$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c.cer File: 836bd820-5504-47bf-baac-f0d3a943c97c.cer (raw, json) Hash identifier: KjJVtkhyU9nFKWzIQNZhjw/AOeSIq3LOdAV8YzxtOgI= Subject key identifier: 45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D0F9EA05BAB0FDEBD762A58A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 22:18:19 +0000 Certificate not after: Tue 23 May 2028 12:45:23 +0000 Subordinate resources: AS: 36419 AS: 47103 IP: 64.239.0.0/22 IP: 204.10.0.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0f:9e:a0:5b:ab:0f:de:bd:76:2a:58:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 4 22:18:19 2026 GMT Not After : May 23 12:45:23 2028 GMT Subject: CN=836bd820-5504-47bf-baac-f0d3a943c97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6a:2c:ea:83:2d:40:c4:34:c8:52:45:2f:f5: 92:57:9b:ec:88:e9:7b:61:ec:1a:59:8b:0a:44:65: 4c:f1:83:1c:db:f6:fe:b1:4d:ab:be:dc:09:6d:24: 7c:bb:81:e7:84:1b:21:80:ee:7e:dd:bf:42:81:69: 3c:51:a8:5b:7e:41:f0:c4:9b:c2:8f:47:d4:8c:af: 8d:c2:43:f5:be:be:f6:d0:a6:2d:e4:db:4c:8f:51: e1:68:7a:8c:5e:d7:d7:3f:cd:9b:37:55:f7:9c:0b: 2c:7b:69:ee:73:c6:a7:69:f4:6d:2f:00:86:6c:cb: a0:f1:8c:ba:4f:ef:a3:79:93:84:84:21:01:53:03: b9:74:6f:07:39:73:4f:8e:7e:03:48:55:98:c7:b1: 0a:bf:a8:23:37:f8:62:35:94:24:0d:54:57:66:f4: 6a:23:b7:ee:87:d4:65:de:9c:32:c0:c6:bb:86:e7: b1:59:59:9d:f6:76:c0:f3:1c:f0:12:13:46:e1:37: c9:db:7b:c5:e4:a1:90:ef:45:81:9b:0f:2d:bd:57: ad:dc:ca:1f:e3:5f:d0:18:15:33:54:26:52:fb:1c: 1a:62:d4:12:e7:14:36:42:8d:6c:a3:db:8d:90:09: d5:dd:a0:02:8f:a7:42:b0:aa:e7:d4:21:64:12:98: 55:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EF:F4:68:07:3E:9B:CD:7B:59:64:3B:49:F3:9F:84:F8:68:2A:17 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/836bd820-5504-47bf-baac-f0d3a943c97c/836bd820-5504-47bf-baac-f0d3a943c97c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 64.239.0.0/22 204.10.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36419 47103 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:51:5a:81:dc:2b:ff:f1:4f:65:3d:ab:9d:e1:67:fc:99:b0: 79:b4:32:76:a9:b3:60:13:ec:fd:08:43:fb:10:90:83:56:b2: 79:dd:21:38:ed:4e:8b:fc:63:8d:9a:db:f9:e8:b8:8d:f0:c3: 93:e7:56:12:83:4f:80:63:8e:98:35:74:76:ed:83:cc:77:ed: c7:da:c8:32:2d:3a:7b:90:90:17:46:ed:04:1b:1b:8a:1c:cd: d3:d9:51:b9:72:fe:67:5f:80:51:c0:0d:6d:cb:35:c0:94:10: b4:1d:25:23:5b:8b:2b:06:d5:49:6b:44:4a:93:67:23:6e:c8: 8b:37:f4:34:0b:7d:a6:e0:ea:09:2b:95:48:53:a1:da:51:d9: b3:ee:df:4f:a0:31:f2:a4:4d:bc:c2:2c:8c:51:05:9a:c2:34: 0e:89:d1:3f:e4:26:f5:02:ea:2d:2b:b2:ea:c6:38:6d:9e:6b: a5:63:20:ad:be:ff:ab:62:e6:0d:38:3f:ce:b9:4c:b2:0b:65: 26:92:60:64:eb:c5:c7:2d:14:8e:e3:4d:fc:9b:4f:bd:9c:fb: 1b:39:13:12:2d:6a:19:ef:76:4e:87:85:64:2a:06:7b:34:2a: fd:55:33:9a:e3:f1:53:50:b8:6a:87:c6:aa:c6:b0:3a:e5:36: 8b:55:e0:7e -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE0PnqBbqw/evXYqWKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMwNDIyMTgxOVoXDTI4MDUyMzEyNDUyM1owLzEtMCsGA1UEAxMk ODM2YmQ4MjAtNTUwNC00N2JmLWJhYWMtZjBkM2E5NDNjOTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGos6oMtQMQ0yFJFL/WSV5vsiOl7YewaWYsK RGVM8YMc2/b+sU2rvtwJbSR8u4HnhBshgO5+3b9CgWk8UahbfkHwxJvCj0fUjK+N wkP1vr720KYt5NtMj1HhaHqMXtfXP82bN1X3nAsse2nuc8anafRtLwCGbMug8Yy6 T++jeZOEhCEBUwO5dG8HOXNPjn4DSFWYx7EKv6gjN/hiNZQkDVRXZvRqI7fuh9Rl 3pwywMa7huexWVmd9nbA8xzwEhNG4TfJ23vF5KGQ70WBmw8tvVet3Mof41/QGBUz VCZS+xwaYtQS5xQ2Qo1so9uNkAnV3aACj6dCsKrn1CFkEphVsQIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFEXv9GgHPpvNe1lkO0nzn4T4aCoXMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84 MzZiZDgyMC01NTA0LTQ3YmYtYmFhYy1mMGQzYTk0M2M5N2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzgzNmJkODIwLTU1MDQtNDdiZi1i YWFjLWYwZDNhOTQzYzk3Yy84MzZiZDgyMC01NTA0LTQ3YmYtYmFhYy1mMGQzYTk0 M2M5N2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAJA7wADBALMCgAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDAI5DAgMAt/8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAp1Fagdwr//FPZT2rneFn/JmwebQydqmz YBPs/QhD+xCQg1ayed0hOO1Oi/xjjZrb+ei4jfDDk+dWEoNPgGOOmDV0du2DzHft x9rIMi06e5CQF0btBBsbihzN09lRuXL+Z1+AUcANbcs1wJQQtB0lI1uLKwbVSWtE SpNnI27Iizf0NAt9puDqCSuVSFOh2lHZs+7fT6Ax8qRNvMIsjFEFmsI0DonRP+Qm 9QLqLSuy6sY4bZ5rpWMgrb7/q2LmDTg/zrlMsgtlJpJgZOvFxy0UjuNN/JtPvZz7 GzkTEi1qGe92ToeFZCoGezQq/VUzmuPxU1C4aofGqsawOuU2i1Xgfg== -----END CERTIFICATE-----Generated at Fri Mar 13 08:22:46 2026 by rpki-client