$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer File: 3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.cer (raw, json) Hash identifier: 3QWVvPzW3QA0/GokdnO/AMmtbN4p/gSEH8U/oOl1qQs= Subject key identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584CC60A43C99F4501C0E1252420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Feb 2026 13:45:22 +0000 Certificate not after: Thu 11 May 2028 12:45:22 +0000 Subordinate resources: IP: 24.89.128.0/18 IP: 75.99.0.0/16 IP: 75.127.128.0/17 IP: 96.56.0.0/15 IP: 108.58.0.0/16 IP: 108.162.0.0/18 IP: 108.170.64.0/18 IP: 142.54.64.0/18 IP: 173.220.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:0a:43:c9:9f:45:01:c0:e1:25:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Feb 6 13:45:22 2026 GMT Not After : May 11 12:45:22 2028 GMT Subject: CN=3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:3c:a4:f8:d1:7c:be:ad:10:72:e1:af:25: 4a:ef:29:28:01:5c:c1:d1:2e:79:18:db:9c:62:34: d9:0e:e3:92:bc:e9:ba:74:1d:21:55:e3:8b:84:28: dd:15:fc:cc:cc:6d:d1:99:72:5a:f0:a8:31:10:71: f5:f5:d0:ff:7d:1a:57:c7:fb:22:73:b5:d4:93:6b: 65:58:2d:dc:81:ea:3d:e7:c7:87:b2:96:9a:06:1f: fc:3f:4d:f9:df:46:e0:dd:52:88:75:7c:0d:4b:c1: fe:9b:63:d2:4f:8a:09:b2:cc:94:a0:41:6f:ce:90: 3a:8b:54:b4:91:86:83:c8:a2:8e:30:fc:23:63:ca: e7:a2:7e:a7:77:27:2b:7b:87:ff:f5:10:f3:2d:92: 23:bd:7a:46:50:cf:4d:40:d6:7e:a7:76:b4:23:ca: 73:ef:15:1e:0d:ea:90:fd:39:7a:e1:8b:fc:ff:38: 9f:43:12:a1:c0:39:ec:9b:5e:64:50:f6:08:30:fc: a2:4b:b7:ce:4a:70:63:fd:c5:62:36:58:da:87:c7: ea:66:ce:a6:58:2e:6e:5e:f2:46:69:25:86:5b:5a: a8:e5:d4:c8:ce:e8:2c:6f:75:32:d2:dd:3c:43:b6: f6:c2:93:a4:56:e6:2b:0c:0c:28:bc:ea:8f:de:ad: 5b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CB:08:74:12:2A:85:45:3F:68:87:FD:C4:D8:C5:4D:A9:87:00:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8/3f95a8ab-f9b2-432c-a1fd-d93683bc2fa8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 24.89.128.0/18 75.99.0.0/16 75.127.128.0/17 96.56.0.0/15 108.58.0.0/16 108.162.0.0/18 108.170.64.0/18 142.54.64.0/18 173.220.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:e4:40:b2:30:02:de:f8:d5:0c:81:02:fe:12:d6:4b:52:e7: 01:00:c1:10:04:13:d2:11:64:eb:4c:67:c8:88:ad:30:eb:18: 09:bd:d4:95:2a:b6:c7:15:ab:44:3a:64:d7:ec:de:e1:71:f1: 19:6c:12:f0:98:09:8b:19:cc:6d:d3:96:95:8f:cd:3e:16:ca: 86:53:5e:f5:a1:66:0b:f7:6a:e5:df:37:f2:2c:35:4d:47:8c: 64:79:a7:dc:a1:85:53:3c:b1:f5:46:5f:85:e1:7c:2c:6b:a6: ea:1b:1c:e2:99:f1:cb:af:bb:98:09:de:35:02:2a:32:6c:87: 5a:c3:cf:0b:4d:3e:9c:c8:9b:35:ea:dd:42:5f:89:d5:31:f8: f4:66:34:4b:a6:98:62:8d:6b:31:41:85:bb:5f:b0:00:5a:05: ed:8e:ce:d0:1c:e3:ff:1a:13:5e:fa:01:ff:e6:aa:09:7f:0b: 65:dc:2d:d6:83:1e:4a:5d:fc:17:02:51:c2:7f:8f:ec:c9:97: 0a:be:5b:ae:e5:d8:38:bd:a3:45:32:27:7e:42:24:7f:75:45: 4c:ad:79:72:6a:bb:93:99:6d:75:51:21:09:eb:4a:83:cb:11: e7:91:38:60:57:7b:45:6f:8f:e4:9b:46:cf:04:ab:fa:f8:7f: 35:63:35:49 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEzGCkPJn0UBwOElJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDIwNjEzNDUyMloXDTI4MDUxMTEyNDUyMlowLzEtMCsGA1UEAxMk M2Y5NWE4YWItZjliMi00MzJjLWExZmQtZDkzNjgzYmMyZmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+k8pPjRfL6tEHLhryVK7ykoAVzB0S55GNuc YjTZDuOSvOm6dB0hVeOLhCjdFfzMzG3RmXJa8KgxEHH19dD/fRpXx/sic7XUk2tl WC3cgeo958eHspaaBh/8P03530bg3VKIdXwNS8H+m2PST4oJssyUoEFvzpA6i1S0 kYaDyKKOMPwjY8rnon6ndycre4f/9RDzLZIjvXpGUM9NQNZ+p3a0I8pz7xUeDeqQ /Tl64Yv8/zifQxKhwDnsm15kUPYIMPyiS7fOSnBj/cViNljah8fqZs6mWC5uXvJG aSWGW1qo5dTIzugsb3Uy0t08Q7b2wpOkVuYrDAwovOqP3q1bWQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKXLCHQSKoVFP2iH/cTYxU2phwAGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8z Zjk1YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2ODNiYzJmYTgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzNmOTVhOGFiLWY5YjItNDMyYy1h MWZkLWQ5MzY4M2JjMmZhOC8zZjk1YThhYi1mOWIyLTQzMmMtYTFmZC1kOTM2ODNi YzJmYTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwSwYIKwYBBQUH AQcBAf8EPDA6MDgEAgABMDIDBAYYWYADAwBLYwMEB0t/gAMDAWA4AwMAbDoDBAZs ogADBAZsqkADBAaONkADAwCt3DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA35ECyMALe+NUMgQL+EtZLUucB AMEQBBPSEWTrTGfIiK0w6xgJvdSVKrbHFatEOmTX7N7hcfEZbBLwmAmLGcxt05aV j80+FsqGU171oWYL92rl3zfyLDVNR4xkeafcoYVTPLH1Rl+F4Xwsa6bqGxzimfHL r7uYCd41AioybIdaw88LTT6cyJs16t1CX4nVMfj0ZjRLpphijWsxQYW7X7AAWgXt js7QHOP/GhNe+gH/5qoJfwtl3C3Wgx5KXfwXAlHCf4/syZcKvluu5dg4vaNFMid+ QiR/dUVMrXlyaruTmW11USEJ60qDyxHnkThgV3tFb4/km0bPBKv6+H81YzVJ -----END CERTIFICATE-----Generated at Thu Feb 26 16:57:54 2026 by rpki-client