$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer File: 613bdd67-74b5-4268-96e7-b3cbb049d7aa.cer (raw, json) Hash identifier: /IArxYB+eO4aCaaR0vMr3Fxk2SERLz7qinO657tHf6k= Subject key identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D03754F289B01594142741FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Feb 2026 13:45:22 +0000 Certificate not after: Fri 02 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 16801 AS: 46945 AS: 46960 IP: 64.22.91.0/24 IP: 104.255.120.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:75:4f:28:9b:01:59:41:42:74:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 28 13:45:22 2026 GMT Not After : Jun 2 12:45:22 2028 GMT Subject: CN=613bdd67-74b5-4268-96e7-b3cbb049d7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5c:0e:45:b4:39:74:c8:fc:78:3f:39:4c:6b: 91:16:db:74:a2:50:28:b0:c8:66:67:71:e9:95:7a: 00:eb:80:7d:b7:ba:48:18:26:4b:8c:1d:eb:28:3c: 80:8d:5a:4c:f3:47:0d:7c:13:ad:53:32:0b:66:d6: d9:91:e7:ba:69:2f:b8:65:0f:48:3c:97:9e:ce:c9: 81:e4:12:c1:d3:cb:cd:9b:1e:eb:ba:58:46:1a:9a: b4:2f:d4:8e:4b:2f:35:43:1e:ad:82:7f:e1:c0:3b: a9:98:b4:da:5e:c2:1a:34:64:9f:27:68:88:0b:9e: 62:71:bb:f4:50:46:62:06:fd:e7:b6:c7:c2:54:d1: 02:c8:9d:e1:b7:22:37:58:38:a4:ba:a4:f7:95:4b: 1e:c3:ea:78:e2:48:f1:a6:ac:cf:73:b7:90:b9:9b: 65:72:2d:bd:d8:0e:0d:c2:1a:78:f7:88:b6:19:0b: 1f:30:59:4f:b6:2b:c4:58:fb:ad:52:6b:87:ac:eb: 9b:ce:34:82:ba:fa:44:f9:17:12:3b:23:65:e1:5d: d1:cc:8e:97:7f:83:90:1b:e4:14:3f:07:c4:42:a3: 3d:e7:0e:af:b3:30:78:52:50:f5:67:b8:25:23:b9: cd:3e:5e:23:7d:39:57:0a:26:e8:1a:a4:47:40:ef: 27:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4E:D7:BD:F4:3E:F6:0C:7D:D8:0C:9D:2F:FF:08:A7:F4:62:65:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/613bdd67-74b5-4268-96e7-b3cbb049d7aa/613bdd67-74b5-4268-96e7-b3cbb049d7aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.22.91.0/24 104.255.120.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 16801 46945 46960 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:2b:8f:4b:14:fd:5e:2c:8c:04:c0:0a:10:27:8d:f3:bc:9c: 03:28:79:92:a5:49:f4:81:a5:90:29:a6:59:a8:37:a3:c7:74: a3:27:c9:aa:32:02:43:f6:5f:0f:d5:69:0a:92:64:24:68:cd: 4f:b5:a9:0a:79:62:10:ad:76:0e:b4:5b:f8:92:d8:bd:18:76: bd:56:51:c1:cb:3b:af:01:20:d3:28:cc:e2:71:e8:6c:c0:c1: 7b:b5:3b:5d:e6:9b:72:ff:3f:2d:29:98:ad:85:c6:2d:0b:a1: ad:4d:3c:02:97:5a:06:7e:6d:f8:50:5c:82:50:c7:a4:54:e9: 55:0e:9f:75:48:1f:5c:98:45:45:b4:d6:fd:f1:44:86:5f:1a: 00:91:40:d7:74:0d:a4:02:16:ee:5d:4c:43:fc:d5:09:91:8b: 31:80:32:43:4a:61:d1:c1:9b:83:69:15:f7:7e:e8:3a:ec:94: a7:66:bf:cf:45:2f:2b:01:bf:a1:45:a5:c7:51:dd:55:4f:cb: 5f:a5:74:11:95:3d:da:26:1d:ee:90:4a:8f:54:f6:f3:e6:55: e5:75:52:30:29:e7:7c:b2:75:ee:0a:5b:af:cb:d8:7e:9f:ec: f8:21:28:b7:f1:f9:bd:75:fc:c6:46:34:c7:de:ff:b6:d6:07: 55:a8:13:35 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0DdU8omwFZQUJ0H8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIyODEzNDUyMloXDTI4MDYwMjEyNDUyMlowLzEtMCsGA1UEAxMk NjEzYmRkNjctNzRiNS00MjY4LTk2ZTctYjNjYmIwNDlkN2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1wORbQ5dMj8eD85TGuRFtt0olAosMhmZ3Hp lXoA64B9t7pIGCZLjB3rKDyAjVpM80cNfBOtUzILZtbZkee6aS+4ZQ9IPJeezsmB 5BLB08vNmx7rulhGGpq0L9SOSy81Qx6tgn/hwDupmLTaXsIaNGSfJ2iIC55icbv0 UEZiBv3ntsfCVNECyJ3htyI3WDikuqT3lUsew+p44kjxpqzPc7eQuZtlci292A4N whp494i2GQsfMFlPtivEWPutUmuHrOubzjSCuvpE+RcSOyNl4V3RzI6Xf4OQG+QU PwfEQqM95w6vszB4UlD1Z7glI7nNPl4jfTlXCiboGqRHQO8ndwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEBO1730PvYMfdgMnS//CKf0YmV7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0OWQ3YWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzYxM2JkZDY3LTc0YjUtNDI2OC05 NmU3LWIzY2JiMDQ5ZDdhYS82MTNiZGQ2Ny03NGI1LTQyNjgtOTZlNy1iM2NiYjA0 OWQ3YWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBABAFlsDBAJo/3gwIwYIKwYBBQUHAQgBAf8EFDAS oBAwDgICQaECAwC3YQIDALdwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA4rj0sU/V4sjATAChAnjfO8nAMo eZKlSfSBpZApplmoN6PHdKMnyaoyAkP2Xw/VaQqSZCRozU+1qQp5YhCtdg60W/iS 2L0Ydr1WUcHLO68BINMozOJx6GzAwXu1O13mm3L/Py0pmK2Fxi0Loa1NPAKXWgZ+ bfhQXIJQx6RU6VUOn3VIH1yYRUW01v3xRIZfGgCRQNd0DaQCFu5dTEP81QmRizGA MkNKYdHBm4NpFfd+6DrslKdmv89FLysBv6FFpcdR3VVPy1+ldBGVPdomHe6QSo9U 9vPmVeV1UjAp53yyde4KW6/L2H6f7PghKLfx+b11/MZGNMfe/7bWB1WoEzU= -----END CERTIFICATE-----Generated at Sun Mar 1 23:54:03 2026 by rpki-client