$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer File: fee7b67e-5e4f-4a05-a59e-9e820c898fcd.cer (raw, json) Hash identifier: /n+vqmPtln8oXGEjYb27onVcTIM4YwtLiXVLl0p9PtE= Subject key identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Authority key identifier: A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 Certificate issuer: /CN=521eb33f-9672-4cd9-acce-137227e971ac Certificate serial: 010D0C9F4328584ED2C4FDB7D1885AC7C1BEC400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 13 Aug 2026 12:45:11 +0000 Certificate not after: Wed 15 Nov 2028 13:45:11 +0000 Subordinate resources: AS: 398555 IP: 192.111.36.0/24 IP: 192.160.64.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d2:c4:fd:b7:d1:88:5a:c7:c1:be:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=521eb33f-9672-4cd9-acce-137227e971ac Validity Not Before: Aug 13 12:45:11 2026 GMT Not After : Nov 15 13:45:11 2028 GMT Subject: CN=fee7b67e-5e4f-4a05-a59e-9e820c898fcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:3d:55:8e:0e:32:9e:ed:b0:4f:40:f1:bd: c0:a8:74:df:23:52:f5:bd:59:79:8a:a0:5a:cb:ca: be:e8:55:7d:29:43:e9:8b:9c:cc:52:83:83:df:84: 1b:74:cd:8c:50:87:6f:29:17:a4:b6:a4:7c:99:47: fc:16:43:68:5b:5d:ef:04:bc:e3:dc:20:0e:45:3b: ba:ae:c6:a3:3b:ea:f8:7e:7e:19:13:0b:50:ac:6d: ba:62:a1:9f:1d:6a:05:20:8e:97:99:5b:97:a8:93: 00:34:b6:c2:8d:75:6e:4d:29:7d:0f:cd:3b:67:62: 34:f4:8c:52:f3:6b:02:2c:6b:8b:da:a7:d0:53:fc: 4b:a0:a5:df:ff:c6:67:0f:87:c4:43:b3:da:e1:d9: af:a5:6b:d3:f2:df:64:b9:50:4a:71:ee:c7:fa:77: 0a:10:87:9a:ca:01:ef:8b:e9:83:13:c3:80:41:89: 92:f4:7c:0f:f3:25:82:19:a1:0e:66:c8:33:e2:39: a2:c1:8e:8c:59:05:23:59:9f:53:f4:8a:85:bd:18: 88:17:d0:cc:e2:7a:73:98:6b:7a:e5:4c:67:e2:39: 5c:26:f9:df:5a:1c:bb:19:e3:a7:a2:4f:45:c8:8e: c5:c5:85:49:9f:34:1f:0d:50:30:44:ca:2a:d2:52: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:40:9E:5D:CC:E9:AC:92:1D:01:F2:B4:97:5A:8D:27:F7:2F:01:B2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fee7b67e-5e4f-4a05-a59e-9e820c898fcd/fee7b67e-5e4f-4a05-a59e-9e820c898fcd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl X509v3 Authority Key Identifier: keyid:A2:15:11:51:87:1C:6A:15:A3:D3:83:5A:8D:B5:A1:EE:76:52:7B:E7 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer sbgp-ipAddrBlock: critical IPv4: 192.111.36.0/24 192.160.64.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398555 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:23:b3:c8:77:0a:45:b8:fb:dd:6d:19:35:12:ad:b0:34:20: c5:3e:56:35:b4:31:17:04:e8:c2:25:83:90:7a:e1:f4:ef:c0: 66:65:54:30:fa:aa:a5:fb:70:5b:a3:b5:68:82:bb:b1:c5:e3: c6:99:80:c1:88:bd:7d:4a:e4:48:61:69:ea:99:d9:17:74:79: 5f:62:c0:c5:c5:40:4c:18:ed:a8:e4:f7:3b:9c:9a:86:93:b7: 0d:09:37:fd:53:28:ef:a5:b0:4a:dd:8b:78:c3:13:c1:2d:5e: 91:d7:76:bd:87:89:44:be:59:57:cd:2c:b3:e4:17:bf:a3:4d: e9:29:63:18:dc:15:90:a4:a9:e1:50:ea:ad:53:a7:fe:d0:be: de:dc:53:55:be:a2:5e:bf:3d:ff:20:43:19:e7:b2:75:a1:64: 18:e7:5c:52:54:9e:07:83:45:2c:29:da:a2:8f:62:28:a4:20: 7b:72:4d:a7:53:05:12:21:76:c4:db:54:e8:f3:85:b7:99:2c: a6:63:ab:3b:91:2e:ab:e2:32:85:b6:21:d4:35:6b:af:7c:f7: 42:ca:ed:74:a3:6f:1a:69:67:5f:64:95:96:49:8c:a3:29:a7: 33:38:d3:2f:c7:19:c3:25:a1:d1:a2:2e:25:55:29:55:99:d0: 0f:11:f6:2d -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE7SxP230Yhax8G+xAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3 MWFjMB4XDTI2MDgxMzEyNDUxMVoXDTI4MTExNTEzNDUxMVowLzEtMCsGA1UEAxMk ZmVlN2I2N2UtNWU0Zi00YTA1LWE1OWUtOWU4MjBjODk4ZmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUs9VY4OMp7tsE9A8b3AqHTfI1L1vVl5iqBa y8q+6FV9KUPpi5zMUoOD34QbdM2MUIdvKRektqR8mUf8FkNoW13vBLzj3CAORTu6 rsajO+r4fn4ZEwtQrG26YqGfHWoFII6XmVuXqJMANLbCjXVuTSl9D807Z2I09IxS 82sCLGuL2qfQU/xLoKXf/8ZnD4fEQ7Pa4dmvpWvT8t9kuVBKce7H+ncKEIeaygHv i+mDE8OAQYmS9HwP8yWCGaEOZsgz4jmiwY6MWQUjWZ9T9IqFvRiIF9DM4npzmGt6 5Uxn4jlcJvnfWhy7GeOnok9FyI7FxYVJnzQfDVAwRMoq0lLo/wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFMlAnl3M6aySHQHytJdajSf3LwGyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9m ZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4OThmY2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2Yt OTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjL2ZlZTdiNjdlLTVlNGYtNGEwNS1h NTllLTllODIwYzg5OGZjZC9mZWU3YjY3ZS01ZTRmLTRhMDUtYTU5ZS05ZTgyMGM4 OThmY2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWVi MzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MjFlYjMzZi05NjcyLTRj ZDktYWNjZS0xMzcyMjdlOTcxYWMuY3JsMB8GA1UdIwQYMBaAFKIVEVGHHGoVo9OD Wo21oe52UnvnMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUy MWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAbyQDBADAoEAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhTbMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAAwjs8h3CkW4+91tGTUSrbA0IMU+VjW0MRcE6MIl g5B64fTvwGZlVDD6qqX7cFujtWiCu7HF48aZgMGIvX1K5EhhaeqZ2Rd0eV9iwMXF QEwY7ajk9zucmoaTtw0JN/1TKO+lsErdi3jDE8EtXpHXdr2HiUS+WVfNLLPkF7+j TekpYxjcFZCkqeFQ6q1Tp/7Qvt7cU1W+ol6/Pf8gQxnnsnWhZBjnXFJUngeDRSwp 2qKPYiikIHtyTadTBRIhdsTbVOjzhbeZLKZjqzuRLqviMoW2IdQ1a69890LK7XSj bxppZ19klZZJjKMppzM40y/HGcMlodGiLiVVKVWZ0A8R9i0= -----END CERTIFICATE-----Generated at Sun Sep 13 17:29:28 2026 by rpki-client