$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2c7ad8b-4343-4954-9e9a-8846fb0a5f43.cer File: f2c7ad8b-4343-4954-9e9a-8846fb0a5f43.cer (raw, json) Hash identifier: pPfRKl/7Qsqg8PZCigZs7xtuLuEBLizo+fL9VtNKexk= Subject key identifier: 9C:8A:A3:88:7F:96:6C:61:2C:57:1C:8A:69:86:E1:6F:48:EE:68:11 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA754BDCCA28150F097068100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2c7ad8b-4343-4954-9e9a-8846fb0a5f43/f2c7ad8b-4343-4954-9e9a-8846fb0a5f43.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2c7ad8b-4343-4954-9e9a-8846fb0a5f43/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 13:45:22 +0000 Certificate not after: Sun 30 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 32250 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:54:bd:cc:a2:81:50:f0:97:06:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 26 13:45:22 2026 GMT Not After : Apr 30 12:45:22 2028 GMT Subject: CN=f2c7ad8b-4343-4954-9e9a-8846fb0a5f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:2b:6c:a0:7d:07:33:e0:41:24:e0:b1:8e: 22:6a:ec:49:f6:a2:32:bb:8b:0d:7b:f9:79:1b:38: 9b:c5:aa:67:bc:90:0b:52:39:2d:f6:31:25:7f:da: dd:a7:2c:1c:ab:6c:68:83:7f:6b:16:19:f7:af:d3: 83:61:af:c2:94:63:b9:b2:35:9a:af:f7:58:47:e4: 0e:41:b4:29:46:be:84:41:18:7f:31:b2:bd:2b:8b: 82:ed:cd:2d:4b:c0:d4:52:be:43:52:1d:07:90:e3: de:fa:43:a1:c7:b1:52:34:60:e1:b1:f8:1a:6b:c4: d4:63:a0:32:ac:3b:09:e9:1f:6d:2f:51:dc:79:ad: 30:d8:da:43:e4:3e:2d:fb:9a:52:2d:39:9c:35:a6: bd:77:3c:71:67:2c:a9:4d:98:56:ef:02:76:2c:9d: db:50:71:f9:88:4a:5f:c6:2f:d8:ea:fc:58:f4:42: 55:ef:14:d4:a0:58:f4:35:f0:11:bd:9c:9c:8a:6f: f4:29:b4:54:19:77:65:f0:fb:67:46:ad:a0:b4:21: e1:4c:00:e1:3b:d9:b1:e6:71:76:9c:1f:07:08:f9: c8:46:e1:1b:83:f7:0c:7d:aa:1b:2c:fa:03:2a:0e: c8:b0:dd:62:20:1e:3a:bb:2f:cc:76:cd:40:9e:1b: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8A:A3:88:7F:96:6C:61:2C:57:1C:8A:69:86:E1:6F:48:EE:68:11 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2c7ad8b-4343-4954-9e9a-8846fb0a5f43/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2c7ad8b-4343-4954-9e9a-8846fb0a5f43/f2c7ad8b-4343-4954-9e9a-8846fb0a5f43.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32250 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:f0:66:ef:27:3f:24:30:ed:b5:cd:6c:ab:b0:a7:15:82:1e: cb:65:cb:d7:9d:db:d9:00:fd:37:62:04:46:89:3d:d2:d9:d0: 54:78:f2:f7:59:f1:a9:86:59:b3:2a:24:a4:00:f1:ae:8d:46: e9:dc:cf:eb:e4:ba:22:4f:3b:da:a8:45:69:d9:25:55:ef:69: ef:18:34:be:f1:ae:f6:1f:19:5c:b0:56:91:e4:28:0b:2d:05: 73:2e:08:3a:f0:60:e4:3d:2f:d0:f5:9f:c7:4a:ad:94:8a:53: 2b:87:e3:ad:c9:08:1b:6a:48:d1:92:bf:c6:05:d8:79:ff:42: 1d:03:04:17:d7:83:22:56:cc:35:ea:75:ea:d8:2d:ad:c1:05: d3:92:64:04:f3:59:f9:c5:25:89:7a:1b:ce:6e:65:1e:6c:08: d9:3d:cb:16:47:83:a5:9d:20:c0:f2:35:90:89:21:38:90:4f: f3:c5:88:ef:f1:97:f4:68:7d:d1:f0:f2:92:e8:6c:f0:5d:35: 23:eb:74:dc:33:c5:df:ca:59:03:fc:12:bb:63:f7:03:f5:53: 45:a0:b4:ca:a0:88:cb:45:77:50:ba:d4:54:1c:e7:da:f5:f6: 93:ca:de:51:3a:45:36:d4:34:80:c8:ac:ea:dc:6c:84:32:fc: 80:36:91:09 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEynVL3MooFQ8JcGgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNjEzNDUyMloXDTI4MDQzMDEyNDUyMlowLzEtMCsGA1UEAxMk ZjJjN2FkOGItNDM0My00OTU0LTllOWEtODg0NmZiMGE1ZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyArbKB9BzPgQSTgsY4iauxJ9qIyu4sNe/l5 GzibxapnvJALUjkt9jElf9rdpywcq2xog39rFhn3r9ODYa/ClGO5sjWar/dYR+QO QbQpRr6EQRh/MbK9K4uC7c0tS8DUUr5DUh0HkOPe+kOhx7FSNGDhsfgaa8TUY6Ay rDsJ6R9tL1Hcea0w2NpD5D4t+5pSLTmcNaa9dzxxZyypTZhW7wJ2LJ3bUHH5iEpf xi/Y6vxY9EJV7xTUoFj0NfARvZycim/0KbRUGXdl8PtnRq2gtCHhTADhO9mx5nF2 nB8HCPnIRuEbg/cMfaobLPoDKg7IsN1iIB46uy/Mds1AnhuOqwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFJyKo4h/lmxhLFccimmG4W9I7mgRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m MmM3YWQ4Yi00MzQzLTQ5NTQtOWU5YS04ODQ2ZmIwYTVmNDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2YyYzdhZDhiLTQzNDMtNDk1NC05 ZTlhLTg4NDZmYjBhNWY0My9mMmM3YWQ4Yi00MzQzLTQ5NTQtOWU5YS04ODQ2ZmIw YTVmNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICffowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH/Bm7yc/JDDttc1sq7CnFYIey2XL 153b2QD9N2IERok90tnQVHjy91nxqYZZsyokpADxro1G6dzP6+S6Ik872qhFadkl Ve9p7xg0vvGu9h8ZXLBWkeQoCy0Fcy4IOvBg5D0v0PWfx0qtlIpTK4fjrckIG2pI 0ZK/xgXYef9CHQMEF9eDIlbMNep16tgtrcEF05JkBPNZ+cUliXobzm5lHmwI2T3L FkeDpZ0gwPI1kIkhOJBP88WI7/GX9Gh90fDykuhs8F01I+t03DPF38pZA/wSu2P3 A/VTRaC0yqCIy0V3ULrUVBzn2vX2k8reUTpFNtQ0gMis6txshDL8gDaRCQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:12:30 2026 by rpki-client