$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer File: 03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.cer (raw, json) Hash identifier: BpVTzeL1UHBOFb+coQC/Lp03w3fDb1TKNFbPEi0ukDA= Subject key identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D30027AD5DFDC06C59FE9BE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Mar 2026 12:45:22 +0000 Certificate not after: Sun 18 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 54816 IP: 74.118.228.0/22 IP: 158.51.56.0/22 IP: 192.30.192.0/21 IP: 2607:67c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:02:7a:d5:df:dc:06:c5:9f:e9:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 16 12:45:22 2026 GMT Not After : Jun 18 12:45:22 2028 GMT Subject: CN=03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c4:07:8b:c9:02:4d:ff:5e:e2:e6:91:1e:10: f2:de:49:2e:72:7f:8d:65:f7:12:30:49:2d:18:91: e8:a0:85:97:9b:78:10:ac:cb:e8:62:d7:ad:2d:c1: 95:f8:8c:86:c4:e9:c1:f7:d9:26:ec:a0:d7:24:5f: e3:4f:6b:aa:e5:f6:c2:f1:27:a6:ac:3f:67:96:b1: 09:84:c0:36:c4:f3:64:84:e3:01:a5:5f:37:a5:41: c3:ec:39:17:7b:ae:54:2f:f3:f4:9d:ca:27:61:19: 96:a7:7d:2b:be:be:7f:50:f2:53:a8:a5:90:bf:1a: 1f:8f:a5:69:e4:47:5a:14:0c:f4:b7:d8:ee:a2:8e: 04:12:a3:48:d5:a2:70:ce:d2:b0:ad:a7:7e:cd:97: 53:b0:84:f7:77:b9:b3:76:b5:fb:bc:6c:1b:ef:b6: bd:16:cd:91:e6:ff:e0:48:b6:9f:76:89:c8:52:58: 90:b6:72:97:49:c5:31:d1:c8:04:78:46:04:df:e7: c4:40:35:79:db:a6:c3:33:c5:25:78:fb:1d:8a:a0: 99:b3:79:12:8e:72:16:72:3c:b8:c6:09:17:36:f0: e3:03:e0:09:08:bb:af:76:a9:da:b7:82:b2:c2:eb: ea:27:cd:96:2e:74:66:5e:f3:a3:46:2b:79:67:08: c5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5B:99:4D:B3:F6:B8:9D:A1:51:94:7E:C1:DF:E6:90:10:A5:CB:A9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11/03f05ea2-ea5b-4e2b-ab9f-c95b4590ea11.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 74.118.228.0/22 158.51.56.0/22 192.30.192.0/21 IPv6: 2607:67c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54816 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:0f:f1:17:26:e1:83:bd:91:b3:5d:37:61:7b:eb:6e:8f:74: 5a:c0:15:e3:bd:8a:f7:59:1c:bd:f9:9b:a4:07:e1:7c:78:6b: 1f:07:02:f4:5e:33:06:ab:ac:71:94:ae:6d:57:76:aa:e9:a8: 4a:af:34:33:fc:f0:b0:59:7f:92:4b:c9:40:11:8c:26:84:f8: 7c:fe:55:d9:fb:28:99:6f:1d:38:2e:f9:3d:c8:7f:93:2c:fa: 24:ec:24:03:ea:5e:5e:b0:a7:8e:0f:e7:f8:92:5d:de:72:7a: bb:69:07:d5:ae:b0:75:77:d0:18:47:80:d8:f4:15:70:e3:21: c1:42:3e:b6:ad:f4:02:0a:73:b9:36:93:58:cb:d7:8f:3d:80: 18:6e:e6:a7:96:f1:19:1e:68:e3:b0:0b:7a:5d:80:21:f7:43: 9d:10:a8:b0:d9:1c:63:78:97:1b:e8:87:9b:29:33:4f:30:a7: 8d:ad:68:86:b5:63:af:4f:0d:d0:c3:c4:02:29:38:5e:cd:15: 05:c8:57:d0:37:83:83:a8:48:9c:14:cf:a8:b0:a2:32:94:e7: 83:9f:aa:54:ab:db:aa:ca:05:d8:5e:54:d6:40:8e:c2:c5:a7: ba:40:6e:6e:dd:32:e7:9c:c9:90:fc:92:7a:cd:ac:00:7f:b8: 54:96:0b:dc -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE0wAnrV39wGxZ/pvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMxNjEyNDUyMloXDTI4MDYxODEyNDUyMlowLzEtMCsGA1UEAxMk MDNmMDVlYTItZWE1Yi00ZTJiLWFiOWYtYzk1YjQ1OTBlYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMQHi8kCTf9e4uaRHhDy3kkucn+NZfcSMEkt GJHooIWXm3gQrMvoYtetLcGV+IyGxOnB99km7KDXJF/jT2uq5fbC8SemrD9nlrEJ hMA2xPNkhOMBpV83pUHD7DkXe65UL/P0nconYRmWp30rvr5/UPJTqKWQvxofj6Vp 5EdaFAz0t9juoo4EEqNI1aJwztKwrad+zZdTsIT3d7mzdrX7vGwb77a9Fs2R5v/g SLafdonIUliQtnKXScUx0cgEeEYE3+fEQDV526bDM8UlePsdiqCZs3kSjnIWcjy4 xgkXNvDjA+AJCLuvdqnat4KywuvqJ82WLnRmXvOjRit5ZwjFWwIDAQABo4IENjCC BDIwHQYDVR0OBBYEFK5bmU2z9ridoVGUfsHf5pAQpcupMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8w M2YwNWVhMi1lYTViLTRlMmItYWI5Zi1jOTViNDU5MGVhMTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzAzZjA1ZWEyLWVhNWItNGUyYi1h YjlmLWM5NWI0NTkwZWExMS8wM2YwNWVhMi1lYTViLTRlMmItYWI5Zi1jOTViNDU5 MGVhMTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBAJKduQDBAKeMzgDBAPAHsAwDQQCAAIwBwMFACYH Z8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDANYgMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFkP8Rcm4YO9 kbNdN2F7626PdFrAFeO9ivdZHL35m6QH4Xx4ax8HAvReMwarrHGUrm1XdqrpqEqv NDP88LBZf5JLyUARjCaE+Hz+Vdn7KJlvHTgu+T3If5Ms+iTsJAPqXl6wp44P5/iS Xd5yertpB9WusHV30BhHgNj0FXDjIcFCPrat9AIKc7k2k1jL1489gBhu5qeW8Rke aOOwC3pdgCH3Q50QqLDZHGN4lxvoh5spM08wp42taIa1Y69PDdDDxAIpOF7NFQXI V9A3g4OoSJwUz6iwojKU54OfqlSr26rKBdheVNZAjsLFp7pAbm7dMuecyZD8knrN rAB/uFSWC9w= -----END CERTIFICATE-----Generated at Thu Mar 26 08:20:14 2026 by rpki-client