$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer File: 2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.cer (raw, json) Hash identifier: LjUfeq1QW45huoBtzpAVf4IPr1qen4RtZGQRa8XVSCk= Subject key identifier: C3:7B:88:E1:FD:E8:A3:6E:EF:C4:55:AF:8F:16:0C:A6:CB:51:4F:99 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C9EF4AEB11E1270FB837527A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 23 Jan 2026 13:45:21 +0000 Certificate not after: Thu 27 Apr 2028 12:45:21 +0000 Subordinate resources: IP: 199.184.142.0/23 IP: 208.85.36.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9e:f4:ae:b1:1e:12:70:fb:83:75:27:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 23 13:45:21 2026 GMT Not After : Apr 27 12:45:21 2028 GMT Subject: CN=2a645ece-ac51-4737-8d2b-c6ab6d2e79fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4c:12:f1:8a:6a:62:59:e6:c7:07:69:ee:c1: a5:8a:bb:98:57:25:16:41:22:8e:7c:86:1e:72:5d: 0a:9b:d8:6d:f7:dd:30:dd:4c:28:29:7f:08:ea:ee: 43:39:f1:23:7e:19:b3:5a:c7:8f:82:59:a3:3f:cf: 96:54:71:80:bf:ba:9f:c1:15:dc:65:f9:02:2a:f1: 43:67:e0:ee:56:03:30:f2:f1:45:9e:e1:c8:06:17: 2a:e3:e0:9a:03:c0:a8:c7:b0:1f:01:f3:4e:f7:7f: 96:6c:02:fe:0b:f8:53:1b:f3:9e:0c:c2:66:29:16: 4b:84:bf:a9:39:dd:3d:bf:19:23:b2:41:66:40:04: 5d:a8:82:9f:37:88:5c:71:0a:c4:68:08:a5:1e:c3: c4:6b:6c:b9:60:cb:50:5c:b9:01:96:af:a7:fe:76: 38:06:f5:7b:a1:94:a1:71:c8:75:4a:22:90:b5:09: 08:5a:0a:63:78:fc:9a:61:3e:19:5a:71:50:a3:83: be:db:a5:c8:0a:f9:9f:2e:ae:58:30:4f:58:ee:1a: ab:fd:10:be:bf:fb:64:28:5a:d0:80:20:54:e3:26: 5e:8b:6d:d0:02:e5:f3:b9:e4:fc:c0:b0:d6:13:49: 0b:31:2c:a8:f9:5d:dc:ae:56:18:9e:15:be:64:92: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7B:88:E1:FD:E8:A3:6E:EF:C4:55:AF:8F:16:0C:A6:CB:51:4F:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa/2a645ece-ac51-4737-8d2b-c6ab6d2e79fa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.184.142.0/23 208.85.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:07:b7:04:ad:03:b2:d6:b3:93:6e:04:e7:ba:da:3a:5e:d0: 00:55:10:03:cb:9c:d3:d4:b6:93:5e:53:88:fd:d0:72:c7:e9: 34:d4:ad:c4:78:b5:5d:97:0a:b5:0e:80:80:a2:94:c0:86:e0: 32:1c:6f:a2:92:76:ce:af:68:d7:9e:dc:4d:40:30:66:17:0f: d3:65:a5:ab:d1:53:35:b6:af:c2:1a:4e:0f:a8:eb:2e:d9:1e: 13:e0:55:ed:59:6c:13:45:b2:da:a4:23:5b:12:8b:4b:fe:cf: 64:2f:8b:46:de:ac:02:40:e5:53:b2:94:fc:00:b5:05:0e:5b: 92:13:c9:65:0e:6c:82:ac:ab:e5:98:7a:12:da:82:6c:86:ec: 7a:36:62:28:d7:2c:69:8c:f2:94:3b:20:9d:85:f1:b6:96:75: 14:3b:44:7e:1e:51:23:e0:d5:36:81:bd:06:7a:6a:f4:c0:6a: 29:c9:14:90:5c:62:20:a5:3a:49:34:30:91:82:27:c7:a1:48: b0:00:78:b0:2d:c5:5c:70:b2:fb:3e:55:29:cb:98:0d:13:34: aa:3c:f3:dd:79:af:0e:72:7b:a9:7e:66:8c:b2:61:ef:36:dc: c4:81:b9:3d:52:45:aa:17:3e:4e:0d:f8:fa:97:a4:6c:8b:c7: 1e:c2:77:7e -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEye9K6xHhJw+4N1J6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyMzEzNDUyMVoXDTI4MDQyNzEyNDUyMVowLzEtMCsGA1UEAxMk MmE2NDVlY2UtYWM1MS00NzM3LThkMmItYzZhYjZkMmU3OWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kwS8YpqYlnmxwdp7sGliruYVyUWQSKOfIYe cl0Km9ht990w3UwoKX8I6u5DOfEjfhmzWsePglmjP8+WVHGAv7qfwRXcZfkCKvFD Z+DuVgMw8vFFnuHIBhcq4+CaA8Cox7AfAfNO93+WbAL+C/hTG/OeDMJmKRZLhL+p Od09vxkjskFmQARdqIKfN4hccQrEaAilHsPEa2y5YMtQXLkBlq+n/nY4BvV7oZSh cch1SiKQtQkIWgpjePyaYT4ZWnFQo4O+26XICvmfLq5YME9Y7hqr/RC+v/tkKFrQ gCBU4yZei23QAuXzueT8wLDWE0kLMSyo+V3crlYYnhW+ZJJOhwIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFMN7iOH96KNu78RVr48WDKbLUU+ZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y YTY0NWVjZS1hYzUxLTQ3MzctOGQyYi1jNmFiNmQyZTc5ZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzJhNjQ1ZWNlLWFjNTEtNDczNy04 ZDJiLWM2YWI2ZDJlNzlmYS8yYTY0NWVjZS1hYzUxLTQ3MzctOGQyYi1jNmFiNmQy ZTc5ZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHHuI4DBALQVSQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgwe3BK0Dstaz k24E57raOl7QAFUQA8uc09S2k15TiP3QcsfpNNStxHi1XZcKtQ6AgKKUwIbgMhxv opJ2zq9o157cTUAwZhcP02Wlq9FTNbavwhpOD6jrLtkeE+BV7VlsE0Wy2qQjWxKL S/7PZC+LRt6sAkDlU7KU/AC1BQ5bkhPJZQ5sgqyr5Zh6EtqCbIbsejZiKNcsaYzy lDsgnYXxtpZ1FDtEfh5RI+DVNoG9Bnpq9MBqKckUkFxiIKU6STQwkYInx6FIsAB4 sC3FXHCy+z5VKcuYDRM0qjzz3XmvDnJ7qX5mjLJh7zbcxIG5PVJFqhc+Tg34+pek bIvHHsJ3fg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:14:45 2026 by rpki-client