$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b.cer File: 669f938e-8371-4220-9059-9081449ba23b.cer (raw, json) Hash identifier: 96jlij9BzpQhr+QSlw4bxltteil86xzl9SHK/XZOiu4= Subject key identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CC8D4F232FA8E1192D811FB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Feb 2026 13:45:22 +0000 Certificate not after: Fri 12 May 2028 12:45:22 +0000 Subordinate resources: AS: 46694 IP: 66.209.240.0/20 IP: 152.55.208.0/21 IP: 192.68.190.0/24 IP: 2607:6280::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c8:d4:f2:32:fa:8e:11:92:d8:11:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 7 13:45:22 2026 GMT Not After : May 12 12:45:22 2028 GMT Subject: CN=669f938e-8371-4220-9059-9081449ba23b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:39:db:e0:6e:a0:34:60:24:e1:ff:1a:fa: cb:2c:1c:c5:3e:22:9a:db:7d:26:61:d3:5d:5c:b5: ed:2e:49:65:55:f2:61:bd:9e:19:b7:46:b2:47:09: 28:63:73:db:09:60:13:2c:4f:7d:a3:eb:89:da:b1: 22:2f:fe:59:dc:08:07:f6:6b:74:8d:ae:dc:f1:2e: 26:12:e9:59:ca:c2:2f:63:69:ad:c0:df:03:07:90: 4f:25:2d:3c:1b:13:dd:be:1f:f3:fb:09:12:e1:af: ec:5f:f9:20:f3:c4:bc:c6:61:a8:f2:29:c8:70:31: ac:88:5d:12:c0:f4:36:41:19:49:56:5e:11:33:7a: 71:e9:fa:f4:62:c6:9b:d8:74:e8:75:74:75:af:ab: fa:33:8f:13:2f:98:8d:a0:35:76:22:4c:35:e9:db: 4e:a3:6b:ac:0b:bb:40:81:b2:fd:21:ec:ed:c4:3c: 4a:47:1f:38:d0:56:ed:8e:55:27:d1:7e:8a:7e:67: 2e:a6:e8:6d:ab:dd:39:e0:b6:88:f8:bc:e3:3c:a7: 32:17:b3:d9:c5:f7:7c:f9:9a:dc:cb:a1:3f:85:df: 42:be:ba:52:15:51:7f:09:91:7a:d6:b2:40:b0:23: f2:e0:e3:fc:04:1e:b0:94:39:e4:dd:0a:76:6d:5b: 8e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:34:36:C9:8C:CA:B3:EF:19:91:EA:F7:3C:B0:D9:F1:2F:53:41:C8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/669f938e-8371-4220-9059-9081449ba23b/669f938e-8371-4220-9059-9081449ba23b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 66.209.240.0/20 152.55.208.0/21 192.68.190.0/24 IPv6: 2607:6280::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46694 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:ec:b6:3b:35:0d:9e:a6:56:7b:31:d5:e8:ec:e8:26:21:14: b0:bb:b6:4b:da:14:15:b6:31:34:d9:9a:ab:5d:2d:7f:a6:7d: 3a:33:2b:39:ea:d4:04:15:a2:f2:7b:0c:0c:27:5a:21:14:cf: ee:a2:6c:90:1a:07:77:d9:c9:16:b5:44:8a:b1:d9:d6:f2:17: 3f:4d:98:19:2b:19:80:f3:ca:ab:0c:a0:cf:90:c5:63:93:0f: 5b:b2:76:bc:c9:2b:2c:9d:8d:02:9e:cd:3b:8c:2d:6e:97:89: d8:3c:a9:da:39:27:eb:5c:ad:fd:6d:9d:ec:c4:e6:f5:01:87: e1:92:58:32:5e:08:78:f4:84:7a:17:bc:4f:a6:f0:38:a4:d0: b6:8a:7a:bf:e1:58:19:aa:94:8f:c2:92:de:ef:ff:b2:44:00: cd:d0:09:83:b1:7f:b4:02:34:0a:b5:92:6f:4f:5e:f7:60:09: 5e:89:07:cd:10:cc:71:10:d1:c8:ae:c3:cd:34:2d:c4:65:dc: 70:3b:2a:33:85:b0:fa:c3:b1:42:6f:d7:e3:36:9a:c2:56:ec: ef:84:6b:b6:81:7a:f8:3e:9c:99:a8:c6:ca:3c:48:02:28:97: 05:b4:11:6c:f8:15:ae:0a:70:da:25:65:6a:a3:a5:0c:6b:2a: 72:69:0e:a5 -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWEzI1PIy+o4RktgR+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwNzEzNDUyMloXDTI4MDUxMjEyNDUyMlowLzEtMCsGA1UEAxMk NjY5ZjkzOGUtODM3MS00MjIwLTkwNTktOTA4MTQ0OWJhMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDg52+BuoDRgJOH/GvrLLBzFPiKa230mYdNd XLXtLkllVfJhvZ4Zt0ayRwkoY3PbCWATLE99o+uJ2rEiL/5Z3AgH9mt0ja7c8S4m EulZysIvY2mtwN8DB5BPJS08GxPdvh/z+wkS4a/sX/kg88S8xmGo8inIcDGsiF0S wPQ2QRlJVl4RM3px6fr0Ysab2HTodXR1r6v6M48TL5iNoDV2Ikw16dtOo2usC7tA gbL9IeztxDxKRx840FbtjlUn0X6Kfmcupuhtq9054LaI+LzjPKcyF7PZxfd8+Zrc y6E/hd9CvrpSFVF/CZF61rJAsCPy4OP8BB6wlDnk3Qp2bVuOgwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFNA0NsmMyrPvGZHq9zyw2fEvU0HIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5YmEyM2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzY2OWY5MzhlLTgzNzEtNDIyMC05 MDU5LTkwODE0NDliYTIzYi82NjlmOTM4ZS04MzcxLTQyMjAtOTA1OS05MDgxNDQ5 YmEyM2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBARC0fADBAOYN9ADBADARL4wDQQCAAIwBwMFACYH YoAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALZmMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAbstjs1DZ6m Vnsx1ejs6CYhFLC7tkvaFBW2MTTZmqtdLX+mfTozKznq1AQVovJ7DAwnWiEUz+6i bJAaB3fZyRa1RIqx2dbyFz9NmBkrGYDzyqsMoM+QxWOTD1uydrzJKyydjQKezTuM LW6Xidg8qdo5J+tcrf1tnezE5vUBh+GSWDJeCHj0hHoXvE+m8Dik0LaKer/hWBmq lI/Ckt7v/7JEAM3QCYOxf7QCNAq1km9PXvdgCV6JB80QzHEQ0ciuw800LcRl3HA7 KjOFsPrDsUJv1+M2msJW7O+Ea7aBevg+nJmoxso8SAIolwW0EWz4Fa4KcNolZWqj pQxrKnJpDqU= -----END CERTIFICATE-----Generated at Sun Mar 1 22:40:04 2026 by rpki-client