$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer File: 821e279e-176c-4b5d-ad30-b8c9c2340ee0.cer (raw, json) Hash identifier: 8ZwBVWMCy2BAL5vmClPnRQoYCrQS8uHXIoopmhEP4qM= Subject key identifier: F4:7B:F8:5A:79:A4:A5:58:90:6D:8A:80:83:7F:56:8C:AA:89:A9:1A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CCE52793B57FFB063C06E9C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Feb 2026 12:57:20 +0000 Certificate not after: Mon 20 Mar 2028 12:45:23 +0000 Subordinate resources: AS: 398816 IP: 206.109.120.0/21 IP: 2606:dc0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:52:79:3b:57:ff:b0:63:c0:6e:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 9 12:57:20 2026 GMT Not After : Mar 20 12:45:23 2028 GMT Subject: CN=821e279e-176c-4b5d-ad30-b8c9c2340ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:1e:3d:fb:2d:2c:d8:c3:b8:5a:d7:2f:ca:9d: 20:a7:48:0e:ee:5b:22:60:c6:ee:ba:f9:da:2e:01: 79:c9:77:cb:07:91:fd:b8:88:d8:11:e2:e0:2d:a7: 2f:e3:ea:1a:66:43:a2:53:24:10:8a:4f:89:a8:31: d5:68:df:64:c6:29:40:e2:4b:47:f7:65:3a:97:5a: f4:1e:88:9c:d2:57:6c:e6:40:a3:29:a2:84:39:48: 4c:aa:eb:b0:9c:a5:9a:2f:c4:00:3b:ab:d6:35:b7: e6:e5:20:91:f0:73:50:95:9c:4d:6f:d8:93:b6:ea: a5:1a:51:ef:47:63:ba:de:90:88:eb:35:82:41:c1: 52:bc:86:2d:3c:8f:9b:2c:0a:d7:1f:af:9d:74:aa: 8d:4e:f9:f9:66:ba:3b:d6:65:a1:67:42:98:30:62: 03:a5:12:e6:d5:ea:e1:49:7a:fd:04:14:04:1d:72: 97:fc:c9:f0:5d:33:e3:39:46:db:32:4a:c1:77:88: a0:f6:fc:b5:80:79:6e:09:35:77:46:4f:d9:11:10: b0:68:7a:68:58:e6:6f:37:a4:1a:e3:09:a5:67:7b: bf:a2:4b:4a:a5:de:2b:77:77:f4:68:17:da:5f:e7: 0f:fb:ce:bb:08:45:a0:e6:9e:49:74:aa:9b:86:a3: 82:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7B:F8:5A:79:A4:A5:58:90:6D:8A:80:83:7F:56:8C:AA:89:A9:1A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/821e279e-176c-4b5d-ad30-b8c9c2340ee0/821e279e-176c-4b5d-ad30-b8c9c2340ee0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 206.109.120.0/21 IPv6: 2606:dc0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398816 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:b4:cb:1a:9a:3b:12:7c:51:4d:fe:7a:18:d9:b1:3a:56:95: a7:99:95:e9:bb:d8:47:d5:12:3b:e3:7b:03:14:d1:53:68:e4: 7b:c3:49:a8:55:59:58:b3:2f:e2:a4:cf:59:c3:65:f4:a8:a8: a7:c2:33:42:7f:bd:0b:13:21:e6:d7:20:2b:99:35:ca:13:a7: 34:d9:b1:1c:c0:b6:52:9d:52:b6:19:08:c2:93:91:03:f1:85: 33:f0:e9:d2:54:ab:67:e2:58:b4:98:19:91:f1:c8:07:17:27: be:e3:de:b2:5a:67:e5:b0:82:c5:51:d2:60:03:7e:e1:2c:6b: 11:a9:25:80:81:d5:d4:7b:6b:b0:b1:e9:d2:a9:c9:42:5f:42: 72:73:79:e9:97:8a:97:35:95:f2:de:32:9c:7f:72:c8:56:27: 63:dc:55:8b:66:dd:58:43:84:93:12:c5:ac:3c:a4:bd:58:c9: 3c:dc:0a:f5:c2:80:11:c1:09:98:90:c6:13:c4:b9:61:72:a9: 38:61:4c:e9:ef:d5:26:b6:fe:ee:d0:e7:52:4b:e8:fa:31:48: fe:3a:3f:c6:4b:18:65:98:bc:52:69:2b:6a:c7:9f:6b:af:1b: 06:25:fc:ad:2d:fb:61:30:0d:b7:7a:a9:e4:2f:ed:2b:1f:04: 49:34:9e:5f -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEzOUnk7V/+wY8BunIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwOTEyNTcyMFoXDTI4MDMyMDEyNDUyM1owLzEtMCsGA1UEAxMk ODIxZTI3OWUtMTc2Yy00YjVkLWFkMzAtYjhjOWMyMzQwZWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3h49+y0s2MO4Wtcvyp0gp0gO7lsiYMbuuvna LgF5yXfLB5H9uIjYEeLgLacv4+oaZkOiUyQQik+JqDHVaN9kxilA4ktH92U6l1r0 Hoic0lds5kCjKaKEOUhMquuwnKWaL8QAO6vWNbfm5SCR8HNQlZxNb9iTtuqlGlHv R2O63pCI6zWCQcFSvIYtPI+bLArXH6+ddKqNTvn5Zro71mWhZ0KYMGIDpRLm1erh SXr9BBQEHXKX/MnwXTPjOUbbMkrBd4ig9vy1gHluCTV3Rk/ZERCwaHpoWOZvN6Qa 4wmlZ3u/oktKpd4rd3f0aBfaX+cP+867CEWg5p5JdKqbhqOCiwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFPR7+Fp5pKVYkG2KgIN/VoyqiakaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 MjFlMjc5ZS0xNzZjLTRiNWQtYWQzMC1iOGM5YzIzNDBlZTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgyMWUyNzllLTE3NmMtNGI1ZC1h ZDMwLWI4YzljMjM0MGVlMC84MjFlMjc5ZS0xNzZjLTRiNWQtYWQzMC1iOGM5YzIz NDBlZTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPObXgwDQQCAAIwBwMFACYGDcAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhXgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKe0yxqaOxJ8UU3+ehjZsTpWlaeZ lem72EfVEjvjewMU0VNo5HvDSahVWVizL+Kkz1nDZfSoqKfCM0J/vQsTIebXICuZ NcoTpzTZsRzAtlKdUrYZCMKTkQPxhTPw6dJUq2fiWLSYGZHxyAcXJ77j3rJaZ+Ww gsVR0mADfuEsaxGpJYCB1dR7a7Cx6dKpyUJfQnJzeemXipc1lfLeMpx/cshWJ2Pc VYtm3VhDhJMSxaw8pL1YyTzcCvXCgBHBCZiQxhPEuWFyqThhTOnv1Sa2/u7Q51JL 6PoxSP46P8ZLGGWYvFJpK2rHn2uvGwYl/K0t+2EwDbd6qeQv7SsfBEk0nl8= -----END CERTIFICATE-----Generated at Sun Mar 1 22:30:22 2026 by rpki-client