$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer File: 56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer (raw, json) Hash identifier: FWL0MOC2aM/32UZ2A0KJ1iAhnnHFNGcSfcRNa3Uerdk= Subject key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CBADF87BC837111A6B8458C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 13:45:22 +0000 Certificate not after: Sun 07 May 2028 12:45:22 +0000 Subordinate resources: AS: 32327 IP: 68.170.192.0/20 IP: 72.20.192.0/18 IP: 209.183.176.0/20 IP: 2604:2f00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:df:87:bc:83:71:11:a6:b8:45:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 2 13:45:22 2026 GMT Not After : May 7 12:45:22 2028 GMT Subject: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:ef:2a:36:4d:01:45:b6:56:c0:77:b4:14: d2:83:21:29:4a:56:07:e9:64:5b:43:93:05:6b:71: 89:cb:2b:3d:af:5d:bf:5a:f3:5b:95:2c:ec:a8:bd: 49:b1:be:6e:0e:fc:56:87:36:f9:99:8e:04:ca:7b: 42:b2:28:c9:22:35:3e:4b:40:c9:fa:71:c2:63:45: f3:5f:77:8c:93:80:30:56:f7:26:30:33:72:da:0f: ec:11:e2:32:a6:3b:55:a7:d5:08:a5:f3:4c:ba:b3: 74:80:3a:8b:57:7a:95:32:e4:42:b6:9d:e1:cc:ff: 2b:29:90:fa:d8:46:b8:f6:40:3c:a1:b2:16:2b:0e: f6:f3:33:ca:3e:b2:77:08:b8:05:e6:04:50:13:17: 18:0a:8f:eb:ee:bd:40:bf:7f:d5:87:0f:29:7d:30: 5d:ea:7f:c0:15:df:3d:6b:81:be:56:70:9a:22:7b: be:ae:28:7e:b5:47:d0:08:46:4c:5b:bb:6c:c0:63: 34:2f:1c:94:92:63:17:9e:7b:3c:cb:00:ed:8c:9c: 49:18:90:2d:47:e3:dc:61:d1:36:1b:ed:01:2d:29: 8f:56:fc:df:48:68:4a:c1:fd:1b:cf:d6:24:23:c4: ed:42:c4:94:4f:1e:84:f0:e9:ff:e6:e8:51:a9:60: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 68.170.192.0/20 72.20.192.0/18 209.183.176.0/20 IPv6: 2604:2f00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32327 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:83:8f:2f:16:d9:ba:03:73:16:e4:f5:33:c1:55:6b:78:61: 77:70:91:d7:05:e6:99:75:07:a6:2c:6d:c8:4a:cb:b7:5f:66: 06:10:da:1d:a0:ad:75:d4:b3:14:5b:de:a6:1f:69:f6:f1:13: 61:f6:d3:f0:ec:ab:eb:3d:3d:e2:2a:12:32:e3:87:46:e5:b1: 2c:1b:3f:80:a9:50:c7:7a:0d:54:48:97:58:b9:d6:e0:4d:6c: 88:6b:d3:22:ff:e9:91:76:81:cc:d3:11:16:cf:5f:e1:9d:e2: 3e:d5:27:cb:bc:8f:ea:a7:e0:2c:8c:7f:7f:93:8b:a7:94:f1: c3:dd:d0:2c:86:ee:ed:72:88:89:e5:ed:14:d4:5f:e2:a4:d8: b5:a8:c7:cd:ab:13:1f:8f:5a:c8:5b:4c:b1:05:af:69:f7:e3: a3:50:d3:6a:7a:84:59:59:5c:32:67:7c:8e:e1:3d:85:4b:4f: 4a:06:61:7c:2c:99:19:ad:f7:bb:b4:b9:ab:b3:d3:d1:d7:f4: 27:35:7e:ad:62:97:9b:e9:bb:64:cb:d1:e2:93:e7:ca:cd:0f: 9c:da:c3:76:79:5e:7b:a7:a1:76:ec:3a:8d:8b:66:97:25:f2: 86:a2:cf:68:e7:f9:ee:1b:f3:34:9e:07:32:a6:01:c3:76:b4: a7:60:bf:20 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWEy634e8g3ERprhFjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMjEzNDUyMloXDTI4MDUwNzEyNDUyMlowLzEtMCsGA1UEAxMk NTZhMjMzNDYtNWEwZS00OTc2LTliMzMtM2I0ZDFkOTBjZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkbvKjZNAUW2VsB3tBTSgyEpSlYH6WRbQ5MF a3GJyys9r12/WvNblSzsqL1Jsb5uDvxWhzb5mY4EyntCsijJIjU+S0DJ+nHCY0Xz X3eMk4AwVvcmMDNy2g/sEeIypjtVp9UIpfNMurN0gDqLV3qVMuRCtp3hzP8rKZD6 2Ea49kA8obIWKw728zPKPrJ3CLgF5gRQExcYCo/r7r1Av3/Vhw8pfTBd6n/AFd89 a4G+VnCaInu+rih+tUfQCEZMW7tswGM0LxyUkmMXnns8ywDtjJxJGJAtR+PcYdE2 G+0BLSmPVvzfSGhKwf0bz9YkI8TtQsSUTx6E8On/5uhRqWA07QIDAQABo4IENTCC BDEwHQYDVR0OBBYEFL8gMuV714HHwLApmLMzVdFiM+iZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5MGNmYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzU2YTIzMzQ2LTVhMGUtNDk3Ni05 YjMzLTNiNGQxZDkwY2ZhMy81NmEyMzM0Ni01YTBlLTQ5NzYtOWIzMy0zYjRkMWQ5 MGNmYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAREqsADBAZIFMADBATRt7AwDQQCAAIwBwMFACYE LwAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICfkcwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAXIOPLxbZugNz FuT1M8FVa3hhd3CR1wXmmXUHpixtyErLt19mBhDaHaCtddSzFFveph9p9vETYfbT 8Oyr6z094ioSMuOHRuWxLBs/gKlQx3oNVEiXWLnW4E1siGvTIv/pkXaBzNMRFs9f 4Z3iPtUny7yP6qfgLIx/f5OLp5Txw93QLIbu7XKIieXtFNRf4qTYtajHzasTH49a yFtMsQWvaffjo1DTanqEWVlcMmd8juE9hUtPSgZhfCyZGa33u7S5q7PT0df0JzV+ rWKXm+m7ZMvR4pPnys0PnNrDdnlee6ehduw6jYtmlyXyhqLPaOf57hvzNJ4HMqYB w3a0p2C/IA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:16 2026 by rpki-client