$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer File: fcbf2352-8296-41fd-bfd5-576c02b9d483.cer (raw, json) Hash identifier: hCvSBkT6OzBMoSGEcIdBBj1Un1V0ufQdPsxp4b2y1q8= Subject key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584D113F838C8CDE4E6B91DEDEB0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Mar 2026 12:18:17 +0000 Certificate not after: Tue 19 Oct 2027 00:45:36 +0000 Subordinate resources: AS: 20283 AS: 64227 IP: 64.90.64.0/19 IP: 64.238.0.0/20 IP: 68.170.112.0/20 IP: 69.168.240.0/20 IP: 161.199.130.0/24 IP: 167.94.42.0/23 IP: 167.94.52.0/23 IP: 167.94.62.0/23 IP: 167.94.76.0/23 IP: 172.87.0.0/20 IP: 199.59.116.0/22 IP: 205.214.160.0/20 IP: 209.73.80.0/20 IP: 209.99.144.0/20 IP: 209.212.32.0/20 IP: 2605:5000::/32 IP: 2606:df80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:3f:83:8c:8c:de:4e:6b:91:de:de:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Mar 5 12:18:17 2026 GMT Not After : Oct 19 00:45:36 2027 GMT Subject: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7f:32:a2:8c:28:62:b9:4b:d3:45:44:cb:67: a6:d2:fe:d1:cf:2f:69:58:5c:a7:f8:d8:b2:7d:d6: dc:cf:18:e1:92:1b:25:c7:19:98:45:16:90:fb:20: fe:81:c9:12:60:1f:16:52:c3:1d:8f:2a:3a:9d:14: 85:dd:56:11:45:5f:b3:d6:2d:22:7e:06:e5:93:40: 90:7e:15:d3:2d:63:21:6d:ea:99:58:be:20:50:d4: c0:fb:09:64:76:80:08:db:16:6e:44:1d:6c:08:e4: 51:97:8b:cd:3b:5c:f7:ed:ea:b9:b1:18:a1:69:64: 3d:76:d8:6e:f1:11:aa:f2:a0:31:1c:5c:7e:57:2f: 1d:fa:84:a2:ef:33:6e:25:b3:c0:0e:32:5a:aa:0b: 14:b9:3e:04:3d:be:28:8b:a1:a0:06:1b:9b:5e:6f: ce:0b:80:58:d4:a2:2e:f7:ba:26:f7:d6:81:f5:c1: 69:42:bb:c2:e4:8e:ae:ca:d7:d6:b1:ae:1e:6f:67: d2:81:e5:b4:2f:33:fa:fd:80:f4:76:31:92:ba:c7: 4d:97:e6:22:bc:d5:cb:49:4a:ab:07:c1:c6:c2:2b: 5d:2a:ef:15:eb:8d:fd:bd:a2:ef:d7:33:e9:89:ea: 9e:d7:b1:fb:ce:1d:d6:fd:c3:c5:bd:1d:91:22:95: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 64.90.64.0/19 64.238.0.0/20 68.170.112.0/20 69.168.240.0/20 161.199.130.0/24 167.94.42.0/23 167.94.52.0/23 167.94.62.0/23 167.94.76.0/23 172.87.0.0/20 199.59.116.0/22 205.214.160.0/20 209.73.80.0/20 209.99.144.0/20 209.212.32.0/20 IPv6: 2605:5000::/32 2606:df80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20283 64227 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f0:ed:41:bf:dc:2b:83:4e:1e:9e:c2:ee:55:cf:4b:ed:68: d0:8d:49:f3:40:88:4f:3c:6f:db:37:f6:00:18:7f:95:6b:4a: 