$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer File: cf29ee7e-ea12-40e5-a68e-3d002c6aa258.cer (raw, json) Hash identifier: vyMxbEbRIGU2spZawEjLbbZtmK8jSuKqfYqYB14S5+w= Subject key identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CCE6A4EC045068817AD4E8600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Feb 2026 13:45:21 +0000 Certificate not after: Sun 14 May 2028 12:45:21 +0000 Subordinate resources: IP: 147.160.158.0/24 IP: 195.85.36.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:6a:4e:c0:45:06:88:17:ad:4e:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 9 13:45:21 2026 GMT Not After : May 14 12:45:21 2028 GMT Subject: CN=cf29ee7e-ea12-40e5-a68e-3d002c6aa258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ad:b4:68:18:36:aa:e8:7d:b5:36:49:1c:00: 57:f7:93:91:cb:19:bb:8d:cc:72:60:05:7b:94:0e: f4:77:92:a3:4f:3a:ae:66:18:80:8e:63:a1:fa:74: 76:48:f2:8d:e4:13:dc:e1:0c:37:d2:96:79:15:9a: f1:07:5b:9b:82:60:17:24:c7:13:5c:7f:5e:4b:f6: fc:01:6e:0a:70:5f:01:d7:12:ed:e9:ad:0f:52:ee: 78:b4:30:12:d2:2b:5b:13:1f:dc:80:8c:eb:a6:6f: 9b:46:44:92:60:7f:38:dd:0a:1e:c8:c6:38:a3:96: 17:59:f4:a8:46:34:77:2c:bc:ad:fb:47:f1:55:1c: 93:2f:5f:f4:3f:4a:d4:05:4c:06:82:15:32:07:8d: 4e:87:d6:1e:c4:ee:be:20:8e:be:31:27:17:3a:5f: 57:a0:c6:b9:1b:bc:11:31:f0:83:36:98:b2:c3:f2: 7d:c9:d8:04:ca:4b:d8:31:d0:9d:46:2c:77:e4:cb: 7c:5e:c2:e7:f7:aa:d9:2a:cd:9b:51:3b:49:fc:e7: d2:92:f6:e3:0d:07:1c:54:13:ad:a8:0e:1c:30:5c: eb:57:4d:6b:a6:30:28:03:fe:9f:57:c6:fa:06:85: d2:7d:82:02:22:e7:f4:f5:c5:f4:63:e7:2b:8d:b7: 96:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:35:72:19:4A:E3:A6:33:A8:71:F0:89:1C:28:05:63:6E:D3:9A:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cf29ee7e-ea12-40e5-a68e-3d002c6aa258/cf29ee7e-ea12-40e5-a68e-3d002c6aa258.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 147.160.158.0/24 195.85.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:f1:b4:a6:5a:ac:fa:f5:8d:77:a3:08:ca:47:cf:6b:3b:3e: c8:bd:e0:6a:17:6c:26:c5:a1:5e:d7:44:da:6d:7d:e9:b1:21: 59:09:bd:a1:d8:1d:64:1b:9b:10:04:e1:3b:fe:e9:97:be:b3: 82:a7:42:20:30:cd:40:30:ce:4f:41:2d:80:71:15:20:3d:dd: aa:f8:01:9f:04:9c:c6:d7:34:c3:ec:0e:1b:6c:57:01:ad:2a: 8b:ce:3d:23:b8:dc:68:e2:ad:53:63:65:23:3d:e3:01:5e:f0: c2:b7:e1:37:08:7d:c5:73:7c:06:2f:e6:c2:5c:47:5e:63:a8: 95:79:ce:a6:fb:eb:62:6c:b3:15:90:cc:47:6a:38:d4:dc:2f: f4:90:a2:47:b4:88:b9:1b:01:b4:a5:02:a7:58:a0:de:0e:14: 1d:d5:65:c3:98:54:f9:f3:c1:4d:e2:c5:6e:3d:1c:3d:d9:c1: 04:03:00:7e:07:da:03:93:01:cf:77:c5:ec:2a:ab:6c:c1:e5: bc:42:c5:99:b3:79:96:fa:42:b7:d2:33:18:8a:e8:30:92:b4: 92:c2:d7:17:d1:b6:4b:6e:36:fa:4f:8b:d2:18:1f:99:f6:73: 0c:6b:ed:40:b6:91:b9:1d:fd:6e:f0:84:f2:ff:c8:b6:ca:13: ca:37:b6:b7 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEzOak7ARQaIF61OhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwOTEzNDUyMVoXDTI4MDUxNDEyNDUyMVowLzEtMCsGA1UEAxMk Y2YyOWVlN2UtZWExMi00MGU1LWE2OGUtM2QwMDJjNmFhMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8620aBg2quh9tTZJHABX95ORyxm7jcxyYAV7 lA70d5KjTzquZhiAjmOh+nR2SPKN5BPc4Qw30pZ5FZrxB1ubgmAXJMcTXH9eS/b8 AW4KcF8B1xLt6a0PUu54tDAS0itbEx/cgIzrpm+bRkSSYH843QoeyMY4o5YXWfSo RjR3LLyt+0fxVRyTL1/0P0rUBUwGghUyB41Oh9YexO6+II6+MScXOl9XoMa5G7wR MfCDNpiyw/J9ydgEykvYMdCdRix35Mt8XsLn96rZKs2bUTtJ/OfSkvbjDQccVBOt qA4cMFzrV01rpjAoA/6fV8b6BoXSfYICIuf09cX0Y+crjbeWqQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFJ41chlK46YzqHHwiRwoBWNu05ppMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j ZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2YWEyNTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2NmMjllZTdlLWVhMTItNDBlNS1h NjhlLTNkMDAyYzZhYTI1OC9jZjI5ZWU3ZS1lYTEyLTQwZTUtYTY4ZS0zZDAwMmM2 YWEyNTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACToJ4DBADDVSQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKfG0plqs+vWN d6MIykfPazs+yL3gahdsJsWhXtdE2m196bEhWQm9odgdZBubEAThO/7pl76zgqdC IDDNQDDOT0EtgHEVID3dqvgBnwScxtc0w+wOG2xXAa0qi849I7jcaOKtU2NlIz3j AV7wwrfhNwh9xXN8Bi/mwlxHXmOolXnOpvvrYmyzFZDMR2o41Nwv9JCiR7SIuRsB tKUCp1ig3g4UHdVlw5hU+fPBTeLFbj0cPdnBBAMAfgfaA5MBz3fF7CqrbMHlvELF mbN5lvpCt9IzGIroMJK0ksLXF9G2S242+k+L0hgfmfZzDGvtQLaRuR39bvCE8v/I tsoTyje2tw== -----END CERTIFICATE-----Generated at Mon Mar 2 03:49:35 2026 by rpki-client