$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer File: 3eb60598-76ca-49b0-9a1f-01270603d8d9.cer (raw, json) Hash identifier: YbCsd3jr4dkmIHW1dIb58OWel49HS1GT9QBVjBwtzQc= Subject key identifier: 88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584EAEF8B439B06E9E84F3D7C280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 31 Jul 2026 17:00:16 +0000 Certificate not after: Fri 24 Mar 2028 00:45:23 +0000 Subordinate resources: AS: 399781 IP: 108.160.212.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:f8:b4:39:b0:6e:9e:84:f3:d7:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Jul 31 17:00:16 2026 GMT Not After : Mar 24 00:45:23 2028 GMT Subject: CN=3eb60598-76ca-49b0-9a1f-01270603d8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:50:d7:9e:88:e1:ae:e7:bd:25:60:12:2b:73: 1e:e6:fc:1e:67:b9:9d:19:08:57:e9:23:ee:a9:86: 13:e7:21:93:af:4b:5c:04:5d:68:29:33:bd:00:a6: ef:3c:be:31:a8:f7:d9:95:43:80:06:73:44:e6:61: 5e:1d:5e:4e:e4:a2:d3:10:bc:c1:5d:28:95:1b:d5: 71:7e:25:98:a9:5b:c3:fd:42:af:83:12:95:5e:7d: ff:1c:be:48:c9:10:a1:1e:7c:2f:e9:7b:76:04:d1: 6c:ba:4a:3a:f2:db:8d:71:91:7b:84:a7:76:71:7d: b3:ce:a6:b2:91:99:0d:68:95:c8:cd:84:b2:fb:7a: 3e:c3:9b:cf:a4:36:61:12:b7:89:14:ff:49:1e:7c: 0b:d7:b7:ed:b9:b3:f9:fb:c9:5d:30:e1:40:52:e7: 29:3a:68:75:07:72:de:b6:5c:0c:e6:77:a5:65:3e: 75:b2:ce:af:2f:46:e9:01:89:d8:c2:c1:1b:7e:23: 5a:c2:8c:e1:43:e8:0b:76:42:42:66:c4:bd:81:16: ee:3b:f1:b2:8f:14:51:59:19:0f:2a:a7:9a:d6:c7: 14:2d:03:63:20:59:25:51:6b:53:5f:ab:b8:0a:17: 61:2f:09:99:72:29:e2:7c:d3:6d:0a:f5:ed:ef:34: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:66:D5:0B:77:AD:DC:73:3D:B3:35:CD:C7:6A:E7:7F:E0:03:FB:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 108.160.212.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399781 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:8e:b2:a2:1c:d6:81:6e:d2:10:0d:86:05:71:6d:99:b1:d1: 11:bf:4d:ef:0e:57:3d:3b:74:b5:a3:11:60:63:38:57:07:8a: c3:5b:b8:e3:7d:3c:c0:d7:65:b4:9f:4e:b0:5c:5b:08:23:8e: 83:7a:f6:22:28:a0:34:05:bd:33:9c:4d:a4:f3:04:98:e8:53: d4:27:b8:e3:c2:5c:3a:97:27:07:de:b1:99:45:d0:21:e1:77: f3:1f:69:8e:5d:b8:e0:04:00:5c:fb:09:85:20:96:e9:de:8a: d5:80:ab:29:3c:8c:a6:3d:23:76:cb:27:24:7a:ce:36:69:ed: 17:80:a5:ad:08:77:e2:5c:2e:31:21:cf:03:09:bd:9f:b6:7a: ae:c0:ff:a5:8e:6a:a2:be:01:ea:0b:b6:8d:28:f9:f1:45:63: 62:4a:d9:c4:5e:17:c5:06:49:32:67:9e:51:89:26:f5:fb:c8: 3d:00:13:cd:f3:c7:24:63:35:c3:82:2b:ba:56:02:92:7c:3c: 23:97:7b:93:4f:ce:d4:8b:a9:b6:42:2b:13:8b:4f:68:1b:b4: e0:e4:9c:9a:1a:07:01:f1:76:9a:3f:fb:26:1b:e5:f8:d0:bf: b9:52:c8:ac:44:99:e8:83:7f:2f:cc:2a:61:48:68:a6:77:34: 98:49:3c:83 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE6u+LQ5sG6ehPPXwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDczMTE3MDAxNloXDTI4MDMyNDAwNDUyM1owLzEtMCsGA1UEAxMk M2ViNjA1OTgtNzZjYS00OWIwLTlhMWYtMDEyNzA2MDNkOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlDXnojhrue9JWASK3Me5vweZ7mdGQhX6SPu qYYT5yGTr0tcBF1oKTO9AKbvPL4xqPfZlUOABnNE5mFeHV5O5KLTELzBXSiVG9Vx fiWYqVvD/UKvgxKVXn3/HL5IyRChHnwv6Xt2BNFsuko68tuNcZF7hKd2cX2zzqay kZkNaJXIzYSy+3o+w5vPpDZhEreJFP9JHnwL17ftubP5+8ldMOFAUucpOmh1B3Le tlwM5nelZT51ss6vL0bpAYnYwsEbfiNawozhQ+gLdkJCZsS9gRbuO/GyjxRRWRkP Kqea1scULQNjIFklUWtTX6u4ChdhLwmZcinifNNtCvXt7zRG6wIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFIhm1Qt3rdxzPbM1zcdq53/gA/t+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8z ZWI2MDU5OC03NmNhLTQ5YjAtOWExZi0wMTI3MDYwM2Q4ZDkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzNlYjYwNTk4LTc2Y2EtNDliMC05 YTFmLTAxMjcwNjAzZDhkOS8zZWI2MDU5OC03NmNhLTQ5YjAtOWExZi0wMTI3MDYw M2Q4ZDkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJsoNQwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhmlMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAyOsqIc1oFu0hANhgVxbZmx0RG/Te8OVz07dLWjEWBjOFcH isNbuON9PMDXZbSfTrBcWwgjjoN69iIooDQFvTOcTaTzBJjoU9QnuOPCXDqXJwfe sZlF0CHhd/MfaY5duOAEAFz7CYUgluneitWAqyk8jKY9I3bLJyR6zjZp7ReApa0I d+JcLjEhzwMJvZ+2eq7A/6WOaqK+AeoLto0o+fFFY2JK2cReF8UGSTJnnlGJJvX7 yD0AE83zxyRjNcOCK7pWApJ8PCOXe5NPztSLqbZCKxOLT2gbtODknJoaBwHxdpo/ +yYb5fjQv7lSyKxEmeiDfy/MKmFIaKZ3NJhJPIM= -----END CERTIFICATE-----Generated at Fri Sep 11 02:16:25 2026 by rpki-client