$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bab59ac6-e9e1-4732-9076-4049b3977034.cer File: bab59ac6-e9e1-4732-9076-4049b3977034.cer (raw, json) Hash identifier: EATr5bQXmrT2i86XbVt/y4t8S4Shsb7t7EYDvcbulzk= Subject key identifier: 95:7D:46:92:77:65:5A:DB:B6:61:9D:96:01:4A:FE:59:55:A4:E6:4F Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C6CB45F7DA28F97D7A18FE2D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bab59ac6-e9e1-4732-9076-4049b3977034/bab59ac6-e9e1-4732-9076-4049b3977034.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bab59ac6-e9e1-4732-9076-4049b3977034/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 05 Jan 2026 13:45:22 +0000 Certificate not after: Sun 09 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 400727 IP: 2607:440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:6c:b4:5f:7d:a2:8f:97:d7:a1:8f:e2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 5 13:45:22 2026 GMT Not After : Apr 9 12:45:22 2028 GMT Subject: CN=bab59ac6-e9e1-4732-9076-4049b3977034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:99:17:a0:d1:2e:4d:87:1f:11:f1:41:ed:8c: bc:ab:40:a8:14:a0:04:4d:eb:f6:5b:7b:19:1b:1c: 50:c9:b0:62:20:28:a5:8d:6b:b8:4b:b0:36:be:e3: 47:da:e4:68:05:bc:c0:eb:ad:55:89:16:bb:42:1a: c3:43:8d:40:21:0e:97:1e:57:fe:92:b2:16:ba:8b: dd:cc:a7:f2:81:b9:77:fa:8c:ad:e0:ef:42:df:e1: 9b:00:33:97:95:0b:ac:dc:08:73:fe:f4:f7:12:12: 0a:2e:11:67:ce:90:a0:dc:ed:50:e9:a5:12:a2:0c: f0:eb:0b:3f:0c:32:9b:ec:d6:b5:6a:da:69:d5:25: 41:15:42:63:65:75:87:e2:b3:d0:0f:a8:a9:ee:b6: ab:25:9f:9d:a4:39:21:67:4f:af:e7:17:c5:82:47: 04:1c:e2:5d:82:e2:28:92:f8:f7:06:0f:02:4d:43: 26:41:ac:c6:1b:c1:53:1d:5e:84:36:c5:09:1a:a0: 7e:59:7e:ff:b1:f9:f8:df:3a:20:72:83:34:66:e8: fb:15:b6:ab:3e:36:0c:1a:74:f2:64:89:0e:b4:24: 9e:f6:56:83:00:93:9d:9b:a8:f6:9f:f9:79:16:48: f1:cc:d1:f3:47:7c:1d:d0:60:60:08:9f:79:0f:79: e1:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:7D:46:92:77:65:5A:DB:B6:61:9D:96:01:4A:FE:59:55:A4:E6:4F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bab59ac6-e9e1-4732-9076-4049b3977034/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bab59ac6-e9e1-4732-9076-4049b3977034/bab59ac6-e9e1-4732-9076-4049b3977034.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv6: 2607:440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400727 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9c:32:78:a7:50:cf:21:c8:54:05:ca:24:cb:3f:72:7a:40: 9c:fd:ae:a9:c3:93:f5:27:e2:68:fa:cc:91:e1:da:fc:25:d8: e2:76:2c:af:1e:40:de:12:e4:49:7d:b3:bc:b0:a7:5e:ab:5d: 46:86:56:c3:56:7f:8e:b6:02:29:cb:08:96:be:34:96:eb:ea: ec:2f:89:c1:35:13:c6:d0:55:8c:e7:57:86:51:47:4c:3f:4d: 4b:59:2a:85:44:94:7e:86:c5:68:a5:c8:f2:e6:55:5d:07:0b: 4e:6a:84:3b:52:1e:3c:54:66:47:37:3b:de:cc:b7:72:77:e9: b2:70:76:61:eb:ed:22:1c:17:6a:76:66:dc:b4:ae:83:92:db: fe:91:e7:a2:00:f1:17:28:3e:f4:d2:f5:9b:9c:62:6d:b7:d2: 42:c3:15:34:fd:43:b7:73:c6:26:f2:7b:10:db:8c:a9:4a:a1: 94:29:b7:80:ca:1e:3b:25:b2:99:3c:6a:53:bc:d4:40:bd:f9: a3:0d:46:4d:7f:e2:6a:d9:23:b1:b6:5e:92:ea:5d:97:96:64: 89:b3:6a:a8:b5:dc:c2:97:3b:66:9b:46:23:ea:74:4f:f7:10: bb:54:6c:42:7c:ee:90:2b:0c:23:4a:74:28:49:93:b7:e2:b2: 04:c8:7d:71 -----BEGIN CERTIFICATE----- MIIHCjCCBfKgAwIBAgIUAQ0Mn0MoWExstF99oo+X16GP4tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEwNTEzNDUyMloXDTI4MDQwOTEyNDUyMlowLzEtMCsGA1UEAxMk YmFiNTlhYzYtZTllMS00NzMyLTkwNzYtNDA0OWIzOTc3MDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJkXoNEuTYcfEfFB7Yy8q0CoFKAETev2W3sZ GxxQybBiICiljWu4S7A2vuNH2uRoBbzA661ViRa7QhrDQ41AIQ6XHlf+krIWuovd zKfygbl3+oyt4O9C3+GbADOXlQus3Ahz/vT3EhIKLhFnzpCg3O1Q6aUSogzw6ws/ DDKb7Na1atpp1SVBFUJjZXWH4rPQD6ip7rarJZ+dpDkhZ0+v5xfFgkcEHOJdguIo kvj3Bg8CTUMmQazGG8FTHV6ENsUJGqB+WX7/sfn43zogcoM0Zuj7FbarPjYMGnTy ZIkOtCSe9laDAJOdm6j2n/l5FkjxzNHzR3wd0GBgCJ95D3nhtwIDAQABo4IEHDCC BBgwHQYDVR0OBBYEFJV9RpJ3ZVrbtmGdlgFK/llVpOZPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i YWI1OWFjNi1lOWUxLTQ3MzItOTA3Ni00MDQ5YjM5NzcwMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2JhYjU5YWM2LWU5ZTEtNDczMi05 MDc2LTQwNDliMzk3NzAzNC9iYWI1OWFjNi1lOWUxLTQ3MzItOTA3Ni00MDQ5YjM5 NzcwMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwIAYIKwYBBQUH AQcBAf8EETAPMA0EAgACMAcDBQAmBwRAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC AwYdVzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0 dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqG SIb3DQEBCwUAA4IBAQCFnDJ4p1DPIchUBcokyz9yekCc/a6pw5P1J+Jo+syR4dr8 JdjidiyvHkDeEuRJfbO8sKdeq11GhlbDVn+OtgIpywiWvjSW6+rsL4nBNRPG0FWM 51eGUUdMP01LWSqFRJR+hsVopcjy5lVdBwtOaoQ7Uh48VGZHNzvezLdyd+mycHZh 6+0iHBdqdmbctK6Dktv+keeiAPEXKD700vWbnGJtt9JCwxU0/UO3c8Ym8nsQ24yp SqGUKbeAyh47JbKZPGpTvNRAvfmjDUZNf+Jq2SOxtl6S6l2XlmSJs2qotdzClztm m0Yj6nRP9xC7VGxCfO6QKwwjSnQoSZO34rIEyH1x -----END CERTIFICATE-----Generated at Sun Mar 1 20:23:07 2026 by rpki-client