$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer File: c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer (raw, json) Hash identifier: BG46F3wkyKOjk1rC3MXCXw/lsf/hN+ABqmbfnzaueg4= Subject key identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D03754F91CA8244DDE2FD7F40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Feb 2026 13:45:22 +0000 Certificate not after: Fri 02 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 151.179.0.0/16 IP: 198.50.32.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:75:4f:91:ca:82:44:dd:e2:fd:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 28 13:45:22 2026 GMT Not After : Jun 2 12:45:22 2028 GMT Subject: CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:de:b4:a6:18:71:d5:84:4b:50:75:2a:67: 6e:cc:26:8d:de:4f:72:c6:eb:dd:19:fa:ae:9d:d1: ae:a7:d4:5e:ff:52:f8:ab:79:65:be:67:ce:a5:5e: ec:7b:d5:1b:fd:a7:71:70:b8:78:e0:be:e1:3b:41: 7a:1d:2f:71:0c:e3:a7:9d:6e:f9:e8:af:f8:d6:2f: 97:3b:0a:d0:4b:e0:c3:ab:ad:e4:74:88:cd:01:0d: 24:ed:8f:53:1e:87:ae:06:85:10:fb:5b:43:b8:d1: 75:ca:69:e8:3e:18:d8:cc:59:e0:a4:17:56:f2:6c: 44:08:79:f5:d7:3a:38:ab:16:06:2c:b2:36:cf:04: 2c:0e:23:54:22:98:ca:18:bf:0a:a2:0f:dd:22:0a: e9:42:08:0b:8c:4b:ff:83:9e:48:ac:27:ec:02:8c: bc:60:86:08:9b:ea:2f:4b:ed:ce:f8:48:c8:30:e4: ce:fc:9a:d6:ea:d2:71:c1:42:33:af:ef:b1:7c:a7: 1b:1b:3f:4b:b7:04:8a:a5:68:95:1b:9b:d8:64:b7: fc:ec:5a:09:bb:36:e9:99:90:63:5e:81:b8:fc:ad: 52:35:27:b3:a0:b6:55:84:4b:11:6f:c7:f1:93:36: c2:17:5b:90:c3:48:57:81:61:9d:63:ca:1a:8e:ad: 95:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 151.179.0.0/16 198.50.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:82:bb:9b:4e:b8:15:85:f0:6e:ca:f2:5a:e4:43:10:6c:27: f5:b9:b5:11:1c:fe:24:ec:dc:1a:59:01:9c:26:6e:04:86:65: e5:65:6b:68:f6:0b:b3:b6:8d:ff:38:45:2e:86:11:28:63:02: 06:0c:e6:0c:76:5a:f8:6a:45:e2:9d:bd:40:64:87:7a:70:37: 59:22:c8:dc:64:f7:89:87:5e:66:24:4f:bc:14:67:a0:30:a1: 7c:72:cc:be:9a:08:cc:1b:e1:09:fd:f6:e0:32:eb:bc:86:4c: 1d:26:46:fb:ab:5b:eb:9d:8c:31:c0:a1:72:8b:d6:23:3b:ea: 72:36:e6:e7:34:8e:c9:92:56:98:a6:13:e4:2c:d3:9f:db:df: 3f:fc:5b:7b:de:ec:7e:17:5f:50:cd:71:da:08:1b:2c:00:a9: fb:cf:ef:a0:cf:53:e9:a1:55:45:3f:83:51:df:93:e3:b5:09: fb:a1:e4:24:9d:5f:3a:84:c8:8d:16:a1:6f:34:fe:ce:d3:c3: 82:87:59:bd:cd:6a:c0:b3:cb:94:a6:f2:1a:82:66:36:61:20: 50:54:cd:b9:6c:36:56:21:3c:c4:ed:e1:54:42:c7:df:f7:33: 83:7d:b7:d0:d0:9b:ee:42:f7:98:0a:76:ec:c1:69:4c:ff:09: f9:62:1e:23 -----BEGIN CERTIFICATE----- MIIG8jCCBdqgAwIBAgIUAQ0Mn0MoWE0DdU+RyoJE3eL9f0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIyODEzNDUyMloXDTI4MDYwMjEyNDUyMlowLzEtMCsGA1UEAxMk YzJlNTMzOTgtZDg3Ny00MzgxLThmZGItMmVjN2RiNTNmYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcPetKYYcdWES1B1KmduzCaN3k9yxuvdGfqu ndGup9Re/1L4q3llvmfOpV7se9Ub/adxcLh44L7hO0F6HS9xDOOnnW756K/41i+X OwrQS+DDq63kdIjNAQ0k7Y9THoeuBoUQ+1tDuNF1ymnoPhjYzFngpBdW8mxECHn1 1zo4qxYGLLI2zwQsDiNUIpjKGL8Kog/dIgrpQggLjEv/g55IrCfsAoy8YIYIm+ov S+3O+EjIMOTO/JrW6tJxwUIzr++xfKcbGz9LtwSKpWiVG5vYZLf87FoJuzbpmZBj XoG4/K1SNSezoLZVhEsRb8fxkzbCF1uQw0hXgWGdY8oajq2VfQIDAQABo4IEBDCC BAAwHQYDVR0OBBYEFCvhuP5OdNsnS45fzp0wZufaDepRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j MmU1MzM5OC1kODc3LTQzODEtOGZkYi0yZWM3ZGI1M2ZjNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2MyZTUzMzk4LWQ4NzctNDM4MS04 ZmRiLTJlYzdkYjUzZmM1ZS9jMmU1MzM5OC1kODc3LTQzODEtOGZkYi0yZWM3ZGI1 M2ZjNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJAYIKwYBBQUH AQcBAf8EFTATMBEEAgABMAsDAwCXswMEBcYyIDBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBwgrubTrgVhfBu yvJa5EMQbCf1ubURHP4k7NwaWQGcJm4EhmXlZWto9guzto3/OEUuhhEoYwIGDOYM dlr4akXinb1AZId6cDdZIsjcZPeJh15mJE+8FGegMKF8csy+mgjMG+EJ/fbgMuu8 hkwdJkb7q1vrnYwxwKFyi9YjO+pyNubnNI7JklaYphPkLNOf298//Ft73ux+F19Q zXHaCBssAKn7z++gz1PpoVVFP4NR35PjtQn7oeQknV86hMiNFqFvNP7O08OCh1m9 zWrAs8uUpvIagmY2YSBQVM25bDZWITzE7eFUQsff9zODfbfQ0JvuQveYCnbswWlM /wn5Yh4j -----END CERTIFICATE-----Generated at Sun Mar 1 20:16:28 2026 by rpki-client