$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee.cer File: cfa06203-6633-4db7-84da-b0100b7671ee.cer (raw, json) Hash identifier: +bioXeVKnjiN5/EIvw18HMDhvZZw/dZ5a4cBHaG2wv0= Subject key identifier: D7:1F:2B:A9:AF:46:82:27:F6:CD:54:75:53:A3:98:D9:DA:C4:11:6D Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CC074E3317896B7736FA8BC88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/cfa06203-6633-4db7-84da-b0100b7671ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Feb 2026 13:45:21 +0000 Certificate not after: Tue 09 May 2028 12:45:21 +0000 Subordinate resources: AS: 54496 IP: 205.207.108.0/23 IP: 2620:10f:a000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:74:e3:31:78:96:b7:73:6f:a8:bc:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 4 13:45:21 2026 GMT Not After : May 9 12:45:21 2028 GMT Subject: CN=cfa06203-6633-4db7-84da-b0100b7671ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:21:b7:39:4b:cd:98:b0:49:27:23:bb:1d:a1: e9:e7:b4:81:c0:5c:20:0d:94:1e:1f:15:3c:ac:b4: 32:74:43:75:03:b2:a4:b8:cc:90:7c:40:73:59:93: a4:76:66:2c:91:8e:8f:97:77:3b:48:21:cb:99:ae: c4:b6:5b:86:04:6d:bf:37:1a:84:dc:41:28:6a:7c: 6c:89:92:05:c1:91:3c:04:29:71:ba:4b:39:ac:a4: 30:b8:c3:da:7c:91:5e:c9:bc:9d:fd:cc:c4:69:ed: 04:e4:90:66:1b:11:f6:45:39:44:1a:9c:cb:0d:df: a7:29:2c:c2:ab:f6:0a:4c:90:d2:f1:e2:55:3d:f8: 13:7d:02:cd:ec:03:69:20:70:df:ea:9e:76:f9:cf: 9a:8f:2b:4e:c7:5a:0e:ea:13:e5:b9:e2:70:84:41: 80:f1:7c:a7:27:9e:08:70:81:20:83:08:ea:73:d1: 8b:70:87:95:65:09:97:3b:51:da:0b:50:99:e9:5f: 2d:ad:aa:5e:d0:84:73:6f:e5:83:3b:b2:49:32:75: 71:14:af:f2:5a:ca:9d:63:c4:a3:0b:5e:52:c4:02: 7a:8d:75:c7:e1:fc:43:e4:d7:15:60:54:a1:e4:a0: ff:61:35:6b:fc:49:3e:f1:85:9b:76:da:95:61:1b: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1F:2B:A9:AF:46:82:27:F6:CD:54:75:53:A3:98:D9:DA:C4:11:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cfa06203-6633-4db7-84da-b0100b7671ee/cfa06203-6633-4db7-84da-b0100b7671ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 205.207.108.0/23 IPv6: 2620:10f:a000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54496 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:9c:a0:07:fe:04:72:02:c6:ed:bc:23:7a:69:83:68:c5:37: 46:6b:17:e8:5c:c8:c2:8d:97:1e:3b:0b:cd:02:08:41:59:60: dd:ac:77:fc:f0:e4:a6:47:a9:cb:c6:c9:c7:7f:2c:07:88:93: 74:77:c1:66:43:7b:71:52:23:97:fa:73:ae:b7:b6:e2:3e:d0: 64:94:d3:da:ef:79:68:b4:13:dc:88:f3:34:05:fa:49:d0:96: 93:46:66:9f:80:a2:8b:62:cc:c0:9f:0b:75:15:dd:b9:93:00: 31:95:ed:6b:e3:b9:62:f0:2d:86:a4:dd:0a:21:5b:fd:14:1f: a2:31:83:58:dd:a4:e1:0c:63:51:f7:0f:ac:d1:74:35:a8:66: 38:04:b4:ab:7a:b9:81:f1:bc:67:6e:20:bc:27:4b:ff:7f:3b: 62:f6:85:ed:e7:82:71:50:55:19:a9:2e:be:ba:76:a2:34:2c: 52:02:a3:22:e6:79:1e:c6:81:18:de:b3:b2:dc:71:f1:83:e1: b8:a2:66:7b:5c:cc:b6:f5:fe:4f:b0:99:35:23:70:83:51:e0: 61:e0:2f:70:a9:fb:96:0f:24:f1:84:f4:71:8a:5d:21:38:20: 0d:ad:8a:da:80:73:5b:35:2d:57:14:18:10:f7:8d:4e:71:bb: 91:d1:1f:ff -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEzAdOMxeJa3c2+ovIgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDIwNDEzNDUyMVoXDTI4MDUwOTEyNDUyMVowLzEtMCsGA1UEAxMk Y2ZhMDYyMDMtNjYzMy00ZGI3LTg0ZGEtYjAxMDBiNzY3MWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyG3OUvNmLBJJyO7HaHp57SBwFwgDZQeHxU8 rLQydEN1A7KkuMyQfEBzWZOkdmYskY6Pl3c7SCHLma7EtluGBG2/NxqE3EEoanxs iZIFwZE8BClxuks5rKQwuMPafJFeybyd/czEae0E5JBmGxH2RTlEGpzLDd+nKSzC q/YKTJDS8eJVPfgTfQLN7ANpIHDf6p52+c+ajytOx1oO6hPlueJwhEGA8XynJ54I cIEggwjqc9GLcIeVZQmXO1HaC1CZ6V8trape0IRzb+WDO7JJMnVxFK/yWsqdY8Sj C15SxAJ6jXXH4fxD5NcVYFSh5KD/YTVr/Ek+8YWbdtqVYRsCxwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNcfK6mvRoIn9s1UdVOjmNnaxBFtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9j ZmEwNjIwMy02NjMzLTRkYjctODRkYS1iMDEwMGI3NjcxZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2NmYTA2MjAzLTY2MzMtNGRiNy04 NGRhLWIwMTAwYjc2NzFlZS9jZmEwNjIwMy02NjMzLTRkYjctODRkYS1iMDEwMGI3 NjcxZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAHNz2wwDwQCAAIwCQMHBCYgAQ+gADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA1OAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQpygB/4EcgLG7bwjemmDaMU3 RmsX6FzIwo2XHjsLzQIIQVlg3ax3/PDkpkepy8bJx38sB4iTdHfBZkN7cVIjl/pz rre24j7QZJTT2u95aLQT3IjzNAX6SdCWk0Zmn4Cii2LMwJ8LdRXduZMAMZXta+O5 YvAthqTdCiFb/RQfojGDWN2k4QxjUfcPrNF0NahmOAS0q3q5gfG8Z24gvCdL/387 YvaF7eeCcVBVGakuvrp2ojQsUgKjIuZ5HsaBGN6zstxx8YPhuKJme1zMtvX+T7CZ NSNwg1HgYeAvcKn7lg8k8YT0cYpdITggDa2K2oBzWzUtVxQYEPeNTnG7kdEf/w== -----END CERTIFICATE-----Generated at Mon Mar 2 00:26:57 2026 by rpki-client