$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d.cer File: 6dabfd0c-f982-470b-a430-b95c3c76868d.cer (raw, json) Hash identifier: gNIA2xNwZnlO5+j2fXRrwTBiKf4fBgYwxNgrQDK9jOQ= Subject key identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CB814D6E9B181DCE81CF70F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 01 Feb 2026 13:45:21 +0000 Certificate not after: Sat 06 May 2028 12:45:21 +0000 Subordinate resources: AS: 20101 IP: 199.192.180.0/22 IP: 216.18.240.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:14:d6:e9:b1:81:dc:e8:1c:f7:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 1 13:45:21 2026 GMT Not After : May 6 12:45:21 2028 GMT Subject: CN=6dabfd0c-f982-470b-a430-b95c3c76868d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:8e:7d:b3:d8:34:ca:e5:03:7d:43:df:b2: 8a:11:0b:2c:d1:3c:2c:47:83:7e:13:05:62:97:d0: 0b:4d:5c:1c:88:a9:8e:82:e5:18:eb:70:19:1f:f3: 09:a4:46:9a:11:5e:da:88:1e:e9:fc:f0:23:4b:8c: b9:80:ef:35:d5:69:83:d1:db:01:02:80:60:e7:1a: 4a:a6:48:54:d7:19:b7:bb:92:be:b7:6f:2a:dc:1c: ca:07:81:58:d3:5c:63:f2:09:5a:63:a2:3b:08:1e: e3:91:2e:51:56:03:a4:63:a3:18:d9:87:2d:57:80: 9f:5c:84:9d:b4:64:db:2f:2a:ef:ed:03:b3:35:4a: e1:ab:9c:b6:90:0f:93:6e:3d:97:86:af:2a:5f:61: ae:96:96:14:10:80:0c:b9:0d:23:a5:98:9e:be:04: 4c:79:3c:a0:37:a5:7e:f1:50:1f:dd:99:11:9e:3d: 64:06:b2:d0:22:85:5e:57:27:0a:14:7e:d1:ed:04: 5a:f4:fb:4c:4a:8b:28:1a:9d:43:a1:48:ce:ec:d6: e4:24:28:97:de:26:f4:4f:62:71:8e:7c:48:be:a9: cf:42:a7:bd:cd:2f:0b:2f:a8:5c:58:ea:af:91:c8: 2f:eb:f9:92:e4:fe:c3:f6:85:f1:39:c4:82:00:aa: 08:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FC:7D:6F:B5:3D:A7:80:D2:95:D3:4B:99:39:96:C9:8A:63:D6:6E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6dabfd0c-f982-470b-a430-b95c3c76868d/6dabfd0c-f982-470b-a430-b95c3c76868d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.192.180.0/22 216.18.240.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20101 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:26:f9:38:68:3c:21:48:60:5f:1c:9d:a1:1b:5a:55:4a:ad: 38:ee:eb:6e:26:11:20:72:3d:77:0f:8d:0d:42:b1:cc:c6:cf: c0:79:1b:94:50:01:b2:64:77:54:2a:a1:1b:86:0e:5d:12:e4: 7b:64:67:82:80:88:01:c2:8c:28:d4:ec:9f:5a:dc:d7:fa:8f: 0c:d2:48:81:94:6c:78:f3:6a:65:ee:9c:9d:43:63:fd:28:0c: 45:ee:dd:e9:d9:73:88:55:c9:c8:82:29:17:98:d1:22:8f:64: e4:49:0f:6f:e9:fa:43:5a:8b:a6:db:aa:6c:36:1b:18:14:2e: d1:58:e7:fa:2e:d8:d8:de:38:bb:71:44:a0:0b:7d:90:fe:ac: 45:4e:71:09:a4:91:05:6d:2f:5f:69:43:62:fb:82:81:ee:e0: db:05:59:54:6f:88:4e:2f:8b:f7:ff:d9:65:1d:d3:c2:55:5e: d4:21:ee:b9:b2:ae:75:70:dc:27:99:37:d5:f7:48:8f:cb:6f: 2d:f6:2e:12:a7:e7:3c:0b:c0:40:23:15:ba:55:eb:95:d9:5f: 04:70:f6:0f:de:16:55:e3:5b:a5:02:68:3c:38:12:d4:e5:8e: 50:a2:8a:cc:e3:4e:93:eb:a6:64:4f:f5:bb:a8:56:05:57:99: ad:21:6a:2d -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEy4FNbpsYHc6Bz3D4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMTEzNDUyMVoXDTI4MDUwNjEyNDUyMVowLzEtMCsGA1UEAxMk NmRhYmZkMGMtZjk4Mi00NzBiLWE0MzAtYjk1YzNjNzY4NjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKGOfbPYNMrlA31D37KKEQss0TwsR4N+EwVi l9ALTVwciKmOguUY63AZH/MJpEaaEV7aiB7p/PAjS4y5gO811WmD0dsBAoBg5xpK pkhU1xm3u5K+t28q3BzKB4FY01xj8glaY6I7CB7jkS5RVgOkY6MY2YctV4CfXISd tGTbLyrv7QOzNUrhq5y2kA+Tbj2Xhq8qX2GulpYUEIAMuQ0jpZievgRMeTygN6V+ 8VAf3ZkRnj1kBrLQIoVeVycKFH7R7QRa9PtMSosoGp1DoUjO7NbkJCiX3ib0T2Jx jnxIvqnPQqe9zS8LL6hcWOqvkcgv6/mS5P7D9oXxOcSCAKoITQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFHD8fW+1PaeA0pXTS5k5lsmKY9ZuMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82 ZGFiZmQwYy1mOTgyLTQ3MGItYTQzMC1iOTVjM2M3Njg2OGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzZkYWJmZDBjLWY5ODItNDcwYi1h NDMwLWI5NWMzYzc2ODY4ZC82ZGFiZmQwYy1mOTgyLTQ3MGItYTQzMC1iOTVjM2M3 Njg2OGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBALHwLQDBATYEvAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICToUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEASib5OGg8IUhgXxydoRtaVUqtOO7rbiYRIHI9dw+N DUKxzMbPwHkblFABsmR3VCqhG4YOXRLke2RngoCIAcKMKNTsn1rc1/qPDNJIgZRs ePNqZe6cnUNj/SgMRe7d6dlziFXJyIIpF5jRIo9k5EkPb+n6Q1qLptuqbDYbGBQu 0Vjn+i7Y2N44u3FEoAt9kP6sRU5xCaSRBW0vX2lDYvuCge7g2wVZVG+ITi+L9//Z ZR3TwlVe1CHuubKudXDcJ5k31fdIj8tvLfYuEqfnPAvAQCMVulXrldlfBHD2D94W VeNbpQJoPDgS1OWOUKKKzONOk+umZE/1u6hWBVeZrSFqLQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:13 2026 by rpki-client