$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a8159c8-4e5a-4a8e-9034-15938cf0c4dc.cer File: 1a8159c8-4e5a-4a8e-9034-15938cf0c4dc.cer (raw, json) Hash identifier: Si0Zltna1zZHOrL4iL6jPhmDmFJozv7YOpP+gkcx6BI= Subject key identifier: 25:03:5F:0E:D7:3D:74:66:4B:B9:5C:39:E7:8F:D5:42:9B:9A:F6:10 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584FCBB18AF4636A6B37CE139380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a8159c8-4e5a-4a8e-9034-15938cf0c4dc/1a8159c8-4e5a-4a8e-9034-15938cf0c4dc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a8159c8-4e5a-4a8e-9034-15938cf0c4dc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 10 Nov 2026 16:42:16 +0000 Certificate not after: Mon 12 Feb 2029 16:42:16 +0000 Subordinate resources: AS: 394862 IP: 162.219.56.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:cb:b1:8a:f4:63:6a:6b:37:ce:13:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Nov 10 16:42:16 2026 GMT Not After : Feb 12 16:42:16 2029 GMT Subject: CN=1a8159c8-4e5a-4a8e-9034-15938cf0c4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:9c:d7:53:3d:f3:4c:53:4e:c7:8a:09:15: b1:aa:94:6e:a2:0d:e2:4c:86:4f:31:fc:db:08:f3: b4:c3:a0:9b:2b:94:92:cb:d5:3f:6a:bf:c4:38:0a: f9:8a:90:3d:da:96:ba:08:95:ea:8a:25:9f:e7:7f: bf:98:e9:ff:2c:aa:00:37:04:cc:25:d8:02:6a:8b: 86:7d:6c:25:3a:bd:55:d7:ec:b3:9d:06:8d:de:c8: 39:0d:3b:10:5d:f3:e2:63:42:f3:df:ec:36:15:21: ad:a4:ff:8d:68:3a:db:90:6d:07:6f:4c:2d:81:8e: f4:54:6d:c7:d0:dc:42:91:df:7b:c9:53:db:9c:1e: 5b:16:d8:4c:75:2b:ff:ba:49:3f:20:84:8b:cc:5f: 73:9f:d8:81:c2:a4:76:22:81:b4:4a:d9:af:9c:4d: 8d:08:56:25:fe:ac:3f:93:c7:76:03:67:03:dc:21: 9c:71:7b:6e:12:e3:50:9e:41:2c:81:75:f7:05:7e: e7:1f:10:e1:e5:27:fc:1b:eb:a1:75:79:1d:8d:84: b7:eb:4e:7e:d9:4f:5c:2e:29:b9:84:02:04:8c:22: 75:87:8c:fd:86:d6:5f:ee:8f:19:2e:fd:ff:16:d8: d5:eb:db:4a:98:8f:86:17:3b:de:78:30:cb:55:be: 89:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:03:5F:0E:D7:3D:74:66:4B:B9:5C:39:E7:8F:D5:42:9B:9A:F6:10 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a8159c8-4e5a-4a8e-9034-15938cf0c4dc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a8159c8-4e5a-4a8e-9034-15938cf0c4dc/1a8159c8-4e5a-4a8e-9034-15938cf0c4dc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 162.219.56.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394862 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:0b:f8:2f:ee:eb:9c:15:78:05:42:f2:2e:0e:a6:d3:9f:31: 87:b4:da:88:8d:67:63:25:3e:d6:51:28:e0:75:fd:d2:52:6c: f2:4d:7d:05:3a:f6:1a:71:91:48:db:2f:5c:e3:c2:22:20:55: c9:70:ae:0b:97:54:e8:75:49:11:70:90:a5:c6:1f:6d:53:78: a1:20:0e:42:a5:1c:37:a1:ef:5f:b3:0b:33:ae:13:66:fa:fa: 47:fe:98:7b:c0:20:f8:2a:65:95:69:69:15:ff:93:43:1e:0b: 98:8d:b6:17:33:c8:df:57:0a:94:90:39:97:7c:14:06:b9:4a: 02:02:63:e1:c8:ce:a5:29:3e:8a:96:b4:47:7e:e5:1e:32:4b: 1b:23:cd:42:38:b8:13:19:1d:fa:4e:20:bd:c1:73:e0:b7:d6: 95:6d:cc:df:b2:d1:a1:69:1d:f2:58:df:a4:b4:bc:6c:82:24: 56:59:5d:ee:38:2e:8f:ff:6a:34:48:7e:3f:8e:36:ad:7b:f8: 33:bb:85:ac:29:48:46:7a:d4:f3:4b:0c:3b:79:2d:8c:39:dc: 4e:f5:94:f1:a3:5d:f6:3f:e4:47:3a:6e:8c:ef:1f:4a:b6:05: c4:a0:65:e4:17:62:e8:f6:aa:f7:fd:5a:fa:77:8b:fb:d4:85: 67:9b:ee:fa -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE/LsYr0Y2prN84Tk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MTExMDE2NDIxNloXDTI5MDIxMjE2NDIxNlowLzEtMCsGA1UEAxMk MWE4MTU5YzgtNGU1YS00YThlLTkwMzQtMTU5MzhjZjBjNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIqc11M980xTTseKCRWxqpRuog3iTIZPMfzb CPO0w6CbK5SSy9U/ar/EOAr5ipA92pa6CJXqiiWf53+/mOn/LKoANwTMJdgCaouG fWwlOr1V1+yznQaN3sg5DTsQXfPiY0Lz3+w2FSGtpP+NaDrbkG0Hb0wtgY70VG3H 0NxCkd97yVPbnB5bFthMdSv/ukk/IISLzF9zn9iBwqR2IoG0StmvnE2NCFYl/qw/ k8d2A2cD3CGccXtuEuNQnkEsgXX3BX7nHxDh5Sf8G+uhdXkdjYS3605+2U9cLim5 hAIEjCJ1h4z9htZf7o8ZLv3/FtjV69tKmI+GFzveeDDLVb6JXwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFCUDXw7XPXRmS7lcOeeP1UKbmvYQMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8x YTgxNTljOC00ZTVhLTRhOGUtOTAzNC0xNTkzOGNmMGM0ZGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzFhODE1OWM4LTRlNWEtNGE4ZS05 MDM0LTE1OTM4Y2YwYzRkYy8xYTgxNTljOC00ZTVhLTRhOGUtOTAzNC0xNTkzOGNm MGM0ZGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKi2zgwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BgZuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF8L+C/u65wVeAVC8i4OptOfMYe02oiNZ2MlPtZRKOB1/dJS bPJNfQU69hpxkUjbL1zjwiIgVclwrguXVOh1SRFwkKXGH21TeKEgDkKlHDeh71+z CzOuE2b6+kf+mHvAIPgqZZVpaRX/k0MeC5iNthczyN9XCpSQOZd8FAa5SgICY+HI zqUpPoqWtEd+5R4ySxsjzUI4uBMZHfpOIL3Bc+C31pVtzN+y0aFpHfJY36S0vGyC JFZZXe44Lo//ajRIfj+ONq17+DO7hawpSEZ61PNLDDt5LYw53E71lPGjXfY/5Ec6 bozvH0q2BcSgZeQXYuj2qvf9Wvp3i/vUhWeb7vo= -----END CERTIFICATE-----Generated at Sun Nov 15 10:41:00 2026 by rpki-client