$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab.cer File: 25283898-2dc3-4477-af3c-b64dd3c800ab.cer (raw, json) Hash identifier: 9Ff8OXFi2wd8p1ouGXCs5puUBo17W8TkMhyKrM8sE9U= Subject key identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584CA754BE27B6C38AA58F2BF380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 13:45:22 +0000 Certificate not after: Sun 30 Apr 2028 12:45:22 +0000 Subordinate resources: AS: 13692 AS: 20328 IP: 66.179.60.0/22 IP: 67.219.224.0/20 IP: 100.42.160.0/20 IP: 108.174.176.0/20 IP: 172.98.44.0/22 IP: 192.55.252.0/22 IP: 192.86.0.0/24 IP: 192.175.50.0/23 IP: 198.100.136.0/21 IP: 208.77.176.0/21 IP: 2607:8600::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:54:be:27:b6:c3:8a:a5:8f:2b:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jan 26 13:45:22 2026 GMT Not After : Apr 30 12:45:22 2028 GMT Subject: CN=25283898-2dc3-4477-af3c-b64dd3c800ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3e:89:32:1d:7d:14:e0:a2:49:e9:9f:d7:03: 0c:e0:1c:21:b1:17:fc:de:52:4d:bf:a8:80:d0:9e: 9c:1b:b4:48:e9:14:3b:e1:e0:fe:31:a8:1a:35:10: 00:8a:f5:21:9d:34:46:20:6f:2e:77:fa:1d:33:25: 8e:c0:48:7f:3f:30:d6:6b:73:22:7f:b1:d4:f8:ff: f4:61:f6:15:14:aa:b5:05:11:90:f7:3b:53:9d:a0: d2:e6:12:53:b7:15:40:1d:a8:40:c2:0a:d1:f7:38: 18:85:66:7d:b7:0e:22:a2:44:b4:20:cd:9e:e4:d3: 48:87:41:7b:06:b6:74:ce:dd:3c:40:08:4b:b5:ee: 32:48:fc:df:57:a3:b9:0c:d7:e1:49:3a:7e:c9:d9: 90:e2:09:e5:32:6a:8a:c1:f3:01:98:9c:ef:7e:7e: 44:fb:41:b3:8f:db:bf:9a:74:37:7b:a5:e8:26:85: 09:1e:d6:12:b4:74:75:33:87:8d:1f:bc:75:32:b4: 92:c8:97:38:45:bf:9e:b3:fd:fe:79:e2:ad:4e:5b: ff:6f:b0:89:17:ff:ff:3d:b7:3f:73:c5:56:7c:e2: 88:46:dd:68:c8:89:2c:db:5c:76:fe:c2:32:f8:16: d4:c9:cb:78:12:0e:a3:47:d9:ff:22:55:86:21:7a: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7E:8D:99:8B:C0:42:C7:94:EB:F1:50:39:34:AA:0C:50:60:13:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/25283898-2dc3-4477-af3c-b64dd3c800ab/25283898-2dc3-4477-af3c-b64dd3c800ab.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 66.179.60.0/22 67.219.224.0/20 100.42.160.0/20 108.174.176.0/20 172.98.44.0/22 192.55.252.0/22 192.86.0.0/24 192.175.50.0/23 198.100.136.0/21 208.77.176.0/21 IPv6: 2607:8600::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13692 20328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:88:ed:8f:45:0a:0b:39:22:c3:00:f0:4e:ca:5c:ca:a8:22: 