$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ddda684-c280-42d3-adf3-24d99c20d918.cer File: 4ddda684-c280-42d3-adf3-24d99c20d918.cer (raw, json) Hash identifier: tuBfFBt+8INKdpPEzA3x++mh3zf0g6b8y8uTCqjlwTA= Subject key identifier: 39:DE:C4:31:AA:A7:9D:C5:82:31:BF:91:6A:71:D1:DC:14:87:13:6C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA48A0D5A59727A9BA22FBC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ddda684-c280-42d3-adf3-24d99c20d918/4ddda684-c280-42d3-adf3-24d99c20d918.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ddda684-c280-42d3-adf3-24d99c20d918/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Jan 2026 13:45:21 +0000 Certificate not after: Sat 29 Apr 2028 12:45:21 +0000 Subordinate resources: AS: 6181 IP: 161.155.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:8a:0d:5a:59:72:7a:9b:a2:2f:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 25 13:45:21 2026 GMT Not After : Apr 29 12:45:21 2028 GMT Subject: CN=4ddda684-c280-42d3-adf3-24d99c20d918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:f5:ef:ab:b6:ec:13:d4:e1:76:d2:9a:23: 75:40:b9:f4:db:01:1c:41:ef:c8:23:46:f4:c7:55: 89:2b:83:05:b7:45:ca:98:9e:1d:b4:59:34:de:7e: c3:c6:72:ec:0a:f8:9b:1f:f6:bb:fc:96:0f:68:61: 0a:f3:96:6f:7e:fc:74:43:3e:d8:af:5c:53:f7:2c: 21:f8:1c:f0:f1:37:c1:0a:47:ec:bf:36:ca:85:a5: 03:70:ce:44:18:c7:b1:ad:64:fc:ce:69:f8:df:4f: d8:cb:8c:7c:5f:ea:f3:31:5a:39:31:56:f6:4f:c8: 92:1a:90:e8:1a:6f:7c:e5:73:85:77:44:fa:be:d7: 9e:0a:8d:70:22:35:a4:ad:1e:85:e6:cc:3e:f0:56: ff:24:f9:79:33:e8:e4:19:d6:05:ae:04:31:38:38: 47:51:e9:5d:92:b0:92:31:15:f6:77:80:63:f0:08: 88:11:da:43:fa:83:c9:15:d0:c9:df:ee:c9:b6:84: 0d:06:83:8c:13:d2:9d:f8:cd:4f:58:1b:1f:30:41: 2b:75:61:4d:e9:ea:82:3e:5a:d9:b2:cb:ad:b6:63: 72:01:61:0a:9b:bf:c6:60:dd:57:ce:64:cf:f7:d3: 2d:dc:5c:23:61:39:ef:8b:3e:a0:e4:ab:fc:12:f9: 65:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DE:C4:31:AA:A7:9D:C5:82:31:BF:91:6A:71:D1:DC:14:87:13:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ddda684-c280-42d3-adf3-24d99c20d918/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ddda684-c280-42d3-adf3-24d99c20d918/4ddda684-c280-42d3-adf3-24d99c20d918.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 161.155.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6181 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:29:0d:fa:2f:fb:be:9c:11:25:7b:96:b4:bc:26:af:87:99: 0c:b6:41:10:e7:fe:fa:25:18:5b:aa:b8:1a:fd:ca:eb:f8:03: d3:84:cb:56:d7:0e:e8:fc:51:30:fb:c0:cf:84:20:b4:82:7a: 9d:f9:1b:65:9f:2f:82:25:38:41:b3:6f:05:50:1e:37:ef:47: f0:8a:c9:ca:39:1e:15:83:63:27:4c:b4:8a:69:b2:33:e9:1a: 2d:17:11:61:cd:ad:38:73:52:54:85:02:1b:c3:74:fd:82:21: b7:34:eb:49:a6:a3:1e:ed:a9:22:e9:33:22:92:15:36:cd:8d: ed:6f:d9:33:9a:16:2b:8c:36:ab:53:d5:6f:a3:aa:8b:c5:ca: d1:7a:61:14:1f:26:42:2d:3b:f2:1c:7e:28:c8:7f:e0:3e:aa: 70:1a:4f:0c:0d:0a:68:7c:14:d1:29:0b:0c:b8:4f:12:f6:d7: ff:2a:66:8c:10:9e:d0:59:14:ce:33:be:47:10:bb:e2:1c:92: 22:14:1a:55:3a:e5:1d:c2:3e:30:1f:e5:d1:89:05:0c:bf:2e: 56:97:94:4c:a8:38:3a:2c:91:bb:7e:9d:1a:46:b4:f6:0a:ac: bb:ce:1c:1d:6f:79:93:9e:c6:e6:31:cf:9e:bd:a8:78:03:c8: 3a:46:25:2c -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWEykig1aWXJ6m6IvvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNTEzNDUyMVoXDTI4MDQyOTEyNDUyMVowLzEtMCsGA1UEAxMk NGRkZGE2ODQtYzI4MC00MmQzLWFkZjMtMjRkOTljMjBkOTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fD176u27BPU4XbSmiN1QLn02wEcQe/II0b0 x1WJK4MFt0XKmJ4dtFk03n7DxnLsCvibH/a7/JYPaGEK85Zvfvx0Qz7Yr1xT9ywh +Bzw8TfBCkfsvzbKhaUDcM5EGMexrWT8zmn430/Yy4x8X+rzMVo5MVb2T8iSGpDo Gm985XOFd0T6vteeCo1wIjWkrR6F5sw+8Fb/JPl5M+jkGdYFrgQxODhHUeldkrCS MRX2d4Bj8AiIEdpD+oPJFdDJ3+7JtoQNBoOME9Kd+M1PWBsfMEErdWFN6eqCPlrZ ssuttmNyAWEKm7/GYN1XzmTP99Mt3FwjYTnviz6g5Kv8Evll7wIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFDnexDGqp53FgjG/kWpx0dwUhxNsMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80 ZGRkYTY4NC1jMjgwLTQyZDMtYWRmMy0yNGQ5OWMyMGQ5MTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzRkZGRhNjg0LWMyODAtNDJkMy1h ZGYzLTI0ZDk5YzIwZDkxOC80ZGRkYTY4NC1jMjgwLTQyZDMtYWRmMy0yNGQ5OWMy MGQ5MTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwChmzAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIY JTBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQBxKQ36L/u+nBEle5a0vCavh5kMtkEQ5/76JRhbqrga/crr+APT hMtW1w7o/FEw+8DPhCC0gnqd+Rtlny+CJThBs28FUB4370fwisnKOR4Vg2MnTLSK abIz6RotFxFhza04c1JUhQIbw3T9giG3NOtJpqMe7aki6TMikhU2zY3tb9kzmhYr jDarU9Vvo6qLxcrRemEUHyZCLTvyHH4oyH/gPqpwGk8MDQpofBTRKQsMuE8S9tf/ KmaMEJ7QWRTOM75HELviHJIiFBpVOuUdwj4wH+XRiQUMvy5Wl5RMqDg6LJG7fp0a RrT2Cqy7zhwdb3mTnsbmMc+evah4A8g6RiUs -----END CERTIFICATE-----Generated at Sun Mar 1 20:23:04 2026 by rpki-client