$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer File: 21d44745-4ec9-4f13-a01d-70bb2f3adb8d.cer (raw, json) Hash identifier: 8+BSUMTO3k4zZLJxLJUzWe10/I5gkeF7hM6xKuzsLug= Subject key identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D4EB801F8B25D140EC19B9280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Mar 2026 12:45:22 +0000 Certificate not after: Thu 29 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 205.236.93.0 -- 205.236.95.255 IP: 205.236.144.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4e:b8:01:f8:b2:5d:14:0e:c1:9b:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 27 12:45:22 2026 GMT Not After : Jun 29 12:45:22 2028 GMT Subject: CN=21d44745-4ec9-4f13-a01d-70bb2f3adb8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:eb:0c:a5:2d:a4:c5:d9:7c:90:df:fa:e3:9f: e2:e5:fb:44:dc:c8:93:63:e7:1a:86:52:25:de:f3: 58:fd:5a:80:d8:1a:e3:e9:7c:bd:78:50:88:f8:84: ce:4f:5a:b4:77:98:88:08:f4:35:b3:ab:6c:8d:df: 06:94:d6:f4:f1:c7:e2:c2:43:a5:5f:14:a3:d3:1d: 98:09:e2:21:15:73:c6:3b:49:39:aa:37:2a:28:38: ae:eb:2c:24:db:7f:d1:52:11:af:26:f5:87:74:89: 09:60:d6:2a:93:72:f7:9c:67:e2:93:4b:76:09:79: b5:b2:6f:16:28:c2:91:52:28:25:fc:7c:55:77:35: 38:e7:7b:eb:eb:00:36:7e:27:b4:93:c2:76:f5:fd: ff:55:dd:b2:bb:0b:94:d5:32:b4:8f:04:f6:b6:c1: 2a:55:60:b6:3d:8c:58:3a:fd:8f:dc:c9:01:1a:01: e7:33:67:81:7e:8b:64:29:31:de:8b:78:a6:24:f9: ed:33:6c:2d:c1:24:c9:15:64:5f:62:da:b6:a1:15: 11:d3:2b:b8:75:c6:37:2a:5b:fb:9a:c3:8c:93:b8: af:fd:fa:41:23:81:28:1f:87:42:24:97:d6:5d:34: e6:6b:2c:f6:cc:34:08:ba:39:16:58:39:ac:1f:51: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:72:50:B1:C0:C5:C8:0F:D4:CB:86:9C:EC:DF:D1:17:EF:2D:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/21d44745-4ec9-4f13-a01d-70bb2f3adb8d/21d44745-4ec9-4f13-a01d-70bb2f3adb8d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 205.236.93.0-205.236.95.255 205.236.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d0:60:63:3a:0b:8e:71:86:ee:d8:c3:95:95:dc:b9:14:f4: d4:bb:e8:dd:9e:1d:af:fa:81:78:77:d7:f2:0a:fc:2b:55:e9: a0:58:3e:cf:5e:df:40:07:4e:40:b7:df:e1:c2:0c:72:ca:71: c2:7b:cc:75:bc:92:54:7d:39:34:c3:bd:64:df:58:98:bb:82: a9:5b:0e:f3:b8:c0:7a:2a:66:16:f2:af:cc:27:e2:6d:36:58: f5:30:6f:70:8f:b4:94:12:98:21:17:bf:cb:39:65:cb:74:61: f5:3b:42:0b:75:0f:e5:cc:7d:26:0e:2f:f4:9c:4f:da:03:5c: 54:21:77:d8:a0:34:f6:f0:3b:f8:cd:0e:31:30:ff:30:d0:5e: c6:f4:e4:61:df:84:c2:09:c6:48:5d:83:bd:f7:d6:57:86:69: b9:6c:ec:b4:47:b1:8c:ad:81:f0:64:5c:ef:6d:27:98:26:e8: bf:4e:77:c9:08:7d:bc:cc:02:2e:f2:50:aa:53:e2:b0:f0:28: 5a:a0:05:0a:92:f5:a4:1f:c5:2e:ad:c7:fa:ad:cb:9b:e7:8f: dc:98:66:b7:f3:a7:1b:2e:87:c1:c7:b9:1f:53:87:f5:09:41: c0:f5:10:d9:78:03:4b:18:28:be:d9:d1:4a:85:85:90:14:33: 3d:8f:bd:df -----BEGIN CERTIFICATE----- MIIG+zCCBeOgAwIBAgIUAQ0Mn0MoWE1OuAH4sl0UDsGbkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyNzEyNDUyMloXDTI4MDYyOTEyNDUyMlowLzEtMCsGA1UEAxMk MjFkNDQ3NDUtNGVjOS00ZjEzLWEwMWQtNzBiYjJmM2FkYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3esMpS2kxdl8kN/645/i5ftE3MiTY+cahlIl 3vNY/VqA2Brj6Xy9eFCI+ITOT1q0d5iICPQ1s6tsjd8GlNb08cfiwkOlXxSj0x2Y CeIhFXPGO0k5qjcqKDiu6ywk23/RUhGvJvWHdIkJYNYqk3L3nGfik0t2CXm1sm8W KMKRUigl/HxVdzU453vr6wA2fie0k8J29f3/Vd2yuwuU1TK0jwT2tsEqVWC2PYxY Ov2P3MkBGgHnM2eBfotkKTHei3imJPntM2wtwSTJFWRfYtq2oRUR0yu4dcY3Klv7 msOMk7iv/fpBI4EoH4dCJJfWXTTmayz2zDQIujkWWDmsH1GwvQIDAQABo4IEDTCC BAkwHQYDVR0OBBYEFK00clCxwMXID9TLhpzs39EX7y3nMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y MWQ0NDc0NS00ZWM5LTRmMTMtYTAxZC03MGJiMmYzYWRiOGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzIxZDQ0NzQ1LTRlYzktNGYxMy1h MDFkLTcwYmIyZjNhZGI4ZC8yMWQ0NDc0NS00ZWM5LTRmMTMtYTAxZC03MGJiMmYz YWRiOGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLQYIKwYBBQUH AQcBAf8EHjAcMBoEAgABMBQwDAMEAM3sXQMEBc3sQAMEAM3skDBUBgNVHSABAf8E SjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4u bmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBX 0GBjOguOcYbu2MOVldy5FPTUu+jdnh2v+oF4d9fyCvwrVemgWD7PXt9AB05At9/h wgxyynHCe8x1vJJUfTk0w71k31iYu4KpWw7zuMB6KmYW8q/MJ+JtNlj1MG9wj7SU EpghF7/LOWXLdGH1O0ILdQ/lzH0mDi/0nE/aA1xUIXfYoDT28Dv4zQ4xMP8w0F7G 9ORh34TCCcZIXYO999ZXhmm5bOy0R7GMrYHwZFzvbSeYJui/TnfJCH28zAIu8lCq U+Kw8ChaoAUKkvWkH8Uurcf6rcub54/cmGa386cbLofBx7kfU4f1CUHA9RDZeANL GCi+2dFKhYWQFDM9j73f -----END CERTIFICATE-----Generated at Fri Apr 17 02:36:16 2026 by rpki-client