$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer File: b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer (raw, json) Hash identifier: vpCeJWd536HxeT7lrsWOH+6/H7AyJVWL2adKW8Ldi4c= Subject key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CE35A71211DCD564C879EF400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Feb 2026 01:45:22 +0000 Certificate not after: Mon 22 May 2028 00:45:22 +0000 Subordinate resources: AS: 30671 IP: 23.160.24.0/24 IP: 142.249.244.0/22 IP: 2602:fa45::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:5a:71:21:1d:cd:56:4c:87:9e:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 17 01:45:22 2026 GMT Not After : May 22 00:45:22 2028 GMT Subject: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:27:f7:d8:7b:9e:84:71:14:42:28:b4:75:5c: 0f:f2:bb:9c:43:70:28:87:83:51:b3:dc:96:da:24: 32:42:27:1d:4a:40:39:3e:73:6c:f7:76:33:49:31: 12:25:b4:3d:28:1e:42:b0:e5:76:87:b4:1f:35:73: 01:84:c5:40:71:cf:40:b1:9f:e0:e6:cd:44:05:5d: 95:d7:48:01:c7:d4:bc:6c:e1:52:e4:40:aa:4a:0a: 89:46:23:b3:02:0c:3d:2f:fd:d8:18:90:71:b5:36: d6:ba:62:75:cb:99:ac:ad:e1:53:80:d0:19:00:37: 31:e4:7c:04:8e:03:b1:f0:e9:8a:20:8a:66:78:ad: e5:4a:bc:54:4c:24:d0:60:bb:46:8b:90:36:5f:03: bb:9c:f1:06:20:7e:60:50:e3:37:0c:c7:f5:df:82: de:2d:f1:a2:b9:8a:ad:4d:ef:57:16:41:b9:98:2a: 89:7d:63:b4:d0:ac:72:20:46:5e:27:8e:b3:12:fb: a9:81:3d:5e:a4:b8:a7:bd:1a:9a:b0:71:94:06:a6: 76:f8:14:7b:69:a6:11:73:30:a9:fb:9c:19:de:aa: ea:03:fd:4a:a0:7e:bc:d1:51:f6:d3:c6:37:5e:30: 68:f8:bf:86:03:cc:f7:ea:35:a5:ac:d3:b8:0a:8e: e4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.160.24.0/24 142.249.244.0/22 IPv6: 2602:fa45::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30671 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7e:7e:48:fc:28:66:f3:4d:7e:9a:ab:93:33:a6:fa:c3:e7: 8d:e5:b0:86:96:74:b9:dc:d2:33:87:bc:92:a7:ba:d1:b9:d4: e8:a9:15:26:5d:ed:64:dc:a0:6e:b8:d7:0a:2d:de:70:94:33: 6b:d3:f6:e2:8a:39:37:49:3c:2e:16:f2:21:27:9c:0e:40:3e: b5:93:ca:f9:cb:f4:37:b9:64:15:20:8b:7c:77:53:c2:24:8f: 74:4e:b5:4a:3f:d8:73:e8:24:91:44:b7:5a:8e:19:b9:65:fa: 4c:88:c2:f9:90:e1:ac:34:b3:7b:42:a4:78:3f:8d:ad:ac:0f: 0c:77:05:23:cf:df:b6:b0:9c:5e:72:73:52:da:d2:45:d2:7d: ab:81:70:bb:e5:27:db:11:e0:2a:a6:35:7c:cd:b4:8b:41:fa: b4:bb:48:c8:48:43:b1:9e:ce:bb:97:75:ed:42:5d:9a:ab:45: 2b:21:0b:fb:c4:46:0f:a8:d8:97:80:ca:ae:31:53:10:fc:69: 82:d7:b3:d7:26:8a:be:da:00:ca:9a:3e:f8:b3:17:27:28:ce: a4:bd:00:4c:57:7c:55:ea:bc:fa:e9:9b:ed:c0:5b:e2:e5:35: 12:c6:71:2d:af:1f:b1:62:31:c6:6c:4b:f1:c1:a4:c2:76:ea: c6:4b:47:1f -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEzjWnEhHc1WTIee9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIxNzAxNDUyMloXDTI4MDUyMjAwNDUyMlowLzEtMCsGA1UEAxMk YjY4ZDhhNTUtOTlkMS00YzVhLWI0MjYtOTYzMjk0NGVlNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSf32HuehHEUQii0dVwP8rucQ3Aoh4NRs9yW 2iQyQicdSkA5PnNs93YzSTESJbQ9KB5CsOV2h7QfNXMBhMVAcc9AsZ/g5s1EBV2V 10gBx9S8bOFS5ECqSgqJRiOzAgw9L/3YGJBxtTbWumJ1y5msreFTgNAZADcx5HwE jgOx8OmKIIpmeK3lSrxUTCTQYLtGi5A2XwO7nPEGIH5gUOM3DMf134LeLfGiuYqt Te9XFkG5mCqJfWO00KxyIEZeJ46zEvupgT1epLinvRqasHGUBqZ2+BR7aaYRczCp +5wZ3qrqA/1KoH680VH208Y3XjBo+L+GA8z36jWlrNO4Co7klQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFE25bckVTqQ9drfoHIfF8fB3oXPVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i NjhkOGE1NS05OWQxLTRjNWEtYjQyNi05NjMyOTQ0ZWU0YzUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2I2OGQ4YTU1LTk5ZDEtNGM1YS1i NDI2LTk2MzI5NDRlZTRjNS9iNjhkOGE1NS05OWQxLTRjNWEtYjQyNi05NjMyOTQ0 ZWU0YzUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXoBgDBAKO+fQwDgQCAAIwCAMGACYC+kUAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAnfPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACh+fkj8KGbzTX6aq5Mz pvrD543lsIaWdLnc0jOHvJKnutG51OipFSZd7WTcoG641wot3nCUM2vT9uKKOTdJ PC4W8iEnnA5APrWTyvnL9De5ZBUgi3x3U8Ikj3ROtUo/2HPoJJFEt1qOGbll+kyI wvmQ4aw0s3tCpHg/ja2sDwx3BSPP37awnF5yc1La0kXSfauBcLvlJ9sR4CqmNXzN tItB+rS7SMhIQ7GezruXde1CXZqrRSshC/vERg+o2JeAyq4xUxD8aYLXs9cmir7a AMqaPvizFycozqS9AExXfFXqvPrpm+3AW+LlNRLGcS2vH7FiMcZsS/HBpMJ26sZL Rx8= -----END CERTIFICATE-----Generated at Sun Mar 1 20:15:55 2026 by rpki-client