$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer File: ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.cer (raw, json) Hash identifier: ZpDougDlQhBErkj7n4Cqopde6ccCjxAMXrz5Y0RzNGw= Subject key identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C803F2C9E74782DC0DC9B3740 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 12 Jan 2026 13:45:23 +0000 Certificate not after: Sun 16 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 23368 IP: 199.66.76.0/22 IP: 2602:fa60::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:80:3f:2c:9e:74:78:2d:c0:dc:9b:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 12 13:45:23 2026 GMT Not After : Apr 16 12:45:23 2028 GMT Subject: CN=ab3f3ae8-1db7-413e-9713-ab05c3fa5d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:8f:eb:c5:2d:3c:39:55:0e:fb:b1:f5:e1:b1: 21:e8:2e:5e:db:e5:82:ac:9d:5a:50:fd:1d:1c:f5: 9f:a4:bd:9e:0b:f0:5f:9c:14:df:7c:d4:94:87:06: e0:23:ef:ce:12:de:ef:9e:d6:c6:65:a1:1e:a4:56: a9:99:75:48:b7:78:72:a7:f9:c0:56:aa:2f:47:dd: 22:1f:8f:72:70:8e:47:18:b7:4c:1e:c0:e6:9c:67: a3:bd:f1:2a:a9:81:a2:87:fb:ca:e7:17:f3:41:94: 0e:d6:52:37:19:e6:6f:78:29:41:17:a5:b8:8d:8e: ce:40:bd:54:d1:66:9b:72:c7:2f:fc:7a:56:9d:48: c8:dc:b0:18:3f:09:44:3c:05:45:f7:97:69:88:69: e7:bb:8f:53:24:2c:81:79:f5:22:8d:14:67:d7:f0: b2:52:78:dd:bc:fd:f8:10:77:41:dc:8d:f5:82:2b: 9b:2e:f3:a0:58:d5:2d:1d:40:9b:7d:9c:9a:5a:dd: 51:9d:67:d6:c6:b9:1a:a0:d5:09:fa:f8:9e:60:8c: af:ff:c0:0b:d0:9f:e6:05:61:d6:3a:0e:bc:d8:b6: 77:55:27:09:ac:d1:df:38:c5:c1:e3:27:18:d1:99: 41:67:de:11:38:c6:4b:4a:89:d2:5c:22:60:99:cb: f1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:C3:83:01:E1:40:17:0E:14:D9:BF:C7:7D:C7:8B:B3:D8:1B:74:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75/ab3f3ae8-1db7-413e-9713-ab05c3fa5d75.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.66.76.0/22 IPv6: 2602:fa60::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:67:02:ad:78:b7:c7:c0:74:93:2d:30:d9:13:9e:d5:05:86: f2:06:31:09:43:e8:fc:74:83:53:a3:48:bf:d1:48:22:12:50: b9:30:16:03:e0:af:3b:08:8b:4f:18:12:68:bf:67:22:22:3b: 74:9f:16:37:2a:08:b2:fc:c9:5b:6e:78:f1:62:b8:98:2d:0f: 38:ba:6f:d7:a1:c2:60:50:f3:06:19:f6:40:79:bf:ab:22:46: 7b:79:70:16:0d:dd:12:f5:df:de:47:ec:28:d9:54:2e:d0:02: 12:a6:54:9e:83:dd:23:fd:a8:cf:9d:92:68:8b:94:a5:5a:47: 51:2e:a7:e7:15:a5:1d:3a:de:cf:28:7d:a3:90:c3:bf:e8:27: 25:49:bd:96:cb:1b:c6:74:b0:23:56:c1:3c:14:26:b1:0c:ab: e3:9e:ae:84:71:10:44:e0:be:e6:dd:02:1e:21:27:d0:0c:49: 08:6e:90:3c:91:77:21:5f:a5:f8:fb:56:2b:85:53:fd:80:14: 22:87:55:07:d7:58:91:c4:b5:87:c1:68:70:7f:cd:c0:37:01: f1:26:91:a5:58:19:39:dd:04:97:8a:06:ea:ea:61:d1:cd:a0: a6:8f:2a:f7:8a:55:f0:6a:1a:20:14:d4:e5:4b:b1:6b:a9:68: 41:d6:43:2b -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEyAPyyedHgtwNybN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDExMjEzNDUyM1oXDTI4MDQxNjEyNDUyM1owLzEtMCsGA1UEAxMk YWIzZjNhZTgtMWRiNy00MTNlLTk3MTMtYWIwNWMzZmE1ZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY/rxS08OVUO+7H14bEh6C5e2+WCrJ1aUP0d HPWfpL2eC/BfnBTffNSUhwbgI+/OEt7vntbGZaEepFapmXVIt3hyp/nAVqovR90i H49ycI5HGLdMHsDmnGejvfEqqYGih/vK5xfzQZQO1lI3GeZveClBF6W4jY7OQL1U 0Wabcscv/HpWnUjI3LAYPwlEPAVF95dpiGnnu49TJCyBefUijRRn1/CyUnjdvP34 EHdB3I31giubLvOgWNUtHUCbfZyaWt1RnWfWxrkaoNUJ+vieYIyv/8AL0J/mBWHW Og682LZ3VScJrNHfOMXB4ycY0ZlBZ94ROMZLSonSXCJgmcvxewIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFBDDgwHhQBcOFNm/x33Hi7PYG3S4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h YjNmM2FlOC0xZGI3LTQxM2UtOTcxMy1hYjA1YzNmYTVkNzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FiM2YzYWU4LTFkYjctNDEzZS05 NzEzLWFiMDVjM2ZhNWQ3NS9hYjNmM2FlOC0xZGI3LTQxM2UtOTcxMy1hYjA1YzNm YTVkNzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBALHQkwwDgQCAAIwCAMGBCYC+mAAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAltIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFhnAq14t8fAdJMtMNkTntUFhvIG MQlD6Px0g1OjSL/RSCISULkwFgPgrzsIi08YEmi/ZyIiO3SfFjcqCLL8yVtuePFi uJgtDzi6b9ehwmBQ8wYZ9kB5v6siRnt5cBYN3RL1395H7CjZVC7QAhKmVJ6D3SP9 qM+dkmiLlKVaR1Eup+cVpR063s8ofaOQw7/oJyVJvZbLG8Z0sCNWwTwUJrEMq+Oe roRxEETgvubdAh4hJ9AMSQhukDyRdyFfpfj7ViuFU/2AFCKHVQfXWJHEtYfBaHB/ zcA3AfEmkaVYGTndBJeKBurqYdHNoKaPKveKVfBqGiAU1OVLsWupaEHWQys= -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:16 2026 by rpki-client