$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74.cer File: 597e66df-62b5-455d-b2ef-76173c167b74.cer (raw, json) Hash identifier: LMRWjIClxPL5BSue1z0+FB0NBmtKWNrYnAKvLl8FAfE= Subject key identifier: 8B:E6:5F:7E:83:6D:46:91:E1:22:23:6C:75:E5:46:2A:7B:88:D9:3B Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C803F2C6024F3BDD01145E200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74/597e66df-62b5-455d-b2ef-76173c167b74.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Jan 2026 13:45:23 +0000 Certificate not after: Sun 16 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 397093 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:3f:2c:60:24:f3:bd:d0:11:45:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 12 13:45:23 2026 GMT Not After : Apr 16 12:45:23 2028 GMT Subject: CN=597e66df-62b5-455d-b2ef-76173c167b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:cc:40:76:33:49:29:ee:f6:75:2d:d2:76:c9: bb:10:d5:90:a5:ba:14:31:ae:b3:26:11:bc:64:79: 4b:1f:56:0e:8a:d2:7e:c7:96:92:7f:d0:12:4f:f8: d0:25:e5:5d:78:9a:9f:3d:6b:47:f8:1f:66:d6:a2: f0:ce:d2:4e:be:67:3a:8c:6d:2a:94:51:fb:cc:9f: eb:46:c7:64:c9:fb:b0:31:2d:61:1b:6a:b4:90:76: 3e:c6:c0:96:b3:5e:3a:3c:0a:af:af:95:4a:b6:a6: 69:e5:4d:1a:53:13:bf:b3:a9:94:ce:78:b1:c8:0a: 27:93:8b:c8:eb:7c:77:1a:ba:4f:54:96:ec:32:a0: a2:ed:25:a1:15:e2:82:2d:03:44:6f:99:6a:53:86: 55:81:11:1a:7f:9d:f2:f7:89:db:03:bc:a5:91:ff: ba:66:fa:88:4d:10:4d:3d:cf:c0:7e:bb:fd:be:17: e6:6e:4a:af:d9:89:52:07:14:7c:77:96:7c:ab:d0: b7:3f:d3:cb:5e:07:53:4c:50:4f:82:f6:fd:63:44: ba:dc:0c:dc:d7:0e:af:47:cf:58:39:ef:9a:fb:b2: bd:65:5e:7f:d6:cb:e3:e9:fb:d5:54:f0:d7:d1:9e: 6c:b9:21:0a:67:79:a1:90:1d:60:6a:02:05:f4:9d: e5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E6:5F:7E:83:6D:46:91:E1:22:23:6C:75:E5:46:2A:7B:88:D9:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/597e66df-62b5-455d-b2ef-76173c167b74/597e66df-62b5-455d-b2ef-76173c167b74.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 397093 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:91:5c:0c:b7:68:2c:72:c4:37:89:39:e5:05:f2:46:bc:9e: 28:86:14:c5:3f:0f:3e:56:86:8a:f2:ff:61:c1:9e:49:6c:bc: 84:22:79:b0:49:6c:51:15:b1:39:1f:17:39:7f:0d:c2:17:a3: 1f:a3:74:03:da:c7:e0:30:59:eb:85:11:d2:36:14:95:22:e4: b3:ac:b4:cf:b4:c0:83:9e:ed:d9:ca:1a:7d:20:8b:00:f7:84: 7a:47:df:9a:4a:62:ba:f2:0a:66:a3:d4:0d:c9:de:b1:b6:8c: 95:e2:ff:de:ef:eb:9b:d8:92:47:6d:f6:88:8e:48:7a:95:c1: bf:9d:2f:e3:47:c4:1b:13:59:13:84:d4:17:bd:5d:e3:04:f0: 73:2d:71:19:49:0e:a3:5a:10:b0:aa:71:a1:81:3d:b6:9b:45: 23:07:a0:fa:02:67:e9:54:90:01:a1:f7:14:f4:94:39:ac:6c: 76:9c:c4:52:78:bb:a2:3e:70:39:52:92:70:a6:05:2e:fd:77: a6:b7:68:30:88:0a:65:8c:55:9b:2e:02:20:f3:03:3b:3c:e2: 4c:77:df:6e:9c:89:a5:96:21:0f:c8:6d:d3:77:ed:12:35:ff: 15:f2:6c:6a:7d:62:62:99:b6:a1:e7:ba:2b:6a:0f:9a:8b:4b: c6:46:e4:91 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEyAPyxgJPO90BFF4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDExMjEzNDUyM1oXDTI4MDQxNjEyNDUyM1owLzEtMCsGA1UEAxMk NTk3ZTY2ZGYtNjJiNS00NTVkLWIyZWYtNzYxNzNjMTY3Yjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+cxAdjNJKe72dS3Sdsm7ENWQpboUMa6zJhG8 ZHlLH1YOitJ+x5aSf9AST/jQJeVdeJqfPWtH+B9m1qLwztJOvmc6jG0qlFH7zJ/r RsdkyfuwMS1hG2q0kHY+xsCWs146PAqvr5VKtqZp5U0aUxO/s6mUznixyAonk4vI 63x3GrpPVJbsMqCi7SWhFeKCLQNEb5lqU4ZVgREaf53y94nbA7ylkf+6ZvqITRBN Pc/Afrv9vhfmbkqv2YlSBxR8d5Z8q9C3P9PLXgdTTFBPgvb9Y0S63Azc1w6vR89Y Oe+a+7K9ZV5/1svj6fvVVPDX0Z5suSEKZ3mhkB1gagIF9J3llwIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFIvmX36DbUaR4SIjbHXlRip7iNk7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 OTdlNjZkZi02MmI1LTQ1NWQtYjJlZi03NjE3M2MxNjdiNzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzU5N2U2NmRmLTYyYjUtNDU1ZC1i MmVmLTc2MTczYzE2N2I3NC81OTdlNjZkZi02MmI1LTQ1NWQtYjJlZi03NjE3M2Mx NjdiNzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBg8lMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIaRXAy3aCxyxDeJOeUF8ka8niiG FMU/Dz5Whory/2HBnklsvIQiebBJbFEVsTkfFzl/DcIXox+jdAPax+AwWeuFEdI2 FJUi5LOstM+0wIOe7dnKGn0giwD3hHpH35pKYrryCmaj1A3J3rG2jJXi/97v65vY kkdt9oiOSHqVwb+dL+NHxBsTWROE1Be9XeME8HMtcRlJDqNaELCqcaGBPbabRSMH oPoCZ+lUkAGh9xT0lDmsbHacxFJ4u6I+cDlSknCmBS79d6a3aDCICmWMVZsuAiDz Azs84kx3326ciaWWIQ/IbdN37RI1/xXybGp9YmKZtqHnuitqD5qLS8ZG5JE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:17 2026 by rpki-client