$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d.cer File: b94accf0-8067-4a9a-ba69-832d3d95402d.cer (raw, json) Hash identifier: 0f+Vv8Da7DGf20c7mKya4pOcBv2JqtMV4IP5iw3Ie5U= Subject key identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D0EA00CFEC88F3EFB2AAF8C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 13:45:22 +0000 Certificate not after: Tue 06 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 170.62.37.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a0:0c:fe:c8:8f:3e:fb:2a:af:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 4 13:45:22 2026 GMT Not After : Jun 6 12:45:22 2028 GMT Subject: CN=b94accf0-8067-4a9a-ba69-832d3d95402d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9e:fa:50:4c:a8:ef:e9:f7:28:28:03:b7:60: 92:53:2d:81:96:29:9f:d2:bb:5b:e7:60:80:01:41: 09:25:8a:47:5a:af:92:41:4e:8a:43:b5:a9:58:8c: 2b:2f:63:d1:54:a5:e8:ed:ab:0f:fd:62:57:3c:bf: ad:4a:f6:a0:e9:0c:ad:3d:11:14:58:28:c5:15:59: fb:bb:0b:7d:90:16:e1:98:9d:f9:0d:7b:1a:18:e3: 32:6c:6c:6b:07:1d:99:96:67:41:b3:86:be:db:07: 38:75:f4:68:55:f5:35:49:c6:b2:b9:4c:d2:6e:0f: 9e:7c:c0:e7:88:79:8e:c5:d0:80:f3:40:e5:ff:78: 01:be:25:89:80:2c:b9:5d:b7:4a:c3:92:50:94:ca: 8c:3b:3c:bc:41:43:b8:9f:6e:1d:d0:27:65:35:2e: 40:35:1e:69:04:8d:d3:f0:89:23:09:28:98:92:8e: 1b:bf:e0:a5:c6:ea:08:37:e9:a7:fc:42:36:8b:00: 15:44:9c:fc:55:f8:87:54:91:3f:bb:80:e4:9b:c4: e0:31:69:d9:7b:2f:bd:c2:76:1a:db:72:e8:94:3c: ba:dd:11:09:96:0f:eb:09:f0:15:58:82:88:9b:1d: db:d7:ca:61:25:96:b9:a9:e5:e9:a1:bc:85:dc:c9: 04:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8E:16:C6:CD:47:F7:01:8F:62:8D:0C:33:24:C4:A9:A4:5E:6E:2E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b94accf0-8067-4a9a-ba69-832d3d95402d/b94accf0-8067-4a9a-ba69-832d3d95402d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 170.62.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:4f:5b:d2:d5:49:1d:c4:ad:70:fc:ee:ff:2a:8a:cd:5e:80: 95:a7:81:2f:36:16:2f:94:33:ba:be:7a:c4:8b:9e:91:40:d0: 8b:08:25:e9:ea:56:a7:76:74:e6:9b:dd:e7:5b:07:75:9e:67: 8d:7a:cb:a6:60:5b:7b:85:04:41:47:c4:48:de:f8:72:a9:87: 31:57:70:66:e0:5c:6f:b3:a8:09:36:90:19:9d:3d:b0:77:63: 7d:45:2e:b2:0d:b4:8c:a5:36:8d:c6:a8:53:1b:9d:9c:de:71: de:a2:91:cc:4f:ca:c0:d4:c1:2a:f1:37:bd:97:dc:6c:c7:9f: 42:50:0b:da:fc:03:92:4d:f5:af:ee:8f:0c:6e:b4:11:e5:57: 60:ac:a7:63:9e:ab:ef:e0:38:b2:cc:31:37:80:d2:9d:14:dc: be:73:93:8e:88:2d:a4:6a:55:e6:d4:cb:20:c5:c1:f8:96:1a: c3:38:1f:89:d9:8f:e3:c0:44:ac:2a:63:79:b2:5b:c6:bd:ab: 2f:78:83:3a:be:7b:62:d7:1f:44:91:9b:9c:dc:1a:4c:23:c6: bd:bc:d9:a6:3b:c2:bc:c2:33:05:91:59:26:4c:56:b1:1d:a3: 3f:48:b7:5a:7e:71:b8:e8:66:fe:3d:5f:bc:14:6f:d7:08:56: b2:cb:c5:bb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0OoAz+yI8++yqvjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMwNDEzNDUyMloXDTI4MDYwNjEyNDUyMlowLzEtMCsGA1UEAxMk Yjk0YWNjZjAtODA2Ny00YTlhLWJhNjktODMyZDNkOTU0MDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ76UEyo7+n3KCgDt2CSUy2Blimf0rtb52CA AUEJJYpHWq+SQU6KQ7WpWIwrL2PRVKXo7asP/WJXPL+tSvag6QytPREUWCjFFVn7 uwt9kBbhmJ35DXsaGOMybGxrBx2ZlmdBs4a+2wc4dfRoVfU1ScayuUzSbg+efMDn iHmOxdCA80Dl/3gBviWJgCy5XbdKw5JQlMqMOzy8QUO4n24d0CdlNS5ANR5pBI3T 8IkjCSiYko4bv+ClxuoIN+mn/EI2iwAVRJz8VfiHVJE/u4Dkm8TgMWnZey+9wnYa 23LolDy63REJlg/rCfAVWIKImx3b18phJZa5qeXpobyF3MkE3wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFK6OFsbNR/cBj2KNDDMkxKmkXm4uMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9i OTRhY2NmMC04MDY3LTRhOWEtYmE2OS04MzJkM2Q5NTQwMmQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2I5NGFjY2YwLTgwNjctNGE5YS1i YTY5LTgzMmQzZDk1NDAyZC9iOTRhY2NmMC04MDY3LTRhOWEtYmE2OS04MzJkM2Q5 NTQwMmQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACqPiUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf09b0tVJHcStcPzu/yqK zV6AlaeBLzYWL5Qzur56xIuekUDQiwgl6epWp3Z05pvd51sHdZ5njXrLpmBbe4UE QUfESN74cqmHMVdwZuBcb7OoCTaQGZ09sHdjfUUusg20jKU2jcaoUxudnN5x3qKR zE/KwNTBKvE3vZfcbMefQlAL2vwDkk31r+6PDG60EeVXYKynY56r7+A4sswxN4DS nRTcvnOTjogtpGpV5tTLIMXB+JYawzgfidmP48BErCpjebJbxr2rL3iDOr57Ytcf RJGbnNwaTCPGvbzZpjvCvMIzBZFZJkxWsR2jP0i3Wn5xuOhm/j1fvBRv1whWssvF uw== -----END CERTIFICATE-----Generated at Wed Mar 4 20:48:31 2026 by rpki-client