$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer File: 5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer (raw, json) Hash identifier: SEivJmddz3E1Ix+jyQzv4Jk5kKlwwHaAGMczh1LTOOY= Subject key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584D62C5C2A17F18E0E83E047900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 03 Apr 2026 17:09:15 +0000 Certificate not after: Sun 18 Jun 2028 00:45:21 +0000 Subordinate resources: IP: 64.40.128.0/20 IP: 153.57.0.0/18 IP: 2607:9240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:c5:c2:a1:7f:18:e0:e8:3e:04:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Apr 3 17:09:15 2026 GMT Not After : Jun 18 00:45:21 2028 GMT Subject: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:70:56:f4:04:1e:87:88:59:27:93:a6:24: ae:ae:ef:62:a3:34:c8:3e:5e:7b:a3:22:80:29:f4: 7e:19:6d:91:9d:3b:13:56:fc:e9:5d:9d:18:30:3a: 96:b9:1f:ae:14:53:50:30:12:99:da:a6:48:68:20: f1:89:53:ec:ff:17:ab:ee:4d:90:c4:df:31:b3:27: 8d:1f:f9:58:f7:9f:df:87:f2:f4:56:e8:94:6f:ed: 10:96:b2:9d:8b:a8:3d:69:bc:fa:2b:61:e9:cb:01: ac:a1:67:26:cd:d5:3d:24:89:11:17:70:17:60:0c: f1:3e:83:b1:0a:18:57:ad:64:2f:bd:0e:2f:4d:9a: 99:d2:8d:5d:38:53:27:50:e8:43:89:77:41:06:3a: 62:59:34:53:c5:62:f2:4c:85:56:8c:66:c5:e7:a5: f6:6f:69:31:78:8d:f2:73:dd:36:83:5a:c5:91:34: f8:79:dd:93:7b:23:ca:14:f0:e7:c3:8c:b1:0d:5c: 9b:a9:0d:c1:02:2a:e0:cc:15:71:1a:0a:6c:cd:b9: 59:1e:f2:d8:c4:57:3c:de:76:78:51:18:ea:50:43: 36:d7:c2:bc:db:67:d6:81:ed:ce:8d:26:68:49:fd: c4:18:87:04:f0:8d:f3:e0:4e:97:b1:7b:e0:ff:22: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.40.128.0/20 153.57.0.0/18 IPv6: 2607:9240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f8:7c:62:a0:d4:84:0a:d4:eb:e7:a8:1a:9c:12:0d:c0:17: 7c:c9:45:ac:47:ab:1b:f7:25:54:12:4e:35:ef:63:7c:9c:fd: 4c:a5:f3:c7:a9:68:0b:e8:a2:cf:c7:61:07:7e:4b:1a:b7:96: 6b:2a:f5:2b:9d:6b:59:c1:80:13:9b:df:23:48:42:81:a4:d2: 03:cc:73:48:fc:5a:e9:5d:12:b5:92:55:47:5f:87:c9:51:84: 1f:43:0c:4a:1e:c3:de:3d:a6:93:95:5a:1c:e4:d7:54:fa:d7: ac:aa:ec:90:dc:9e:50:ff:ca:e1:b1:7c:aa:cf:70:85:c8:83: 2b:03:ec:ee:f0:1e:c0:41:0c:13:6e:65:3a:5a:f6:8e:c4:c1: a5:4a:0a:5f:13:04:2e:ff:0f:4f:cd:8a:07:99:80:70:19:6e: 69:19:9b:68:56:db:38:4a:4e:9d:6f:dc:79:68:ae:b4:62:f8: 8f:93:33:dd:3d:e9:0f:d3:36:6c:31:d5:ad:f8:53:0e:92:58: 5f:a0:e3:0d:90:c7:d5:a3:7a:fd:97:ef:b1:73:25:4c:7f:6b: ad:96:1f:fc:3f:05:44:53:6a:93:cb:a7:46:04:26:67:55:bc: 7c:02:cd:56:eb:50:e8:3d:dc:a5:38:e4:13:46:a1:97:64:0e: f4:2e:9b:9b -----BEGIN CERTIFICATE----- MIIHAjCCBeqgAwIBAgIUAQ0Mn0MoWE1ixcKhfxjg6D4EeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MDQwMzE3MDkxNVoXDTI4MDYxODAwNDUyMVowLzEtMCsGA1UEAxMk NWUyMmQ3YWUtMTIyNC00M2ZiLTkwN2EtNjY5MGY3YmQ5YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIVwVvQEHoeIWSeTpiSuru9iozTIPl57oyKA KfR+GW2RnTsTVvzpXZ0YMDqWuR+uFFNQMBKZ2qZIaCDxiVPs/xer7k2QxN8xsyeN H/lY95/fh/L0VuiUb+0QlrKdi6g9abz6K2HpywGsoWcmzdU9JIkRF3AXYAzxPoOx ChhXrWQvvQ4vTZqZ0o1dOFMnUOhDiXdBBjpiWTRTxWLyTIVWjGbF56X2b2kxeI3y c902g1rFkTT4ed2TeyPKFPDnw4yxDVybqQ3BAirgzBVxGgpszblZHvLYxFc83nZ4 URjqUEM218K822fWge3OjSZoSf3EGIcE8I3z4E6XsXvg/yIYlQIDAQABo4IEFDCC BBAwHQYDVR0OBBYEFGCxZh8iGmMVOnNBEHKuDszXujRoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdiZDlhMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVlMjJkN2FlLTEyMjQtNDNmYi05 MDdhLTY2OTBmN2JkOWEyZS81ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdi ZDlhMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARAKIADBAaZOQAwDQQCAAIwBwMFACYHkkAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIvh8YqDUhArU6+eoGpwSDcAXfMlFrEerG/clVBJONe9jfJz9TKXzx6lo C+iiz8dhB35LGreWayr1K51rWcGAE5vfI0hCgaTSA8xzSPxa6V0StZJVR1+HyVGE H0MMSh7D3j2mk5VaHOTXVPrXrKrskNyeUP/K4bF8qs9whciDKwPs7vAewEEME25l Olr2jsTBpUoKXxMELv8PT82KB5mAcBluaRmbaFbbOEpOnW/ceWiutGL4j5Mz3T3p D9M2bDHVrfhTDpJYX6DjDZDH1aN6/ZfvsXMlTH9rrZYf/D8FRFNqk8unRgQmZ1W8 fALNVutQ6D3cpTjkE0ahl2QO9C6bmw== -----END CERTIFICATE-----Generated at Sun Apr 19 10:15:36 2026 by rpki-client