$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a17b61d8-0b7a-47cd-84a5-c1e56ed90e37.cer File: a17b61d8-0b7a-47cd-84a5-c1e56ed90e37.cer (raw, json) Hash identifier: sXx+S1nBLOW+7TtqFztAqybCaIThQwDHwzw1lROp3To= Subject key identifier: 39:F8:CD:64:01:F3:FC:34:5B:C1:61:1D:69:D0:61:24:7B:1A:2E:37 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D1F425F261F9660BB8B62E380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a17b61d8-0b7a-47cd-84a5-c1e56ed90e37/a17b61d8-0b7a-47cd-84a5-c1e56ed90e37.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a17b61d8-0b7a-47cd-84a5-c1e56ed90e37/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Mar 2026 12:45:22 +0000 Certificate not after: Mon 12 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 21940 IP: 199.184.152.0/21 IP: 2604:bec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:42:5f:26:1f:96:60:bb:8b:62:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 10 12:45:22 2026 GMT Not After : Jun 12 12:45:22 2028 GMT Subject: CN=a17b61d8-0b7a-47cd-84a5-c1e56ed90e37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:dd:c8:cd:60:64:51:8b:24:a8:c0:e5:8c: ba:d1:23:83:96:eb:51:50:0b:e9:a6:05:46:53:b5: 51:ba:ad:04:3b:3a:25:3b:cc:2d:0b:bb:8a:6f:00: 92:14:26:97:56:0c:5f:15:19:b7:44:c0:d1:17:86: a7:41:11:8d:78:f4:93:0e:f9:58:ec:6a:54:4b:f2: 91:f8:c5:0f:3f:01:fe:9b:31:70:b2:e5:4b:44:cc: e5:5e:41:53:bb:f9:5d:92:41:fc:2f:7c:23:60:87: 6d:7b:5e:d0:a8:63:9a:c6:5a:a6:30:b5:8b:d7:bb: 0c:01:62:66:87:bd:d9:74:08:e3:2f:2f:b4:5f:f3: 69:db:1c:0c:d6:ee:43:39:e0:3a:e3:45:76:15:ec: 03:74:ee:25:99:68:05:e2:e0:c9:ca:03:47:f0:47: 06:e2:dc:68:0a:7f:15:36:81:62:57:0a:50:f3:0f: d8:15:92:36:ac:d4:7a:2d:d8:61:cd:bf:f3:a3:f8: 0a:22:75:0f:92:1a:43:7d:e9:47:ae:e5:fd:d6:d5: 5d:b2:fd:35:cb:39:a5:79:35:e4:17:bb:89:34:8a: b0:d8:3a:8e:b8:0f:f3:66:a8:49:b1:9c:7e:df:d4: ee:71:04:bc:4b:9f:39:95:29:81:e6:a2:82:52:a3: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F8:CD:64:01:F3:FC:34:5B:C1:61:1D:69:D0:61:24:7B:1A:2E:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a17b61d8-0b7a-47cd-84a5-c1e56ed90e37/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a17b61d8-0b7a-47cd-84a5-c1e56ed90e37/a17b61d8-0b7a-47cd-84a5-c1e56ed90e37.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.184.152.0/21 IPv6: 2604:bec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 21940 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:4f:ec:94:63:2f:63:0c:be:29:ee:d6:fc:60:19:5d:29:cc: 37:95:56:be:a0:74:28:1f:e8:fb:11:dd:b7:06:32:00:7a:7a: 44:70:af:83:a0:cc:75:c2:bc:22:74:9f:58:89:31:99:e2:bc: d7:5b:0c:33:ba:74:9a:c0:fc:22:a4:61:a5:e8:74:e2:73:9f: ed:31:c4:28:88:73:39:21:fa:e6:5e:13:27:4c:f5:a9:a3:69: c3:b6:e9:b3:66:9c:50:fb:a3:07:3d:f2:16:dd:d7:a4:c6:3f: 46:b2:37:fc:a2:f2:76:ec:99:5d:98:c2:41:34:d9:2c:1b:0a: c2:24:80:11:8b:82:d3:a3:74:a4:ab:a7:85:dc:85:69:38:1e: 48:8b:89:37:79:9f:ac:24:9e:73:f2:cd:17:ff:3d:a7:f1:a6: 13:25:9b:8d:f6:1f:a8:5d:30:4d:a1:5f:cc:3c:8a:53:56:8c: 16:69:c6:cf:bc:07:32:76:c7:eb:1e:cb:57:c2:4a:e8:e6:8f: 19:09:56:1b:50:ff:05:e1:68:5b:2a:c5:6b:8c:e6:11:09:d8: 14:a8:0d:99:6d:b0:11:b5:bb:55:25:b0:55:e0:c8:31:86:93: 77:78:b6:c9:02:7c:ba:69:99:f6:85:41:30:41:49:57:92:a7: 35:7c:a5:3b -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE0fQl8mH5Zgu4ti44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMxMDEyNDUyMloXDTI4MDYxMjEyNDUyMlowLzEtMCsGA1UEAxMk YTE3YjYxZDgtMGI3YS00N2NkLTg0YTUtYzFlNTZlZDkwZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/dyM1gZFGLJKjA5Yy60SODlutRUAvppgVG U7VRuq0EOzolO8wtC7uKbwCSFCaXVgxfFRm3RMDRF4anQRGNePSTDvlY7GpUS/KR +MUPPwH+mzFwsuVLRMzlXkFTu/ldkkH8L3wjYIdte17QqGOaxlqmMLWL17sMAWJm h73ZdAjjLy+0X/Np2xwM1u5DOeA640V2FewDdO4lmWgF4uDJygNH8EcG4txoCn8V NoFiVwpQ8w/YFZI2rNR6Ldhhzb/zo/gKInUPkhpDfelHruX91tVdsv01yzmleTXk F7uJNIqw2DqOuA/zZqhJsZx+39TucQS8S585lSmB5qKCUqPBawIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFDn4zWQB8/w0W8FhHWnQYSR7Gi43MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h MTdiNjFkOC0wYjdhLTQ3Y2QtODRhNS1jMWU1NmVkOTBlMzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2ExN2I2MWQ4LTBiN2EtNDdjZC04 NGE1LWMxZTU2ZWQ5MGUzNy9hMTdiNjFkOC0wYjdhLTQ3Y2QtODRhNS1jMWU1NmVk OTBlMzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAPHuJgwDQQCAAIwBwMFACYEvsAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICVbQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH0/slGMvYwy+Ke7W/GAZXSnMN5VW vqB0KB/o+xHdtwYyAHp6RHCvg6DMdcK8InSfWIkxmeK811sMM7p0msD8IqRhpeh0 4nOf7THEKIhzOSH65l4TJ0z1qaNpw7bps2acUPujBz3yFt3XpMY/RrI3/KLyduyZ XZjCQTTZLBsKwiSAEYuC06N0pKunhdyFaTgeSIuJN3mfrCSec/LNF/89p/GmEyWb jfYfqF0wTaFfzDyKU1aMFmnGz7wHMnbH6x7LV8JK6OaPGQlWG1D/BeFoWyrFa4zm EQnYFKgNmW2wEbW7VSWwVeDIMYaTd3i2yQJ8ummZ9oVBMEFJV5KnNXylOw== -----END CERTIFICATE-----Generated at Fri Mar 13 08:19:43 2026 by rpki-client