$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer File: 8cf12337-8eb8-43a2-a75e-2b01ceb95c39.cer (raw, json) Hash identifier: magJDPWPaob8D/Y/FzR63LtQsp3Z335UI9deETB0NiI= Subject key identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CDF2A6D820C2F9BFC2DDAD300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Feb 2026 13:45:23 +0000 Certificate not after: Sat 20 May 2028 12:45:23 +0000 Subordinate resources: AS: 12281 AS: 14499 AS: 16415 AS: 18452 AS: 19372 AS: 32399 IP: 64.142.128.0/17 IP: 66.196.128.0/18 IP: 69.173.0.0/19 IP: 74.119.136.0/21 IP: 142.192.0.0/16 IP: 170.8.0.0/16 IP: 198.99.155.0/24 IP: 198.153.237.0/24 IP: 208.90.64.0/22 IP: 208.94.8.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:2a:6d:82:0c:2f:9b:fc:2d:da:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 15 13:45:23 2026 GMT Not After : May 20 12:45:23 2028 GMT Subject: CN=8cf12337-8eb8-43a2-a75e-2b01ceb95c39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ff:30:57:ae:a2:72:b9:45:59:7e:85:4d:c2: 8e:e6:77:e5:d9:7c:2c:ab:4e:07:50:d5:51:d1:a1: 51:99:88:30:b1:96:ef:a4:a1:30:35:0a:d4:eb:d1: b0:3f:d2:47:2c:8c:a9:73:34:25:09:8d:56:f3:9c: 77:00:7c:1b:80:28:28:c5:bb:2e:51:0e:06:92:03: 8e:f0:4e:12:f1:8f:ff:25:05:3f:f8:a7:8a:77:65: 4a:13:11:8b:8e:90:d3:d7:46:f0:20:12:ac:2a:62: 13:ae:c5:02:6e:06:a5:ad:17:95:62:ed:d5:8d:61: 23:b5:aa:e9:5f:d0:48:2e:a0:19:c9:4e:da:1f:a9: 81:6a:47:ee:be:f2:04:66:94:55:ff:72:8e:fe:37: 06:54:47:48:8d:9b:27:f8:01:9a:b9:f9:41:d5:95: 20:d4:bb:63:8b:14:90:92:69:98:35:7b:60:04:a2: 22:28:38:c1:26:fd:3c:f7:9c:7f:bc:41:a4:9e:02: ed:51:13:e0:2d:e0:50:ce:94:8b:e2:2d:a0:99:c5: fa:d3:99:40:6f:73:9a:ea:bf:c9:7a:a0:f2:f9:ba: 28:d5:e5:dc:c6:ff:eb:2c:0c:a6:0d:ad:e0:84:08: 95:9d:4b:cf:d4:52:8d:c7:98:b6:05:66:49:05:0e: ad:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:DF:79:84:75:CE:4F:C7:0C:76:C4:5B:15:5E:91:D9:1C:9A:3E:6C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8cf12337-8eb8-43a2-a75e-2b01ceb95c39/8cf12337-8eb8-43a2-a75e-2b01ceb95c39.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.142.128.0/17 66.196.128.0/18 69.173.0.0/19 74.119.136.0/21 142.192.0.0/16 170.8.0.0/16 198.99.155.0/24 198.153.237.0/24 208.90.64.0/22 208.94.8.