$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer File: 7a5ea33b-ee80-42d8-8255-b0c61f28b06f.cer (raw, json) Hash identifier: 0sSqRR3G9fkuL5q+1RjJiVOTddARVd7yuQ5j7rW9KG8= Subject key identifier: ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D2A6D1D257FF3124839F38B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Mar 2026 12:45:22 +0000 Certificate not after: Fri 16 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 54829 IP: 162.222.20.0/22 IP: 192.40.220.0/22 IP: 198.241.12.0/22 IP: 2606:8c80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:6d:1d:25:7f:f3:12:48:39:f3:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 14 12:45:22 2026 GMT Not After : Jun 16 12:45:22 2028 GMT Subject: CN=7a5ea33b-ee80-42d8-8255-b0c61f28b06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:77:4f:47:2e:0e:a3:4d:6a:0c:de:f6:c1:a2: 65:38:a9:b0:97:b2:93:16:34:8a:c0:f4:98:b4:df: ca:ff:da:bb:c7:95:bd:f7:b9:d7:b3:5a:6c:a3:74: 0d:f0:8c:e6:0b:bf:2c:75:78:27:83:6f:0c:53:38: df:5b:4d:53:e6:b9:5b:cd:9a:c6:a5:46:7c:a1:db: 96:f2:5e:df:fc:c4:38:72:5b:cc:32:28:72:08:42: 69:bf:05:e0:23:a9:b1:b8:c4:08:48:a4:75:c1:d9: c0:30:fd:57:9e:a8:cb:b2:b8:13:58:a0:61:23:5d: 95:9a:be:36:4d:59:ab:4b:de:9f:a8:a4:5c:cb:02: b9:22:9d:78:c8:a7:47:d0:d5:7f:a0:48:49:5a:5b: fb:cf:61:a5:b6:ff:4f:b3:77:06:d8:9e:da:e0:c4: c4:ef:01:7f:fc:e9:f3:30:5c:71:4d:f4:98:87:58: a7:29:09:38:4c:4d:2a:fb:06:02:cd:07:bc:d8:1d: 46:06:7f:ad:b3:0e:ce:e3:bf:db:4e:5a:a5:0f:61: a5:85:93:f8:ab:5e:f3:69:02:47:2d:ca:d0:f4:07: a9:de:42:3a:c0:82:a5:e6:19:38:90:c6:3a:2e:e8: 93:81:a6:54:e9:d4:7d:c9:13:e9:e4:c7:91:40:94: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:21:14:DF:3C:FC:0C:9B:AC:DB:57:D2:7B:BC:B3:D4:52:B2:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a5ea33b-ee80-42d8-8255-b0c61f28b06f/7a5ea33b-ee80-42d8-8255-b0c61f28b06f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 162.222.20.0/22 192.40.220.0/22 198.241.12.0/22 IPv6: 2606:8c80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54829 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f8:34:2e:38:fd:9d:be:da:62:93:21:4c:67:7e:8c:ca:f5: de:72:9b:a9:ca:40:4f:89:de:3e:13:63:40:cb:9a:45:ab:b5: b3:d0:84:a2:a7:fe:0d:9e:8d:87:a4:7e:47:a6:79:6b:9e:88: fb:23:59:5b:69:e2:5c:4f:4d:5e:88:bf:2b:84:85:74:01:fe: 8c:94:c1:08:40:8d:1a:4f:8d:3f:02:a2:ec:af:04:21:d9:39: 5b:e3:a9:fa:2b:bc:8c:eb:d9:8d:1c:f7:4c:68:fb:3e:c7:8f: a3:fa:5e:98:b4:09:35:2a:64:55:e5:fe:b4:ca:a8:77:75:bd: 92:aa:e1:38:e8:c3:6d:ee:56:8a:8d:af:aa:3c:75:00:42:a3: 96:7e:68:2d:d6:97:73:e7:da:fe:76:c6:e4:5c:63:d4:21:21: 92:0e:88:d8:50:2a:f7:39:40:76:26:93:69:9c:fb:e2:0d:58: 04:07:48:12:21:e7:8c:5d:99:d9:13:b2:3f:14:04:b0:02:07: c6:95:96:60:c6:dc:62:d0:3c:2f:ca:88:ad:0a:2c:db:55:40: 87:bd:a3:2f:2c:53:22:cb:b0:7e:e1:1e:d4:2c:d5:28:9e:c9: 91:77:7e:5c:92:e3:41:79:25:da:66:55:96:e1:94:51:92:6e: 27:cf:d5:4f -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE0qbR0lf/MSSDnziwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDMxNDEyNDUyMloXDTI4MDYxNjEyNDUyMlowLzEtMCsGA1UEAxMk N2E1ZWEzM2ItZWU4MC00MmQ4LTgyNTUtYjBjNjFmMjhiMDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXdPRy4Oo01qDN72waJlOKmwl7KTFjSKwPSY tN/K/9q7x5W997nXs1pso3QN8IzmC78sdXgng28MUzjfW01T5rlbzZrGpUZ8oduW 8l7f/MQ4clvMMihyCEJpvwXgI6mxuMQISKR1wdnAMP1XnqjLsrgTWKBhI12Vmr42 TVmrS96fqKRcywK5Ip14yKdH0NV/oEhJWlv7z2Gltv9Ps3cG2J7a4MTE7wF//Onz MFxxTfSYh1inKQk4TE0q+wYCzQe82B1GBn+tsw7O47/bTlqlD2GlhZP4q17zaQJH LcrQ9Aep3kI6wIKl5hk4kMY6LuiTgaZU6dR9yRPp5MeRQJSmAwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFO3OIRTfPPwMm6zbV9J7vLPUUrIPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83 YTVlYTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2MWYyOGIwNmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzdhNWVhMzNiLWVlODAtNDJkOC04 MjU1LWIwYzYxZjI4YjA2Zi83YTVlYTMzYi1lZTgwLTQyZDgtODI1NS1iMGM2MWYy OGIwNmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAKi3hQDBALAKNwDBALG8QwwDQQCAAIwBwMFACYG jIAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANYtMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABD4NC44/Z2+ 2mKTIUxnfozK9d5ym6nKQE+J3j4TY0DLmkWrtbPQhKKn/g2ejYekfkemeWueiPsj WVtp4lxPTV6IvyuEhXQB/oyUwQhAjRpPjT8CouyvBCHZOVvjqforvIzr2Y0c90xo +z7Hj6P6Xpi0CTUqZFXl/rTKqHd1vZKq4Tjow23uVoqNr6o8dQBCo5Z+aC3Wl3Pn 2v52xuRcY9QhIZIOiNhQKvc5QHYmk2mc++INWAQHSBIh54xdmdkTsj8UBLACB8aV lmDG3GLQPC/KiK0KLNtVQIe9oy8sUyLLsH7hHtQs1SieyZF3flyS40F5JdpmVZbh lFGSbifP1U8= -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:48 2026 by rpki-client