$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960.cer File: 4d86c782-c9fe-4446-9e6e-7812e6590960.cer (raw, json) Hash identifier: d7w3ScB0zQda/i2Vfb5PgNnzJlSEhqxLskyIESpzr/g= Subject key identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CD9950F4CD261D8A0817923C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Feb 2026 13:45:23 +0000 Certificate not after: Thu 18 May 2028 12:45:23 +0000 Subordinate resources: IP: 144.80.0.0/16 IP: 192.150.225.0/24 IP: 192.153.123.0/24 IP: 192.231.220.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:95:0f:4c:d2:61:d8:a0:81:79:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 13 13:45:23 2026 GMT Not After : May 18 12:45:23 2028 GMT Subject: CN=4d86c782-c9fe-4446-9e6e-7812e6590960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:15:8f:0e:60:2b:7b:34:a5:92:90:45:97:41: dc:b6:8d:4a:39:44:90:9b:34:97:95:0f:f3:78:c8: d8:41:0e:68:73:47:7a:db:7d:7f:66:0c:bd:25:af: 4c:5d:2f:7e:7d:d2:7b:3f:f5:5c:08:9d:cb:5d:3a: 2e:40:56:30:fd:81:3b:a8:f7:bf:f2:6e:a4:7a:82: 40:16:9e:bf:f9:99:fd:1e:96:57:28:1e:2e:35:2b: da:67:d1:8e:41:54:64:7e:e6:13:9a:94:7b:02:0e: 28:08:e4:eb:a8:aa:72:1c:44:97:8e:71:a4:14:a1: e0:dc:76:c9:ef:fc:f7:29:b7:f5:9e:8a:18:84:88: 49:3a:bc:3d:d9:cd:3d:db:f1:8e:be:16:75:da:ce: 6e:65:24:86:0b:88:c0:22:c8:89:0d:65:2a:e2:2d: 54:84:e6:f2:b5:f7:ca:64:48:13:c7:11:18:97:64: 65:1e:5c:1d:25:6e:0b:90:2d:d5:10:42:56:ad:fa: a3:14:20:d1:1b:17:dc:07:eb:a1:14:bb:eb:f2:2f: fe:f3:0d:2e:50:24:7a:96:52:1c:53:13:23:ec:6f: 3d:20:45:46:60:76:a9:a8:fc:90:31:c2:5e:ae:93: d0:33:a5:5a:15:17:f2:ed:91:d8:32:62:b6:55:91: 83:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:63:39:90:FC:7E:AA:1E:34:7C:53:0F:F3:56:4C:2F:1B:91:07:48 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d86c782-c9fe-4446-9e6e-7812e6590960/4d86c782-c9fe-4446-9e6e-7812e6590960.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 144.80.0.0/16 192.150.225.0/24 192.153.123.0/24 192.231.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:c7:54:d3:84:3d:ec:e2:1e:80:ad:fa:f6:0e:fe:c3:b2:34: 28:f0:d2:b8:cf:c7:30:61:3b:a0:f9:31:b6:5f:d5:85:32:9a: eb:99:84:ef:92:3e:79:e5:6f:50:7d:9a:bd:40:19:be:0f:85: 93:14:9d:67:70:a1:f5:53:c1:56:69:f7:42:66:7d:87:3b:53: 06:40:d0:85:48:86:44:a4:45:ff:70:32:9a:03:a1:46:05:a7: 01:a2:65:0c:eb:ed:b3:40:f4:a5:85:cb:3e:44:3a:9e:a0:fc: 1f:44:47:b5:97:80:8d:64:56:72:f5:d5:7e:e6:3a:79:43:79: fb:aa:e8:07:a3:35:2c:e3:51:3b:94:ee:f6:19:b1:bb:93:87: 08:85:95:ba:f9:d1:08:64:13:ac:22:05:5b:f3:9d:bf:cb:ee: 9d:3e:f4:47:11:cc:a2:11:db:f5:75:5b:f9:d4:ac:ee:db:d2: 16:a5:7f:91:26:41:32:d1:c8:38:ce:76:75:af:13:9d:68:59: 85:2c:03:d7:0a:c5:5a:5e:a5:31:16:f1:6a:ee:d5:80:70:d0: 7c:cd:e9:8e:75:da:6e:15:4c:5e:58:7b:c3:75:79:86:a2:f4: 3e:df:f5:2a:94:13:35:c0:7c:f5:32:b3:d7:ba:bf:c0:29:fb: 33:65:bd:83 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEzZlQ9M0mHYoIF5I8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIxMzEzNDUyM1oXDTI4MDUxODEyNDUyM1owLzEtMCsGA1UEAxMk NGQ4NmM3ODItYzlmZS00NDQ2LTllNmUtNzgxMmU2NTkwOTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxWPDmArezSlkpBFl0Hcto1KOUSQmzSXlQ/z eMjYQQ5oc0d6231/Zgy9Ja9MXS9+fdJ7P/VcCJ3LXTouQFYw/YE7qPe/8m6keoJA Fp6/+Zn9HpZXKB4uNSvaZ9GOQVRkfuYTmpR7Ag4oCOTrqKpyHESXjnGkFKHg3HbJ 7/z3Kbf1nooYhIhJOrw92c092/GOvhZ12s5uZSSGC4jAIsiJDWUq4i1UhObytffK ZEgTxxEYl2RlHlwdJW4LkC3VEEJWrfqjFCDRGxfcB+uhFLvr8i/+8w0uUCR6llIc UxMj7G89IEVGYHapqPyQMcJerpPQM6VaFRfy7ZHYMmK2VZGDnwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFOFjOZD8fqoeNHxTD/NWTC8bkQdIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 ZDg2Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEyZTY1OTA5NjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzRkODZjNzgyLWM5ZmUtNDQ0Ni05 ZTZlLTc4MTJlNjU5MDk2MC80ZDg2Yzc4Mi1jOWZlLTQ0NDYtOWU2ZS03ODEyZTY1 OTA5NjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMB0EAgABMBcDAwCQUAMEAMCW4QMEAMCZewMEAMDn3DBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQADx1TThD3s4h6Arfr2Dv7DsjQo8NK4z8cwYTug+TG2X9WFMprrmYTvkj555W9Q fZq9QBm+D4WTFJ1ncKH1U8FWafdCZn2HO1MGQNCFSIZEpEX/cDKaA6FGBacBomUM 6+2zQPSlhcs+RDqeoPwfREe1l4CNZFZy9dV+5jp5Q3n7qugHozUs41E7lO72GbG7 k4cIhZW6+dEIZBOsIgVb852/y+6dPvRHEcyiEdv1dVv51Kzu29IWpX+RJkEy0cg4 znZ1rxOdaFmFLAPXCsVaXqUxFvFq7tWAcNB8zemOddpuFUxeWHvDdXmGovQ+3/Uq lBM1wHz1MrPXur/AKfszZb2D -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:21 2026 by rpki-client