$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd.cer File: e502a731-806a-429f-b296-43783f00f6fd.cer (raw, json) Hash identifier: EdvFoRVh01n5qAYfcfw9hLalkerSqq7b1bevROMpxOE= Subject key identifier: 4A:BE:B9:3D:52:61:E2:A6:07:3E:82:39:AD:77:EC:B5:5C:47:31:83 Authority key identifier: 11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B Certificate issuer: /CN=746e0111-fafb-430f-b778-d204cfcd99a8 Certificate serial: 010D0C9F4328584D0375507A554AD67E96A62CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd/e502a731-806a-429f-b296-43783f00f6fd.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Feb 2026 13:45:22 +0000 Certificate not after: Fri 02 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 141.160.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:75:50:7a:55:4a:d6:7e:96:a6:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746e0111-fafb-430f-b778-d204cfcd99a8 Validity Not Before: Feb 28 13:45:22 2026 GMT Not After : Jun 2 12:45:22 2028 GMT Subject: CN=e502a731-806a-429f-b296-43783f00f6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:b3:51:c6:a2:46:43:dc:78:2d:2b:d9:8a: 2b:83:1e:f2:05:c9:cd:17:fd:f1:b0:9b:04:46:a0: 81:25:ed:52:02:1d:a7:7e:42:57:ea:dd:40:69:e9: 69:00:c3:6c:61:d2:dc:8c:e8:df:33:08:f9:ab:3c: 13:a3:a9:c3:aa:41:54:90:cf:d8:b4:3d:92:2e:63: 06:20:9e:ff:43:03:77:12:16:5a:22:31:c2:58:57: 73:01:31:0b:f1:8f:c7:13:fb:d6:6b:c9:d6:13:01: 12:78:3f:64:f0:f3:2c:5e:fc:76:87:22:48:44:1f: 22:70:46:db:91:32:40:e6:d4:62:91:26:55:22:0f: c6:55:74:52:f5:d9:e3:ce:a8:42:f3:1f:e2:25:0c: ed:50:68:b8:4b:1c:2b:54:09:8f:80:37:2c:c6:48: 82:3a:65:34:4a:a1:e2:4c:7a:99:5e:9d:28:e6:29: 0f:05:0e:38:9a:62:7c:17:4c:e1:1e:b7:73:58:ca: e8:2c:04:2f:47:90:61:8d:a5:75:ca:6e:a6:b8:e9: f9:e0:da:a9:fe:02:15:3b:99:29:11:a5:0d:7a:d6: 8e:c1:c4:db:82:84:d5:87:26:ea:00:49:2e:c2:c3: ee:01:bd:d5:6e:a7:17:3f:04:ac:06:fb:c1:61:d9: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BE:B9:3D:52:61:E2:A6:07:3E:82:39:AD:77:EC:B5:5C:47:31:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e502a731-806a-429f-b296-43783f00f6fd/e502a731-806a-429f-b296-43783f00f6fd.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl X509v3 Authority Key Identifier: keyid:11:6E:0D:94:FE:2D:9A:E3:19:97:1C:BC:3F:13:3E:D6:82:0F:5F:6B X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer sbgp-ipAddrBlock: critical IPv4: 141.160.