$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer File: bd65975e-d229-45b7-bdbe-46ab8f5d4d04.cer (raw, json) Hash identifier: 1Q9rMqPImiSrNz9D/PzhkobmUlep6cDe7EBgqWH7VYw= Subject key identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584E3E57A10763DB34280F7A79C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 21 Jun 2026 08:45:11 +0000 Certificate not after: Sat 23 Sep 2028 08:45:11 +0000 Subordinate resources: IP: 72.18.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3e:57:a1:07:63:db:34:28:0f:7a:79:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Jun 21 08:45:11 2026 GMT Not After : Sep 23 08:45:11 2028 GMT Subject: CN=bd65975e-d229-45b7-bdbe-46ab8f5d4d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a8:eb:e3:9d:af:39:ee:d4:47:06:28:0c:93: c1:2d:18:8a:a6:50:2e:fe:a1:bc:70:86:2d:e8:d0: d6:3d:eb:f7:01:a4:0b:72:a2:5e:c4:a6:1b:7f:1a: 79:3e:97:dc:52:42:65:3a:d8:c8:54:a9:24:90:69: 20:30:73:73:1a:9f:34:15:5c:ca:f5:69:3f:9b:6a: 5d:ae:a8:56:79:81:e4:45:3d:29:84:cf:a6:7c:f9: 0f:04:c9:cf:a9:56:65:f3:85:e2:16:64:e6:68:f5: 66:76:2d:4d:0c:fe:c2:18:e0:fa:30:a7:36:98:fd: 51:e7:21:9d:9f:85:05:ae:04:ab:19:30:e8:3b:f7: d3:73:ae:40:62:4a:21:89:4a:08:c9:7f:79:9c:0f: 3e:81:c2:94:8b:98:f2:b3:12:71:30:81:22:44:6b: ee:7f:c0:a2:80:0a:e5:3d:a3:11:a6:3f:9e:69:2f: f8:c9:73:c1:56:fb:cd:77:cc:dc:13:9d:d1:aa:4f: 29:c8:db:8b:bc:08:94:e1:2d:91:1d:d2:7a:1e:78: a3:ee:45:70:47:17:6a:15:fd:29:b3:73:59:36:36: 2e:bc:94:3a:b8:0a:f9:04:10:16:10:25:5b:9c:ef: 61:b6:0e:20:df:ad:ea:68:14:74:f9:68:1c:c3:c5: 88:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:4E:6C:2D:07:E8:0C:96:4C:E7:1F:D5:AD:F3:A2:E7:9E:3C:F2:93 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bd65975e-d229-45b7-bdbe-46ab8f5d4d04/bd65975e-d229-45b7-bdbe-46ab8f5d4d04.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 72.18.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:7a:a2:8b:0d:3c:8c:b6:b6:d8:04:04:28:00:f9:96:b0:dd: 11:54:72:a3:10:85:f6:c9:66:fa:d2:fb:f9:19:69:91:18:7d: f5:28:7d:85:56:14:8b:45:bd:eb:a4:da:fa:da:b9:c1:ad:9b: 92:b1:64:70:00:e6:c4:e1:15:9f:2b:81:d5:89:d3:3d:c1:46: b9:16:7b:d7:2f:cc:7c:32:83:16:bb:3e:8e:2e:bd:83:d9:e7: d8:12:4f:db:90:db:29:9e:3d:91:63:e7:54:d2:7e:2a:d4:7c: f5:c4:06:4b:78:8e:25:44:f4:0b:47:2c:dc:a7:1e:4e:1a:e3: ae:33:94:9d:65:b9:40:ba:ac:b3:8c:45:12:dc:2b:b0:41:5b: fb:07:1f:40:32:6c:8c:d4:ee:b3:72:2d:e3:81:6e:48:bc:f5: 65:44:b5:6e:9d:42:f5:42:99:22:ef:61:7a:f6:3f:31:46:32: 50:20:2e:48:cc:ee:69:83:30:41:b0:6e:be:ef:c2:5c:2c:c8: 0f:ae:b2:7e:59:b3:a8:2e:87:54:91:d7:2b:36:f8:9a:10:ab: f6:1e:49:97:20:cf:df:c7:27:50:23:bb:ed:73:9b:6d:60:fd: 90:f8:91:59:53:fa:96:bb:49:16:ab:76:0b:3d:09:29:2b:41: 1a:1f:1b:0d -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE4+V6EHY9s0KA96ecAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDYyMTA4NDUxMVoXDTI4MDkyMzA4NDUxMVowLzEtMCsGA1UEAxMk YmQ2NTk3NWUtZDIyOS00NWI3LWJkYmUtNDZhYjhmNWQ0ZDA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6jr452vOe7URwYoDJPBLRiKplAu/qG8cIYt 6NDWPev3AaQLcqJexKYbfxp5PpfcUkJlOtjIVKkkkGkgMHNzGp80FVzK9Wk/m2pd rqhWeYHkRT0phM+mfPkPBMnPqVZl84XiFmTmaPVmdi1NDP7CGOD6MKc2mP1R5yGd n4UFrgSrGTDoO/fTc65AYkohiUoIyX95nA8+gcKUi5jysxJxMIEiRGvuf8CigArl PaMRpj+eaS/4yXPBVvvNd8zcE53Rqk8pyNuLvAiU4S2RHdJ6Hnij7kVwRxdqFf0p s3NZNjYuvJQ6uAr5BBAWECVbnO9htg4g363qaBR0+Wgcw8WI6wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFAlObC0H6AyWTOcf1a3zoueePPKTMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9i ZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1ZDRkMDQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2JkNjU5NzVlLWQyMjktNDViNy1i ZGJlLTQ2YWI4ZjVkNGQwNC9iZDY1OTc1ZS1kMjI5LTQ1YjctYmRiZS00NmFiOGY1 ZDRkMDQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJIElwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAg3qiiw08jLa22AQEKAD5 lrDdEVRyoxCF9slm+tL7+RlpkRh99Sh9hVYUi0W966Ta+tq5wa2bkrFkcADmxOEV nyuB1YnTPcFGuRZ71y/MfDKDFrs+ji69g9nn2BJP25DbKZ49kWPnVNJ+KtR89cQG S3iOJUT0C0cs3KceThrjrjOUnWW5QLqss4xFEtwrsEFb+wcfQDJsjNTus3It44Fu SLz1ZUS1bp1C9UKZIu9hevY/MUYyUCAuSMzuaYMwQbBuvu/CXCzID66yflmzqC6H VJHXKzb4mhCr9h5JlyDP38cnUCO77XObbWD9kPiRWVP6lrtJFqt2Cz0JKStBGh8b DQ== -----END CERTIFICATE-----Generated at Sat Jun 27 09:22:25 2026 by rpki-client