$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3.cer File: 1bc7982a-669a-4674-a6b4-663e3d77bfe3.cer (raw, json) Hash identifier: vNWQgkpFJv4hXVSYdlFXUzOxa7DOtA4xb6H3BrGm5Tk= Subject key identifier: FC:BC:FD:25:98:FA:A1:90:1B:88:0D:A2:25:B8:E8:5F:E2:07:90:3D Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA754BDDB44107ED55453E280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/1bc7982a-669a-4674-a6b4-663e3d77bfe3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 13:45:22 +0000 Certificate not after: Sun 30 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 54400 AS: 401076 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:54:bd:db:44:10:7e:d5:54:53:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 26 13:45:22 2026 GMT Not After : Apr 30 12:45:22 2028 GMT Subject: CN=1bc7982a-669a-4674-a6b4-663e3d77bfe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a9:d0:9b:da:e7:d3:f5:bb:23:81:6f:24:83: b1:e0:00:b8:0d:8b:14:40:49:ef:a9:2b:17:1e:0a: b4:6c:fe:23:3d:4b:9e:72:f3:8d:c7:39:6c:70:04: 5e:c9:a1:c7:fa:ed:ca:16:59:79:33:fe:7f:48:d8: 2f:c8:e1:20:d9:f0:29:4c:1e:6d:55:f1:49:10:fb: ff:7c:43:2d:1a:00:a8:c2:df:db:e4:25:b0:45:02: ca:ae:d4:bc:7b:3b:69:ba:15:fc:5d:e2:90:03:62: 72:1d:43:15:27:2d:85:54:52:b6:8a:16:f4:e6:8f: de:73:e0:93:dd:95:5d:e5:1d:df:ce:90:37:0d:5c: d2:ad:88:df:78:7a:a9:cc:49:93:8f:2e:83:8b:6b: 67:67:b4:0b:82:32:3e:6d:c1:f5:14:5f:44:f6:88: 2b:62:70:29:32:e9:f8:7f:dc:df:0a:d2:a2:5e:79: 94:b0:b2:a3:bf:82:c7:85:14:27:39:5a:93:3b:d0: 6e:dd:5c:5e:27:45:e6:35:b9:d8:80:89:ce:1f:82: 44:1c:f6:33:a1:cf:e5:e2:ef:4c:39:6a:ed:51:33: 54:8e:62:9f:88:77:ca:0d:2b:47:07:1d:67:28:3f: 89:31:8a:46:f9:e3:3b:c8:10:0d:ce:d1:c2:aa:4f: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BC:FD:25:98:FA:A1:90:1B:88:0D:A2:25:B8:E8:5F:E2:07:90:3D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1bc7982a-669a-4674-a6b4-663e3d77bfe3/1bc7982a-669a-4674-a6b4-663e3d77bfe3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 54400 401076 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:60:ce:d9:50:2a:ec:26:2e:69:ad:61:28:ab:33:16:d6:0d: 61:f5:19:8f:f3:c7:69:4c:5c:2c:5a:bd:53:2d:05:e8:e5:6c: e9:0d:67:c7:68:f0:6b:21:24:76:8b:04:c7:3b:1f:22:8e:d2: 93:dd:6b:9d:63:4f:82:7f:cf:00:cb:a9:ab:d0:f4:30:9c:64: bf:e3:5a:57:a9:9b:09:b0:b0:34:17:eb:2c:37:25:21:00:9e: 58:d9:03:d4:7e:eb:3b:f2:28:c6:bf:5d:21:9f:35:51:ec:98: 05:ba:f5:5a:07:50:09:7e:ac:8f:03:44:b2:75:d1:cd:bd:4f: 0d:9b:71:1a:55:da:00:fa:fe:9a:7d:46:d4:ca:d0:00:c3:08: 7d:ce:b8:f0:b8:8f:8c:7a:99:a1:d6:99:36:4d:98:c9:b1:45: 56:d7:de:27:00:ff:a8:1a:71:83:f9:b0:9b:43:02:1d:5c:3d: 44:7b:84:94:fd:12:25:c3:0f:dc:f6:98:04:1d:51:7e:f8:f1: b6:a5:d6:23:22:8a:b7:b9:66:88:e3:2b:bc:dc:b6:ff:6a:de: 02:6b:a9:12:64:a4:81:8f:bd:92:78:f5:f0:1a:94:38:7c:05: 4c:f2:df:6e:53:5b:c3:8a:31:92:7c:e6:d4:38:4e:91:e8:39: 9d:0f:92:f8 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEynVL3bRBB+1VRT4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNjEzNDUyMloXDTI4MDQzMDEyNDUyMlowLzEtMCsGA1UEAxMk MWJjNzk4MmEtNjY5YS00Njc0LWE2YjQtNjYzZTNkNzdiZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKnQm9rn0/W7I4FvJIOx4AC4DYsUQEnvqSsX Hgq0bP4jPUuecvONxzlscAReyaHH+u3KFll5M/5/SNgvyOEg2fApTB5tVfFJEPv/ fEMtGgCowt/b5CWwRQLKrtS8eztpuhX8XeKQA2JyHUMVJy2FVFK2ihb05o/ec+CT 3ZVd5R3fzpA3DVzSrYjfeHqpzEmTjy6Di2tnZ7QLgjI+bcH1FF9E9ogrYnApMun4 f9zfCtKiXnmUsLKjv4LHhRQnOVqTO9Bu3VxeJ0XmNbnYgInOH4JEHPYzoc/l4u9M OWrtUTNUjmKfiHfKDStHBx1nKD+JMYpG+eM7yBANztHCqk8NqwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPy8/SWY+qGQG4gNoiW46F/iB5A9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x YmM3OTgyYS02NjlhLTQ2NzQtYTZiNC02NjNlM2Q3N2JmZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFiYzc5ODJhLTY2OWEtNDY3NC1h NmI0LTY2M2UzZDc3YmZlMy8xYmM3OTgyYS02NjlhLTQ2NzQtYTZiNC02NjNlM2Q3 N2JmZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQgBAf8EEDAOoAwwCgIDANSAAgMGHrQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADWDO2VAq7CYuaa1hKKsz FtYNYfUZj/PHaUxcLFq9Uy0F6OVs6Q1nx2jwayEkdosExzsfIo7Sk91rnWNPgn/P AMupq9D0MJxkv+NaV6mbCbCwNBfrLDclIQCeWNkD1H7rO/Ioxr9dIZ81UeyYBbr1 WgdQCX6sjwNEsnXRzb1PDZtxGlXaAPr+mn1G1MrQAMMIfc648LiPjHqZodaZNk2Y ybFFVtfeJwD/qBpxg/mwm0MCHVw9RHuElP0SJcMP3PaYBB1RfvjxtqXWIyKKt7lm iOMrvNy2/2reAmupEmSkgY+9knj18BqUOHwFTPLfblNbw4oxknzm1DhOkeg5nQ+S +A== -----END CERTIFICATE-----Generated at Sun Mar 1 18:19:58 2026 by rpki-client