$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1.cer File: 5eb94df3-be39-4e1b-b39a-730deb2999f1.cer (raw, json) Hash identifier: CmmydAgyxuUsX9Zjw4rSnMUK7Zw+6fWR67ndaBeZ9Wo= Subject key identifier: AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D1B1256AA62CC4C331FE9A180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Mar 2026 00:45:21 +0000 Certificate not after: Sun 11 Jun 2028 00:45:21 +0000 Subordinate resources: IP: 23.29.80.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:12:56:aa:62:cc:4c:33:1f:e9:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 9 00:45:21 2026 GMT Not After : Jun 11 00:45:21 2028 GMT Subject: CN=5eb94df3-be39-4e1b-b39a-730deb2999f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ff:99:cc:d1:23:7a:dd:35:ce:b0:d3:17:13: cd:1f:ff:45:ad:2f:de:1b:3d:e4:f8:b2:6a:18:85: 0a:05:1e:cb:c3:20:08:4d:d6:ab:d4:5b:c6:34:62: 72:a6:3c:04:15:95:0f:5b:85:77:2d:02:da:b1:ba: 27:be:ab:0b:4a:be:03:1c:81:b8:5e:c2:54:c0:d8: 87:92:d5:88:ca:73:96:a3:f1:3f:a6:07:e8:6c:0f: 24:f3:07:54:e1:66:32:e9:ca:70:a8:29:d9:2d:3a: 63:ef:fc:7c:1d:a8:9e:61:d2:4e:07:5c:11:44:95: fe:27:61:c4:9b:bc:82:5c:22:2d:7c:af:f5:6a:08: fb:49:0c:c4:87:dc:96:71:e3:94:91:e7:df:dd:5e: 16:98:6c:07:22:9f:8c:6f:26:90:a5:22:8c:ca:d6: 36:a0:52:69:cc:b7:85:35:46:47:2c:56:93:dc:30: bf:2f:2a:4b:6d:4c:6b:26:be:f3:86:83:ef:90:b5: a7:9f:a4:d6:42:ff:d4:b9:ee:73:00:62:7b:aa:60: 8e:73:7d:24:66:5c:b0:1f:52:6e:33:57:5c:68:ac: 1c:72:66:29:7e:b1:91:d8:10:a2:a2:ca:d5:1d:68: d7:b4:bf:2b:d8:0b:c0:bb:ec:33:51:30:1c:2a:fd: 44:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:71:C0:14:37:F4:47:E4:FA:73:5F:AD:CB:90:70:E0:C1:56:66:A1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5eb94df3-be39-4e1b-b39a-730deb2999f1/5eb94df3-be39-4e1b-b39a-730deb2999f1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.29.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:25:dd:7e:8f:6d:e4:14:7f:10:e7:b1:34:9d:22:64:6b:e3: 0b:30:c0:1f:fd:65:7c:a5:fe:2d:1a:e7:80:5b:c1:4a:73:72: 87:6a:78:ff:e8:9d:fb:4f:b9:d7:44:a7:b8:f5:b3:99:bd:8e: b1:18:8b:6d:f7:ec:c9:7d:ea:78:da:21:ec:2a:2d:85:a6:2c: 84:49:7b:d7:4b:31:3c:b4:0b:cf:09:a4:05:fc:51:d9:2a:6e: 52:a2:ce:7c:7c:0f:87:67:df:05:9e:dd:d2:fe:23:09:b2:64: 56:f8:ff:b0:c8:8c:19:5a:2a:88:98:b8:cf:81:4f:85:02:12: 45:f6:29:d6:db:9c:6e:1d:8b:41:8b:bd:58:59:a9:c2:c2:39: 36:3d:10:8f:a1:4d:fd:e7:ca:47:cd:2f:f4:02:2f:0d:4f:1f: a2:78:61:0d:7c:29:e4:8e:de:59:da:06:9c:ff:40:41:c4:74: 60:b8:25:5e:ae:53:1e:de:ea:1c:3c:d8:5e:f9:8a:24:26:b1: ce:23:86:21:82:dd:a2:19:c1:ef:f4:c7:c3:7e:fc:d4:ce:34: 08:f5:31:c8:f4:6f:66:d1:73:b4:e6:59:67:b6:eb:30:f3:d1: 53:10:c8:b1:81:27:77:3f:76:4a:b2:00:12:e1:3a:7f:f8:a3: a0:a3:65:9a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0bElaqYsxMMx/poYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDMwOTAwNDUyMVoXDTI4MDYxMTAwNDUyMVowLzEtMCsGA1UEAxMk NWViOTRkZjMtYmUzOS00ZTFiLWIzOWEtNzMwZGViMjk5OWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP+ZzNEjet01zrDTFxPNH/9FrS/eGz3k+LJq GIUKBR7LwyAITdar1FvGNGJypjwEFZUPW4V3LQLasbonvqsLSr4DHIG4XsJUwNiH ktWIynOWo/E/pgfobA8k8wdU4WYy6cpwqCnZLTpj7/x8HaieYdJOB1wRRJX+J2HE m7yCXCItfK/1agj7SQzEh9yWceOUkeff3V4WmGwHIp+MbyaQpSKMytY2oFJpzLeF NUZHLFaT3DC/LypLbUxrJr7zhoPvkLWnn6TWQv/Uue5zAGJ7qmCOc30kZlywH1Ju M1dcaKwccmYpfrGR2BCiosrVHWjXtL8r2AvAu+wzUTAcKv1EAwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKpxwBQ39Efk+nNfrcuQcODBVmahMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81 ZWI5NGRmMy1iZTM5LTRlMWItYjM5YS03MzBkZWIyOTk5ZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzVlYjk0ZGYzLWJlMzktNGUxYi1i MzlhLTczMGRlYjI5OTlmMS81ZWI5NGRmMy1iZTM5LTRlMWItYjM5YS03MzBkZWIy OTk5ZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAQXHVAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEyXdfo9t5BR/EOexNJ0i ZGvjCzDAH/1lfKX+LRrngFvBSnNyh2p4/+id+0+510SnuPWzmb2OsRiLbffsyX3q eNoh7CothaYshEl710sxPLQLzwmkBfxR2SpuUqLOfHwPh2ffBZ7d0v4jCbJkVvj/ sMiMGVoqiJi4z4FPhQISRfYp1tucbh2LQYu9WFmpwsI5Nj0Qj6FN/efKR80v9AIv DU8fonhhDXwp5I7eWdoGnP9AQcR0YLglXq5THt7qHDzYXvmKJCaxziOGIYLdohnB 7/THw3781M40CPUxyPRvZtFztOZZZ7brMPPRUxDIsYEndz92SrIAEuE6f/ijoKNl mg== -----END CERTIFICATE-----Generated at Wed Mar 25 23:19:56 2026 by rpki-client