60:8f:98:6b:73:76:26:a6:4d:96:a2:9b:6c:75:81:7a:53:cf: d6:25:9e:ec:f4:31:1b:79:d7:ab:a6:72:f7:c9:5f:a2:97:53: ee:7d:95:f6:8b:7f:0a:8e:20:02:d6:ab:f5:cb:57:01:83:77: 37:56:23:0e:7e:9b:60:7e:3e:20:76:02:dc:c2:b0:1d:22:04: a8:73:11:37:a5:45:be:73:91:9d:c4:51:9b:43:f4:92:e4:4e: 8e:4c:12:97:3d:01:8e:f5:80:ee:40:f9:b6:d0:5f:6a:df:8d: f2:f3:da:70:42:d3:e5:e6:32:f5:7d:62:d4:3f:d8:23:6a:a6: cd:a6:24:87:fe:cd:90:7b:c1:44:ab:d7:f9:1c:9e:c2:20:5f: f4:69:fa:3e:47:ac:65:81:6c:39:8e:6a:8e:b9:52:ac:cf:a2: 56:84:c9:79:fe:ca:4f:7d:e9:69:c3:3b:21:47:6f:07:ce:86: 55:24:3d:f2:c5:0b:a0:76:9c:ea:a7:22:5d:d8:48:36:6d:5a: 2b:66:c5:16:77:c4:44:c7:e9:c6:bc:d6:0d:17:e4:eb:48:9a: ab:4c:5c:f0 -----BEGIN CERTIFICATE----- MIIHeDCCBmCgAwIBAgIUAQ0Mn0MoWE0RP4OMjN5Oa5He3rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDMwNTEyMTgxN1oXDTI3MTAxOTAwNDUzNlowLzEtMCsGA1UEAxMk ZmNiZjIzNTItODI5Ni00MWZkLWJmZDUtNTc2YzAyYjlkNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX8yoowoYrlL00VEy2em0v7Rzy9pWFyn+Niy fdbczxjhkhslxxmYRRaQ+yD+gckSYB8WUsMdjyo6nRSF3VYRRV+z1i0ifgblk0CQ fhXTLWMhbeqZWL4gUNTA+wlkdoAI2xZuRB1sCORRl4vNO1z37eq5sRihaWQ9dthu 8RGq8qAxHFx+Vy8d+oSi7zNuJbPADjJaqgsUuT4EPb4oi6GgBhubXm/OC4BY1KIu 97om99aB9cFpQrvC5I6uytfWsa4eb2fSgeW0LzP6/YD0djGSusdNl+YivNXLSUqr B8HGwitdKu8V6439vaLv1zPpieqe17H7zh3W/cPFvR2RIpUlNwIDAQABo4IEijCC BIYwHQYDVR0OBBYEFJD7Ljxim5GAZHm/7tyy/XNqbFlsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m Y2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJiOWQ0ODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZjYmYyMzUyLTgyOTYtNDFmZC1i ZmQ1LTU3NmMwMmI5ZDQ4My9mY2JmMjM1Mi04Mjk2LTQxZmQtYmZkNS01NzZjMDJi OWQ0ODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwgYkGCCsGAQUF BwEHAQH/BHoweDBgBAIAATBaAwQFQFpAAwQEQO4AAwQERKpwAwQERajwAwQAoceC AwQBp14qAwQBp140AwQBp14+AwQBp15MAwQErFcAAwQCxzt0AwQEzdagAwQE0UlQ AwQE0WOQAwQE0dQgMBQEAgACMA4DBQAmBVAAAwUAJgbfgDAeBggrBgEFBQcBCAEB /wQPMA2gCzAJAgJPOwIDAPrjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJDw7UG/3CuDTh6ewu5Vz0vtaNCN SfNAiE88b9s39gAYf5VrSmCPmGtzdiamTZaim2x1gXpTz9Ylnuz0MRt516umcvfJ X6KXU+59lfaLfwqOIALWq/XLVwGDdzdWIw5+m2B+PiB2AtzCsB0iBKhzETelRb5z kZ3EUZtD9JLkTo5MEpc9AY71gO5A+bbQX2rfjfLz2nBC0+XmMvV9YtQ/2CNqps2m JIf+zZB7wUSr1/kcnsIgX/Rp+j5HrGWBbDmOao65UqzPolaEyXn+yk996WnDOyFH bwfOhlUkPfLFC6B2nOqnIl3YSDZtWitmxRZ3xETH6ca81g0X5OtImqtMXPA= -----END CERTIFICATE-----Generated at Tue Mar 24 08:16:04 2026 by rpki-client