$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer File: ec697c9d-325a-460f-ab2f-8cf71b1be984.cer (raw, json) Hash identifier: aP931qswH+3uCSodWab1GfFaxpfUOcTmE9bQbMfx29Y= Subject key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CDF2A6D64B947963588A75D98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Feb 2026 13:45:23 +0000 Certificate not after: Sat 20 May 2028 12:45:23 +0000 Subordinate resources: AS: 395425 IP: 72.42.224.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:df:2a:6d:64:b9:47:96:35:88:a7:5d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Feb 15 13:45:23 2026 GMT Not After : May 20 12:45:23 2028 GMT Subject: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:dc:03:f7:a1:3c:e6:0a:9a:51:85:cc:b5:90: af:1e:7f:49:d8:b8:10:b1:e5:95:54:dc:2c:35:b2: da:36:51:5d:8c:c1:a0:4a:a5:b3:c4:a4:18:ae:44: 00:9a:50:9e:7f:2b:50:fc:8e:87:8e:5b:31:c1:f4: ea:ca:c7:8e:8e:ac:4b:9f:f2:2a:29:fa:f7:ed:7d: d4:d2:26:51:90:33:93:12:cd:a4:32:af:9c:bf:eb: ac:d5:60:81:47:92:62:ba:b3:28:0c:52:03:a9:87: ae:c3:60:03:b8:ac:f1:d3:43:a8:f0:bc:de:65:58: 4c:e2:ba:85:2c:84:47:65:ac:fd:8f:b0:b6:b1:9c: a5:92:4d:f9:83:82:83:35:8a:e5:fa:a7:43:04:b0: 18:41:8b:6f:02:e4:e5:f1:87:6d:c8:73:52:3b:fd: 28:9c:8f:6c:5b:c0:1f:63:5b:47:7b:c0:4e:31:bb: b3:49:90:ac:0e:c6:99:e8:a5:9a:d0:f9:58:db:9e: ff:00:92:dc:7b:71:df:df:59:3e:f2:ea:3d:df:71: c7:a5:1f:53:62:1f:e6:85:8a:a1:61:e9:8a:be:bc: 8e:15:8b:c0:7c:0f:dd:9f:77:a2:53:77:74:d7:7b: 76:16:cb:f9:4a:6e:58:57:a6:27:d9:ef:e2:d4:dd: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 72.42.224.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 395425 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:36:20:06:58:87:4b:5d:13:9a:89:1a:58:85:bf:7d:ab:6b: 0e:e6:db:2f:19:ac:33:af:b8:a1:3b:89:61:24:2c:2e:5e:ea: 7f:4d:a4:d6:34:5b:82:96:b9:e0:b7:8f:a2:4a:15:da:6d:b3: 18:e6:17:72:a5:f2:73:37:6e:c3:4e:44:2b:79:f9:64:15:be: 19:40:95:06:f1:88:f0:04:12:da:62:5d:4d:7c:19:94:19:cb: 98:eb:8b:7c:bf:ee:ff:93:fa:e0:de:2d:27:81:fc:a5:b5:0b: f9:e4:12:01:2b:8f:3b:f7:5e:33:65:13:92:df:82:b2:b9:67: bf:02:96:b3:63:aa:07:74:65:7f:06:6f:b1:24:0c:0d:d8:e6: 58:44:54:90:e7:02:37:70:a6:f2:a6:12:bd:5c:de:d6:0e:88: e3:f9:1f:44:93:fe:9a:d5:1b:ce:88:5b:8d:df:d1:f9:94:0a: 10:48:00:88:c6:e0:27:0d:a4:55:23:c5:ca:f9:97:71:08:4c: d3:03:de:23:93:4b:84:1b:a3:74:91:a9:7e:18:ac:37:2f:df: 6c:e2:6f:a3:6f:a2:33:a2:3f:87:0e:e8:9b:7a:2a:13:e2:32: c2:75:10:84:54:8a:04:00:8a:2d:9e:0e:f9:ab:e8:7a:01:58: 7b:8e:f3:29 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEzfKm1kuUeWNYinXZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDIxNTEzNDUyM1oXDTI4MDUyMDEyNDUyM1owLzEtMCsGA1UEAxMk ZWM2OTdjOWQtMzI1YS00NjBmLWFiMmYtOGNmNzFiMWJlOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNwD96E85gqaUYXMtZCvHn9J2LgQseWVVNws NbLaNlFdjMGgSqWzxKQYrkQAmlCefytQ/I6HjlsxwfTqyseOjqxLn/IqKfr37X3U 0iZRkDOTEs2kMq+cv+us1WCBR5JiurMoDFIDqYeuw2ADuKzx00Oo8LzeZVhM4rqF LIRHZaz9j7C2sZylkk35g4KDNYrl+qdDBLAYQYtvAuTl8YdtyHNSO/0onI9sW8Af Y1tHe8BOMbuzSZCsDsaZ6KWa0PlY257/AJLce3Hf31k+8uo933HHpR9TYh/mhYqh YemKvryOFYvAfA/dn3eiU3d013t2Fsv5Sm5YV6Yn2e/i1N2OEwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFBI72XUyq4/dnBxWKc4y8d97JYYZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l YzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIxYmU5ODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2VjNjk3YzlkLTMyNWEtNDYwZi1h YjJmLThjZjcxYjFiZTk4NC9lYzY5N2M5ZC0zMjVhLTQ2MGYtYWIyZi04Y2Y3MWIx YmU5ODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARIKuAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgihMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIg2IAZYh0tdE5qJGliFv32raw7m2y8ZrDOvuKE7iWEkLC5e 6n9NpNY0W4KWueC3j6JKFdptsxjmF3Kl8nM3bsNORCt5+WQVvhlAlQbxiPAEEtpi XU18GZQZy5jri3y/7v+T+uDeLSeB/KW1C/nkEgErjzv3XjNlE5LfgrK5Z78ClrNj qgd0ZX8Gb7EkDA3Y5lhEVJDnAjdwpvKmEr1c3tYOiOP5H0ST/prVG86IW43f0fmU ChBIAIjG4CcNpFUjxcr5l3EITNMD3iOTS4Qbo3SRqX4YrDcv32zib6NvojOiP4cO 6Jt6KhPiMsJ1EIRUigQAii2eDvmr6HoBWHuO8yk= -----END CERTIFICATE-----Generated at Sun Mar 1 18:16:35 2026 by rpki-client