$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e.cer File: e1fca709-9829-483c-a335-41bcfa34ee4e.cer (raw, json) Hash identifier: Hx/VTeesd68NkGozU23LPQLZv5BfEex+6KZ/Og4+4P8= Subject key identifier: 6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CD9950F594F6F995C2E159480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Feb 2026 13:45:23 +0000 Certificate not after: Thu 18 May 2028 12:45:23 +0000 Subordinate resources: IP: 204.108.176.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:95:0f:59:4f:6f:99:5c:2e:15:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 13 13:45:23 2026 GMT Not After : May 18 12:45:23 2028 GMT Subject: CN=e1fca709-9829-483c-a335-41bcfa34ee4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3f:73:3f:6f:aa:ad:d0:1f:12:d2:a3:2b:42: 22:33:9b:82:04:28:c7:ef:3f:96:bb:08:67:4c:59: 0a:89:e2:56:87:ec:e6:41:31:bd:75:88:5e:41:a9: 19:a6:54:d1:96:e3:a4:47:0f:24:7b:0a:a4:81:0e: 55:bb:2b:40:c8:2c:ce:e1:84:ca:bb:e7:e0:af:84: e6:9d:8d:b4:78:7a:d1:84:3c:ec:6c:19:67:e4:a7: 60:c3:cb:39:6c:a9:a1:96:03:bf:4f:4e:22:f2:d8: 99:f3:eb:dd:c4:cd:7e:2c:3d:d9:76:bd:35:fe:4a: f7:75:1d:bc:18:71:85:70:e5:37:c9:a4:a6:65:41: 30:34:7d:bd:e6:e5:b6:69:30:d5:d6:83:52:d9:5a: 24:6b:d5:1f:f1:0b:cb:4b:86:2c:89:56:b9:64:3d: cd:a7:16:c0:22:3f:e6:8e:7e:d0:3d:fe:56:35:30: c8:33:a6:84:12:ef:3e:99:ff:ef:93:2f:4c:0d:cb: b1:42:eb:f8:d1:f5:26:92:97:75:de:7b:0c:f0:89: 71:5b:a9:4a:71:39:57:d7:d8:0f:9b:36:75:c2:f5: 78:98:8d:a5:cb:51:70:06:0b:29:1f:f8:a7:49:8a: 75:c7:7c:41:d2:a5:59:4c:fb:c9:f7:6c:32:e2:6c: 1a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D1:1A:73:4B:14:07:01:55:9D:F0:29:6D:F6:5F:6E:BA:0F:27:BF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e1fca709-9829-483c-a335-41bcfa34ee4e/e1fca709-9829-483c-a335-41bcfa34ee4e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 204.108.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0a:64:04:ee:48:7c:43:dc:39:0f:ed:57:ca:79:47:11:11: d1:d2:bb:5e:4c:75:a3:bd:0f:2b:4f:d1:57:e9:a3:77:06:d7: 0d:18:e9:d0:be:79:92:51:97:a0:7d:77:97:65:3d:8c:c0:e7: 58:5a:db:71:c3:5f:17:e6:4c:74:31:3d:08:2d:c3:fc:7b:eb: da:95:8a:2a:14:1b:c7:c7:a2:79:82:97:b4:76:43:1f:00:a4: 8e:41:eb:28:05:60:a8:15:1f:da:16:ac:06:32:69:45:d2:c1: 96:ef:87:9a:7b:8e:41:7e:42:0e:71:a9:36:cc:44:7b:e5:b0: 77:26:a9:2d:66:e3:a9:64:59:b4:d7:86:4e:e2:d7:72:4f:76: fa:be:51:c2:51:f5:d3:74:40:30:a5:59:58:c1:b2:2d:b4:3a: c3:90:f2:e1:dd:e8:c8:ef:d2:b4:1c:ac:85:88:e5:67:6f:e4: 5e:1d:03:80:63:d5:da:34:8c:f1:3b:c9:77:6f:bc:48:f0:4d: d0:9b:42:57:82:88:11:46:f9:b2:a3:01:9d:e3:13:08:8e:a7: 93:b4:56:24:d1:da:ff:67:48:0e:c0:00:4a:26:58:49:5d:c9: a4:f2:b4:8d:8b:e1:5d:2c:ae:25:54:90:dc:29:69:06:6a:dc: 30:98:a8:22 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzZlQ9ZT2+ZXC4VlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIxMzEzNDUyM1oXDTI4MDUxODEyNDUyM1owLzEtMCsGA1UEAxMk ZTFmY2E3MDktOTgyOS00ODNjLWEzMzUtNDFiY2ZhMzRlZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmz9zP2+qrdAfEtKjK0IiM5uCBCjH7z+Wuwhn TFkKieJWh+zmQTG9dYheQakZplTRluOkRw8kewqkgQ5VuytAyCzO4YTKu+fgr4Tm nY20eHrRhDzsbBln5Kdgw8s5bKmhlgO/T04i8tiZ8+vdxM1+LD3Zdr01/kr3dR28 GHGFcOU3yaSmZUEwNH295uW2aTDV1oNS2Voka9Uf8QvLS4YsiVa5ZD3NpxbAIj/m jn7QPf5WNTDIM6aEEu8+mf/vky9MDcuxQuv40fUmkpd13nsM8IlxW6lKcTlX19gP mzZ1wvV4mI2ly1FwBgspH/inSYp1x3xB0qVZTPvJ92wy4mwawwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG3RGnNLFAcBVZ3wKW32X266Dye/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l MWZjYTcwOS05ODI5LTQ4M2MtYTMzNS00MWJjZmEzNGVlNGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2UxZmNhNzA5LTk4MjktNDgzYy1h MzM1LTQxYmNmYTM0ZWU0ZS9lMWZjYTcwOS05ODI5LTQ4M2MtYTMzNS00MWJjZmEz NGVlNGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHMbLAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOgpkBO5IfEPcOQ/tV8p5 RxER0dK7Xkx1o70PK0/RV+mjdwbXDRjp0L55klGXoH13l2U9jMDnWFrbccNfF+ZM dDE9CC3D/Hvr2pWKKhQbx8eieYKXtHZDHwCkjkHrKAVgqBUf2hasBjJpRdLBlu+H mnuOQX5CDnGpNsxEe+WwdyapLWbjqWRZtNeGTuLXck92+r5RwlH103RAMKVZWMGy LbQ6w5Dy4d3oyO/StByshYjlZ2/kXh0DgGPV2jSM8TvJd2+8SPBN0JtCV4KIEUb5 sqMBneMTCI6nk7RWJNHa/2dIDsAASiZYSV3JpPK0jYvhXSyuJVSQ3ClpBmrcMJio Ig== -----END CERTIFICATE-----Generated at Mon Mar 2 03:34:00 2026 by rpki-client