$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer File: 7c14ef7c-1289-47ed-8144-c7b3feacf5af.cer (raw, json) Hash identifier: Xm7FO1+bFqI9+I+YzCKCGX+onXMg9zgKUKkn+O10FmM= Subject key identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D2D37CD5FEA83B0E67386D220 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 15 Mar 2026 12:45:23 +0000 Certificate not after: Sat 17 Jun 2028 12:45:23 +0000 Subordinate resources: IP: 192.54.242.0/24 IP: 192.219.236.0 -- 192.219.240.255 IP: 205.189.16.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:37:cd:5f:ea:83:b0:e6:73:86:d2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 15 12:45:23 2026 GMT Not After : Jun 17 12:45:23 2028 GMT Subject: CN=7c14ef7c-1289-47ed-8144-c7b3feacf5af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9b:96:97:f8:b1:41:a4:da:f1:77:bf:a4:ee: fb:4b:d2:e6:4c:e7:00:77:43:0d:d1:8d:55:d3:81: e1:63:42:9e:0f:95:15:c4:fc:91:e5:d0:e1:54:99: 9d:2d:a5:b9:b6:9d:82:bf:eb:89:4f:b2:36:a0:3c: e2:08:8f:05:d3:c7:09:a9:9e:48:9b:19:d7:77:08: ad:ee:64:a3:17:6d:69:f1:e6:98:fd:bf:fa:99:fa: b0:6f:eb:7a:06:f5:c1:57:05:a6:81:6d:d7:72:58: 9e:1c:d9:a3:a7:b0:26:f8:89:97:89:9a:60:c9:a4: 4d:b8:0c:9c:27:73:90:9f:33:74:bb:e6:d0:1b:e6: eb:c7:2f:59:af:96:69:7c:ab:9d:58:d6:08:15:d4: 6e:d7:75:d6:f1:09:db:9a:df:90:28:fb:76:76:37: 94:a3:57:a5:27:d0:cc:ac:28:f2:5e:bb:65:c9:24: de:5c:89:2d:f7:39:68:52:7c:46:da:d9:7b:1d:a8: 39:ec:00:e1:3b:d9:49:13:0a:17:fe:b2:6b:27:bd: 1f:7d:a8:bb:a5:74:5a:3f:66:38:e0:26:d1:02:83: 2a:bc:17:b0:0b:cd:23:ca:4e:5d:82:af:5b:5c:62: 08:c5:ea:16:17:d2:b2:b8:eb:57:eb:66:66:00:17: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:18:ED:79:09:C3:3D:8B:67:7D:45:AF:D6:81:F6:65:3C:2B:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7c14ef7c-1289-47ed-8144-c7b3feacf5af/7c14ef7c-1289-47ed-8144-c7b3feacf5af.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.54.242.0/24 192.219.236.0-192.219.240.255 205.189.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0d:bb:e9:72:4c:a9:b6:af:38:e6:01:27:44:40:0f:ec:62: 8f:a5:a9:49:be:0b:e1:02:b2:a6:2f:78:b6:11:99:d7:e1:a2: 0e:68:55:2e:33:c5:8b:cb:e3:a0:7c:49:a5:57:ad:7d:0f:e1: 64:c8:b3:f4:6a:53:f2:d3:51:02:e7:6b:70:80:91:a8:64:10: 09:78:01:bc:9b:73:46:e3:29:3c:cb:c6:2f:f5:0e:75:9b:ad: 3f:b0:a8:dc:39:36:0b:17:33:6d:7c:fe:03:25:4e:9e:05:2d: 16:31:5f:64:ed:e0:18:eb:49:e9:1a:6e:73:8f:79:e1:29:80: bf:96:15:e5:87:47:27:2d:c0:8d:1e:b9:89:e8:9c:89:ee:58: ac:8b:aa:0c:73:eb:91:03:0a:94:8f:7f:d9:de:d5:ad:ea:13: bb:fc:06:3e:7b:8d:3b:a6:de:b7:55:a6:57:9e:7d:5d:ad:35: 29:2c:da:c3:c0:cc:0d:9f:82:d0:b7:35:e3:dc:4c:a1:08:f4: 76:1b:57:a0:a3:b0:ff:eb:5d:50:73:e3:d8:ee:d1:47:d6:6a: 7a:05:54:c4:4c:5a:47:e2:d4:85:45:17:85:40:fe:96:02:a4: 1a:87:28:e5:33:8c:cb:ed:b3:73:ed:01:5d:e7:dd:83:5e:fc: 65:39:40:90 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWE0tN81f6oOw5nOG0iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMxNTEyNDUyM1oXDTI4MDYxNzEyNDUyM1owLzEtMCsGA1UEAxMk N2MxNGVmN2MtMTI4OS00N2VkLTgxNDQtYzdiM2ZlYWNmNWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JuWl/ixQaTa8Xe/pO77S9LmTOcAd0MN0Y1V 04HhY0KeD5UVxPyR5dDhVJmdLaW5tp2Cv+uJT7I2oDziCI8F08cJqZ5ImxnXdwit 7mSjF21p8eaY/b/6mfqwb+t6BvXBVwWmgW3XclieHNmjp7Am+ImXiZpgyaRNuAyc J3OQnzN0u+bQG+brxy9Zr5ZpfKudWNYIFdRu13XW8Qnbmt+QKPt2djeUo1elJ9DM rCjyXrtlySTeXIkt9zloUnxG2tl7Hag57ADhO9lJEwoX/rJrJ70ffai7pXRaP2Y4 4CbRAoMqvBewC80jyk5dgq9bXGIIxeoWF9KyuOtX62ZmABfMqQIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFLDfGO15CcM9i2d9Ra/WgfZlPCscMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83 YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVhY2Y1YWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzdjMTRlZjdjLTEyODktNDdlZC04 MTQ0LWM3YjNmZWFjZjVhZi83YzE0ZWY3Yy0xMjg5LTQ3ZWQtODE0NC1jN2IzZmVh Y2Y1YWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBADANvIwDAMEAsDb7AMEAMDb8AMEBM29EDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQA4Dbvpckyptq845gEnREAP7GKPpalJvgvhArKmL3i2EZnX4aIOaFUuM8WL y+OgfEmlV619D+FkyLP0alPy01EC52twgJGoZBAJeAG8m3NG4yk8y8Yv9Q51m60/ sKjcOTYLFzNtfP4DJU6eBS0WMV9k7eAY60npGm5zj3nhKYC/lhXlh0cnLcCNHrmJ 6JyJ7lisi6oMc+uRAwqUj3/Z3tWt6hO7/AY+e407pt63VaZXnn1drTUpLNrDwMwN n4LQtzXj3EyhCPR2G1ego7D/611Qc+PY7tFH1mp6BVTETFpH4tSFRReFQP6WAqQa hyjlM4zL7bNz7QFd592DXvxlOUCQ -----END CERTIFICATE-----Generated at Thu Mar 26 12:38:24 2026 by rpki-client