$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f.cer File: 233a398f-fd93-43be-83a8-3760879a302f.cer (raw, json) Hash identifier: CWT1/fL6QzIwFSdQvN9Q68U2YP6A2bWSRNcOKG7s+s4= Subject key identifier: A9:F4:02:50:3E:14:1A:82:E0:42:79:2A:25:A0:B5:DD:F6:65:BB:21 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D2E9D21F056E392E83BC6C680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f/233a398f-fd93-43be-83a8-3760879a302f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Mar 2026 00:45:21 +0000 Certificate not after: Sun 18 Jun 2028 00:45:21 +0000 Subordinate resources: IP: 192.107.3.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2e:9d:21:f0:56:e3:92:e8:3b:c6:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 16 00:45:21 2026 GMT Not After : Jun 18 00:45:21 2028 GMT Subject: CN=233a398f-fd93-43be-83a8-3760879a302f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:62:39:3a:77:52:85:aa:0b:4c:de:41:80:16: ba:c8:84:76:7c:bc:6a:49:cc:8b:38:69:19:eb:7d: 0d:e8:12:65:5d:64:25:a7:0e:30:d0:d3:9e:e5:45: 7a:f3:58:8d:4e:03:fb:cc:db:c9:b0:df:7b:23:4b: 80:ba:84:64:39:37:35:a2:0c:7f:de:98:4d:1b:8c: aa:6a:f1:c4:d8:01:17:84:0e:a9:f1:8e:bb:89:93: b3:c7:f5:a0:93:e5:05:8f:5d:57:f2:68:d6:95:ad: f9:c0:18:3a:31:a7:b1:52:68:3c:c9:b7:85:e8:a8: dc:00:ab:72:82:71:bb:6f:c8:1c:70:c7:65:df:5a: 00:ff:ae:ec:b5:09:1a:c5:1d:5f:86:58:38:c0:39: 10:33:6a:76:a3:3e:2a:ca:42:45:46:57:d1:18:9d: fc:6f:c9:e9:6b:7b:f4:92:1d:d1:89:c2:41:6e:be: 27:44:39:2a:7f:c1:9f:f3:11:a3:69:52:a6:22:76: a4:af:0d:80:73:4d:77:d2:45:f8:42:62:d7:4f:fa: f0:c4:57:84:2d:3b:8b:b6:c2:2f:4b:ac:d9:90:e9: 3e:f7:41:e4:3b:3c:66:bb:ff:74:94:70:6a:e7:19: 88:75:7c:7f:1b:38:49:63:78:7c:54:dc:f5:65:56: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F4:02:50:3E:14:1A:82:E0:42:79:2A:25:A0:B5:DD:F6:65:BB:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/233a398f-fd93-43be-83a8-3760879a302f/233a398f-fd93-43be-83a8-3760879a302f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.107.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:60:5e:9f:f7:a5:f4:92:64:ff:1d:44:fd:dd:fa:ff:ad:f6: c0:d1:ac:59:68:55:73:93:a9:57:a2:2a:24:31:3b:2b:b4:cb: 73:8a:2d:74:f5:6e:dd:fb:bd:5a:c2:a3:c4:f5:e4:f5:80:87: 02:81:52:37:06:89:d2:87:c7:fa:d5:91:9a:19:92:c1:70:2b: 04:34:1b:83:44:8c:b2:3f:d8:1b:96:54:13:49:8c:73:e9:23: 0a:1d:19:2f:00:09:93:57:02:9e:88:83:0a:c7:2d:01:ad:b8: 69:ac:45:23:c3:bd:9e:01:e8:87:f1:47:ba:dd:59:c1:56:50: 1d:b6:e3:3a:4e:be:3d:e8:35:6c:b2:c2:60:3e:52:4a:82:c3: 52:4b:c0:66:f5:aa:8c:37:cf:c5:75:01:0f:4a:53:84:b1:55: c8:a2:de:33:a3:7c:a7:de:f3:92:fc:04:7e:e7:65:06:6d:a0: c5:53:43:9a:89:41:6a:1f:d5:d6:11:f3:30:54:2a:08:1d:d1: d4:6e:b1:da:f2:14:30:e4:b1:68:43:0a:da:fa:a4:0b:77:af: 2e:49:89:33:05:2c:a5:b3:c1:ca:86:22:41:4b:ce:75:f0:ab: 4d:bd:e1:d4:2b:44:c8:52:ca:87:85:7f:d4:f9:9d:94:92:cd: 08:d9:42:ed -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0unSHwVuOS6DvGxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMxNjAwNDUyMVoXDTI4MDYxODAwNDUyMVowLzEtMCsGA1UEAxMk MjMzYTM5OGYtZmQ5My00M2JlLTgzYTgtMzc2MDg3OWEzMDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmI5OndShaoLTN5BgBa6yIR2fLxqScyLOGkZ 630N6BJlXWQlpw4w0NOe5UV681iNTgP7zNvJsN97I0uAuoRkOTc1ogx/3phNG4yq avHE2AEXhA6p8Y67iZOzx/Wgk+UFj11X8mjWla35wBg6MaexUmg8ybeF6KjcAKty gnG7b8gccMdl31oA/67stQkaxR1fhlg4wDkQM2p2oz4qykJFRlfRGJ38b8npa3v0 kh3RicJBbr4nRDkqf8Gf8xGjaVKmInakrw2Ac0130kX4QmLXT/rwxFeELTuLtsIv S6zZkOk+90HkOzxmu/90lHBq5xmIdXx/GzhJY3h8VNz1ZVbG1wIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKn0AlA+FBqC4EJ5KiWgtd32ZbshMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8y MzNhMzk4Zi1mZDkzLTQzYmUtODNhOC0zNzYwODc5YTMwMmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzIzM2EzOThmLWZkOTMtNDNiZS04 M2E4LTM3NjA4NzlhMzAyZi8yMzNhMzk4Zi1mZDkzLTQzYmUtODNhOC0zNzYwODc5 YTMwMmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAawMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADGBen/el9JJk/x1E/d36 /632wNGsWWhVc5OpV6IqJDE7K7TLc4otdPVu3fu9WsKjxPXk9YCHAoFSNwaJ0ofH +tWRmhmSwXArBDQbg0SMsj/YG5ZUE0mMc+kjCh0ZLwAJk1cCnoiDCsctAa24aaxF I8O9ngHoh/FHut1ZwVZQHbbjOk6+Peg1bLLCYD5SSoLDUkvAZvWqjDfPxXUBD0pT hLFVyKLeM6N8p97zkvwEfudlBm2gxVNDmolBah/V1hHzMFQqCB3R1G6x2vIUMOSx aEMK2vqkC3evLkmJMwUspbPByoYiQUvOdfCrTb3h1CtEyFLKh4V/1PmdlJLNCNlC 7Q== -----END CERTIFICATE-----Generated at Thu Mar 26 10:00:27 2026 by rpki-client