$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d59591da-1e5b-4ef8-8a99-524d4abfcbe3.cer File: d59591da-1e5b-4ef8-8a99-524d4abfcbe3.cer (raw, json) Hash identifier: cJKyd3zv2AmdV3VDhR1fZVXgS6p8Ca91//6fV4LlMMs= Subject key identifier: 40:6A:42:BE:B5:92:5C:64:86:F1:A8:99:36:33:C0:77:B2:52:92:14 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CB27F7C033F4726FC5B1F6580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d59591da-1e5b-4ef8-8a99-524d4abfcbe3/d59591da-1e5b-4ef8-8a99-524d4abfcbe3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d59591da-1e5b-4ef8-8a99-524d4abfcbe3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 13:45:23 +0000 Certificate not after: Thu 04 May 2028 12:45:23 +0000 Subordinate resources: AS: 23206 IP: 74.80.194.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:7f:7c:03:3f:47:26:fc:5b:1f:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 30 13:45:23 2026 GMT Not After : May 4 12:45:23 2028 GMT Subject: CN=d59591da-1e5b-4ef8-8a99-524d4abfcbe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8f:43:4b:9f:2f:5f:6b:a8:41:b7:f1:e4:2f: 97:dd:4f:3d:dc:18:d9:08:63:a6:ae:1e:40:91:3f: 08:6b:93:8a:14:1c:c2:43:16:c2:6b:d1:dc:ea:1d: d8:c7:c8:81:c1:75:f4:34:c1:94:fd:51:62:f3:46: c5:4b:1d:c3:3e:b1:bb:75:0a:15:0b:c8:eb:3c:ec: a5:c6:68:9d:2e:2e:61:c4:dc:34:b6:91:fc:7a:f6: e9:bc:37:82:ac:90:b0:61:df:6d:8e:8b:13:34:15: 9a:fd:1d:8a:e2:b7:d6:69:41:1a:96:d3:c3:e6:74: 42:ac:e0:f7:30:5d:33:19:3e:3e:09:01:13:67:a4: 06:9f:e1:56:c8:77:fd:7d:34:6d:1f:0d:85:68:21: b0:6a:41:74:31:af:df:66:d1:f2:60:a2:97:b2:62: ac:5d:15:81:bc:9c:38:4c:08:05:20:f6:4d:8c:02: 6d:3c:df:10:06:51:6c:62:37:91:70:44:20:e3:4b: 70:2f:11:8d:28:9e:14:f3:ea:a6:60:66:31:94:39: 64:6d:14:bc:a9:36:20:13:78:b8:90:9b:fe:53:8b: b5:5b:4c:98:76:fd:76:c1:d5:12:ae:7a:1c:15:aa: 5e:5d:4e:3a:b5:93:df:fb:59:5c:22:af:bc:db:fe: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6A:42:BE:B5:92:5C:64:86:F1:A8:99:36:33:C0:77:B2:52:92:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d59591da-1e5b-4ef8-8a99-524d4abfcbe3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d59591da-1e5b-4ef8-8a99-524d4abfcbe3/d59591da-1e5b-4ef8-8a99-524d4abfcbe3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 74.80.194.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 23206 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:5d:64:69:cb:f6:f1:df:1a:92:3e:9b:aa:60:64:23:04:27: 3f:40:e6:7a:59:4b:19:5d:c3:85:6e:77:0e:fa:7f:62:78:67: bc:5d:37:34:b3:a4:7a:85:97:8a:d8:a6:c7:23:5f:af:f2:80: e9:1f:ad:31:4d:74:68:13:36:12:90:b4:73:9c:27:c2:af:fc: 25:54:5d:5e:7c:6c:89:93:be:7f:7d:da:82:2d:f7:7b:02:71: dd:bc:e7:4d:ea:14:d9:9e:e2:27:d6:c1:21:89:0d:7d:00:2f: cc:94:26:f6:72:8a:1f:07:b3:23:f5:d0:fa:73:c2:a4:ca:2b: 1b:1e:98:c5:f4:24:43:16:25:2c:78:a9:24:2f:ea:b9:1e:1a: 2d:86:2d:c1:45:24:7b:b4:c1:f6:04:d0:90:b8:e8:89:dc:b8: 4b:c7:49:f0:3c:62:6d:7a:02:02:2c:eb:45:fc:90:e6:36:0d: 77:10:f1:6d:96:4b:f9:0e:6b:9b:42:1e:43:77:e8:62:d9:a2: 24:28:9a:89:a7:f0:44:76:de:61:cf:b0:bf:9a:b3:4e:ce:4b: 9e:5b:d2:c6:1a:3f:99:fb:01:d6:73:b3:de:ef:60:dd:38:7b: 54:e8:56:4f:65:04:19:3d:77:d1:d5:ec:e8:7d:94:be:1b:ff: 6a:f4:66:bc -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEyyf3wDP0cm/FsfZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEzMDEzNDUyM1oXDTI4MDUwNDEyNDUyM1owLzEtMCsGA1UEAxMk ZDU5NTkxZGEtMWU1Yi00ZWY4LThhOTktNTI0ZDRhYmZjYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI9DS58vX2uoQbfx5C+X3U893BjZCGOmrh5A kT8Ia5OKFBzCQxbCa9Hc6h3Yx8iBwXX0NMGU/VFi80bFSx3DPrG7dQoVC8jrPOyl xmidLi5hxNw0tpH8evbpvDeCrJCwYd9tjosTNBWa/R2K4rfWaUEaltPD5nRCrOD3 MF0zGT4+CQETZ6QGn+FWyHf9fTRtHw2FaCGwakF0Ma/fZtHyYKKXsmKsXRWBvJw4 TAgFIPZNjAJtPN8QBlFsYjeRcEQg40twLxGNKJ4U8+qmYGYxlDlkbRS8qTYgE3i4 kJv+U4u1W0yYdv12wdUSrnocFapeXU46tZPf+1lcIq+82/6WSwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFEBqQr61klxkhvGomTYzwHeyUpIUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k NTk1OTFkYS0xZTViLTRlZjgtOGE5OS01MjRkNGFiZmNiZTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Q1OTU5MWRhLTFlNWItNGVmOC04 YTk5LTUyNGQ0YWJmY2JlMy9kNTk1OTFkYS0xZTViLTRlZjgtOGE5OS01MjRkNGFi ZmNiZTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBABKUMIwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC WqYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEALV1kacv28d8akj6bqmBkIwQnP0DmellLGV3DhW53Dvp/Ynhn vF03NLOkeoWXitimxyNfr/KA6R+tMU10aBM2EpC0c5wnwq/8JVRdXnxsiZO+f33a gi33ewJx3bznTeoU2Z7iJ9bBIYkNfQAvzJQm9nKKHwezI/XQ+nPCpMorGx6YxfQk QxYlLHipJC/quR4aLYYtwUUke7TB9gTQkLjoidy4S8dJ8DxibXoCAizrRfyQ5jYN dxDxbZZL+Q5rm0IeQ3foYtmiJCiaiafwRHbeYc+wv5qzTs5LnlvSxho/mfsB1nOz 3u9g3Th7VOhWT2UEGT130dXs6H2Uvhv/avRmvA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:14:43 2026 by rpki-client