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:09:c3:be:bf:28:5c:cd:36:3a:64:31:b7:03:45:b1:7f:1b: 05:5b:79:63:f5:41:79:fb:b7:dc:c4:7d:72:07:20:b2:0f:7f: 30:53:ba:8b:5a:01:b9:d8:29:59:04:56:b7:b2:50:ff:73:cb: 7c:5b:f9:a5:da:07:9f:cf:40:9e:ef:14:9c:89:d5:89:16:90: e6:cd:4d:da:64:7d:7e:38:4c:21:fe:bc:ab:e8:63:02:00:e6: 2c:d7:7b:8e:6b:93:f7:bc:1f:16:03:65:e3:d6:0d:25:54:e7: cf:4e:52:94:1b:e4:ca:ed:27:4d:df:73:5d:8f:ab:0a:af:7b: 01:86:56:1f:90:d9:f4:47:26:e7:0d:39:d8:e6:60:67:e8:76: 04:5e:a0:82:4d:02:71:78:20:5d:f1:a0:c1:f0:4a:e5:a0:31: 3a:f1:a5:2d:fd:0b:aa:db:3a:42:d6:58:ff:36:9f:97:d0:d4: cb:bc:65:3a:1d:ce:2e:e4:1f:67:5f:03:2f:b4:a7:af:c0:38: 15:a2:e4:f5:f1:d0:91:75:cb:81:6e:30:39:88:fe:c5:4f:d9: 7f:cc:72:c0:28:67:e4:fc:4d:01:d6:da:2c:d3:bd:34:37:95: a6:d0:75:06:33:86:04:05:b0:dc:f5:fc:08:2c:89:b3:92:56: da:63:af:6b -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE0DdVB6VUrWfpamLMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5 OWE4MB4XDTI2MDIyODEzNDUyMloXDTI4MDYwMjEyNDUyMlowLzEtMCsGA1UEAxMk ZTUwMmE3MzEtODA2YS00MjlmLWIyOTYtNDM3ODNmMDBmNmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZOzUcaiRkPceC0r2Yorgx7yBcnNF/3xsJsE RqCBJe1SAh2nfkJX6t1AaelpAMNsYdLcjOjfMwj5qzwTo6nDqkFUkM/YtD2SLmMG IJ7/QwN3EhZaIjHCWFdzATEL8Y/HE/vWa8nWEwESeD9k8PMsXvx2hyJIRB8icEbb kTJA5tRikSZVIg/GVXRS9dnjzqhC8x/iJQztUGi4SxwrVAmPgDcsxkiCOmU0SqHi THqZXp0o5ikPBQ44mmJ8F0zhHrdzWMroLAQvR5BhjaV1ym6muOn54Nqp/gIVO5kp EaUNetaOwcTbgoTVhybqAEkuwsPuAb3VbqcXPwSsBvvBYdnSuwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFEq+uT1SYeKmBz6COa137LVcRzGDMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9l NTAyYTczMS04MDZhLTQyOWYtYjI5Ni00Mzc4M2YwMGY2ZmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEt ZmFmYi00MzBmLWI3NzgtZDIwNGNmY2Q5OWE4L2U1MDJhNzMxLTgwNmEtNDI5Zi1i Mjk2LTQzNzgzZjAwZjZmZC9lNTAyYTczMS04MDZhLTQyOWYtYjI5Ni00Mzc4M2Yw MGY2ZmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUw MTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83NDZlMDExMS1mYWZiLTQz MGYtYjc3OC1kMjA0Y2ZjZDk5YTguY3JsMB8GA1UdIwQYMBaAFBFuDZT+LZrjGZcc vD8TPtaCD19rMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0 NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCNoDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCxCcO+vyhczTY6ZDG3A0Wx fxsFW3lj9UF5+7fcxH1yByCyD38wU7qLWgG52ClZBFa3slD/c8t8W/ml2gefz0Ce 7xScidWJFpDmzU3aZH1+OEwh/ryr6GMCAOYs13uOa5P3vB8WA2Xj1g0lVOfPTlKU G+TK7SdN33Ndj6sKr3sBhlYfkNn0RybnDTnY5mBn6HYEXqCCTQJxeCBd8aDB8Erl oDE68aUt/Quq2zpC1lj/Np+X0NTLvGU6Hc4u5B9nXwMvtKevwDgVouT18dCRdcuB bjA5iP7FT9l/zHLAKGfk/E0B1tos0700N5Wm0HUGM4YEBbDc9fwILImzklbaY69r -----END CERTIFICATE-----Generated at Sun Mar 1 21:00:27 2026 by rpki-client