$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer File: a91f81ff-5317-40f4-a544-5df2e3358a57.cer (raw, json) Hash identifier: PcZjKT8hvaULA4oxgDOcBvThI9VwlcpOaWuInboOAoU= Subject key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D4657F2DE4AC002902C7DDC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Mar 2026 12:45:22 +0000 Certificate not after: Mon 26 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 199.190.128.0/23 IP: 204.62.16.0 -- 204.62.27.255 IP: 204.87.64.0/18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:46:57:f2:de:4a:c0:02:90:2c:7d:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 24 12:45:22 2026 GMT Not After : Jun 26 12:45:22 2028 GMT Subject: CN=a91f81ff-5317-40f4-a544-5df2e3358a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:14:ca:dd:52:d4:f5:eb:c6:25:c7:93:11:91: b1:da:73:3d:98:66:d4:96:9d:b2:04:d8:ed:5b:e6: 36:f6:38:06:76:fa:cf:b7:ae:0c:14:af:f6:1f:af: 60:19:5a:d2:5b:c2:b8:45:58:8f:22:07:7f:94:f6: c2:a5:6e:50:8c:c6:ce:04:3a:6c:1b:ca:5b:90:19: ad:7d:5c:1b:17:14:03:1e:29:fd:cc:59:a8:13:20: 1f:81:3e:49:a3:15:ce:ec:6b:79:63:91:f0:12:e8: 56:2b:44:ac:12:75:55:b4:02:b8:87:97:60:b0:db: ab:6e:ff:bc:84:c8:c3:1a:51:d5:f9:f9:2a:73:61: e6:60:24:aa:2f:be:0b:0d:fd:75:5e:35:96:54:2e: c8:c8:59:1f:2a:be:5f:02:36:8e:90:cc:9d:a5:73: 37:2f:45:81:52:d3:5a:87:5f:03:da:1a:09:00:47: 70:17:58:c9:3f:84:24:56:1f:9b:56:7d:48:ed:80: 5f:19:ab:08:18:72:b3:ae:21:1c:e0:0d:93:ab:9e: 5b:c6:ee:9d:29:11:04:d7:97:9d:49:4a:b4:e5:f7: 06:86:8b:02:3b:66:7e:63:0a:46:3f:39:75:29:33: de:90:b7:d8:31:96:da:de:2e:a9:81:84:96:78:bf: 82:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 199.190.128.0/23 204.62.16.0-204.62.27.255 204.87.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e0:de:56:8f:c0:91:01:ae:12:ab:33:a2:5a:ed:8d:92:7e: f1:1a:36:31:15:52:d9:29:92:2e:59:29:f0:d9:8d:43:53:e2: af:53:4e:a7:2f:9f:ea:ee:92:96:4e:51:00:f2:c2:f4:92:36: b3:2f:34:95:0d:b7:76:97:a8:8e:84:c7:4c:54:7a:75:d2:8f: 55:7b:41:a4:9a:83:ad:a3:bf:06:54:fa:38:55:13:4a:88:e4: 5f:c1:1a:43:f0:e5:5a:7b:c1:60:57:87:02:dc:e5:e3:16:cf: 99:4e:56:4d:4e:51:f0:5e:c9:f1:bd:05:97:04:78:9d:c5:ed: 0f:0e:65:73:67:38:b9:37:5a:40:e1:23:ba:b9:f1:ab:19:84: 11:f9:dc:85:0f:77:12:72:59:05:dc:de:b7:cf:ca:98:2e:22: bd:a0:a9:f6:a3:29:26:ee:e5:91:21:33:52:90:b1:89:48:a0: 5e:32:6c:eb:88:c2:fc:75:72:59:b5:03:80:a5:70:32:ef:e5: ea:43:6f:3b:94:bf:fe:34:e9:23:b3:fe:83:93:87:18:2a:5c: db:2e:42:eb:02:4e:c5:40:83:b5:52:53:68:6e:6c:bc:8b:b1: 18:39:fb:8e:3e:59:4c:9b:e9:9c:5f:07:be:d4:58:cd:c7:c8: 0a:10:ac:b1 -----BEGIN CERTIFICATE----- MIIHATCCBemgAwIBAgIUAQ0Mn0MoWE1GV/LeSsACkCx93IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyNDEyNDUyMloXDTI4MDYyNjEyNDUyMlowLzEtMCsGA1UEAxMk YTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBTK3VLU9evGJceTEZGx2nM9mGbUlp2yBNjt W+Y29jgGdvrPt64MFK/2H69gGVrSW8K4RViPIgd/lPbCpW5QjMbOBDpsG8pbkBmt fVwbFxQDHin9zFmoEyAfgT5JoxXO7Gt5Y5HwEuhWK0SsEnVVtAK4h5dgsNurbv+8 hMjDGlHV+fkqc2HmYCSqL74LDf11XjWWVC7IyFkfKr5fAjaOkMydpXM3L0WBUtNa h18D2hoJAEdwF1jJP4QkVh+bVn1I7YBfGasIGHKzriEc4A2Tq55bxu6dKREE15ed SUq05fcGhosCO2Z+YwpGPzl1KTPekLfYMZba3i6pgYSWeL+CrwIDAQABo4IEEzCC BA8wHQYDVR0OBBYEFDQHE2cPER2zTLIudb2wbkvUXyJeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9h OTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2E5MWY4MWZmLTUzMTctNDBmNC1h NTQ0LTVkZjJlMzM1OGE1Ny9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMz NThhNTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwMwYIKwYBBQUH AQcBAf8EJDAiMCAEAgABMBoDBAHHvoAwDAMEBMw+EAMEAsw+GAMEBsxXQDBUBgNV HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3 LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUA A4IBAQAG4N5Wj8CRAa4SqzOiWu2Nkn7xGjYxFVLZKZIuWSnw2Y1DU+KvU06nL5/q 7pKWTlEA8sL0kjazLzSVDbd2l6iOhMdMVHp10o9Ve0GkmoOto78GVPo4VRNKiORf wRpD8OVae8FgV4cC3OXjFs+ZTlZNTlHwXsnxvQWXBHidxe0PDmVzZzi5N1pA4SO6 ufGrGYQR+dyFD3cSclkF3N63z8qYLiK9oKn2oykm7uWRITNSkLGJSKBeMmzriML8 dXJZtQOApXAy7+XqQ287lL/+NOkjs/6Dk4cYKlzbLkLrAk7FQIO1UlNobmy8i7EY OfuOPllMm+mcXwe+1FjNx8gKEKyx -----END CERTIFICATE-----Generated at Thu Mar 26 06:45:09 2026 by rpki-client