$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be.cer File: ba691a44-20cf-450c-8abe-c548dd6bd5be.cer (raw, json) Hash identifier: kpLg+mFVMhXI0e2lmPnvYrYh9YxOCNH2DGmwp2t6YrY= Subject key identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D1F9D7F2891965D0E47BB4D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 15:48:58 +0000 Certificate not after: Mon 12 Jun 2028 15:48:58 +0000 Subordinate resources: AS: 402258 IP: 2620:a4:8860::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:9d:7f:28:91:96:5d:0e:47:bb:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 10 15:48:58 2026 GMT Not After : Jun 12 15:48:58 2028 GMT Subject: CN=ba691a44-20cf-450c-8abe-c548dd6bd5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:57:16:cb:93:7c:06:f7:c8:e9:ce:6e:0a:ee: d6:4e:af:90:99:1d:cf:19:3c:3c:ec:9f:6f:14:41: cd:ba:d2:9d:cc:d6:c2:6e:0d:98:90:8b:ac:f1:4a: c2:a1:9b:50:66:8c:89:da:7f:64:97:b7:06:ff:fc: d2:7f:7c:b4:ab:fc:f3:e8:0e:00:56:25:25:12:fa: 3a:9d:de:f3:e3:99:52:d6:01:18:d6:60:5b:e2:ff: 1b:0f:39:79:b2:54:e6:dc:1d:e2:93:70:7b:a8:6e: b6:e1:0b:4c:12:53:24:ac:c2:24:10:12:6e:e4:64: c3:e0:bb:41:a2:31:00:a3:99:0f:8f:ec:54:12:32: 37:02:ee:f0:91:1a:e9:34:91:f1:56:ba:45:2d:69: 26:0e:ef:90:6e:02:88:c5:d2:0b:aa:bc:b7:11:73: c4:9f:f5:2c:92:22:31:21:0f:1a:c4:4b:53:07:f4: 82:5e:bb:d6:ae:34:d0:c4:6a:31:48:18:4a:5d:d4: b5:f3:50:fa:ba:c1:27:7a:20:0f:b9:d0:28:05:b2: ea:53:64:4e:4e:f8:91:e0:05:6a:c3:73:64:68:49: 7e:30:56:b1:e9:0c:a1:6f:30:bc:52:1f:2f:13:86: f7:5a:97:4a:67:d3:de:78:69:90:3a:4e:f3:e1:bb: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:3B:AB:9B:0E:17:09:35:7B:42:AA:2D:AA:C3:06:C0:FA:DA:26:1F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ba691a44-20cf-450c-8abe-c548dd6bd5be/ba691a44-20cf-450c-8abe-c548dd6bd5be.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv6: 2620:a4:8860::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402258 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:7c:a2:b8:75:bb:8d:47:34:13:be:86:48:ed:77:e8:40:e7: 36:25:8f:fb:69:b6:db:3c:5f:da:ed:fe:fd:3a:1e:76:47:2a: dd:6a:08:58:78:07:f0:27:89:e3:64:3b:df:94:1b:8e:57:e2: da:14:a0:01:2a:2d:4f:74:ea:21:21:a8:fb:32:33:3e:3c:17: 0a:22:01:0d:9e:28:70:a0:6a:61:e5:57:91:1e:76:9d:c1:db: f0:9b:85:ef:cb:86:5a:70:d7:a4:1d:84:f0:c6:2a:46:23:23: 6e:ca:e4:f8:c1:12:32:b5:4e:7c:30:b8:45:cb:37:d7:fd:15: ed:9c:06:82:4b:f5:1b:8f:5c:54:60:28:93:94:7e:bc:80:31: 50:24:59:2d:22:bd:26:d1:69:b7:85:c2:20:a9:bf:28:f0:f6: 2e:74:82:d4:05:db:d2:66:aa:c9:fa:c4:b3:7f:82:ad:78:15: 6f:82:5f:06:72:87:52:15:b7:39:9d:e2:9f:c1:b0:9b:de:db: 48:fb:ff:86:09:81:3e:75:88:2c:62:60:91:51:77:fa:e3:ca: af:c6:f5:34:bd:30:49:76:cc:4e:16:3d:0f:4c:cc:c1:cf:1c: 23:5f:59:fd:4a:33:c3:74:97:1e:32:07:c1:fe:eb:3a:08:69: 54:42:7c:a3 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUAQ0Mn0MoWE0fnX8okZZdDke7TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMxMDE1NDg1OFoXDTI4MDYxMjE1NDg1OFowLzEtMCsGA1UEAxMk YmE2OTFhNDQtMjBjZi00NTBjLThhYmUtYzU0OGRkNmJkNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VcWy5N8BvfI6c5uCu7WTq+QmR3PGTw87J9v FEHNutKdzNbCbg2YkIus8UrCoZtQZoyJ2n9kl7cG//zSf3y0q/zz6A4AViUlEvo6 nd7z45lS1gEY1mBb4v8bDzl5slTm3B3ik3B7qG624QtMElMkrMIkEBJu5GTD4LtB ojEAo5kPj+xUEjI3Au7wkRrpNJHxVrpFLWkmDu+QbgKIxdILqry3EXPEn/UskiIx IQ8axEtTB/SCXrvWrjTQxGoxSBhKXdS181D6usEneiAPudAoBbLqU2ROTviR4AVq w3NkaEl+MFax6QyhbzC8Uh8vE4b3WpdKZ9PeeGmQOk7z4bs1owIDAQABo4IEHjCC BBowHQYDVR0OBBYEFJE7q5sOFwk1e0KqLarDBsD62iYfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i YTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2YmQ1YmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2JhNjkxYTQ0LTIwY2YtNDUwYy04 YWJlLWM1NDhkZDZiZDViZS9iYTY5MWE0NC0yMGNmLTQ1MGMtOGFiZS1jNTQ4ZGQ2 YmQ1YmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwIgYIKwYBBQUH AQcBAf8EEzARMA8EAgACMAkDBwAmIACkiGAwGgYIKwYBBQUHAQgBAf8ECzAJoAcw BQIDBiNSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYs aHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJ KoZIhvcNAQELBQADggEBAHN8orh1u41HNBO+hkjtd+hA5zYlj/tptts8X9rt/v06 HnZHKt1qCFh4B/AnieNkO9+UG45X4toUoAEqLU906iEhqPsyMz48FwoiAQ2eKHCg amHlV5Eedp3B2/Cbhe/Lhlpw16QdhPDGKkYjI27K5PjBEjK1TnwwuEXLN9f9Fe2c BoJL9RuPXFRgKJOUfryAMVAkWS0ivSbRabeFwiCpvyjw9i50gtQF29Jmqsn6xLN/ gq14FW+CXwZyh1IVtzmd4p/BsJve20j7/4YJgT51iCxiYJFRd/rjyq/G9TS9MEl2 zE4WPQ9MzMHPHCNfWf1KM8N0lx4yB8H+6zoIaVRCfKM= -----END CERTIFICATE-----Generated at Fri Mar 13 07:01:56 2026 by rpki-client