$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a.cer File: d5a6b267-6096-4872-9afb-b9517766833a.cer (raw, json) Hash identifier: x71XKd4gTn9+xgEl15Hvgxu943Rb+X/EiLXsKOE54SU= Subject key identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CF84A94C95D3FAFC2D4A61D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Feb 2026 13:45:22 +0000 Certificate not after: Mon 29 May 2028 12:45:22 +0000 Subordinate resources: IP: 199.7.91.0/24 IP: 2001:500:2d::/48 IP: 2605:880::/32 IP: 2620:50::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:4a:94:c9:5d:3f:af:c2:d4:a6:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 24 13:45:22 2026 GMT Not After : May 29 12:45:22 2028 GMT Subject: CN=d5a6b267-6096-4872-9afb-b9517766833a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:f4:5b:14:21:31:f1:1f:8b:62:6d:7c:61: 9e:09:fa:52:14:e4:3c:c2:90:14:84:3f:c8:1e:28: 7b:94:78:f4:10:f8:77:b7:dc:02:98:20:ee:1b:2c: a2:08:11:59:51:1f:fa:7f:79:a3:fc:38:34:f6:8b: ca:d7:99:a7:d8:d2:ab:85:58:74:e8:bc:14:ed:a0: f8:d1:4d:bd:48:76:91:bf:b4:c1:2b:44:a0:9f:91: 49:9e:cf:59:02:9d:27:75:a8:c4:a6:ac:28:6a:7a: 12:a7:b8:35:1b:0a:5d:25:99:90:3a:40:70:58:1b: 28:4e:94:80:60:92:98:e5:63:75:3d:3d:91:88:dd: bb:dc:39:f7:3d:fa:62:86:7e:14:c5:c9:45:bb:56: 03:c8:2a:cb:94:d1:3d:7b:4e:10:72:d6:71:7a:bb: c3:ba:4f:4f:ee:5d:96:84:71:35:da:95:c4:9a:9a: 5e:50:44:57:98:80:37:0c:0b:c9:ba:5e:76:64:17: 0e:de:3c:34:b2:c1:a6:25:5a:05:45:20:28:f2:8a: 01:45:e3:1e:8d:9f:54:2d:8b:f5:e6:40:75:ff:0d: cb:39:b9:83:a5:c8:f3:30:ec:e3:a3:13:1a:16:e9: 3e:be:e4:7d:7e:28:ce:13:44:63:83:da:4c:3f:a2: d6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:E7:F2:BC:B2:15:17:7D:D7:6F:E8:FA:F0:04:46:11:E3:75:AB:32 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5a6b267-6096-4872-9afb-b9517766833a/d5a6b267-6096-4872-9afb-b9517766833a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.7.91.0/24 IPv6: 2001:500:2d::/48 2605:880::/32 2620:50::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:db:6e:47:30:d6:ae:fc:a2:00:72:69:74:28:a8:a0:ef:e2: 1e:17:7b:c0:82:16:e2:a8:d1:6a:68:38:22:9c:d6:33:63:30: 8f:78:5c:c8:13:7b:67:e8:bd:09:f6:f5:73:b8:a6:cf:72:10: 94:96:4a:82:73:79:e5:66:33:ec:4e:7c:24:bb:35:09:34:fc: e0:aa:df:1c:0e:ff:81:a9:27:36:9d:54:81:e3:ec:1f:dc:ba: 4d:08:15:68:4c:c0:71:0f:55:a3:86:16:c8:18:85:77:19:44: c8:3f:4e:c0:26:ae:5d:83:1c:ba:80:9c:ab:c9:f3:93:ff:1b: 0f:6f:99:c3:12:57:c2:6f:05:35:4d:ea:19:47:d1:79:a4:5e: e0:fa:7f:44:42:87:a2:e4:99:aa:f7:9d:3d:c3:5d:d1:16:42: 1a:3c:60:81:71:11:cf:bd:99:b2:19:13:69:22:ff:c0:30:e8: b4:bf:36:e6:c3:fb:9e:26:99:51:30:3a:28:76:5f:c2:c2:d0: da:81:87:45:4c:6a:b6:a9:6a:c6:f1:5b:28:c1:3d:4b:63:88: c9:1b:23:92:12:47:7f:a5:03:ec:8b:a4:e0:b8:ee:e8:b5:fc: 1a:71:73:dd:cd:7a:21:96:6f:7e:e1:4b:a4:a4:a2:97:f8:c1: 3c:d4:18:aa -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEz4SpTJXT+vwtSmHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIyNDEzNDUyMloXDTI4MDUyOTEyNDUyMlowLzEtMCsGA1UEAxMk ZDVhNmIyNjctNjA5Ni00ODcyLTlhZmItYjk1MTc3NjY4MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB70WxQhMfEfi2JtfGGeCfpSFOQ8wpAUhD/I Hih7lHj0EPh3t9wCmCDuGyyiCBFZUR/6f3mj/Dg09ovK15mn2NKrhVh06LwU7aD4 0U29SHaRv7TBK0Sgn5FJns9ZAp0ndajEpqwoanoSp7g1GwpdJZmQOkBwWBsoTpSA YJKY5WN1PT2RiN273Dn3Pfpihn4UxclFu1YDyCrLlNE9e04QctZxervDuk9P7l2W hHE12pXEmppeUERXmIA3DAvJul52ZBcO3jw0ssGmJVoFRSAo8ooBReMejZ9ULYv1 5kB1/w3LObmDpcjzMOzjoxMaFuk+vuR9fijOE0Rjg9pMP6LWoQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFF7n8ryyFRd912/o+vAERhHjdasyMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9k NWE2YjI2Ny02MDk2LTQ4NzItOWFmYi1iOTUxNzc2NjgzM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Q1YTZiMjY3LTYwOTYtNDg3Mi05 YWZiLWI5NTE3NzY2ODMzYS9kNWE2YjI2Ny02MDk2LTQ4NzItOWFmYi1iOTUxNzc2 NjgzM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMAwEAgABMAYDBADHB1swHwQCAAIwGQMHACABBQAALQMFACYFCIAD BwQmIABQAAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAjNtuRzDWrvyiAHJpdCiooO/iHhd7wIIW4qjRamg4 IpzWM2Mwj3hcyBN7Z+i9Cfb1c7imz3IQlJZKgnN55WYz7E58JLs1CTT84KrfHA7/ gaknNp1UgePsH9y6TQgVaEzAcQ9Vo4YWyBiFdxlEyD9OwCauXYMcuoCcq8nzk/8b D2+ZwxJXwm8FNU3qGUfReaRe4Pp/REKHouSZqvedPcNd0RZCGjxggXERz72ZshkT aSL/wDDotL825sP7niaZUTA6KHZfwsLQ2oGHRUxqtqlqxvFbKME9S2OIyRsjkhJH f6UD7Iuk4Lju6LX8GnFz3c16IZZvfuFLpKSil/jBPNQYqg== -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:47 2026 by rpki-client