$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer File: 5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer (raw, json) Hash identifier: mlFl/wpiAbURAID1cAskZ8REBVNbwOEPtdKDElLHx+8= Subject key identifier: 73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D19ACFFF936B4C6CC7D2D6400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Mar 2026 12:45:21 +0000 Certificate not after: Sat 10 Jun 2028 12:45:21 +0000 Subordinate resources: AS: 31782 IP: 216.249.48.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:ac:ff:f9:36:b4:c6:cc:7d:2d:64:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 8 12:45:21 2026 GMT Not After : Jun 10 12:45:21 2028 GMT Subject: CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:da:57:50:b4:23:6b:7f:8e:82:5d:5a:93:63: e6:bd:bf:59:a3:7e:28:48:b0:58:b0:ae:48:81:f8: 9a:8f:14:10:f8:1e:70:46:e3:57:bf:d8:3c:e0:b1: c7:a9:33:77:1a:c8:57:05:8e:d5:f1:9f:78:fb:ea: 7d:c5:c6:a1:d8:ef:1d:02:bd:e4:ae:36:58:21:42: 97:88:4e:43:62:2c:72:e4:a2:b0:09:99:e2:97:72: c5:5e:24:44:3f:cb:a5:6b:78:2a:0a:f6:1e:1a:8d: bd:fe:f3:93:ea:27:4b:6a:a1:46:18:c6:91:c6:12: 47:80:d6:be:38:4b:2f:80:23:56:e9:a3:0f:9c:9a: ec:db:1e:6f:0f:e2:13:f8:91:b8:fe:7a:f5:47:f4: 25:2d:d7:9d:9e:7c:b4:b7:01:e7:5a:73:13:28:00: 20:60:3b:c9:1e:89:f8:a6:f3:3a:75:6f:be:87:ae: 48:a9:83:f4:3e:81:09:46:a7:e1:c1:4f:b2:26:34: 46:7e:6d:db:a1:fc:a3:fe:94:84:a5:35:97:6a:90: e8:e4:fc:51:89:c4:ae:7e:33:83:5b:85:d7:e2:94: 69:30:6c:ab:b4:bf:83:7f:5b:61:c6:08:9b:73:98: 00:4c:c8:f8:56:99:2d:47:8f:d9:ac:f2:dc:6a:71: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 216.249.48.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 31782 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b9:2b:5d:0a:78:27:9d:d7:cd:aa:85:0e:d4:54:db:2f:6f: 6d:d9:64:8a:59:55:8a:14:cb:e6:15:0b:44:c3:16:76:96:cb: 99:42:b4:5b:5b:bc:d0:33:60:9d:95:c8:8a:70:e7:b2:c4:11: e4:cd:f8:12:45:e2:f3:6d:f4:e5:11:03:22:b4:41:7e:c5:1e: e2:7c:c8:4c:4b:9b:a1:ad:85:81:9e:66:c9:6c:ba:cf:0f:12: 15:b4:12:70:f6:3e:75:85:f5:c0:f2:98:d0:ae:fb:f0:16:e8: a3:27:e4:09:8d:d5:3e:14:8e:ad:11:c6:b5:1f:2d:eb:18:8f: 45:15:13:b8:42:7d:83:b3:88:98:a8:64:53:8a:00:b2:d4:a6: 3a:e2:15:9e:46:a2:73:6a:e5:7b:3f:45:39:fb:58:da:ea:96: c5:e0:fa:c2:e9:25:87:8f:70:4e:ce:fe:62:aa:22:23:4f:85: 02:d0:00:f4:2d:61:0f:17:70:28:2f:12:8f:65:51:b1:22:c6: 3c:0e:48:e6:0a:1f:08:38:c5:e5:93:b1:6f:f8:64:29:54:10: d7:01:5b:64:58:9c:31:30:02:5c:3d:aa:35:ed:d8:de:31:5a: ab:e8:7b:2a:d0:80:c4:ed:06:f5:b6:8b:c8:57:14:37:95:b3: 7a:86:a8:8b -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE0ZrP/5NrTGzH0tZAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMwODEyNDUyMVoXDTI4MDYxMDEyNDUyMVowLzEtMCsGA1UEAxMk NWYyYTkxODktYzEyNS00ZTAwLTljOGEtMzQzODA1ZmY2ZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdpXULQja3+Ogl1ak2Pmvb9Zo34oSLBYsK5I gfiajxQQ+B5wRuNXv9g84LHHqTN3GshXBY7V8Z94++p9xcah2O8dAr3krjZYIUKX iE5DYixy5KKwCZnil3LFXiREP8ula3gqCvYeGo29/vOT6idLaqFGGMaRxhJHgNa+ OEsvgCNW6aMPnJrs2x5vD+IT+JG4/nr1R/QlLdednny0twHnWnMTKAAgYDvJHon4 pvM6dW++h65IqYP0PoEJRqfhwU+yJjRGfm3bofyj/pSEpTWXapDo5PxRicSufjOD W4XX4pRpMGyrtL+Df1thxgibc5gATMj4VpktR4/ZrPLcanGkewIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFHOL+xjr1DIxghyj1zIY3yHxRB0QMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81 ZjJhOTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4MDVmZjZmYjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzVmMmE5MTg5LWMxMjUtNGUwMC05 YzhhLTM0MzgwNWZmNmZiOS81ZjJhOTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4MDVm ZjZmYjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATY+TAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fCYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKrkrXQp4J53XzaqFDtRU2y9vbdlkillVihTL5hULRMMWdpbL mUK0W1u80DNgnZXIinDnssQR5M34EkXi82305REDIrRBfsUe4nzITEuboa2FgZ5m yWy6zw8SFbQScPY+dYX1wPKY0K778BbooyfkCY3VPhSOrRHGtR8t6xiPRRUTuEJ9 g7OImKhkU4oAstSmOuIVnkaic2rlez9FOftY2uqWxeD6wuklh49wTs7+YqoiI0+F AtAA9C1hDxdwKC8Sj2VRsSLGPA5I5gofCDjF5ZOxb/hkKVQQ1wFbZFicMTACXD2q Ne3Y3jFaq+h7KtCAxO0G9baLyFcUN5Wzeoaoiw== -----END CERTIFICATE-----Generated at Fri Mar 13 08:19:42 2026 by rpki-client