$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3.cer File: 48892da2-72b4-4796-951e-24c5f6f972b3.cer (raw, json) Hash identifier: pZXcnxFjytIXS8TdFMc9fThokhSweY6yDVGyF/WKhgI= Subject key identifier: 78:E3:AA:4A:F8:31:3B:A9:58:7D:1F:E1:1F:20:C6:98:09:6F:E6:2A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CD9950EB85075C7A395E1E080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3/48892da2-72b4-4796-951e-24c5f6f972b3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Feb 2026 13:45:23 +0000 Certificate not after: Thu 18 May 2028 12:45:23 +0000 Subordinate resources: AS: 62989 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:95:0e:b8:50:75:c7:a3:95:e1:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 13 13:45:23 2026 GMT Not After : May 18 12:45:23 2028 GMT Subject: CN=48892da2-72b4-4796-951e-24c5f6f972b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:c4:44:34:41:d2:24:3b:dc:ba:c4:7a:a7: bb:de:f3:b5:b8:00:8c:fb:cc:35:ba:f3:76:d8:e0: fb:5f:18:55:3f:a3:7d:75:84:65:5c:9f:33:fa:20: 81:4f:b2:a3:d0:5d:6a:05:02:b1:0a:14:37:6c:5a: b3:0d:59:e1:46:cf:15:a0:31:fd:bd:90:ef:a3:2d: d4:f3:19:1c:63:f9:7d:20:76:78:54:13:8b:29:7f: d5:e8:17:63:b8:ff:3f:11:c5:51:99:6f:a3:e4:06: 52:5d:7b:6b:3b:39:e5:8f:8b:33:a5:07:79:3c:63: 89:b5:e4:53:f8:8b:00:ce:e2:97:4b:3a:a3:db:73: cb:9b:91:f8:16:89:91:30:2e:1d:67:35:9e:77:d2: bd:9f:54:2f:63:11:d7:e2:a2:e9:00:2e:f1:ed:53: 4f:94:de:13:dd:c3:84:e1:78:6f:8c:a5:b4:07:83: b0:16:b2:94:cc:09:41:ec:f1:99:ad:7a:26:32:9b: 31:83:18:78:f2:30:df:f5:d0:86:c6:62:48:5f:a9: f3:a1:c1:30:58:d7:4e:2d:19:7b:2b:9e:eb:4f:40: 0a:2c:2b:63:35:41:67:48:f0:1f:f8:b1:1c:62:a0: 0f:cd:dc:88:76:20:5e:0d:d3:54:a5:2b:c5:52:7e: d6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E3:AA:4A:F8:31:3B:A9:58:7D:1F:E1:1F:20:C6:98:09:6F:E6:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/48892da2-72b4-4796-951e-24c5f6f972b3/48892da2-72b4-4796-951e-24c5f6f972b3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 62989 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:8b:f0:b9:e8:87:2a:cd:65:6c:a3:35:66:3e:68:4a:99:d6: d0:99:a5:f4:d0:10:bc:b9:09:28:c3:d0:32:eb:35:67:de:74: 07:46:38:8a:8c:d0:f0:cc:dc:be:86:bb:5f:e5:2f:95:a1:bc: 83:26:c1:c1:ae:6a:b4:48:75:14:c7:13:de:af:90:6b:70:f6: bc:8a:e1:d3:5b:36:78:49:da:09:e4:29:3c:89:09:af:ee:dc: 9a:e8:9d:f7:19:a4:3d:98:39:a8:01:15:f7:af:31:a5:61:3d: 76:da:4d:11:e8:e5:e1:a0:6f:76:0e:dd:ee:72:d9:b9:61:48: cb:6b:d6:54:22:31:c2:7c:f1:69:62:a5:0d:36:02:33:5e:7c: 26:d1:0b:f1:74:4d:ab:0e:7d:0b:65:08:7c:a3:df:f7:36:52: 32:a7:c2:a3:b7:26:33:f0:c4:e5:19:bc:f4:4e:f4:27:07:05: f4:db:0a:62:14:de:ea:3a:7b:1e:22:a9:ce:d6:1a:5c:a1:5e: b9:01:d2:dc:9d:58:8d:43:e7:27:4a:b3:64:fd:73:61:9a:09: 54:59:42:a7:f7:e0:2a:7e:2a:90:e6:69:8f:7e:b6:31:bc:fb: 71:56:dd:37:24:29:dd:98:78:1c:48:ac:11:ac:78:02:8e:de: 38:79:5a:48 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEzZlQ64UHXHo5Xh4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIxMzEzNDUyM1oXDTI4MDUxODEyNDUyM1owLzEtMCsGA1UEAxMk NDg4OTJkYTItNzJiNC00Nzk2LTk1MWUtMjRjNWY2Zjk3MmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0DERDRB0iQ73LrEeqe73vO1uACM+8w1uvN2 2OD7XxhVP6N9dYRlXJ8z+iCBT7Kj0F1qBQKxChQ3bFqzDVnhRs8VoDH9vZDvoy3U 8xkcY/l9IHZ4VBOLKX/V6BdjuP8/EcVRmW+j5AZSXXtrOznlj4szpQd5PGOJteRT +IsAzuKXSzqj23PLm5H4FomRMC4dZzWed9K9n1QvYxHX4qLpAC7x7VNPlN4T3cOE 4XhvjKW0B4OwFrKUzAlB7PGZrXomMpsxgxh48jDf9dCGxmJIX6nzocEwWNdOLRl7 K57rT0AKLCtjNUFnSPAf+LEcYqAPzdyIdiBeDdNUpSvFUn7WkwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFHjjqkr4MTupWH0f4R8gxpgJb+YqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 ODg5MmRhMi03MmI0LTQ3OTYtOTUxZS0yNGM1ZjZmOTcyYjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzQ4ODkyZGEyLTcyYjQtNDc5Ni05 NTFlLTI0YzVmNmY5NzJiMy80ODg5MmRhMi03MmI0LTQ3OTYtOTUxZS0yNGM1ZjZm OTcyYjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPYNMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAH6L8LnohyrNZWyjNWY+aEqZ1tCZ pfTQELy5CSjD0DLrNWfedAdGOIqM0PDM3L6Gu1/lL5WhvIMmwcGuarRIdRTHE96v kGtw9ryK4dNbNnhJ2gnkKTyJCa/u3JronfcZpD2YOagBFfevMaVhPXbaTRHo5eGg b3YO3e5y2blhSMtr1lQiMcJ88WlipQ02AjNefCbRC/F0TasOfQtlCHyj3/c2UjKn wqO3JjPwxOUZvPRO9CcHBfTbCmIU3uo6ex4iqc7WGlyhXrkB0tydWI1D5ydKs2T9 c2GaCVRZQqf34Cp+KpDmaY9+tjG8+3FW3TckKd2YeBxIrBGseAKO3jh5Wkg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:23:37 2026 by rpki-client