$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer File: ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer (raw, json) Hash identifier: poCjuvj5P5OvyuAru0asLT0lTF3Y4cfG0uYg9ZkY5c4= Subject key identifier: FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CBDAA379E07AB2F3AD92E8680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Feb 2026 13:45:22 +0000 Certificate not after: Mon 08 May 2028 12:45:22 +0000 Subordinate resources: IP: 216.126.214.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:aa:37:9e:07:ab:2f:3a:d9:2e:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 3 13:45:22 2026 GMT Not After : May 8 12:45:22 2028 GMT Subject: CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:10:d9:bf:f9:4d:80:4f:3d:e3:e4:3d:63: 40:f4:b9:cc:82:53:2a:05:ba:4d:4e:22:69:4c:d7: 3a:b8:ca:0f:ec:c8:d4:fc:cb:04:68:af:a1:3c:9f: 5d:3a:df:01:fd:13:eb:85:32:f1:a9:81:00:13:8d: 89:eb:a5:6f:bb:a5:70:5b:60:c6:fa:26:b2:8f:3e: 98:87:48:89:e9:0c:c9:ca:23:53:e4:b7:21:32:65: f1:9a:b3:b4:22:3b:5f:b1:33:1e:ac:d8:a5:52:4a: d5:70:6b:ed:f0:09:33:7b:fb:17:21:1e:47:24:60: ae:6c:ea:f0:8c:e5:89:91:28:22:17:f9:9d:ad:19: 48:2d:cf:1d:61:af:0c:a6:30:f9:69:50:18:18:f8: b0:75:88:75:05:13:09:70:0d:b0:b1:17:39:b2:97: c3:a6:53:06:5e:84:e8:3c:db:fd:46:b8:b7:36:ba: 72:94:7f:ad:97:50:07:e0:39:15:0f:c8:e9:ea:34: 45:b4:7d:2a:29:64:ae:9c:67:f4:44:58:5c:f1:ab: 6e:8a:18:32:f7:8c:1f:eb:b6:22:52:85:2d:e1:8a: db:33:42:04:24:f8:c4:69:9e:bd:97:9b:e8:12:41: e0:a1:7c:13:b2:57:f5:7f:4d:3d:8f:ba:32:25:14: 63:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 216.126.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4a:b9:2b:7c:ca:73:3c:c9:ab:fe:e3:15:48:3b:2a:b6:36: b2:b7:c4:d2:e2:67:18:f0:a6:0d:02:6e:fe:ac:1f:d6:b8:fa: 6b:c6:2c:b0:93:83:5c:6d:8c:c2:e8:61:52:8f:c8:32:89:da: 36:55:4e:d5:55:36:31:52:6b:00:b0:e4:1c:df:67:c0:1a:bd: d3:eb:75:f8:c8:8d:a2:a8:ec:c7:85:24:f9:71:13:36:85:63: 5e:b9:47:81:07:76:c4:d2:4a:5b:21:c7:a3:ff:f2:50:5b:6b: 3d:4c:26:39:3c:9b:a1:36:8f:57:21:1e:e0:c8:9b:c9:3f:5c: 4e:b8:33:25:8e:81:53:e5:6f:9f:26:8a:23:10:78:13:23:19: 3f:b6:11:fc:4f:e0:af:11:8b:f0:c2:00:ef:ba:f6:8f:3c:26: a1:fe:44:62:13:10:cd:e3:df:fc:70:7c:70:df:b1:69:52:81: cc:12:e8:7d:e8:bc:20:ba:c9:08:c7:c7:3c:13:d7:1b:47:b2: 77:15:11:11:de:69:fa:18:bb:23:69:10:dd:f8:ab:92:b0:b7: f6:70:b3:56:dd:78:68:20:24:ec:88:da:9e:68:bf:80:3e:3b: 1c:70:48:af:63:28:98:e4:c1:7e:63:cf:db:e9:28:fc:b6:48: ac:df:d1:4c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEy9qjeeB6svOtkuhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMzEzNDUyMloXDTI4MDUwODEyNDUyMlowLzEtMCsGA1UEAxMk YWQ2YzcwMDUtZjBmZS00NDExLTg1MzEtMGE5YzViOWIxYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC4Q2b/5TYBPPePkPWNA9LnMglMqBbpNTiJp TNc6uMoP7MjU/MsEaK+hPJ9dOt8B/RPrhTLxqYEAE42J66Vvu6VwW2DG+iayjz6Y h0iJ6QzJyiNT5LchMmXxmrO0IjtfsTMerNilUkrVcGvt8Akze/sXIR5HJGCubOrw jOWJkSgiF/mdrRlILc8dYa8MpjD5aVAYGPiwdYh1BRMJcA2wsRc5spfDplMGXoTo PNv9Rri3NrpylH+tl1AH4DkVD8jp6jRFtH0qKWSunGf0RFhc8atuihgy94wf67Yi UoUt4YrbM0IEJPjEaZ69l5voEkHgoXwTslf1f009j7oyJRRjswIDAQABo4ID/zCC A/swHQYDVR0OBBYEFP5gVSeTAv+sQECK4ZxeGFxS8IeWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h ZDZjNzAwNS1mMGZlLTQ0MTEtODUzMS0wYTljNWI5YjFhYTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2FkNmM3MDA1LWYwZmUtNDQxMS04 NTMxLTBhOWM1YjliMWFhNy9hZDZjNzAwNS1mMGZlLTQ0MTEtODUzMS0wYTljNWI5 YjFhYTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADYftYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABkq5K3zKczzJq/7jFUg7 KrY2srfE0uJnGPCmDQJu/qwf1rj6a8YssJODXG2MwuhhUo/IMonaNlVO1VU2MVJr ALDkHN9nwBq90+t1+MiNoqjsx4Uk+XETNoVjXrlHgQd2xNJKWyHHo//yUFtrPUwm OTyboTaPVyEe4MibyT9cTrgzJY6BU+VvnyaKIxB4EyMZP7YR/E/grxGL8MIA77r2 jzwmof5EYhMQzePf/HB8cN+xaVKBzBLofei8ILrJCMfHPBPXG0eydxUREd5p+hi7 I2kQ3firkrC39nCzVt14aCAk7Ijanmi/gD47HHBIr2MomOTBfmPP2+ko/LZIrN/R TA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:25:58 2026 by rpki-client