$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer File: c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer (raw, json) Hash identifier: Lv88/sLFJPEisO2bbsCegqz3ADiVvtgXnr5Eh5FsDnA= Subject key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D3B2D376A8FBCDD503368AE00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Mar 2026 12:45:22 +0000 Certificate not after: Thu 22 Jun 2028 12:45:22 +0000 Subordinate resources: IP: 68.170.240.0/20 IP: 147.124.224.0/19 IP: 162.218.4.0/22 IP: 162.247.80.0/21 IP: 198.160.26.0/23 IP: 199.166.248.0/22 IP: 2605:a00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:2d:37:6a:8f:bc:dd:50:33:68:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 20 12:45:22 2026 GMT Not After : Jun 22 12:45:22 2028 GMT Subject: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ff:08:96:db:81:d8:f3:0d:59:1e:d3:f2:c2: 15:69:c4:38:e6:fc:73:3c:f0:88:e7:56:cc:02:48: 07:88:0d:ac:0b:c2:02:ff:d1:97:25:d7:1e:a1:48: 47:db:67:4f:4e:c9:cd:e3:93:f3:ae:ff:1e:9b:ad: 1c:90:7a:94:47:84:52:7a:e0:43:af:7e:b6:8b:44: 9c:75:06:ce:7a:95:18:9e:bd:0f:8c:6c:44:0c:89: dd:9f:9e:58:a1:39:1f:5a:ad:51:dd:cf:ff:50:73: 5f:17:17:67:59:6e:42:ad:17:01:12:7a:76:38:9d: ec:48:33:e7:6e:f6:e8:c1:45:be:04:37:76:ed:ec: cf:4e:e1:f2:c1:7b:db:0d:7b:31:d3:30:86:a0:df: d4:70:60:ae:18:e0:46:e7:32:86:f5:04:b6:9c:ff: 3e:b2:7f:dc:d3:01:29:be:9a:de:b1:d4:44:02:64: 14:98:f9:d1:8d:8d:65:f0:5f:23:c7:d2:9b:07:e4: b1:01:75:d9:56:5c:11:a1:b9:ce:22:85:1e:62:3d: 18:4d:56:d9:b8:14:ed:d5:12:51:29:f5:81:a9:ef: d5:7c:3e:b3:74:10:9c:5a:79:05:bd:0d:c9:43:c1: 94:3f:cb:ac:d2:e0:f1:9c:39:54:fa:13:17:ae:1d: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 68.170.240.0/20 147.124.224.0/19 162.218.4.0/22 162.247.80.0/21 198.160.26.0/23 199.166.248.0/22 IPv6: 2605:a00::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:84:8e:1e:31:05:95:35:a1:f4:db:4b:f2:1b:c8:78:c8:bf: 0d:30:c2:5f:a0:be:22:43:b8:11:42:2f:f7:90:c2:23:1e:62: a8:0c:57:b0:d8:bf:a7:fa:7c:7e:d1:e1:a2:ca:23:04:fa:57: c8:09:1c:cd:82:31:85:69:46:90:e4:9b:16:3a:95:99:1a:54: 94:5d:cc:4c:e7:5a:ef:ea:d1:9e:10:95:f3:6d:1f:f9:9e:1f: d3:f8:08:c4:a8:0a:45:82:7d:e4:f7:c0:f4:8b:06:57:c4:60: 52:d6:82:27:29:51:f9:6a:e0:44:e4:9b:75:c8:e4:c8:e1:a5: 16:93:dd:8b:45:97:e9:cb:bd:d1:73:a4:f0:d9:a5:60:7f:ee: d8:53:29:05:90:6b:b7:75:92:c1:4b:bc:35:5e:6b:e6:a2:28: 04:27:1d:60:8b:91:7d:79:7e:75:e0:5f:e4:06:0c:d4:c4:f5: da:ab:34:b5:19:65:52:cd:10:f1:a8:15:e9:58:7a:82:f1:ef: 3b:0a:69:0b:99:7d:ab:f2:2c:90:47:23:f5:3c:9f:f9:cb:fe: a6:13:3f:79:b0:a7:c5:d5:52:04:74:26:ca:5e:97:68:28:fb: a3:55:56:61:95:9e:86:1f:ee:be:ec:02:be:3f:57:1b:70:e0: 0a:9b:58:ef -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE07LTdqj7zdUDNorgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyMDEyNDUyMloXDTI4MDYyMjEyNDUyMlowLzEtMCsGA1UEAxMk YzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRjZjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/8IltuB2PMNWR7T8sIVacQ45vxzPPCI51bM AkgHiA2sC8IC/9GXJdceoUhH22dPTsnN45Pzrv8em60ckHqUR4RSeuBDr362i0Sc dQbOepUYnr0PjGxEDIndn55YoTkfWq1R3c//UHNfFxdnWW5CrRcBEnp2OJ3sSDPn bvbowUW+BDd27ezPTuHywXvbDXsx0zCGoN/UcGCuGOBG5zKG9QS2nP8+sn/c0wEp vpresdREAmQUmPnRjY1l8F8jx9KbB+SxAXXZVlwRobnOIoUeYj0YTVbZuBTt1RJR KfWBqe/VfD6zdBCcWnkFvQ3JQ8GUP8us0uDxnDlU+hMXrh3P0QIDAQABo4IELDCC BCgwHQYDVR0OBBYEFPZJFw0k+8+8Avi5F/qq/k3OVeTWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9j NmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2M2ZTg2YjUyLWRkMzYtNDZiNy1h ZmU1LTI2NjE5NWJkY2YxYS9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTVi ZGNmMWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAREqvADBAWTfOADBAKi2gQDBAOi91ADBAHGoBoD BALHpvgwDQQCAAIwBwMFACYFCgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS4SOHjEFlTWh9NtL8hvIeMi/ DTDCX6C+IkO4EUIv95DCIx5iqAxXsNi/p/p8ftHhosojBPpXyAkczYIxhWlGkOSb FjqVmRpUlF3MTOda7+rRnhCV820f+Z4f0/gIxKgKRYJ95PfA9IsGV8RgUtaCJylR +WrgROSbdcjkyOGlFpPdi0WX6cu90XOk8NmlYH/u2FMpBZBrt3WSwUu8NV5r5qIo BCcdYIuRfXl+deBf5AYM1MT12qs0tRllUs0Q8agV6Vh6gvHvOwppC5l9q/IskEcj 9Tyf+cv+phM/ebCnxdVSBHQmyl6XaCj7o1VWYZWehh/uvuwCvj9XG3DgCptY7w== -----END CERTIFICATE-----Generated at Thu Mar 26 11:11:48 2026 by rpki-client