$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer File: 344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.cer (raw, json) Hash identifier: m5nAW3Zlcg6dpGdV9OHOMPC+Neu84lyPF0pX2kuHmCY= Subject key identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CBDAA37DC5B19B838DD687D28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Feb 2026 13:45:22 +0000 Certificate not after: Mon 08 May 2028 12:45:22 +0000 Subordinate resources: AS: 55076 IP: 140.235.92.0/22 IP: 198.37.136.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:aa:37:dc:5b:19:b8:38:dd:68:7d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 3 13:45:22 2026 GMT Not After : May 8 12:45:22 2028 GMT Subject: CN=344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f5:81:6e:78:17:6d:53:81:4b:fa:e9:8f:34: 0d:79:6e:7d:c4:ab:fc:4b:8e:3c:33:b4:37:55:82: 3e:02:f4:ff:59:82:56:ba:33:1c:8c:5e:b0:a5:10: 6a:a2:a5:27:6a:cb:c9:08:d7:17:37:45:f5:db:74: bc:9a:90:cf:ff:4f:31:6d:6b:ca:c9:2a:37:a1:90: f7:d0:40:bc:51:a0:28:66:5d:fb:b0:00:6e:b4:ec: 55:52:31:68:5a:42:3e:96:de:7d:46:bd:08:61:75: fd:a5:77:8e:e4:0d:f1:8f:98:7a:14:17:05:ea:c1: 51:02:49:74:1b:ca:1a:8d:de:b6:c3:45:2c:4b:25: a3:6a:8a:87:e3:91:5c:8b:c3:4d:c4:cc:ec:4c:fb: 35:f9:94:e8:55:99:24:4b:da:45:15:22:23:4e:25: 3c:f7:ab:62:1e:63:03:6d:31:40:ac:ed:6d:5d:ac: 89:c4:95:66:80:5b:f3:42:ac:63:a1:c2:bc:0a:ba: 41:54:cc:67:02:db:b5:af:38:37:3b:17:40:b4:a3: 61:8d:73:0a:d8:49:9c:65:f1:e9:60:7c:99:09:c3: c1:0d:4e:13:c4:77:60:0e:2c:bc:4b:87:c5:99:49: a4:2f:a5:82:9b:4a:b3:26:90:b8:90:cb:74:e2:98: 24:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:45:C5:55:D1:22:08:EA:2C:9E:16:94:D7:69:27:DF:D6:27:3E:50 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e/344c6704-b3bb-4ed8-b6f7-b656e2fb9e7e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 140.235.92.0/22 198.37.136.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 55076 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:57:9e:3a:d6:d9:3b:c8:ad:36:8a:68:16:05:60:95:ba:bb: ce:45:63:0f:07:1a:1a:34:43:3a:b0:ce:77:56:48:f2:c6:15: 71:25:c9:68:0b:e8:ee:25:9e:1e:25:8f:20:73:46:d5:30:c1: 51:07:88:bc:67:8a:e0:71:95:b3:f7:12:de:3d:09:7d:9a:e1: 04:f8:b8:88:ec:72:28:e2:02:31:32:16:ce:9f:ec:f3:76:50: 26:a6:b8:cf:3e:26:d2:56:d5:52:90:8d:cf:2c:a1:3f:3f:bb: d5:86:04:f1:7b:c7:cc:8b:4a:aa:96:f9:cc:9f:31:9b:1f:58: 2d:63:5b:f1:4a:be:d5:28:ec:48:39:1a:51:78:b8:be:20:43: 3c:8a:46:91:33:8d:f0:81:55:c3:45:f4:49:ec:2e:78:48:56: d0:61:7a:48:9c:38:48:fd:60:d3:81:cd:c1:b1:ed:fc:c8:40: 72:34:6b:da:38:8a:b1:73:f1:6b:1f:e4:ef:84:36:58:7e:3a: 5d:53:4b:e0:ee:65:56:44:d5:db:bf:ab:c1:ce:28:b5:03:e7: 63:0f:32:99:43:0f:71:2e:a6:7c:5d:6b:87:56:2b:32:1e:99: aa:bb:73:1b:a5:b5:c4:95:90:22:fa:c6:f2:80:74:6d:19:b1: b0:6b:be:d5 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWEy9qjfcWxm4ON1ofSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMzEzNDUyMloXDTI4MDUwODEyNDUyMlowLzEtMCsGA1UEAxMk MzQ0YzY3MDQtYjNiYi00ZWQ4LWI2ZjctYjY1NmUyZmI5ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPWBbngXbVOBS/rpjzQNeW59xKv8S448M7Q3 VYI+AvT/WYJWujMcjF6wpRBqoqUnasvJCNcXN0X123S8mpDP/08xbWvKySo3oZD3 0EC8UaAoZl37sAButOxVUjFoWkI+lt59Rr0IYXX9pXeO5A3xj5h6FBcF6sFRAkl0 G8oajd62w0UsSyWjaoqH45Fci8NNxMzsTPs1+ZToVZkkS9pFFSIjTiU896tiHmMD bTFArO1tXayJxJVmgFvzQqxjocK8CrpBVMxnAtu1rzg3OxdAtKNhjXMK2EmcZfHp YHyZCcPBDU4TxHdgDiy8S4fFmUmkL6WCm0qzJpC4kMt04pgkXQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFNJFxVXRIgjqLJ4WlNdpJ9/WJz5QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z NDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJmYjllN2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzM0NGM2NzA0LWIzYmItNGVkOC1i NmY3LWI2NTZlMmZiOWU3ZS8zNDRjNjcwNC1iM2JiLTRlZDgtYjZmNy1iNjU2ZTJm YjllN2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAKM61wDBAPGJYgwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANckMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAJVXnjrW2TvIrTaKaBYFYJW6u85FYw8HGho0Qzqw zndWSPLGFXElyWgL6O4lnh4ljyBzRtUwwVEHiLxniuBxlbP3Et49CX2a4QT4uIjs cijiAjEyFs6f7PN2UCamuM8+JtJW1VKQjc8soT8/u9WGBPF7x8yLSqqW+cyfMZsf WC1jW/FKvtUo7Eg5GlF4uL4gQzyKRpEzjfCBVcNF9EnsLnhIVtBhekicOEj9YNOB zcGx7fzIQHI0a9o4irFz8Wsf5O+ENlh+Ol1TS+DuZVZE1du/q8HOKLUD52MPMplD D3Eupnxda4dWKzIemaq7cxultcSVkCL6xvKAdG0ZsbBrvtU= -----END CERTIFICATE-----Generated at Sun Mar 1 18:16:28 2026 by rpki-client