$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d.cer File: 258880f7-56fa-4c7c-a7e7-6d113eda383d.cer (raw, json) Hash identifier: 6gF32kHFPpIB0nxTPvMw5YRW9urMuEbAu/3rvixEHqE= Subject key identifier: E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CB27F7BE8B38898BC8E79D9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 13:45:23 +0000 Certificate not after: Thu 04 May 2028 12:45:23 +0000 Subordinate resources: IP: 23.142.200.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:7f:7b:e8:b3:88:98:bc:8e:79:d9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 30 13:45:23 2026 GMT Not After : May 4 12:45:23 2028 GMT Subject: CN=258880f7-56fa-4c7c-a7e7-6d113eda383d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:e1:ff:33:91:4a:8c:c5:0e:57:43:61:d7: ce:6b:f6:e7:cc:bd:84:0a:29:9b:10:c8:85:9c:c3: 0c:fc:a9:f0:5e:3b:b3:79:aa:25:b3:de:67:17:d1: 45:d7:fd:d6:91:03:ca:8b:94:18:3f:0e:c0:bf:b3: 20:09:fa:0c:22:3f:d0:73:26:20:a0:ae:19:3f:0c: 67:3b:08:63:82:cb:7d:19:69:08:10:c0:8b:88:fb: 67:e1:d0:9f:d6:c9:64:01:f2:f1:d9:53:90:3b:3f: 7c:6c:65:5f:22:ad:2d:f2:e3:2b:79:39:0d:ef:a5: 99:90:7e:73:32:78:54:0f:ea:9e:d3:4f:f2:4c:b2: d0:29:0e:35:a8:b4:9e:35:44:e2:7a:f1:53:51:f1: ea:99:65:48:24:fd:92:0c:d5:4c:59:19:9c:2d:52: 92:54:fe:a0:85:83:fc:f5:63:56:b4:27:85:46:06: c4:5d:71:cf:20:98:16:6e:6f:4d:54:25:d0:4e:a2: 02:e7:5f:8a:3e:ba:01:40:13:b9:27:23:e2:10:cc: 0b:68:06:0e:c2:bf:b4:0f:45:1f:9f:42:38:22:81: 68:6d:ac:33:38:b0:86:72:90:f6:7b:cc:da:4f:2b: 26:7e:40:8c:58:91:e5:15:d9:62:b2:d7:d6:58:88: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:77:99:0D:E0:ED:30:9C:45:71:0C:2E:B0:73:14:DD:FC:55:BE:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/258880f7-56fa-4c7c-a7e7-6d113eda383d/258880f7-56fa-4c7c-a7e7-6d113eda383d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:bd:8b:2b:c6:5a:00:4b:b2:72:65:ad:5d:b4:20:bb:72:ad: b3:0c:c1:1e:77:19:54:45:b1:79:6b:d1:f1:b1:08:12:b9:f1: bc:a6:a7:4f:bb:bf:f4:1c:ef:0b:c8:b9:09:df:e3:e2:f3:0b: d8:52:87:84:f8:f5:f4:f8:c3:a7:f1:97:bc:4c:9f:3d:ba:f6: f6:7f:37:8b:73:4a:ae:0d:09:bf:a6:b4:53:a1:0c:df:72:f0: 8d:6d:78:b0:0e:79:6b:08:2c:41:c1:ac:a1:e5:c4:d6:a7:b9: c5:e5:7d:9c:a1:3b:2d:80:2f:3c:01:1e:f5:a5:46:1a:c8:ba: 6e:3c:78:83:67:00:2b:90:8e:33:84:6a:ba:7b:0a:98:e8:16: b4:5e:1a:4a:f2:11:0a:97:77:1d:4f:0b:33:4f:29:28:c9:ef: 49:be:55:cd:97:19:ab:b8:8e:0d:f4:1a:f6:ac:96:4e:b9:aa: ae:9d:2d:64:07:20:fe:d7:fe:cf:92:dc:fc:61:63:1f:87:d4: 48:c9:95:af:83:97:ca:09:ce:b9:6c:4f:c3:d2:cc:13:47:62: ab:60:9d:68:f1:3a:42:3b:1b:45:54:be:8f:80:ef:33:3f:f1: 5e:91:00:d1:56:55:63:7e:6c:70:2a:5f:11:19:92:eb:24:82: e5:2a:9c:67 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEyyf3vos4iYvI552cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEzMDEzNDUyM1oXDTI4MDUwNDEyNDUyM1owLzEtMCsGA1UEAxMk MjU4ODgwZjctNTZmYS00YzdjLWE3ZTctNmQxMTNlZGEzODNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPzh/zORSozFDldDYdfOa/bnzL2ECimbEMiF nMMM/KnwXjuzeaols95nF9FF1/3WkQPKi5QYPw7Av7MgCfoMIj/QcyYgoK4ZPwxn Owhjgst9GWkIEMCLiPtn4dCf1slkAfLx2VOQOz98bGVfIq0t8uMreTkN76WZkH5z MnhUD+qe00/yTLLQKQ41qLSeNUTievFTUfHqmWVIJP2SDNVMWRmcLVKSVP6ghYP8 9WNWtCeFRgbEXXHPIJgWbm9NVCXQTqIC51+KProBQBO5JyPiEMwLaAYOwr+0D0Uf n0I4IoFobawzOLCGcpD2e8zaTysmfkCMWJHlFdlistfWWIjeywIDAQABo4ID/zCC A/swHQYDVR0OBBYEFOB3mQ3g7TCcRXEMLrBzFN38Vb6KMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y NTg4ODBmNy01NmZhLTRjN2MtYTdlNy02ZDExM2VkYTM4M2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzI1ODg4MGY3LTU2ZmEtNGM3Yy1h N2U3LTZkMTEzZWRhMzgzZC8yNTg4ODBmNy01NmZhLTRjN2MtYTdlNy02ZDExM2Vk YTM4M2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXjsgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWb2LK8ZaAEuycmWtXbQg u3KtswzBHncZVEWxeWvR8bEIErnxvKanT7u/9BzvC8i5Cd/j4vML2FKHhPj19PjD p/GXvEyfPbr29n83i3NKrg0Jv6a0U6EM33LwjW14sA55awgsQcGsoeXE1qe5xeV9 nKE7LYAvPAEe9aVGGsi6bjx4g2cAK5COM4RqunsKmOgWtF4aSvIRCpd3HU8LM08p KMnvSb5VzZcZq7iODfQa9qyWTrmqrp0tZAcg/tf+z5Lc/GFjH4fUSMmVr4OXygnO uWxPw9LME0diq2CdaPE6QjsbRVS+j4DvMz/xXpEA0VZVY35scCpfERmS6ySC5Sqc Zw== -----END CERTIFICATE-----Generated at Sun Mar 1 20:23:20 2026 by rpki-client