$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer File: ad5465a2-82c8-4447-b6da-7cabc017e3a9.cer (raw, json) Hash identifier: Q53CgwCSLs7eUWA99fBZKgBBuwF/NpkQzI8oKFUHpEc= Subject key identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA80761198A249F1F520ABF00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 19:45:19 +0000 Certificate not after: Tue 16 Mar 2027 14:38:23 +0000 Subordinate resources: AS: 394911 IP: 64.66.244.0/22 IP: 172.82.12.0/22 IP: 206.109.48.0/21 IP: 206.183.136.0/22 IP: 207.90.228.0/22 IP: 207.166.140.0/22 IP: 2606:d8c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a8:07:61:19:8a:24:9f:1f:52:0a:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 26 19:45:19 2026 GMT Not After : Mar 16 14:38:23 2027 GMT Subject: CN=ad5465a2-82c8-4447-b6da-7cabc017e3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9c:30:5b:0b:da:c4:5b:1e:f5:57:90:44:9f: 8a:2f:96:73:a9:07:c4:ba:74:55:b8:f3:bd:18:aa: 31:c8:1c:67:a2:65:29:fa:4b:62:66:22:fd:c4:8b: f1:24:6f:1a:af:69:02:a2:95:ce:91:b4:a3:a8:b9: 84:76:2b:a5:64:c4:fb:5f:09:67:f2:bc:eb:c7:75: 07:e1:fb:5a:1d:c7:cd:d6:ff:98:52:b1:80:19:53: e9:ca:41:97:33:0c:21:92:db:80:86:f2:26:d2:bf: 28:73:93:db:23:8a:46:fc:dc:f2:0a:43:73:31:c8: f9:6d:91:72:78:11:23:55:25:8b:24:2b:e5:58:e9: cf:15:9a:51:8e:0f:54:58:cd:82:c7:98:e5:08:a8: ef:fe:87:f6:d5:e4:dc:38:69:84:d3:7d:e8:0d:f1: fd:ff:b8:9e:ab:21:e5:10:8b:ce:87:c2:91:a5:38: 21:8f:77:5c:dc:d9:45:5d:70:60:36:7c:a0:e5:33: 4b:3f:cb:16:cf:6d:cc:7c:bb:a7:b1:59:0a:b1:69: a4:6f:48:af:ea:3c:72:3a:9f:ef:fb:9d:e2:5e:de: 8d:69:bd:0c:0b:23:64:68:76:7d:a8:0f:88:36:d6: ec:e5:93:ef:a7:d6:3b:e6:c6:aa:65:aa:72:ce:80: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:FA:4F:52:D3:E4:B6:52:26:99:0B:FB:CF:CD:F8:A1:5C:63:E4:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad5465a2-82c8-4447-b6da-7cabc017e3a9/ad5465a2-82c8-4447-b6da-7cabc017e3a9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.66.244.0/22 172.82.12.0/22 206.109.48.0/21 206.183.136.0/22 207.90.228.0/22 207.166.140.0/22 IPv6: 2606:d8c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394911 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:91:d8:93:89:86:81:85:34:2a:6e:de:1f:24:65:2e:87:51: 7b:d7:b6:49:08:75:d6:4c:fc:10:47:77:7c:58:00:44:a2:55: fb:d0:12:49:b9:17:2b:07:c9:bc:2b:6e:be:6f:15:3c:2b:cb: 80:27:93:ca:d3:03:41:61:76:f0:50:74:15:54:fa:58:1f:d9: 9b:39:ca:3c:e9:84:5f:9c:5c:b7:dc:5e:fe:6f:53:d4:cb:79: 33:7b:45:46:de:64:46:29:5d:84:3f:3d:8b:8b:d1:41:81:b0: 45:2e:47:b9:17:b5:17:49:7e:a2:71:7d:c9:fc:2b:cc:7b:6c: 15:5c:bf:2a:99:9c:53:53:b3:9e:29:25:f5:7c:29:3f:84:cd: ae:ee:71:c7:ce:bb:b8:2c:58:1a:d1:72:70:dc:e5:9a:0e:cc: 46:df:c4:6d:ef:33:48:9a:2d:fe:b0:55:de:2f:89:63:e3:b0: c2:bc:86:73:a5:ba:01:a1:1c:65:fd:13:90:d9:73:68:c2:1e: 7d:d3:14:0b:a2:0c:7c:3d:c0:0b:20:da:97:aa:55:48:b4:b2: 4f:0c:34:d7:1f:b2:93:30:ed:ab:6a:cb:ad:29:5c:eb:e7:46: 66:48:a3:40:81:c8:91:af:42:20:fd:0d:68:7b:ea:3d:c7:8c: 9d:7b:d6:86 -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWEyoB2EZiiSfH1IKvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNjE5NDUxOVoXDTI3MDMxNjE0MzgyM1owLzEtMCsGA1UEAxMk YWQ1NDY1YTItODJjOC00NDQ3LWI2ZGEtN2NhYmMwMTdlM2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5wwWwvaxFse9VeQRJ+KL5ZzqQfEunRVuPO9 GKoxyBxnomUp+ktiZiL9xIvxJG8ar2kCopXOkbSjqLmEdiulZMT7Xwln8rzrx3UH 4ftaHcfN1v+YUrGAGVPpykGXMwwhktuAhvIm0r8oc5PbI4pG/NzyCkNzMcj5bZFy eBEjVSWLJCvlWOnPFZpRjg9UWM2Cx5jlCKjv/of21eTcOGmE033oDfH9/7ieqyHl EIvOh8KRpTghj3dc3NlFXXBgNnyg5TNLP8sWz23MfLunsVkKsWmkb0iv6jxyOp/v +53iXt6Nab0MCyNkaHZ9qA+INtbs5ZPvp9Y75saqZapyzoDAsQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFFb6T1LT5LZSJpkL+8/N+KFcY+SpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZDU0NjVhMi04MmM4LTQ0NDctYjZkYS03Y2FiYzAxN2UzYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FkNTQ2NWEyLTgyYzgtNDQ0Ny1i NmRhLTdjYWJjMDE3ZTNhOS9hZDU0NjVhMi04MmM4LTQ0NDctYjZkYS03Y2FiYzAx N2UzYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAJAQvQDBAKsUgwDBAPObTADBALOt4gDBALPWuQD BALPpowwDQQCAAIwBwMFACYG2MAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgaf MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+R2JOJhoGFNCpu3h8kZS6HUXvXtkkIddZM/BBHd3xYAESiVfvQ Ekm5FysHybwrbr5vFTwry4Ank8rTA0FhdvBQdBVU+lgf2Zs5yjzphF+cXLfcXv5v U9TLeTN7RUbeZEYpXYQ/PYuL0UGBsEUuR7kXtRdJfqJxfcn8K8x7bBVcvyqZnFNT s54pJfV8KT+Eza7uccfOu7gsWBrRcnDc5ZoOzEbfxG3vM0iaLf6wVd4viWPjsMK8 hnOlugGhHGX9E5DZc2jCHn3TFAuiDHw9wAsg2peqVUi0sk8MNNcfspMw7atqy60p XOvnRmZIo0CByJGvQiD9DWh76j3HjJ171oY= -----END CERTIFICATE-----Generated at Sun Mar 1 18:20:00 2026 by rpki-client