$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c.cer File: f7ac366d-8d88-4629-8e0f-0a0062fc641c.cer (raw, json) Hash identifier: R+huCutWg+pS09KVhgctobdDbxkptlDxOt0TY7I1hCY= Subject key identifier: 59:4E:1F:F6:47:58:B7:2C:2D:C8:E9:2A:61:92:21:8C:F8:EF:E5:C1 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA48A0C8063AE3160446C1318 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/f7ac366d-8d88-4629-8e0f-0a0062fc641c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 25 Jan 2026 13:45:21 +0000 Certificate not after: Sat 29 Apr 2028 12:45:21 +0000 Subordinate resources: AS: 54538 AS: 396421 IP: 199.167.52.0/22 IP: 2620:52:c000::/48 IP: 2620:130:8000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a4:8a:0c:80:63:ae:31:60:44:6c:13:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 25 13:45:21 2026 GMT Not After : Apr 29 12:45:21 2028 GMT Subject: CN=f7ac366d-8d88-4629-8e0f-0a0062fc641c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7f:b1:05:1f:23:76:56:76:76:83:19:4f:30: 76:4b:c9:bd:53:06:3a:d1:81:5c:50:ef:6e:1a:d8: a5:9f:f6:54:6a:da:e9:11:59:c7:d2:7c:ce:c6:da: 0d:89:51:23:ed:07:8a:6a:15:a9:7e:a7:4f:1c:63: 84:d7:1e:bc:9e:2a:0a:90:f8:ad:58:19:7f:bc:9c: 92:32:14:e7:49:23:73:1b:55:5d:b8:4f:2c:b4:c4: d4:12:23:6e:17:36:9f:39:2d:50:18:91:05:a8:ba: c4:f5:fd:96:bc:55:16:1b:08:a0:b2:cc:6c:ee:de: bf:8c:09:e0:99:39:d8:38:3d:71:eb:e8:55:4a:91: 0c:d2:f5:25:50:94:29:17:ea:c8:34:a3:ae:3b:35: 9d:fa:53:c4:7b:17:93:39:1c:85:cc:a9:fe:49:80: 36:5b:37:95:37:00:72:01:ff:f6:ec:ac:df:f8:d1: c9:7f:af:65:01:c4:77:7c:85:0a:30:cb:de:e7:10: 68:88:29:f0:2c:07:8c:c6:d1:ed:09:35:b3:67:97: 3f:63:31:bb:80:83:07:9e:20:99:57:f4:03:df:fe: 36:b7:51:75:1f:5b:6d:8b:9a:ca:d0:2c:6b:ca:18: 8b:63:d5:94:16:09:09:ce:a6:8d:1e:fb:13:5b:07: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:4E:1F:F6:47:58:B7:2C:2D:C8:E9:2A:61:92:21:8C:F8:EF:E5:C1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f7ac366d-8d88-4629-8e0f-0a0062fc641c/f7ac366d-8d88-4629-8e0f-0a0062fc641c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.167.52.0/22 IPv6: 2620:52:c000::/48 2620:130:8000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54538 396421 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:47:b3:9e:6f:d6:2c:27:0a:ab:bf:3b:bb:20:1e:43:fc:bd: 72:be:ac:79:61:94:2e:da:f3:58:dc:af:3b:be:c2:69:d3:a5: 88:6b:79:23:b3:ac:84:b7:5b:c9:79:5b:ad:5a:63:8a:d2:a9: b7:1a:00:aa:d0:dc:84:dd:b4:96:24:ee:ea:43:10:97:28:9d: f8:ef:08:20:0e:1d:46:07:76:34:fa:f7:3d:1d:87:68:9d:1d: f0:df:95:94:18:7e:59:fb:f5:21:16:b0:94:b0:4f:2e:95:40: de:25:c6:3c:92:43:f8:02:50:4f:c6:38:3a:fe:06:39:b3:35: 28:f3:5c:b0:c5:5e:3b:70:82:0e:42:74:06:a8:6c:33:01:da: 46:12:32:34:94:ee:5d:21:77:9a:e7:0b:2b:1e:6b:64:10:64: b7:18:0e:ce:d5:c4:b0:5d:73:9a:8d:3d:7b:41:55:b6:48:1f: 19:d0:a7:15:a5:19:c3:a4:b0:36:cb:bf:39:6f:22:57:47:23: 29:14:58:ab:6f:7a:93:72:f2:ff:46:8f:85:e4:20:81:5d:a1: a2:29:21:c3:be:3d:d3:bf:3c:60:10:01:75:03:f4:b0:35:c9: ee:eb:3d:d3:08:f4:7c:9b:0f:71:e8:28:7d:f6:65:ac:f3:3b: 80:6e:7d:e9 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWEykigyAY64xYERsExgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNTEzNDUyMVoXDTI4MDQyOTEyNDUyMVowLzEtMCsGA1UEAxMk ZjdhYzM2NmQtOGQ4OC00NjI5LThlMGYtMGEwMDYyZmM2NDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX+xBR8jdlZ2doMZTzB2S8m9UwY60YFcUO9u Gtiln/ZUatrpEVnH0nzOxtoNiVEj7QeKahWpfqdPHGOE1x68nioKkPitWBl/vJyS MhTnSSNzG1VduE8stMTUEiNuFzafOS1QGJEFqLrE9f2WvFUWGwigssxs7t6/jAng mTnYOD1x6+hVSpEM0vUlUJQpF+rINKOuOzWd+lPEexeTORyFzKn+SYA2WzeVNwBy Af/27Kzf+NHJf69lAcR3fIUKMMve5xBoiCnwLAeMxtHtCTWzZ5c/YzG7gIMHniCZ V/QD3/42t1F1H1tti5rK0CxryhiLY9WUFgkJzqaNHvsTWwcKgQIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFFlOH/ZHWLcsLcjpKmGSIYz47+XBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m N2FjMzY2ZC04ZDg4LTQ2MjktOGUwZi0wYTAwNjJmYzY0MWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2Y3YWMzNjZkLThkODgtNDYyOS04 ZTBmLTBhMDA2MmZjNjQxYy9mN2FjMzY2ZC04ZDg4LTQ2MjktOGUwZi0wYTAwNjJm YzY0MWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOQYIKwYBBQUH AQcBAf8EKjAoMAwEAgABMAYDBALHpzQwGAQCAAIwEgMHACYgAFLAAAMHBCYgATCA ADAfBggrBgEFBQcBCAEB/wQQMA6gDDAKAgMA1QoCAwYMhTBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCHR7Oe b9YsJwqrvzu7IB5D/L1yvqx5YZQu2vNY3K87vsJp06WIa3kjs6yEt1vJeVutWmOK 0qm3GgCq0NyE3bSWJO7qQxCXKJ347wggDh1GB3Y0+vc9HYdonR3w35WUGH5Z+/Uh FrCUsE8ulUDeJcY8kkP4AlBPxjg6/gY5szUo81ywxV47cIIOQnQGqGwzAdpGEjI0 lO5dIXea5wsrHmtkEGS3GA7O1cSwXXOajT17QVW2SB8Z0KcVpRnDpLA2y785byJX RyMpFFirb3qTcvL/Ro+F5CCBXaGiKSHDvj3TvzxgEAF1A/SwNcnu6z3TCPR8mw9x 6Ch99mWs8zuAbn3p -----END CERTIFICATE-----Generated at Sun Mar 1 20:17:28 2026 by rpki-client