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12281 14499 16415 18452 19372 32399 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d7:11:a5:98:0e:bf:68:da:68:6d:f2:bf:3a:f2:9c:6d:2e: 01:9c:2e:00:97:c7:03:fa:2e:19:d3:ce:e1:c8:28:5e:a2:48: ef:71:45:ec:3c:12:86:ab:c7:4e:49:eb:35:6b:e2:8e:5c:13: 52:72:fb:02:c4:d9:fb:67:a4:78:75:83:16:59:93:a7:0b:ea: 6b:0e:0a:be:67:5c:38:73:77:bd:38:50:e5:fb:86:f3:fb:b1: 81:c3:98:f7:6b:3f:2d:9e:71:cc:62:1e:0b:01:45:3e:1b:ad: 07:ec:2f:a3:f5:af:cf:a4:26:d3:fd:64:83:3e:eb:4d:f8:9d: 25:67:86:ca:77:7e:03:ff:0b:88:51:3e:5c:16:19:e9:64:f6: 1b:77:6f:07:6f:53:42:c9:83:c3:49:ed:11:f9:04:e8:7a:42: 36:43:94:be:bb:2b:77:df:bc:15:07:e7:f0:c8:d7:0a:bf:51: e6:52:82:18:1f:8d:25:c2:bc:13:ab:45:81:ad:1a:eb:24:50: 5a:49:55:23:ac:05:47:62:b6:2d:8e:34:e7:29:45:a5:8f:6c: c4:97:e9:7c:a3:b6:76:be:7a:f0:a5:59:1c:38:f9:7a:4b:78: ba:af:68:db:ee:e5:69:08:db:74:21:a1:f2:ef:55:7c:1b:a3: 38:d7:5a:fa -----BEGIN CERTIFICATE----- MIIHUDCCBjigAwIBAgIUAQ0Mn0MoWEzfKm2CDC+b/C3a0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIxNTEzNDUyM1oXDTI4MDUyMDEyNDUyM1owLzEtMCsGA1UEAxMk OGNmMTIzMzctOGViOC00M2EyLWE3NWUtMmIwMWNlYjk1YzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/8wV66icrlFWX6FTcKO5nfl2Xwsq04HUNVR 0aFRmYgwsZbvpKEwNQrU69GwP9JHLIypczQlCY1W85x3AHwbgCgoxbsuUQ4GkgOO 8E4S8Y//JQU/+KeKd2VKExGLjpDT10bwIBKsKmITrsUCbgalrReVYu3VjWEjtarp X9BILqAZyU7aH6mBakfuvvIEZpRV/3KO/jcGVEdIjZsn+AGauflB1ZUg1LtjixSQ kmmYNXtgBKIiKDjBJv0895x/vEGkngLtURPgLeBQzpSL4i2gmcX605lAb3Oa6r/J eqDy+boo1eXcxv/rLAymDa3ghAiVnUvP1FKNx5i2BWZJBQ6txQIDAQABo4IEYjCC BF4wHQYDVR0OBBYEFHzfeYR1zk/HDHbEWxVekdkcmj5sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 Y2YxMjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAxY2ViOTVjMzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzhjZjEyMzM3LThlYjgtNDNhMi1h NzVlLTJiMDFjZWI5NWMzOS84Y2YxMjMzNy04ZWI4LTQzYTItYTc1ZS0yYjAxY2Vi OTVjMzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwUwYIKwYBBQUH AQcBAf8ERDBCMEAEAgABMDoDBAdAjoADBAZCxIADBAVFrQADBANKd4gDAwCOwAMD AKoIAwQAxmObAwQAxpntAwQC0FpAAwQD0F4IMC0GCCsGAQUFBwEIAQH/BB4wHKAa MBgCAi/5AgI4owICQB8CAkgUAgJLrAICfo8wVAYDVR0gAQH/BEowSDBGBggrBgEF BQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJj ZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWNcRpZgOv2jaaG3y vzrynG0uAZwuAJfHA/ouGdPO4cgoXqJI73FF7DwShqvHTknrNWvijlwTUnL7AsTZ +2ekeHWDFlmTpwvqaw4KvmdcOHN3vThQ5fuG8/uxgcOY92s/LZ5xzGIeCwFFPhut B+wvo/Wvz6Qm0/1kgz7rTfidJWeGynd+A/8LiFE+XBYZ6WT2G3dvB29TQsmDw0nt EfkE6HpCNkOUvrsrd9+8FQfn8MjXCr9R5lKCGB+NJcK8E6tFga0a6yRQWklVI6wF R2K2LY405ylFpY9sxJfpfKO2dr568KVZHDj5ekt4uq9o2+7laQjbdCGh8u9VfBuj ONda+g== -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:49 2026 by rpki-client