$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce.cer File: 4a81e924-7e18-4312-95fd-09d6d0b08bce.cer (raw, json) Hash identifier: NoNt2DiEwQmxegozNzljG35tvqUtzP9DmRRdltbAimc= Subject key identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CCD04F9F0F35B2F36273B7A80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Feb 2026 01:45:22 +0000 Certificate not after: Sun 14 May 2028 00:45:22 +0000 Subordinate resources: IP: 207.167.108.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cd:04:f9:f0:f3:5b:2f:36:27:3b:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 9 01:45:22 2026 GMT Not After : May 14 00:45:22 2028 GMT Subject: CN=4a81e924-7e18-4312-95fd-09d6d0b08bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5c:23:c5:e2:e7:6e:99:b5:78:fc:1e:7c:bf: b9:37:88:64:6b:cf:55:74:2f:26:7b:80:68:d2:e2: 01:93:4a:47:71:29:a8:37:ee:db:27:23:29:9e:7d: 29:47:a9:2e:10:55:ce:29:9f:ba:c2:e0:25:93:ee: f6:bf:25:96:7a:50:53:b0:0a:98:54:ad:29:92:9c: 7c:96:ec:ca:66:7d:e7:4a:f4:46:7a:cf:45:50:db: 09:48:88:fe:02:64:a4:f5:68:3a:ea:f9:8e:56:6e: fd:d9:a6:ec:c1:f5:01:4e:83:91:4f:41:c9:86:c9: a4:6a:ea:a0:3a:88:83:20:bf:cd:e0:7b:e2:3a:ba: 36:85:dc:5b:7f:4c:d7:05:26:a2:d3:1b:03:d9:ea: 6c:09:6f:78:04:08:a5:a7:e3:93:b0:76:f7:b4:c6: f9:1e:fc:cc:60:b4:73:d6:91:9e:a7:47:f7:c5:73: 35:58:10:30:73:3d:e2:52:5b:ed:31:5f:a3:71:40: cc:06:23:cb:0a:b4:e8:87:f6:0b:7a:70:2c:fa:e0: 9a:71:1d:c5:d1:40:78:7e:fb:23:a1:4d:f1:95:87: cf:8d:ff:8f:8c:69:09:e7:24:a6:bb:ee:ae:53:18: 4c:f0:9d:a4:4d:43:9c:d0:38:0c:52:81:3c:4e:b1: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:97:1D:92:B7:90:2A:45:99:91:58:D6:D6:F9:0C:FA:A5:76:46:59 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4a81e924-7e18-4312-95fd-09d6d0b08bce/4a81e924-7e18-4312-95fd-09d6d0b08bce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 207.167.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c5:14:65:2e:f4:78:b2:b0:b2:2c:c0:b7:3c:bb:f0:88:e4: c9:c0:03:2c:65:a8:b2:a3:9a:50:2e:f8:0e:a1:0c:1f:53:36: 25:5d:97:92:28:1d:bc:e0:70:eb:46:16:ac:80:fd:72:db:ea: 11:41:de:09:f7:6f:f5:08:1e:1f:46:35:8e:ad:b3:38:f0:fb: 8f:36:66:81:a4:c9:b4:d7:09:3b:c4:9e:86:ec:db:85:30:f9: 1f:c3:fc:40:e5:bc:84:9a:a0:42:02:f8:8a:1c:af:cc:5c:ae: e1:03:a3:21:38:10:a6:a0:6b:1f:74:6f:89:87:3a:e9:3e:c7: 39:9c:ec:b9:29:d0:74:ee:25:f1:0c:40:52:f4:bc:ed:4d:b8: 21:69:11:2b:d1:1d:24:db:73:7b:59:13:28:1a:b6:c1:ac:3b: 70:04:56:db:c4:ca:05:8c:19:80:50:2a:7c:b6:e8:e5:9c:69: b4:eb:fd:55:f0:ab:95:a6:27:c1:13:99:df:a6:c5:32:27:b2: d1:a9:f0:8e:8c:f7:5d:e9:4d:83:48:46:6b:06:03:44:ac:e1: 72:03:8a:1f:8a:0d:ad:a5:7a:f5:36:52:12:fd:8b:40:e9:a9: dc:35:15:56:f7:c1:be:66:9d:7c:ad:ba:df:f5:da:de:e0:8f: 80:3d:6c:85 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzNBPnw81svNic7eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwOTAxNDUyMloXDTI4MDUxNDAwNDUyMlowLzEtMCsGA1UEAxMk NGE4MWU5MjQtN2UxOC00MzEyLTk1ZmQtMDlkNmQwYjA4YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFwjxeLnbpm1ePwefL+5N4hka89VdC8me4Bo 0uIBk0pHcSmoN+7bJyMpnn0pR6kuEFXOKZ+6wuAlk+72vyWWelBTsAqYVK0pkpx8 luzKZn3nSvRGes9FUNsJSIj+AmSk9Wg66vmOVm792abswfUBToORT0HJhsmkauqg OoiDIL/N4HviOro2hdxbf0zXBSai0xsD2epsCW94BAilp+OTsHb3tMb5HvzMYLRz 1pGep0f3xXM1WBAwcz3iUlvtMV+jcUDMBiPLCrToh/YLenAs+uCacR3F0UB4fvsj oU3xlYfPjf+PjGkJ5ySmu+6uUxhM8J2kTUOc0DgMUoE8TrEpgwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDOXHZK3kCpFmZFY1tb5DPqldkZZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 YTgxZTkyNC03ZTE4LTQzMTItOTVmZC0wOWQ2ZDBiMDhiY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzRhODFlOTI0LTdlMTgtNDMxMi05 NWZkLTA5ZDZkMGIwOGJjZS80YTgxZTkyNC03ZTE4LTQzMTItOTVmZC0wOWQ2ZDBi MDhiY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALPp2wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZcUUZS70eLKwsizAtzy7 8IjkycADLGWosqOaUC74DqEMH1M2JV2XkigdvOBw60YWrID9ctvqEUHeCfdv9Qge H0Y1jq2zOPD7jzZmgaTJtNcJO8SehuzbhTD5H8P8QOW8hJqgQgL4ihyvzFyu4QOj ITgQpqBrH3RviYc66T7HOZzsuSnQdO4l8QxAUvS87U24IWkRK9EdJNtze1kTKBq2 waw7cARW28TKBYwZgFAqfLbo5ZxptOv9VfCrlaYnwROZ36bFMiey0anwjoz3XelN g0hGawYDRKzhcgOKH4oNraV69TZSEv2LQOmp3DUVVvfBvmadfK263/Xa3uCPgD1s hQ== -----END CERTIFICATE-----Generated at Sun Mar 1 22:28:16 2026 by rpki-client