8f:d7:c6:92:95:c9:d4:70:1c:7e:62:5f:98:68:9f:7c:19:57: 8b:77:ec:eb:af:fe:c2:7a:3d:a5:27:ba:d1:59:e5:33:10:73: 87:a2:18:1c:40:bb:05:98:ba:bc:1c:f3:d1:df:90:cc:1a:f7: af:61:ae:14:6a:90:c6:c1:bd:02:47:65:5d:f2:8b:65:8d:78: 2e:54:b4:67:77:04:39:1a:6b:c6:6e:56:3c:c6:4c:fb:06:c8: 6f:41:5a:8b:39:65:cc:69:05:46:65:f5:ce:24:33:c1:65:36: fb:a3:d4:4a:bb:36:03:1d:cf:a1:e1:f6:4e:d0:81:f1:19:0a: cb:e6:86:d5:d0:c1:02:0c:59:4e:26:60:f7:da:45:89:b0:b6: 27:4a:93:cc:bb:9c:a2:18:17:f5:91:91:82:39:08:d7:90:02: 10:78:ef:4a:37:1d:99:13:93:d8:eb:ea:1e:cd:00:1c:2c:50: d5:37:7f:30:41:c0:ca:b6:06:38:45:bc:86:eb:06:b8:95:cd: 0d:21:a0:89:6c:74:d5:b2:c6:f6:14:d9:01:8d:a5:c6:1a:d9: 97:2b:66:96:76:a5:62:35:cd:0a:62:e0:f7:72:f1:01:a9:b6: 51:7b:f9:19 -----BEGIN CERTIFICATE----- MIIHUTCCBjmgAwIBAgIUAQ0Mn0MoWEynVL4ntsOKpY8r84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDEyNjEzNDUyMloXDTI4MDQzMDEyNDUyMlowLzEtMCsGA1UEAxMk MjUyODM4OTgtMmRjMy00NDc3LWFmM2MtYjY0ZGQzYzgwMGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj6JMh19FOCiSemf1wMM4BwhsRf83lJNv6iA 0J6cG7RI6RQ74eD+MagaNRAAivUhnTRGIG8ud/odMyWOwEh/PzDWa3Mif7HU+P/0 YfYVFKq1BRGQ9ztTnaDS5hJTtxVAHahAwgrR9zgYhWZ9tw4iokS0IM2e5NNIh0F7 BrZ0zt08QAhLte4ySPzfV6O5DNfhSTp+ydmQ4gnlMmqKwfMBmJzvfn5E+0Gzj9u/ mnQ3e6XoJoUJHtYStHR1M4eNH7x1MrSSyJc4Rb+es/3+eeKtTlv/b7CJF///Pbc/ c8VWfOKIRt1oyIks21x2/sIy+BbUyct4Eg6jR9n/IlWGIXqH7QIDAQABo4IEYzCC BF8wHQYDVR0OBBYEFB1+jZmLwELHlOvxUDk0qgxQYBPfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y NTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNjODAwYWIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzI1MjgzODk4LTJkYzMtNDQ3Ny1h ZjNjLWI2NGRkM2M4MDBhYi8yNTI4Mzg5OC0yZGMzLTQ0NzctYWYzYy1iNjRkZDNj ODAwYWIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwZAYIKwYBBQUH AQcBAf8EVTBTMEIEAgABMDwDBAJCszwDBARD2+ADBARkKqADBARsrrADBAKsYiwD BALAN/wDBADAVgADBAHArzIDBAPGZIgDBAPQTbAwDQQCAAIwBwMFACYHhgAwHQYI KwYBBQUHAQgBAf8EDjAMoAowCAICNXwCAk9oMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACyI7Y9FCgs5IsMA 8E7KXMqoIo/XxpKVydRwHH5iX5hon3wZV4t37Ouv/sJ6PaUnutFZ5TMQc4eiGBxA uwWYurwc89HfkMwa969hrhRqkMbBvQJHZV3yi2WNeC5UtGd3BDkaa8ZuVjzGTPsG yG9BWos5ZcxpBUZl9c4kM8FlNvuj1Eq7NgMdz6Hh9k7QgfEZCsvmhtXQwQIMWU4m YPfaRYmwtidKk8y7nKIYF/WRkYI5CNeQAhB470o3HZkTk9jr6h7NABwsUNU3fzBB wMq2BjhFvIbrBriVzQ0hoIlsdNWyxvYU2QGNpcYa2ZcrZpZ2pWI1zQpi4Pdy8QGp tlF7+Rk= -----END CERTIFICATE-----Generated at Sat Feb 21 12:31:23 2026 by rpki-client