$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer File: 79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer (raw, json) Hash identifier: ShzXQadgtLECJGh0ngxRZZqeynYUdDaf5nCBlBXC/Lc= Subject key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D3DF7E594FE6212EB8A86ED80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 21 Mar 2026 12:45:22 +0000 Certificate not after: Fri 23 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 149.48.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:f7:e5:94:fe:62:12:eb:8a:86:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 21 12:45:22 2026 GMT Not After : Jun 23 12:45:22 2028 GMT Subject: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:5b:59:07:14:12:d0:85:41:bd:e9:ab:29: 29:4e:45:c1:1f:f1:e2:1a:98:e8:42:31:8f:91:43: c5:df:a6:46:db:61:30:70:12:e1:19:6f:50:42:f4: 7a:fe:bf:a7:44:13:5f:a8:be:98:7c:12:c6:68:54: c1:a5:12:71:a2:b4:20:d5:5d:66:1d:bb:10:75:2b: fc:4d:6d:4d:d3:2e:2f:e8:15:8c:88:a6:1b:75:d8: 9b:35:29:52:3d:51:57:8d:a0:24:d9:dd:a3:be:c6: b0:f8:0a:d3:5a:3f:38:2b:e4:da:93:ed:2b:c7:0b: 4a:a1:15:d5:6e:4c:81:ba:2f:6e:97:8d:7c:69:31: 62:56:ab:9b:cb:23:7a:38:78:1d:cc:05:ac:47:ba: c0:f4:b6:2b:4f:d7:dd:1f:0c:13:30:0f:7a:bf:2a: 16:ab:1a:c5:f6:71:cc:8b:02:42:f9:31:2e:12:b9: 27:1f:04:7e:6c:69:42:50:dd:8f:4c:77:92:57:25: 4e:f2:f1:a6:70:45:1d:e8:88:b4:40:2c:d7:73:e0: b5:ed:eb:55:cf:d6:ae:d1:63:d5:e9:90:60:51:e1: ce:e9:e5:2b:eb:46:c6:10:db:77:fd:88:f7:6e:63: a1:24:18:05:4d:78:12:93:ec:ef:80:87:65:c6:e6: 3d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 149.48.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0c:30:e8:53:45:73:c1:33:3f:ec:39:e3:8a:b7:56:71:e9: 3f:1a:bc:a6:c3:f9:9c:d6:78:54:08:a6:ba:d2:00:96:20:73: d4:39:ba:09:ca:aa:b7:32:26:2b:e8:fb:ea:28:a2:ad:09:ed: 22:4e:4c:b9:36:ca:65:79:71:39:db:9c:86:00:62:f7:25:ed: e4:52:e1:f3:71:db:90:31:f0:aa:f1:89:9b:8b:72:75:25:9c: a1:07:87:95:13:cd:66:fd:03:02:58:20:a4:9b:ba:e3:2b:21: e5:14:8b:d9:d2:02:56:6c:3e:59:ae:7b:3d:8a:85:b1:74:3d: 7c:d6:5d:97:dc:9b:d9:d4:cd:f6:a1:e3:21:35:fc:cb:00:61: 0a:72:f6:f0:6e:2c:f1:96:9d:62:dd:49:8e:69:be:07:80:ae: d5:8a:10:19:85:7c:43:04:30:6f:ff:b7:4d:51:25:3e:45:1f: 68:57:45:dc:18:d4:ea:10:87:86:23:a4:44:70:5f:fd:30:2b: 75:99:42:29:35:4b:15:66:e4:64:29:0e:1c:84:59:c8:dc:9a: 35:37:d5:ef:4b:ec:5f:7e:5c:e4:69:9c:88:27:90:ad:9d:02: 2b:d8:6d:dc:e0:48:cf:04:05:74:54:89:e1:ad:88:b2:b7:19: 16:41:06:18 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE099+WU/mIS64qG7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyMTEyNDUyMloXDTI4MDYyMzEyNDUyMlowLzEtMCsGA1UEAxMk NzliMWZlN2EtZWNhOS00MjJmLTkwNDMtNWE5M2NhNTE0NWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQNbWQcUEtCFQb3pqykpTkXBH/HiGpjoQjGP kUPF36ZG22EwcBLhGW9QQvR6/r+nRBNfqL6YfBLGaFTBpRJxorQg1V1mHbsQdSv8 TW1N0y4v6BWMiKYbddibNSlSPVFXjaAk2d2jvsaw+ArTWj84K+Tak+0rxwtKoRXV bkyBui9ul418aTFiVqubyyN6OHgdzAWsR7rA9LYrT9fdHwwTMA96vyoWqxrF9nHM iwJC+TEuErknHwR+bGlCUN2PTHeSVyVO8vGmcEUd6Ii0QCzXc+C17etVz9au0WPV 6ZBgUeHO6eUr60bGENt3/Yj3bmOhJBgFTXgSk+zvgIdlxuY9tQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFAxhoZNqRDziETH6QEJo96bnNIQUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1MTQ1YzgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzc5YjFmZTdhLWVjYTktNDIyZi05 MDQzLTVhOTNjYTUxNDVjOC83OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1 MTQ1YzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCVMDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsDDDoU0VzwTM/7DnjirdW cek/Grymw/mc1nhUCKa60gCWIHPUOboJyqq3MiYr6PvqKKKtCe0iTky5NspleXE5 25yGAGL3Je3kUuHzcduQMfCq8Ymbi3J1JZyhB4eVE81m/QMCWCCkm7rjKyHlFIvZ 0gJWbD5Zrns9ioWxdD181l2X3JvZ1M32oeMhNfzLAGEKcvbwbizxlp1i3UmOab4H gK7VihAZhXxDBDBv/7dNUSU+RR9oV0XcGNTqEIeGI6REcF/9MCt1mUIpNUsVZuRk KQ4chFnI3Jo1N9XvS+xfflzkaZyIJ5CtnQIr2G3c4EjPBAV0VInhrYiytxkWQQYY -----END CERTIFICATE-----Generated at Thu Mar 26 04:57:48 2026 by rpki-client