$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d.cer File: fe71f35f-fe6a-4632-a179-52db92bbfd3d.cer (raw, json) Hash identifier: P/4jCStdcxYKEu60KtbGRn72XeIPhgBBs6rLl2KCfuA= Subject key identifier: AA:26:EC:82:C5:1F:9B:ED:29:D3:36:7A:A1:E8:60:E8:29:80:01:2D Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584C9694A59E0E6FADE2D5DF9D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/fe71f35f-fe6a-4632-a179-52db92bbfd3d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 20 Jan 2026 13:45:23 +0000 Certificate not after: Mon 24 Apr 2028 12:45:23 +0000 Subordinate resources: AS: 395441 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:96:94:a5:9e:0e:6f:ad:e2:d5:df:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 20 13:45:23 2026 GMT Not After : Apr 24 12:45:23 2028 GMT Subject: CN=fe71f35f-fe6a-4632-a179-52db92bbfd3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:32:f8:7f:d1:8f:63:85:93:99:c6:ed:7f: 2b:e3:c5:74:6b:a1:87:d7:1a:1c:43:aa:01:7f:fc: 99:07:a4:53:80:12:37:34:cb:5c:44:7f:d5:a6:7f: 79:dc:b4:d0:50:40:16:94:02:e1:7e:a4:92:ef:81: d5:d0:09:6e:1d:47:4a:bb:64:c6:6f:47:3f:02:25: 94:16:1f:69:be:de:06:20:bd:30:76:bc:28:22:66: 73:5e:64:12:2b:b6:c2:1f:2d:f0:52:9c:13:80:d9: 17:89:88:3b:a9:00:bd:bb:94:5f:b8:39:a3:37:b3: ad:1d:92:65:93:4c:c9:e1:cc:48:7a:14:eb:e2:c3: 37:93:4c:eb:95:83:bd:19:cc:e1:65:e8:0f:96:28: a7:d8:dd:2f:a6:09:66:86:e3:c0:6c:95:77:45:e8: c2:bc:5d:1c:e1:6b:ab:c3:0c:ec:70:24:1b:90:5a: 25:48:63:e9:48:70:f0:50:00:41:aa:ca:05:e6:39: 25:1b:31:a8:9e:ab:36:85:7e:55:dc:68:00:61:64: 4d:11:aa:2c:c7:db:0c:8f:02:cd:38:b5:df:bb:f2: 98:2f:38:7a:c9:22:5d:95:75:13:39:a5:59:b5:d3: 98:79:61:3f:dd:7f:8c:fe:c3:57:f0:47:b1:bc:d0: 5e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:26:EC:82:C5:1F:9B:ED:29:D3:36:7A:A1:E8:60:E8:29:80:01:2D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fe71f35f-fe6a-4632-a179-52db92bbfd3d/fe71f35f-fe6a-4632-a179-52db92bbfd3d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 395441 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d5:2a:59:72:43:b1:e4:e4:ed:76:91:93:74:2b:57:24:34: fd:60:23:73:e7:19:8d:e5:c2:a3:1e:cf:2e:b0:4e:bc:58:f2: cb:88:d5:8a:08:85:f4:66:9c:1c:b2:c6:c4:d3:55:bf:e0:8a: 77:88:c1:0b:a8:7b:01:a5:b0:d0:53:47:8f:21:da:94:71:a5: 47:ba:34:d9:ac:67:be:ff:69:c2:e2:6d:f1:53:f1:93:6c:24: 32:45:ab:03:f3:a1:56:27:cd:f4:d1:28:d8:04:ca:a5:48:1c: fe:2b:57:28:57:a0:0d:17:86:40:d2:96:ee:bc:90:b5:d8:44: 90:8c:7b:0e:a9:c5:d6:56:14:46:1b:f1:f0:e3:71:be:34:95: 72:5e:48:bf:18:1f:b1:f2:4d:49:7e:87:4c:46:c3:86:ec:b6: 45:a0:f8:6d:b6:bd:0e:4d:c5:0c:aa:55:ff:db:42:fa:4b:28: e6:66:f5:2c:4d:35:30:b0:d8:d3:02:9f:9d:03:d6:5e:44:2f: 13:68:28:ee:7b:95:6f:6a:4e:6b:40:2b:2c:a8:32:e4:6c:72: f5:46:7a:49:0c:dc:8a:99:16:0e:dc:2f:0f:ac:cc:11:4b:9a: 73:5c:91:9a:de:b5:c6:74:fe:77:a0:6c:38:3f:9a:64:c5:c8: 4c:57:14:58 -----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIUAQ0Mn0MoWEyWlKWeDm+t4tXfnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyMDEzNDUyM1oXDTI4MDQyNDEyNDUyM1owLzEtMCsGA1UEAxMk ZmU3MWYzNWYtZmU2YS00NjMyLWExNzktNTJkYjkyYmJmZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3cy+H/Rj2OFk5nG7X8r48V0a6GH1xocQ6oB f/yZB6RTgBI3NMtcRH/Vpn953LTQUEAWlALhfqSS74HV0AluHUdKu2TGb0c/AiWU Fh9pvt4GIL0wdrwoImZzXmQSK7bCHy3wUpwTgNkXiYg7qQC9u5RfuDmjN7OtHZJl k0zJ4cxIehTr4sM3k0zrlYO9GczhZegPliin2N0vpglmhuPAbJV3RejCvF0c4Wur wwzscCQbkFolSGPpSHDwUABBqsoF5jklGzGonqs2hX5V3GgAYWRNEaosx9sMjwLN OLXfu/KYLzh6ySJdlXUTOaVZtdOYeWE/3X+M/sNX8EexvNBe2wIDAQABo4ID+jCC A/YwHQYDVR0OBBYEFKom7ILFH5vtKdM2eqHoYOgpgAEtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9m ZTcxZjM1Zi1mZTZhLTQ2MzItYTE3OS01MmRiOTJiYmZkM2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2ZlNzFmMzVmLWZlNmEtNDYzMi1h MTc5LTUyZGI5MmJiZmQzZC9mZTcxZjM1Zi1mZTZhLTQ2MzItYTE3OS01MmRiOTJi YmZkM2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBgixMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAALVKllyQ7Hk5O12kZN0K1ckNP1g I3PnGY3lwqMezy6wTrxY8suI1YoIhfRmnByyxsTTVb/gineIwQuoewGlsNBTR48h 2pRxpUe6NNmsZ77/acLibfFT8ZNsJDJFqwPzoVYnzfTRKNgEyqVIHP4rVyhXoA0X hkDSlu68kLXYRJCMew6pxdZWFEYb8fDjcb40lXJeSL8YH7HyTUl+h0xGw4bstkWg +G22vQ5NxQyqVf/bQvpLKOZm9SxNNTCw2NMCn50D1l5ELxNoKO57lW9qTmtAKyyo MuRscvVGekkM3IqZFg7cLw+szBFLmnNckZretcZ0/negbDg/mmTFyExXFFg= -----END CERTIFICATE-----Generated at Sun Mar 1 20:16:29 2026 by rpki-client