$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer File: 5c891caa-7dc8-455b-a5e8-5c0370d25b9c.cer (raw, json) Hash identifier: kUIdjUpsQ2ZdZal8uB6Ah4ZanRSC+CQtX3OvSQSSMkE= Subject key identifier: 55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D00AAA1CE58ED08E45B2C1A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Feb 2026 13:45:22 +0000 Certificate not after: Thu 01 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 31748 IP: 149.112.8.0/24 IP: 2001:504:101::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:aa:a1:ce:58:ed:08:e4:5b:2c:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 27 13:45:22 2026 GMT Not After : Jun 1 12:45:22 2028 GMT Subject: CN=5c891caa-7dc8-455b-a5e8-5c0370d25b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:a7:20:a1:d0:5a:e0:c4:d5:90:73:b5:f8: c1:4b:ba:d0:f7:f0:a4:1d:ac:ad:45:54:ed:04:49: cb:fd:50:59:fa:e1:11:54:df:2d:92:0f:c3:76:e0: 63:27:dc:e1:a4:30:c6:a6:7e:f0:ff:6f:0d:75:6d: 74:50:15:19:25:a5:5e:c6:9e:d4:84:57:26:d1:95: 09:f5:39:75:51:41:db:e9:bb:6d:06:22:61:69:e2: d7:de:b7:e9:2a:f6:6c:82:8f:d1:cc:21:3d:f2:35: 92:ef:4b:ba:79:0e:e8:1d:bd:f5:03:c1:da:c2:f6: 9b:10:0e:97:e2:0f:6e:77:76:e8:f8:23:26:51:a3: a1:8f:59:89:c3:4f:c2:d5:fd:b1:c0:18:fc:db:c7: e5:26:ba:ca:7b:19:01:c8:57:05:61:15:1e:ec:fd: a2:61:7a:f8:ca:a2:ea:b5:36:14:4c:78:1b:65:50: 86:23:70:cf:a9:b1:a0:5e:0f:fc:01:19:e9:72:60: 98:b9:1b:84:2b:e6:a3:61:61:6f:47:a7:e9:c8:60: ef:28:6b:1a:a7:73:d7:38:fd:09:1e:b5:59:34:13: 96:a0:63:ca:5d:c1:af:d4:f2:95:d1:8e:d1:db:cd: 76:13:a8:20:7a:34:eb:18:8e:f4:32:74:0d:c3:b0: 87:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:94:ED:4B:E2:93:CF:29:8C:7A:7C:3D:45:3F:40:8B:12:8D:DA:94 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5c891caa-7dc8-455b-a5e8-5c0370d25b9c/5c891caa-7dc8-455b-a5e8-5c0370d25b9c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 149.112.8.0/24 IPv6: 2001:504:101::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31748 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:a3:ad:a1:ea:a7:57:55:df:63:e4:6e:f2:49:46:30:00:4c: ef:08:95:ce:66:30:89:20:19:f2:2d:1a:b0:45:aa:ad:58:3e: 54:50:91:e2:53:ce:7e:0e:1e:e3:9b:70:62:13:26:f6:a7:43: 5f:9f:b4:39:b1:72:a1:f5:8c:38:22:f6:12:ef:7d:9b:ce:91: c3:89:48:63:68:63:51:e0:aa:bc:f1:86:b7:75:6d:3f:93:f0: 8b:ad:86:78:18:bd:b7:52:1b:d5:a4:01:46:b0:15:e4:77:b0: 6c:4f:2d:e9:d9:d8:8b:81:6c:7c:6e:b3:79:3d:30:5e:4d:fb: 43:d5:c1:f8:6c:93:34:9b:00:a5:b3:73:42:03:f9:72:df:19: 79:b6:e8:4c:37:f3:c1:34:98:41:ee:38:ee:0e:2f:10:91:ad: c7:e9:3b:8b:7d:d1:1a:53:4c:1d:3d:f8:b9:bb:48:1b:fb:f2: 39:aa:5f:6c:8c:d4:b0:85:f0:0e:74:5a:bd:9a:9b:0c:d2:f7: 05:48:95:66:f8:a5:5a:71:22:4b:e0:13:21:00:99:bc:8c:cb: 45:30:55:4e:fb:d9:46:b4:97:36:cf:c6:7e:86:b9:93:ef:13: 3c:e6:c8:b0:6b:ec:71:00:64:65:08:05:c8:7d:e1:fb:75:d0: 40:68:21:7f -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0AqqHOWO0I5FssGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIyNzEzNDUyMloXDTI4MDYwMTEyNDUyMlowLzEtMCsGA1UEAxMk NWM4OTFjYWEtN2RjOC00NTViLWE1ZTgtNWMwMzcwZDI1YjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdGnIKHQWuDE1ZBztfjBS7rQ9/CkHaytRVTt BEnL/VBZ+uERVN8tkg/DduBjJ9zhpDDGpn7w/28NdW10UBUZJaVexp7UhFcm0ZUJ 9Tl1UUHb6bttBiJhaeLX3rfpKvZsgo/RzCE98jWS70u6eQ7oHb31A8HawvabEA6X 4g9ud3bo+CMmUaOhj1mJw0/C1f2xwBj828flJrrKexkByFcFYRUe7P2iYXr4yqLq tTYUTHgbZVCGI3DPqbGgXg/8ARnpcmCYuRuEK+ajYWFvR6fpyGDvKGsap3PXOP0J HrVZNBOWoGPKXcGv1PKV0Y7R2812E6ggejTrGI70MnQNw7CHTQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFWU7Uvik88pjHp8PUU/QIsSjdqUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 Yzg5MWNhYS03ZGM4LTQ1NWItYTVlOC01YzAzNzBkMjViOWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzVjODkxY2FhLTdkYzgtNDU1Yi1h NWU4LTVjMDM3MGQyNWI5Yy81Yzg5MWNhYS03ZGM4LTQ1NWItYTVlOC01YzAzNzBk MjViOWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACVcAgwDwQCAAIwCQMHACABBQQBATAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ8BDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQALo62h6qdXVd9j5G7ySUYwAEzv CJXOZjCJIBnyLRqwRaqtWD5UUJHiU85+Dh7jm3BiEyb2p0Nfn7Q5sXKh9Yw4IvYS 732bzpHDiUhjaGNR4Kq88Ya3dW0/k/CLrYZ4GL23UhvVpAFGsBXkd7BsTy3p2diL gWx8brN5PTBeTftD1cH4bJM0mwCls3NCA/ly3xl5tuhMN/PBNJhB7jjuDi8Qka3H 6TuLfdEaU0wdPfi5u0gb+/I5ql9sjNSwhfAOdFq9mpsM0vcFSJVm+KVacSJL4BMh AJm8jMtFMFVO+9lGtJc2z8Z+hrmT7xM85siwa+xxAGRlCAXIfeH7ddBAaCF/ -----END CERTIFICATE-----Generated at Mon Mar 2 00:10:40 2026 by rpki-client