$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer File: cba86acd-9af7-450a-ac5c-6c872671a7a3.cer (raw, json) Hash identifier: LsteTuVveIKA2Bsb4uTzBuxdFhdlA+TKcRJ48f2+Y8Q= Subject key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CBADF879E1B4B9C1D81481878 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 13:45:22 +0000 Certificate not after: Sun 07 May 2028 12:45:22 +0000 Subordinate resources: AS: 62534 IP: 23.138.96.0/24 IP: 2604:d9c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:df:87:9e:1b:4b:9c:1d:81:48:18:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 2 13:45:22 2026 GMT Not After : May 7 12:45:22 2028 GMT Subject: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:45:d2:0a:14:e3:ef:e3:15:db:08:48:8f: a3:26:1c:2e:c1:b2:92:26:c6:c1:5d:8c:a2:3f:70: 07:a9:77:1e:2c:4a:28:da:ff:ab:37:32:96:e2:30: 68:c5:3e:09:f2:d7:a9:31:5c:05:c2:de:5c:a9:33: 6f:71:f4:5d:54:bd:5e:de:2d:cc:b7:e0:63:8d:cf: 00:5d:f3:61:0b:1a:ac:fe:c5:cf:d6:f4:66:c3:5b: a7:5a:32:90:ef:e7:c9:e0:57:20:80:da:da:37:e4: 7d:5a:0e:50:65:28:6f:1e:64:a7:95:d4:b0:83:e2: ac:08:6c:d8:46:5a:fe:57:8b:f1:d2:7f:fe:6c:88: 78:5a:33:f7:18:56:20:5c:02:93:76:5e:0e:88:b1: 00:52:60:8a:2e:12:36:0a:ca:bd:c9:6a:8b:39:a8: 47:1a:dc:52:1c:3c:22:f7:54:e0:c1:1f:1f:ed:bb: 97:e0:2a:ed:e7:9d:2d:ba:f3:2f:7c:3a:5e:8f:dd: eb:84:9c:f6:d2:05:6e:61:e0:42:9a:90:fe:d8:e5: 0e:0d:a3:8e:e4:e0:fb:cc:97:6b:1b:27:2e:df:65: e3:1b:c9:ec:cb:f6:8e:0b:3c:a8:fe:1f:12:23:33: e8:3e:7e:b6:80:48:b8:63:33:2c:7b:d8:c2:cb:a9: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.138.96.0/24 IPv6: 2604:d9c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 62534 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:f1:12:53:18:ca:7c:39:9c:36:64:dc:3d:2a:36:58:85:d7: b5:79:e9:8f:cd:c6:b4:2f:83:ae:1e:36:5c:2d:15:1c:60:7d: 30:c3:a2:35:77:26:4b:6e:67:a8:1d:79:c4:00:7b:6f:40:32: 05:a9:05:69:22:a4:0b:77:25:ca:c9:e2:88:81:36:e6:44:90: 9b:cd:e6:51:d8:f7:6d:63:b1:2a:0c:73:a2:d6:6c:65:0f:b3: c4:5a:b3:94:a9:17:39:80:99:5b:0c:af:fd:14:5f:9b:81:c5: 1b:2c:86:47:e8:02:7b:a4:37:9e:12:de:e1:f3:3f:85:d1:bc: 17:9c:7a:60:ee:33:95:24:76:0b:c7:4b:ed:a5:5e:f0:aa:3e: 7f:fd:1c:ed:6d:89:2b:b4:2d:0e:21:d2:48:f0:f5:37:39:25: eb:67:04:89:ac:b1:54:62:46:ae:03:f2:db:04:90:6d:25:c6: 78:8f:6c:80:ba:07:b0:6d:65:82:fd:1e:98:ab:68:64:56:61: 9d:3f:c1:60:26:8f:27:45:fb:e2:4d:5e:08:94:14:ac:01:62: 0b:61:5f:8b:07:9e:dc:e8:58:59:e4:e1:bf:51:27:c5:25:cc: d3:92:da:b8:e4:2b:da:0d:65:27:61:b7:35:af:ff:97:61:f2: 9d:66:43:a3 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEy634eeG0ucHYFIGHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwMjEzNDUyMloXDTI4MDUwNzEyNDUyMlowLzEtMCsGA1UEAxMk Y2JhODZhY2QtOWFmNy00NTBhLWFjNWMtNmM4NzI2NzFhN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWdF0goU4+/jFdsISI+jJhwuwbKSJsbBXYyi P3AHqXceLEoo2v+rNzKW4jBoxT4J8tepMVwFwt5cqTNvcfRdVL1e3i3Mt+Bjjc8A XfNhCxqs/sXP1vRmw1unWjKQ7+fJ4FcggNraN+R9Wg5QZShvHmSnldSwg+KsCGzY Rlr+V4vx0n/+bIh4WjP3GFYgXAKTdl4OiLEAUmCKLhI2Csq9yWqLOahHGtxSHDwi 91TgwR8f7buX4Crt550tuvMvfDpej93rhJz20gVuYeBCmpD+2OUODaOO5OD7zJdr Gycu32XjG8nsy/aOCzyo/h8SIzPoPn62gEi4YzMse9jCy6kIMQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK40jNr2l7ofY41rtmetJ6Mlbx4iMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j YmE4NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3MjY3MWE3YTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NiYTg2YWNkLTlhZjctNDUwYS1h YzVjLTZjODcyNjcxYTdhMy9jYmE4NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3MjY3 MWE3YTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAAXimAwDQQCAAIwBwMFACYE2cAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDAPRGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjxElMYynw5nDZk3D0qNliF17V5 6Y/NxrQvg64eNlwtFRxgfTDDojV3JktuZ6gdecQAe29AMgWpBWkipAt3JcrJ4oiB NuZEkJvN5lHY921jsSoMc6LWbGUPs8Ras5SpFzmAmVsMr/0UX5uBxRsshkfoAnuk N54S3uHzP4XRvBecemDuM5UkdgvHS+2lXvCqPn/9HO1tiSu0LQ4h0kjw9Tc5Jetn BImssVRiRq4D8tsEkG0lxniPbIC6B7BtZYL9HpiraGRWYZ0/wWAmjydF++JNXgiU FKwBYgthX4sHntzoWFnk4b9RJ8UlzNOS2rjkK9oNZSdhtzWv/5dh8p1mQ6M= -----END CERTIFICATE-----Generated at Mon Mar 2 00:11:54 2026 by rpki-client