$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3.cer File: e0cc0722-047e-4c36-bc40-dde084ab94f3.cer (raw, json) Hash identifier: Tud3PNDzGLys63WCyiIjlYfD6+iGpBcaQU/CMjpU/+M= Subject key identifier: D5:3F:1E:FA:31:5A:91:89:0D:F0:58:3B:11:9E:20:31:4A:8E:6B:7C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CC60A43AF1072E99A0F3F7100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/e0cc0722-047e-4c36-bc40-dde084ab94f3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Feb 2026 13:45:22 +0000 Certificate not after: Thu 11 May 2028 12:45:22 +0000 Subordinate resources: IP: 199.103.32.0 -- 199.103.51.255 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:0a:43:af:10:72:e9:9a:0f:3f:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 6 13:45:22 2026 GMT Not After : May 11 12:45:22 2028 GMT Subject: CN=e0cc0722-047e-4c36-bc40-dde084ab94f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:18:16:3e:11:e1:30:01:f5:1a:e3:08:40: 77:5a:fd:4e:d8:2b:cd:ad:6a:2d:ca:8b:69:67:ea: c2:3e:72:e3:25:62:19:56:32:a3:29:13:53:b4:a4: d1:91:9f:79:77:a9:79:eb:43:1f:24:cb:7b:6b:d1: 4d:24:4b:80:bf:ed:44:2d:c4:d2:91:4e:b1:93:ec: eb:d7:79:ea:4e:c3:a7:d7:b0:69:24:00:26:cb:92: ce:c1:f3:8c:31:20:74:a6:51:f8:cb:f8:ae:b3:eb: 79:72:e9:61:7e:4f:c3:9e:1b:b6:03:c4:b9:94:a5: b4:bd:eb:c5:48:ec:0b:e9:03:1d:85:50:52:c5:f1: 05:02:97:8d:0c:7a:3d:11:09:c6:30:fb:4b:b5:53: dc:8b:a3:5f:80:7c:21:51:62:c3:3e:79:56:ca:15: 52:eb:57:be:d5:9f:4c:d9:d3:b1:9a:ee:5e:c8:7a: cb:08:a8:3d:2c:c9:7f:35:29:7e:93:ac:26:a8:e9: 24:ee:94:4e:0f:23:fe:01:2b:08:06:96:d6:b1:27: 4e:65:c8:be:8c:c4:d7:f1:0d:18:a8:93:d6:fe:e6: 45:8d:67:4a:0c:43:ed:85:f9:52:4a:ae:64:29:86: 91:0c:68:a0:be:95:1f:59:81:2a:d0:f4:d0:cc:81: 92:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3F:1E:FA:31:5A:91:89:0D:F0:58:3B:11:9E:20:31:4A:8E:6B:7C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0cc0722-047e-4c36-bc40-dde084ab94f3/e0cc0722-047e-4c36-bc40-dde084ab94f3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.103.32.0-199.103.51.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b5:92:12:7b:18:f8:78:73:2f:94:70:4c:9f:ac:80:04:fb: 27:51:20:41:3c:a6:45:0a:e1:57:41:5d:11:96:12:9d:45:cc: 9e:f5:89:a3:19:07:69:21:49:a7:64:a9:ac:27:5c:8e:21:8b: 7d:13:25:27:ca:0b:4e:4b:c0:99:d4:93:b2:d7:69:10:22:2a: 10:20:62:61:28:be:fa:63:6c:0c:ec:65:3e:a4:ea:64:6b:0b: 80:5c:ce:70:fa:05:3f:eb:51:ab:38:a9:b8:a5:24:40:b8:91: a5:37:eb:e8:fa:ec:8f:98:97:c8:d3:85:8b:84:bf:29:6a:94: 83:9e:bc:9c:f1:d3:ff:b3:87:89:8f:87:42:74:85:ee:10:8d: 61:03:5b:f2:db:25:02:13:37:ed:b5:bd:e0:1b:21:b8:db:50: bb:36:b9:0e:6b:99:01:d6:33:5e:b2:99:1e:cd:65:70:2e:88: e1:29:46:be:ab:0e:7a:93:c8:71:ce:dc:c6:fb:97:65:a3:51: d0:0a:c3:be:30:ed:b8:c6:ee:f1:e6:c3:a0:eb:65:d3:e7:d3: 1a:19:a3:dd:18:46:6c:35:66:59:00:6b:b8:5d:fb:e8:20:8d: 6b:ba:b6:e9:a0:4a:bc:14:e7:fe:d7:f8:e9:2c:dc:6f:f6:06: dc:89:0b:7d -----BEGIN CERTIFICATE----- MIIG9TCCBd2gAwIBAgIUAQ0Mn0MoWEzGCkOvEHLpmg8/cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIwNjEzNDUyMloXDTI4MDUxMTEyNDUyMlowLzEtMCsGA1UEAxMk ZTBjYzA3MjItMDQ3ZS00YzM2LWJjNDAtZGRlMDg0YWI5NGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6IYFj4R4TAB9RrjCEB3Wv1O2CvNrWotyotp Z+rCPnLjJWIZVjKjKRNTtKTRkZ95d6l560MfJMt7a9FNJEuAv+1ELcTSkU6xk+zr 13nqTsOn17BpJAAmy5LOwfOMMSB0plH4y/ius+t5culhfk/Dnhu2A8S5lKW0vevF SOwL6QMdhVBSxfEFApeNDHo9EQnGMPtLtVPci6NfgHwhUWLDPnlWyhVS61e+1Z9M 2dOxmu5eyHrLCKg9LMl/NSl+k6wmqOkk7pRODyP+ASsIBpbWsSdOZci+jMTX8Q0Y qJPW/uZFjWdKDEPthflSSq5kKYaRDGigvpUfWYEq0PTQzIGS7wIDAQABo4IEBzCC BAMwHQYDVR0OBBYEFNU/HvoxWpGJDfBYOxGeIDFKjmt8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MGNjMDcyMi0wNDdlLTRjMzYtYmM0MC1kZGUwODRhYjk0ZjMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UwY2MwNzIyLTA0N2UtNGMzNi1i YzQwLWRkZTA4NGFiOTRmMy9lMGNjMDcyMi0wNDdlLTRjMzYtYmM0MC1kZGUwODRh Yjk0ZjMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJwYIKwYBBQUH AQcBAf8EGDAWMBQEAgABMA4wDAMEBcdnIAMEAsdnMDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBtZISexj4 eHMvlHBMn6yABPsnUSBBPKZFCuFXQV0RlhKdRcye9YmjGQdpIUmnZKmsJ1yOIYt9 EyUnygtOS8CZ1JOy12kQIioQIGJhKL76Y2wM7GU+pOpkawuAXM5w+gU/61GrOKm4 pSRAuJGlN+vo+uyPmJfI04WLhL8papSDnryc8dP/s4eJj4dCdIXuEI1hA1vy2yUC Ezfttb3gGyG421C7NrkOa5kB1jNespkezWVwLojhKUa+qw56k8hxztzG+5dlo1HQ CsO+MO24xu7x5sOg62XT59MaGaPdGEZsNWZZAGu4XfvoII1rurbpoEq8FOf+1/jp LNxv9gbciQt9 -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:23 2026 by rpki-client