$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/20e984c4-b15e-4163-92ba-e19cdc90d6a2.cer File: 20e984c4-b15e-4163-92ba-e19cdc90d6a2.cer (raw, json) Hash identifier: 1ZaLdynn0bH/LyZxQD0yYg5YCc753PKhTOYmLW4wt1g= Subject key identifier: FA:15:CF:3E:C0:DD:62:40:59:6D:9A:66:71:FA:53:A9:29:71:CC:5A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CF41A8BC252DF3EF64B56D000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/20e984c4-b15e-4163-92ba-e19cdc90d6a2/20e984c4-b15e-4163-92ba-e19cdc90d6a2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/20e984c4-b15e-4163-92ba-e19cdc90d6a2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Feb 2026 01:45:22 +0000 Certificate not after: Sun 28 May 2028 00:45:22 +0000 Subordinate resources: AS: 22369 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:1a:8b:c2:52:df:3e:f6:4b:56:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 23 01:45:22 2026 GMT Not After : May 28 00:45:22 2028 GMT Subject: CN=20e984c4-b15e-4163-92ba-e19cdc90d6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fc:27:98:b6:61:06:49:e1:4c:83:42:57:17: 76:37:c0:a8:02:fc:3c:18:c1:2c:ef:bd:d4:b4:8e: 75:a1:41:97:97:93:3e:9c:72:fa:1d:3d:16:be:88: a0:ef:ce:ad:ea:9c:0b:b7:b4:7e:b6:fa:d1:3c:85: 29:ec:f4:45:20:51:93:a9:c2:2a:2a:cc:26:93:e1: e3:6e:72:11:2e:3a:3e:db:8c:57:a2:d5:69:dc:65: e6:97:7d:db:e5:6f:fd:e5:5a:ca:2a:76:b1:a8:d8: 0a:8f:b6:f0:53:86:83:c2:d3:9f:28:d2:db:eb:aa: a2:53:9b:d9:93:be:7e:9b:2d:7c:95:38:10:69:f7: 8f:fc:c0:f3:fc:3e:f4:cf:12:4f:c4:3c:56:a1:f0: 0f:d7:17:3d:f6:9d:74:f5:17:5a:76:d2:4c:db:74: aa:6d:58:37:0a:60:fb:58:79:a5:3f:68:56:12:c0: 32:c0:ba:af:07:00:73:5d:38:9d:b7:df:3e:c7:a8: a9:8a:7c:ef:9e:33:1b:14:c6:c3:92:4c:98:71:26: c6:29:b9:b2:eb:07:3c:b1:55:65:70:e7:a8:5e:70: b0:e5:36:c4:7e:1c:5f:34:12:fe:14:94:c4:2e:05: bb:91:f5:c3:b2:99:42:4d:70:66:77:39:d7:7b:3a: 69:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:CF:3E:C0:DD:62:40:59:6D:9A:66:71:FA:53:A9:29:71:CC:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/20e984c4-b15e-4163-92ba-e19cdc90d6a2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/20e984c4-b15e-4163-92ba-e19cdc90d6a2/20e984c4-b15e-4163-92ba-e19cdc90d6a2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 22369 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c2:e3:90:13:d1:ad:30:75:46:1a:a1:39:b5:20:48:13:f7: 8c:a1:d2:90:58:9c:96:08:b7:59:d5:f7:a0:be:85:ad:90:18: f9:b3:33:e8:42:c9:ca:61:54:b9:4b:d5:d7:e6:f9:0a:3c:f3: 6c:4e:5e:48:a6:61:32:6b:32:05:c3:da:8e:82:37:55:79:5c: 78:58:53:ef:67:d7:84:8f:3d:6f:bd:a1:56:35:11:17:d7:33: 8d:25:2c:d9:c3:97:af:a7:fc:fc:ca:c4:de:7e:4e:fe:7a:b9: 67:1c:ce:f3:41:44:3e:d4:fa:74:ed:27:3e:ab:7b:4b:97:c0: 3d:6e:31:ec:5b:c5:c3:d0:42:5d:0c:c9:0a:2b:0c:3a:b8:c3: 53:23:4e:6a:c6:6f:82:9b:28:a6:36:f9:da:9c:4c:a1:88:4a: 61:4e:d5:d6:25:32:28:ae:de:03:89:b8:6c:30:e9:99:c9:74: bd:2c:ee:5c:29:18:37:2e:ad:38:5a:66:53:29:f9:ee:d9:f0: 8c:e0:c4:11:83:3f:3f:8b:69:82:f8:e1:1c:51:99:85:16:5a: 97:98:69:8c:9e:bf:38:be:46:10:c9:69:3d:b5:2f:c0:e9:b6: 59:16:d6:bf:48:9b:c7:10:0a:f8:09:b3:5b:f9:a3:d3:75:68: 7f:d8:04:ae -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEz0GovCUt8+9ktW0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIyMzAxNDUyMloXDTI4MDUyODAwNDUyMlowLzEtMCsGA1UEAxMk MjBlOTg0YzQtYjE1ZS00MTYzLTkyYmEtZTE5Y2RjOTBkNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvwnmLZhBknhTINCVxd2N8CoAvw8GMEs773U tI51oUGXl5M+nHL6HT0Wvoig786t6pwLt7R+tvrRPIUp7PRFIFGTqcIqKswmk+Hj bnIRLjo+24xXotVp3GXml33b5W/95VrKKnaxqNgKj7bwU4aDwtOfKNLb66qiU5vZ k75+my18lTgQafeP/MDz/D70zxJPxDxWofAP1xc99p109RdadtJM23SqbVg3CmD7 WHmlP2hWEsAywLqvBwBzXTidt98+x6ipinzvnjMbFMbDkkyYcSbGKbmy6wc8sVVl cOeoXnCw5TbEfhxfNBL+FJTELgW7kfXDsplCTXBmdznXezppUwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFPoVzz7A3WJAWW2aZnH6U6kpccxaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y MGU5ODRjNC1iMTVlLTQxNjMtOTJiYS1lMTljZGM5MGQ2YTIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzIwZTk4NGM0LWIxNWUtNDE2My05 MmJhLWUxOWNkYzkwZDZhMi8yMGU5ODRjNC1iMTVlLTQxNjMtOTJiYS1lMTljZGM5 MGQ2YTIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICV2EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKMLjkBPRrTB1RhqhObUgSBP3jKHS kFiclgi3WdX3oL6FrZAY+bMz6ELJymFUuUvV1+b5CjzzbE5eSKZhMmsyBcPajoI3 VXlceFhT72fXhI89b72hVjURF9czjSUs2cOXr6f8/MrE3n5O/nq5ZxzO80FEPtT6 dO0nPqt7S5fAPW4x7FvFw9BCXQzJCisMOrjDUyNOasZvgpsopjb52pxMoYhKYU7V 1iUyKK7eA4m4bDDpmcl0vSzuXCkYNy6tOFpmUyn57tnwjODEEYM/P4tpgvjhHFGZ hRZal5hpjJ6/OL5GEMlpPbUvwOm2WRbWv0ibxxAK+AmzW/mj03Vof9gErg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:14:40 2026 by rpki-client