$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c.cer File: 0fea19e9-8155-4254-af3b-1b522a124b4c.cer (raw, json) Hash identifier: qDZrv4S5jhqFZiJiZZGuqASlh0l3vinM6NapM8fs1DM= Subject key identifier: D4:52:E3:00:5A:5D:22:69:5B:92:65:D0:5E:D9:B1:D8:D4:73:5A:DB Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CC8D4F215B7C5EF7D8AB68C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c/0fea19e9-8155-4254-af3b-1b522a124b4c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Feb 2026 13:45:22 +0000 Certificate not after: Fri 12 May 2028 12:45:22 +0000 Subordinate resources: AS: 19233 IP: 104.128.96.0/20 IP: 192.154.160.0/20 IP: 192.225.192.0/20 IP: 199.68.252.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c8:d4:f2:15:b7:c5:ef:7d:8a:b6:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 7 13:45:22 2026 GMT Not After : May 12 12:45:22 2028 GMT Subject: CN=0fea19e9-8155-4254-af3b-1b522a124b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a4:8a:8b:36:94:0f:16:ac:22:f0:a1:93:ac: 19:dd:db:d1:40:4b:23:bf:ee:06:64:30:d4:c9:d2: 07:b1:6b:c0:65:06:92:b0:fb:d6:38:14:3b:13:94: db:44:09:cd:c8:3a:a8:c8:75:21:77:d8:24:06:b3: 39:cd:3e:71:24:2a:cd:fb:b1:19:46:43:2d:21:7f: c2:88:25:bb:3a:dc:f6:2a:fc:87:94:ce:b0:ea:81: 28:18:43:28:57:80:6b:d2:1e:40:73:6a:30:c8:b3: 4b:ea:c7:2d:67:87:4f:85:59:83:fd:da:56:ff:03: ee:9e:34:35:9c:12:46:bc:39:1c:da:19:a9:ff:97: e3:68:93:5b:e8:fe:75:fd:e9:91:48:ad:51:8d:8d: d5:3b:da:20:e2:68:6f:66:49:46:17:f7:e3:d7:5c: 42:57:d6:1b:98:bf:35:88:d2:96:e5:3e:f2:15:f7: 49:f8:fd:8a:3d:9a:0f:46:65:83:1c:ef:c0:66:5b: de:f6:08:9e:7e:19:fe:e2:66:f3:d8:39:04:81:4f: 02:35:39:ce:78:23:86:f4:0f:36:e4:cf:e4:7a:6a: 33:48:de:1a:29:5a:72:18:e0:79:c5:7a:c7:2f:cd: 7b:4f:52:48:8b:df:8c:7a:86:b4:9f:bd:54:e6:06: de:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:52:E3:00:5A:5D:22:69:5B:92:65:D0:5E:D9:B1:D8:D4:73:5A:DB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0fea19e9-8155-4254-af3b-1b522a124b4c/0fea19e9-8155-4254-af3b-1b522a124b4c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 104.128.96.0/20 192.154.160.0/20 192.225.192.0/20 199.68.252.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19233 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:13:e3:d8:02:3e:ea:86:3c:5d:a8:49:9d:48:df:41:81:7a: d7:0d:d5:43:e4:95:41:78:d1:ce:7e:e8:6c:7a:50:a7:17:27: 49:74:63:53:f4:4e:48:df:d8:92:d9:d6:7d:05:ca:81:cb:34: 77:ea:4b:c8:04:f9:f3:30:fe:71:86:f2:50:c2:1b:52:53:b8: bd:3a:bd:6c:52:8c:69:c6:8b:b3:5b:5f:15:63:e4:06:12:07: 2b:20:5a:1d:05:e3:79:2d:aa:29:79:ff:a8:99:77:04:cc:b5: 62:d7:eb:96:3e:d5:99:50:54:53:44:68:33:ff:95:fa:26:7c: c3:8a:c8:8c:1c:31:e9:bc:73:eb:76:f6:46:85:e5:bf:b8:f2: 74:d6:75:74:69:4f:90:13:e7:a2:85:85:88:7c:82:19:38:c0: 4e:94:e4:86:8c:0f:16:26:a9:64:9f:b8:14:5c:ea:48:ee:01: a5:ff:ff:26:b0:56:31:63:84:a8:04:d0:2b:5a:52:00:b8:96: 63:cc:bb:69:60:dd:57:83:2f:df:6c:8d:ba:55:ab:7a:8a:33: bd:3b:5a:20:4c:3e:9b:ef:4c:7e:73:1f:74:55:13:3c:53:71: 24:58:3c:28:ee:f1:90:3b:00:77:24:0f:d1:62:ec:4f:15:d9: 19:2b:39:99 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEzI1PIVt8XvfYq2jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwNzEzNDUyMloXDTI4MDUxMjEyNDUyMlowLzEtMCsGA1UEAxMk MGZlYTE5ZTktODE1NS00MjU0LWFmM2ItMWI1MjJhMTI0YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaSKizaUDxasIvChk6wZ3dvRQEsjv+4GZDDU ydIHsWvAZQaSsPvWOBQ7E5TbRAnNyDqoyHUhd9gkBrM5zT5xJCrN+7EZRkMtIX/C iCW7Otz2KvyHlM6w6oEoGEMoV4Br0h5Ac2owyLNL6sctZ4dPhVmD/dpW/wPunjQ1 nBJGvDkc2hmp/5fjaJNb6P51/emRSK1RjY3VO9og4mhvZklGF/fj11xCV9YbmL81 iNKW5T7yFfdJ+P2KPZoPRmWDHO/AZlve9giefhn+4mbz2DkEgU8CNTnOeCOG9A82 5M/kemozSN4aKVpyGOB5xXrHL817T1JIi9+Meoa0n71U5gbeSwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNRS4wBaXSJpW5Jl0F7ZsdjUc1rbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w ZmVhMTllOS04MTU1LTQyNTQtYWYzYi0xYjUyMmExMjRiNGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzBmZWExOWU5LTgxNTUtNDI1NC1h ZjNiLTFiNTIyYTEyNGI0Yy8wZmVhMTllOS04MTU1LTQyNTQtYWYzYi0xYjUyMmEx MjRiNGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBARogGADBATAmqADBATA4cADBALHRPwwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICSyEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAiRPj2AI+6oY8XahJnUjfQYF6 1w3VQ+SVQXjRzn7obHpQpxcnSXRjU/ROSN/YktnWfQXKgcs0d+pLyAT58zD+cYby UMIbUlO4vTq9bFKMacaLs1tfFWPkBhIHKyBaHQXjeS2qKXn/qJl3BMy1Ytfrlj7V mVBUU0RoM/+V+iZ8w4rIjBwx6bxz63b2RoXlv7jydNZ1dGlPkBPnooWFiHyCGTjA TpTkhowPFiapZJ+4FFzqSO4Bpf//JrBWMWOEqATQK1pSALiWY8y7aWDdV4Mv32yN ulWreoozvTtaIEw+m+9MfnMfdFUTPFNxJFg8KO7xkDsAdyQP0WLsTxXZGSs5mQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:29 2026 by rpki-client