$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer File: 78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer (raw, json) Hash identifier: sOx4bXBP/lNUNRjd6V29u7ttLU1/CHao2Vf6LfKQYgY= Subject key identifier: 37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D438D45F4C706815D6931DD80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 12:45:22 +0000 Certificate not after: Sun 25 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 398894 IP: 209.142.115.0/24 IP: 2620:98:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:8d:45:f4:c7:06:81:5d:69:31:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 23 12:45:22 2026 GMT Not After : Jun 25 12:45:22 2028 GMT Subject: CN=78a2f9a6-28a7-4fb5-ba32-6f4af07c0026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:3a:e8:3f:dd:7a:f9:ea:e3:2f:31:5d:02: ac:9b:60:3e:38:25:99:d5:a6:b6:f5:ba:cd:90:5b: 14:39:62:92:e0:ed:5f:e7:97:db:4e:0e:17:42:08: 32:b7:c1:5a:2c:e3:c5:ee:8c:88:5c:fc:41:e9:96: 23:ec:5d:2b:63:33:36:57:13:d5:38:b1:ec:92:b5: 5e:3d:bd:bc:fa:97:0b:0d:17:a4:c8:80:eb:60:03: 1d:bd:a1:f1:ae:b1:4c:8a:9d:58:da:bb:c8:32:5b: 16:55:04:0e:ef:84:df:3c:b3:25:ca:d6:3e:a8:f3: bd:a1:2b:16:d1:be:55:38:da:2c:c8:f2:bd:a6:06: 5a:1d:9d:8b:d1:0c:b9:00:76:4c:19:65:cd:19:71: 65:e4:02:71:fb:1f:98:6f:5d:06:f0:da:ef:d0:22: 80:86:86:15:e0:c9:dd:d5:2d:a3:d2:95:9c:bb:f8: b3:86:7f:c5:cd:7d:b1:e1:74:52:54:74:6e:a3:51: 73:17:ce:ae:97:b9:b0:6d:ac:a8:c5:ca:2d:08:3b: 6a:eb:6d:be:2b:c4:c4:d5:1f:a9:b2:ae:aa:9b:10: 51:0c:9d:ed:f4:5c:55:f2:ec:34:29:39:91:a6:e9: 6c:74:24:fb:df:17:a2:9a:cf:84:d8:b2:44:b8:bf: b5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 209.142.115.0/24 IPv6: 2620:98:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398894 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:02:3d:e8:ec:3a:66:aa:cc:d8:cf:5d:57:81:f7:e8:b1:2b: 0f:d7:a7:11:0b:f3:32:e2:ad:b6:b5:9b:13:1d:f6:06:80:72: 29:b8:9c:30:f5:06:ed:b7:5a:a4:1b:ee:65:db:c5:09:04:b8: ec:a0:f3:a4:63:c7:f5:e4:47:02:88:40:21:d0:59:19:33:00: ff:85:23:62:6a:f9:e3:52:1e:0b:79:13:3f:3e:08:79:7c:fc: 74:ef:a9:cb:f6:d0:86:13:a0:16:3d:64:74:a4:6a:7f:f4:46: 3b:10:04:4b:91:e3:be:13:a6:2b:0f:48:c0:94:6c:83:42:24: 3e:c2:d2:4d:a3:77:9c:87:4b:d2:90:5b:44:35:02:de:7e:34: b7:f9:77:e9:02:e8:7e:73:38:27:69:c4:13:c6:cd:6b:a0:3b: 9e:59:cf:50:ef:fc:bd:10:3a:2d:16:65:f4:36:99:8f:98:21: 6e:e6:57:36:a9:fd:11:52:3f:87:af:91:55:7e:07:7c:b2:b5: c6:53:9a:09:0e:eb:7e:e2:8b:91:29:b2:00:2c:32:e0:87:18: 37:e4:48:4a:c3:f6:a3:34:f5:ef:ed:dd:c6:58:12:43:cc:5b: aa:06:ca:ac:ff:04:00:e7:37:1d:67:48:12:55:87:c1:48:ee: 08:9f:b5:5a -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE1DjUX0xwaBXWkx3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyMzEyNDUyMloXDTI4MDYyNTEyNDUyMlowLzEtMCsGA1UEAxMk NzhhMmY5YTYtMjhhNy00ZmI1LWJhMzItNmY0YWYwN2MwMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KQ66D/devnq4y8xXQKsm2A+OCWZ1aa29brN kFsUOWKS4O1f55fbTg4XQggyt8FaLOPF7oyIXPxB6ZYj7F0rYzM2VxPVOLHskrVe Pb28+pcLDRekyIDrYAMdvaHxrrFMip1Y2rvIMlsWVQQO74TfPLMlytY+qPO9oSsW 0b5VONosyPK9pgZaHZ2L0Qy5AHZMGWXNGXFl5AJx+x+Yb10G8Nrv0CKAhoYV4Mnd 1S2j0pWcu/izhn/FzX2x4XRSVHRuo1FzF86ul7mwbayoxcotCDtq622+K8TE1R+p sq6qmxBRDJ3t9FxV8uw0KTmRpulsdCT73xeims+E2LJEuL+1AQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFDeoBA6f0jdyAJRuYEeZHJZAzEmfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 OGEyZjlhNi0yOGE3LTRmYjUtYmEzMi02ZjRhZjA3YzAwMjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzc4YTJmOWE2LTI4YTctNGZiNS1i YTMyLTZmNGFmMDdjMDAyNi83OGEyZjlhNi0yOGE3LTRmYjUtYmEzMi02ZjRhZjA3 YzAwMjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADRjnMwDwQCAAIwCQMHACYgAJggADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGFi4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAagI96Ow6ZqrM2M9dV4H36LEr D9enEQvzMuKttrWbEx32BoByKbicMPUG7bdapBvuZdvFCQS47KDzpGPH9eRHAohA IdBZGTMA/4UjYmr541IeC3kTPz4IeXz8dO+py/bQhhOgFj1kdKRqf/RGOxAES5Hj vhOmKw9IwJRsg0IkPsLSTaN3nIdL0pBbRDUC3n40t/l36QLofnM4J2nEE8bNa6A7 nlnPUO/8vRA6LRZl9DaZj5ghbuZXNqn9EVI/h6+RVX4HfLK1xlOaCQ7rfuKLkSmy ACwy4IcYN+RISsP2ozT17+3dxlgSQ8xbqgbKrP8EAOc3HWdIElWHwUjuCJ+1Wg== -----END CERTIFICATE-----Generated at Thu Mar 26 06:45:15 2026 by rpki-client