$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer File: 9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer (raw, json) Hash identifier: dtgnVMh8yYQhsX47bo5rDXHSWjVsiBNxwFWrvi/WMis= Subject key identifier: FE:E9:50:EE:EF:CE:D9:1E:8C:68:5E:F5:3F:97:A7:39:D3:14:BC:3A Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D94F435F573896C8F33AC7AC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 21 Apr 2026 16:33:16 +0000 Certificate not after: Mon 21 Feb 2028 16:39:01 +0000 Subordinate resources: AS: 394711 IP: 208.94.212.0/24 IP: 2602:f3e9::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:94:f4:35:f5:73:89:6c:8f:33:ac:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Apr 21 16:33:16 2026 GMT Not After : Feb 21 16:39:01 2028 GMT Subject: CN=9e68f8b3-59fb-41e8-bea3-cc7286a43ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:eb:b5:f4:80:b6:a6:c5:3e:23:42:6a:d4:37: 08:66:ab:2c:48:9d:9a:a3:23:5e:40:48:e4:99:1d: b7:ed:84:7f:6a:6d:cb:49:a4:96:36:9e:71:22:40: a1:f5:b0:85:ec:0a:23:c8:77:8e:40:82:9e:2e:a7: e8:70:b9:81:93:fc:4f:02:b3:70:af:0a:ed:8e:b8: 5a:e0:e8:0c:ec:f4:c1:29:c6:ae:c0:ae:1b:9a:e7: 26:b0:b5:08:f2:a4:7b:6c:ec:52:58:91:09:5b:34: d3:d9:02:1c:a4:e5:ba:9e:95:43:b1:4e:f2:9b:53: a8:c5:d5:9e:3e:aa:50:fb:64:6c:1e:4e:e4:31:90: bd:db:5a:33:03:a2:64:88:16:df:22:59:69:b7:aa: da:50:96:36:57:71:8d:44:76:5b:e2:d2:c9:b2:2f: 14:58:5d:a4:c4:07:99:0a:d1:16:8e:7c:18:ae:1d: 7d:5d:90:f6:a3:13:f5:6d:1a:f7:1d:ee:df:ed:2f: b5:a4:8e:1b:4d:d9:85:ec:6e:69:f1:3d:4f:93:75: 6e:be:fd:eb:5b:f4:81:7a:c2:ce:fd:db:53:59:f9: b7:f8:c1:f9:11:24:db:67:ae:4c:76:d5:dd:5f:6c: 28:1b:97:bd:33:30:04:41:e9:2f:ea:d9:92:59:5d: 82:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:50:EE:EF:CE:D9:1E:8C:68:5E:F5:3F:97:A7:39:D3:14:BC:3A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 208.94.212.0/24 IPv6: 2602:f3e9::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394711 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:94:ee:d3:d4:bb:90:da:3a:3e:9b:c3:3d:0a:fe:90:d2:86: 37:dd:44:b0:34:e9:c7:d5:32:7a:93:3b:67:d4:60:ac:4a:9f: 8b:28:24:b1:91:0c:d7:5e:a1:f8:9a:c4:55:b3:74:96:3d:a1: 1a:05:95:57:f4:be:40:4f:e0:93:c2:1e:d7:cc:00:b7:dc:ef: 5d:32:8c:73:7b:08:1f:74:ac:91:98:90:66:da:a3:0a:2e:08: de:12:ba:f4:73:82:ed:d4:43:fc:f1:d6:40:bc:80:2d:a1:47: 73:1f:ad:62:31:5f:ff:a3:bc:78:fa:fa:86:7e:c3:fd:d4:28: 2c:cd:a6:2a:9d:4c:5d:a3:2c:70:0e:11:15:2b:54:8a:55:1c: 52:8d:78:54:36:6c:c9:cf:87:a5:01:d3:14:10:d9:8a:b1:e6: 2e:aa:94:27:af:1d:1c:84:27:5b:45:e0:45:3e:ef:9e:71:ba: 5c:60:9f:6f:5d:c2:b6:e4:46:0b:38:e2:15:30:97:b4:91:dd: 54:43:9f:a6:61:cc:8a:a5:92:81:b7:d6:89:fe:60:26:f1:c6: 08:37:e5:c9:cc:5e:23:85:7b:8b:8f:06:0e:a7:e1:44:7e:3d: d0:7a:e0:01:40:07:e6:d6:c1:70:97:c0:51:db:31:fc:9f:90: 2d:2e:01:b8 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE2U9DX1c4lsjzOsesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDQyMTE2MzMxNloXDTI4MDIyMTE2MzkwMVowLzEtMCsGA1UEAxMk OWU2OGY4YjMtNTlmYi00MWU4LWJlYTMtY2M3Mjg2YTQzZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+u19IC2psU+I0Jq1DcIZqssSJ2aoyNeQEjk mR237YR/am3LSaSWNp5xIkCh9bCF7AojyHeOQIKeLqfocLmBk/xPArNwrwrtjrha 4OgM7PTBKcauwK4bmucmsLUI8qR7bOxSWJEJWzTT2QIcpOW6npVDsU7ym1OoxdWe PqpQ+2RsHk7kMZC921ozA6JkiBbfIllpt6raUJY2V3GNRHZb4tLJsi8UWF2kxAeZ CtEWjnwYrh19XZD2oxP1bRr3He7f7S+1pI4bTdmF7G5p8T1Pk3Vuvv3rW/SBesLO /dtTWfm3+MH5ESTbZ65MdtXdX2woG5e9MzAEQekv6tmSWV2CBwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFP7pUO7vztkejGhe9T+XpznTFLw6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 ZTY4ZjhiMy01OWZiLTQxZTgtYmVhMy1jYzcyODZhNDNlY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzllNjhmOGIzLTU5ZmItNDFlOC1i ZWEzLWNjNzI4NmE0M2VjYy85ZTY4ZjhiMy01OWZiLTQxZTgtYmVhMy1jYzcyODZh NDNlY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBADQXtQwDgQCAAIwCAMGBCYC8+kAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYF1zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCklO7T1LuQ2jo+m8M9Cv6Q0oY3 3USwNOnH1TJ6kztn1GCsSp+LKCSxkQzXXqH4msRVs3SWPaEaBZVX9L5AT+CTwh7X zAC33O9dMoxzewgfdKyRmJBm2qMKLgjeErr0c4Lt1EP88dZAvIAtoUdzH61iMV// o7x4+vqGfsP91CgszaYqnUxdoyxwDhEVK1SKVRxSjXhUNmzJz4elAdMUENmKseYu qpQnrx0chCdbReBFPu+ecbpcYJ9vXcK25EYLOOIVMJe0kd1UQ5+mYcyKpZKBt9aJ /mAm8cYIN+XJzF4jhXuLjwYOp+FEfj3QeuABQAfm1sFwl8BR2zH8n5AtLgG4 -----END CERTIFICATE-----Generated at Fri May 1 15:06:40 2026 by rpki-client