:90:99:1d:cf:19:3c:3c:ec:9f:6f:14:41: cd:ba:d2:9d:cc:d6:c2:6e:0d:98:90:8b:ac:f1:4a: c2:a1:9b:50:66:8c:89:da:7f:64:97:b7:06:ff:fc: d2:7f:7c:b4:ab:fc:f3:e8:0e:00:56:25:25:12:fa: 3a:9d:de:f3:e3:99:52:d6:01:18:d6:60:5b:e2:ff: 1b:0f:39:79:b2:54:e6:dc:1d:e2:93:70:7b:a8:6e: b6:e1:0b:4c:12:53:24:ac:c2:24:10:12:6e:e4:64: c3:e0:bb:41:a2:31:00:a3:99:0f:8f:ec:54:12:32: 37:02:ee:f0:91:1a:e9:34:91:f1:56:ba:45:2d:69: 26:0e:ef:90:6e:02:88:c5:d2:0b:aa:bc:b7:11:73: c4:9f:f5:2c:92:22:31:21:0f:1a:c4:4b:53:07:f4: 82:5e:bb:d6:ae:34:d0:c4:6a:31:48:18:4a:5d:d4: b5:f3:50:fa:ba:c1:27:7a:20:0f:b9:d0:28:05:b2: ea:53:64:4e:4e:f8:91:e0:05:6a:c3:73:64:68:49: 7e:30:56:b1:e9:0c:a1:6f:30:bc:52:1f:2f:13:86: f7:5a:97:4a:67:d3:de:78:69:90:3a:4e:f3:e1:bb: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.94.126.0/24 IPv6: 2620:a4:8860::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402258 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4b:57:95:ce:56:44:d2:33:14:ae:e8:5a:31:b2:07:ab:d0: f3:2c:54:10:69:1e:c7:5d:82:f4:40:15:0a:89:cd:a9:6d:de: 39:c6:1a:5a:e2:57:30:2a:17:dd:16:aa:8c:00:c0:e3:2d:7c: 37:a6:30:f1:55:e4:c9:74:9b:85:ae:7e:60:75:f3:b6:78:d6: 43:82:4c:67:57:49:4f:a8:22:1f:3d:b7:5c:19:98:15:80:4a: f6:72:f7:b5:cd:a9:85:41:9a:0a:cc:8a:b8:55:90:78:46:1a: ca:81:3a:40:12:79:52:a4:db:3c:65:29:d0:1e:f1:3c:15:2c: 94:e9:c6:0a:24:b6:65:d9:22:63:9b:f2:fe:42:cc:24:ef:f4: 39:0c:17:b1:c9:f4:1d:6f:85:30:57:17:83:63:15:5c:0d:50: 63:7d:51:b5:9b:3b:08:03:fa:32:cf:29:51:c2:7c:03:88:16: dd:ab:d2:0d:2d:3e:6c:3a:35:38:dd:8c:2c:ea:d2:a0:bf:e9: da:ba:69:3a:17:b3:40:04:43:28:16:74:5b:4a:50:ce:b1:ea: 67:12:56:b8:12:e2:40:b5:46:33:eb:7d:06:64:65:67:a8:c6: 1c:d5:91:b1:a7:9a:49:27:ca:d9:0f:f9:2a:87:71:d4:e2:cc: 44:f3:7e:ee -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE9exPTwiWtQAhwuAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MTAwMjE2MTgxN1oXDTI4MDYxMjE1NDg1OFowLzEtMCsGA1UEAxMk YmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJkNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VcWy5N8BvfI6c5uCu7WTq+QmR3PGTw87J9v FEHNutKdzNbCbg2YkIus8UrCoZtQZoyJ2n9kl7cG//zSf3y0q/zz6A4AViUlEvo6 nd7z45lS1gEY1mBb4v8bDzl5slTm3B3ik3B7qG624QtMElMkrMIkEBJu5GTD4LtB ojEAo5kPj+xUEjI3Au7wkRrpNJHxVrpFLWkmDu+QbgKIxdILqry3EXPEn/UskiIx IQ8axEtTB/SCXrvWrjTQxGoxSBhKXdS181D6usEneiAPudAoBbLqU2ROTviR4AVq w3NkaEl+MFax6QyhbzC8Uh8vE4b3WpdKZ9PeeGmQOk7z4bs1owIDAQABo4IELDCC BCgwHQYDVR0OBBYEFJE7q5sOFwk1e0KqLarDBsD62iYfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i YTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2JhNjkxYTQ0LTIwY2YtNDUwYy04 YWJlLWM1NDhkZDZiZDViZS9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2 YmQ1YmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADAXn4wDwQCAAIwCQMHACYgAKSIYDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGI1IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANktXlc5WRNIzFK7oWjGyB6vQ 8yxUEGkex12C9EAVConNqW3eOcYaWuJXMCoX3RaqjADA4y18N6Yw8VXkyXSbha5+ YHXztnjWQ4JMZ1dJT6giHz23XBmYFYBK9nL3tc2phUGaCsyKuFWQeEYayoE6QBJ5 UqTbPGUp0B7xPBUslOnGCiS2ZdkiY5vy/kLMJO/0OQwXscn0HW+FMFcXg2MVXA1Q Y31RtZs7CAP6Ms8pUcJ8A4gW3avSDS0+bDo1ON2MLOrSoL/p2rppOhezQARDKBZ0 W0pQzrHqZxJWuBLiQLVGM+t9BmRlZ6jGHNWRsaeaSSfK2Q/5Kodx1OLMRPN+7g== -----END CERTIFICATE-----Generated at Sat Oct 10 10:39:08 2026 by rpki-client