$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820.cer File: 34468021-d790-42b8-b3cd-5d1592500820.cer (raw, json) Hash identifier: V2wnbWSBhY7hiyTlDs15wJGu464eRDeyTpsAiwl1Vx0= Subject key identifier: 19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA74A4B3F9613DA5252369600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 13:24:19 +0000 Certificate not after: Fri 24 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 399912 IP: 207.228.212.0/22 IP: 216.73.188.0/24 IP: 2604:9240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:4a:4b:3f:96:13:da:52:52:36:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 26 13:24:19 2026 GMT Not After : Mar 24 12:45:23 2028 GMT Subject: CN=34468021-d790-42b8-b3cd-5d1592500820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:23:24:99:5b:b5:8c:e6:3c:89:bd:5c:61:18: 26:1c:84:b1:ca:42:a6:f4:48:a9:15:99:86:38:cf: 2d:93:94:fc:8c:ab:f8:77:52:b4:46:af:d3:7a:98: 1c:c4:3e:ec:5c:58:85:ca:27:31:55:e8:f8:1d:88: dd:14:2a:2a:8d:67:c3:97:1d:4b:9d:1e:8e:a2:93: 22:d4:3b:c6:0e:be:df:7c:f7:aa:0d:73:60:c8:0b: 6f:c0:83:5f:3d:f1:7a:c2:45:b2:aa:31:e7:5e:a2: 35:11:2e:fb:80:90:7b:7a:08:19:cb:97:9e:f2:1d: 63:f2:54:29:1f:69:41:ef:92:e1:53:89:53:01:1d: 72:81:d4:11:89:61:c9:55:af:1a:d9:eb:b9:f4:27: d3:84:b4:12:59:5d:7d:e6:5d:f0:f5:e1:6c:67:4c: be:27:5f:ab:e1:a6:6c:20:29:34:cc:0a:70:79:99: 02:f6:93:a7:15:6e:17:e5:9c:1a:85:e1:15:fe:d5: 61:50:d8:dd:23:70:f0:8a:a2:0a:c9:1a:3f:9c:b6: 26:77:b5:e4:cc:02:df:c7:a0:44:5d:5e:d9:1a:0d: b1:53:f1:8f:c0:14:ba:4e:32:49:99:e1:9a:e8:28: 38:bf:5e:12:d6:45:6e:3c:d2:27:3f:62:c4:12:0f: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F8:D5:36:C3:9B:08:64:5A:8B:23:D7:BD:26:24:E7:59:FD:95:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34468021-d790-42b8-b3cd-5d1592500820/34468021-d790-42b8-b3cd-5d1592500820.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 207.228.212.0/22 216.73.188.0/24 IPv6: 2604:9240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399912 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9f:50:4f:54:ee:46:ed:cb:df:63:6e:7f:bf:80:97:6c:f9: 02:76:4d:05:c9:6a:f5:6c:d6:c6:08:a3:bc:67:33:41:0b:46: d8:1d:4b:a3:98:b4:ae:71:a1:bc:4f:d0:61:47:54:b3:48:9c: 16:6e:54:f4:bb:86:f2:96:69:f0:56:1d:2f:d4:eb:fc:eb:8b: 49:3f:d2:95:ad:d5:dd:6f:c7:ba:8b:87:62:30:67:4f:b3:b6: d9:e2:7b:ff:f1:d8:49:b6:79:e0:8d:a0:7d:97:e3:93:8b:ae: 7a:22:4b:8a:14:83:d6:80:fe:91:f7:7d:60:36:de:d5:86:3a: 40:3d:ad:35:58:f5:9a:bb:27:e7:25:a0:66:12:5f:bd:25:e4: 25:19:1e:e6:f9:76:30:ed:60:51:de:ea:6e:6e:f5:2a:4c:49: 50:3f:28:3e:e0:19:da:50:27:7f:c1:0c:2d:d7:e4:1b:cf:a7: 2e:7e:4b:72:be:79:6f:cc:b2:23:11:8f:e4:85:16:6b:76:ec: 94:5f:20:84:81:d2:78:6a:6d:59:4f:35:db:9c:1d:d3:b6:86: 1c:19:06:46:df:03:93:1e:f8:2f:73:a6:44:50:34:c9:fd:a3: 24:b3:3d:99:13:0c:e5:77:a5:a1:6a:b3:d8:af:e0:f9:3b:a9: eb:3f:f8:65 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEynSks/lhPaUlI2lgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNjEzMjQxOVoXDTI4MDMyNDEyNDUyM1owLzEtMCsGA1UEAxMk MzQ0NjgwMjEtZDc5MC00MmI4LWIzY2QtNWQxNTkyNTAwODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyMkmVu1jOY8ib1cYRgmHISxykKm9EipFZmG OM8tk5T8jKv4d1K0Rq/TepgcxD7sXFiFyicxVej4HYjdFCoqjWfDlx1LnR6OopMi 1DvGDr7ffPeqDXNgyAtvwINfPfF6wkWyqjHnXqI1ES77gJB7eggZy5ee8h1j8lQp H2lB75LhU4lTAR1ygdQRiWHJVa8a2eu59CfThLQSWV195l3w9eFsZ0y+J1+r4aZs ICk0zApweZkC9pOnFW4X5ZwaheEV/tVhUNjdI3DwiqIKyRo/nLYmd7XkzALfx6BE XV7ZGg2xU/GPwBS6TjJJmeGa6Cg4v14S1kVuPNInP2LEEg/luwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFBn41TbDmwhkWosj170mJOdZ/ZXZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z NDQ2ODAyMS1kNzkwLTQyYjgtYjNjZC01ZDE1OTI1MDA4MjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzM0NDY4MDIxLWQ3OTAtNDJiOC1i M2NkLTVkMTU5MjUwMDgyMC8zNDQ2ODAyMS1kNzkwLTQyYjgtYjNjZC01ZDE1OTI1 MDA4MjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBALP5NQDBADYSbwwDQQCAAIwBwMFACYEkkAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDBhooMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACyfUE9U7kbty99jbn+/ gJds+QJ2TQXJavVs1sYIo7xnM0ELRtgdS6OYtK5xobxP0GFHVLNInBZuVPS7hvKW afBWHS/U6/zri0k/0pWt1d1vx7qLh2IwZ0+zttnie//x2Em2eeCNoH2X45OLrnoi S4oUg9aA/pH3fWA23tWGOkA9rTVY9Zq7J+cloGYSX70l5CUZHub5djDtYFHe6m5u 9SpMSVA/KD7gGdpQJ3/BDC3X5BvPpy5+S3K+eW/MsiMRj+SFFmt27JRfIISB0nhq bVlPNducHdO2hhwZBkbfA5Me+C9zpkRQNMn9oySzPZkTDOV3paFqs9iv4Pk7qes/ +GU= -----END CERTIFICATE-----Generated at Sun Mar 1 18:23:28 2026 by rpki-client