$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer File: 9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer (raw, json) Hash identifier: WuLI60LutNxNi/zLlEoNQL6vhtZ5WA1Aoj93Qll/ols= Subject key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C995F51D4B57CDAD574885E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Jan 2026 13:45:22 +0000 Certificate not after: Tue 25 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 25828 AS: 54885 AS: 394217 AS: 395371 IP: 192.102.16.0/24 IP: 192.207.45.0/24 IP: 2601:3000::/28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:99:5f:51:d4:b5:7c:da:d5:74:88:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 21 13:45:22 2026 GMT Not After : Apr 25 12:45:22 2028 GMT Subject: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:68:c1:f5:31:a7:e9:63:25:61:b9:c6:b1:f3: 19:5d:f5:1a:22:3e:94:c5:94:ef:e8:05:40:c4:1e: a0:4b:96:6b:80:d2:87:de:cb:21:b6:0e:05:e9:9c: 49:96:61:a4:a6:16:5b:54:0e:21:e4:95:fb:5e:1b: c1:3a:d3:4a:29:fa:e2:38:c6:53:61:df:16:7c:dd: 6e:1a:8f:96:05:8a:ac:fd:0b:16:40:6f:de:ca:90: 36:89:83:aa:a2:95:ed:87:e4:5a:fd:4e:a7:4d:fe: bc:bf:5c:5c:ac:61:07:4a:6f:3a:06:52:59:fd:29: e1:ff:4c:8b:df:38:63:b9:ac:0d:a1:46:df:3f:56: f6:6a:d3:5b:3c:70:e2:63:6e:4d:d3:56:ca:5c:e7: 23:36:55:5f:9d:3e:30:9c:4f:2d:08:8b:da:fc:67: bb:9e:e6:2d:81:51:7e:2e:fe:d3:fe:44:74:55:a3: 6d:9c:2c:4e:57:20:b0:c1:a4:5b:61:6a:0b:2f:63: 55:b1:27:25:27:81:00:6e:f4:17:c3:76:44:d2:b3: e2:8d:41:bb:11:d7:20:98:37:38:f8:a0:78:5c:b3: ae:7b:4c:9d:3f:f9:f5:b5:6c:dd:f4:17:8d:fd:a4: fe:18:69:55:f4:51:e0:59:c9:b1:24:41:bd:59:34: 05:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.102.16.0/24 192.207.45.0/24 IPv6: 2601:3000::/28 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25828 54885 394217 395371 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:12:04:78:b9:4a:96:79:0b:44:3f:08:a6:48:10:c1:90:3a: 6c:25:da:6f:6e:64:88:0b:94:15:45:cb:43:52:80:f7:54:c2: 5e:77:da:bc:49:32:0d:b3:1d:38:28:c4:e6:3c:e7:66:91:19: dd:80:15:b4:3b:c1:c5:cb:8c:22:b4:5e:7e:21:5f:c6:1a:6a: d2:5e:00:e4:47:bf:79:02:f9:d2:6a:b4:29:32:50:1f:94:86: 39:a0:a1:b2:e6:63:b2:2a:76:a9:97:e2:b6:c2:1a:9e:e8:ae: d3:82:cb:57:87:5f:a6:54:a2:c8:a1:89:b3:16:4d:96:16:7b: 92:c0:b9:88:b4:fc:03:c0:b3:15:60:7d:c8:c4:4d:4e:dd:c9: e9:ca:64:25:d2:0d:ef:ef:a1:ff:f6:65:8f:29:37:97:81:f7: 41:3e:1c:c6:8b:b4:25:ad:68:86:69:33:58:83:8a:2d:62:ab: 7d:2c:55:b4:16:04:61:0a:80:49:56:48:c6:de:bc:84:e1:6b: 58:1a:a3:c9:fa:3f:2a:99:e5:f5:34:2a:79:9a:4f:0a:3e:b5: 34:ed:88:2f:da:c1:24:2c:3f:5e:dc:f5:4d:d6:14:b8:b9:c2: ed:55:cf:b8:97:5d:90:4d:77:46:66:52:6d:2a:f0:82:12:cf: 80:82:77:07 -----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIUAQ0Mn0MoWEyZX1HUtXza1XSIXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyMTEzNDUyMloXDTI4MDQyNTEyNDUyMlowLzEtMCsGA1UEAxMk OWE2MzYxZDItYmNlNy00MDlhLThmMTktZGRkODFhMWY2MjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmjB9TGn6WMlYbnGsfMZXfUaIj6UxZTv6AVA xB6gS5ZrgNKH3sshtg4F6ZxJlmGkphZbVA4h5JX7XhvBOtNKKfriOMZTYd8WfN1u Go+WBYqs/QsWQG/eypA2iYOqopXth+Ra/U6nTf68v1xcrGEHSm86BlJZ/Snh/0yL 3zhjuawNoUbfP1b2atNbPHDiY25N01bKXOcjNlVfnT4wnE8tCIva/Ge7nuYtgVF+ Lv7T/kR0VaNtnCxOVyCwwaRbYWoLL2NVsSclJ4EAbvQXw3ZE0rPijUG7EdcgmDc4 +KB4XLOue0ydP/n1tWzd9BeN/aT+GGlV9FHgWcmxJEG9WTQFDQIDAQABo4IEPjCC BDowHQYDVR0OBBYEFO2iRk5X7RdmPYywL2GL9HhqS1u5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 YTYzNjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4MWExZjYyNDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzlhNjM2MWQyLWJjZTctNDA5YS04 ZjE5LWRkZDgxYTFmNjI0OS85YTYzNjFkMi1iY2U3LTQwOWEtOGYxOS1kZGQ4MWEx ZjYyNDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBADAZhADBADAzy0wDQQCAAIwBwMFBCYBMAAwKAYI KwYBBQUHAQgBAf8EGTAXoBUwEwICZOQCAwDWZQIDBgPpAgMGCGswVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA RBIEeLlKlnkLRD8IpkgQwZA6bCXab25kiAuUFUXLQ1KA91TCXnfavEkyDbMdOCjE 5jznZpEZ3YAVtDvBxcuMIrRefiFfxhpq0l4A5Ee/eQL50mq0KTJQH5SGOaChsuZj sip2qZfitsIanuiu04LLV4dfplSiyKGJsxZNlhZ7ksC5iLT8A8CzFWB9yMRNTt3J 6cpkJdIN7++h//Zljyk3l4H3QT4cxou0Ja1ohmkzWIOKLWKrfSxVtBYEYQqASVZI xt68hOFrWBqjyfo/Kpnl9TQqeZpPCj61NO2IL9rBJCw/Xtz1TdYUuLnC7VXPuJdd kE13RmZSbSrwghLPgIJ3Bw== -----END CERTIFICATE-----Generated at Mon Mar 2 00:15:03 2026 by rpki-client