$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec0e9a2c-cdd7-43f8-a7d1-c700255116b6.cer File: ec0e9a2c-cdd7-43f8-a7d1-c700255116b6.cer (raw, json) Hash identifier: Roz16nmKSBmngzQ9EThZz83OIJlv2SoOuG5sPYSO8TE= Subject key identifier: F4:D5:9D:5B:B3:EC:18:73:50:A7:B3:4A:01:0B:01:76:6B:B4:14:52 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584DBCFDFD4B4ED87C12DE1A4D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec0e9a2c-cdd7-43f8-a7d1-c700255116b6/ec0e9a2c-cdd7-43f8-a7d1-c700255116b6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec0e9a2c-cdd7-43f8-a7d1-c700255116b6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 06 May 2026 00:45:18 +0000 Certificate not after: Tue 08 Aug 2028 00:45:18 +0000 Subordinate resources: IP: 192.139.11.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bc:fd:fd:4b:4e:d8:7c:12:de:1a:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: May 6 00:45:18 2026 GMT Not After : Aug 8 00:45:18 2028 GMT Subject: CN=ec0e9a2c-cdd7-43f8-a7d1-c700255116b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e4:cc:71:28:bd:94:e2:ea:89:38:57:b3:de: 09:07:ae:fc:db:68:f8:22:34:d1:9d:f1:df:c8:10: 57:8b:50:48:ad:9d:73:f0:39:6d:df:77:2b:dd:2e: 4e:0d:f2:d0:49:b4:22:4e:f7:67:3d:cf:12:77:83: 4a:35:23:9a:50:92:3e:48:5a:f8:ae:cb:39:45:77: d5:06:3f:ec:fe:f2:b9:45:4d:4d:23:f0:b4:eb:cd: e9:30:6f:79:dd:3c:d3:17:0e:d4:4e:56:f1:61:a9: 59:bb:33:78:aa:20:6a:84:a5:c2:70:c6:18:f9:c3: 6e:b1:97:1f:f9:e5:ca:af:af:54:92:e0:c6:dc:35: 0f:36:ae:d0:a6:92:5c:e6:80:42:a5:2b:46:ca:c8: bd:b9:fc:ec:47:b1:4d:9c:66:ce:46:ec:41:45:19: 6c:4b:dd:26:78:79:78:01:53:7c:27:df:05:be:8b: 03:2c:7e:80:d8:43:a8:a4:e6:c4:ef:27:fd:c7:b5: db:0c:b4:b6:34:2a:51:c1:7b:91:be:50:01:ef:5a: 6a:65:b0:93:45:62:e7:9c:58:fc:24:d9:22:15:c9: c1:01:ec:e2:e2:21:de:c5:29:e2:4c:da:c6:bc:ca: 25:9b:41:71:57:f9:1e:e0:ff:00:a5:54:31:e1:ad: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D5:9D:5B:B3:EC:18:73:50:A7:B3:4A:01:0B:01:76:6B:B4:14:52 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec0e9a2c-cdd7-43f8-a7d1-c700255116b6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec0e9a2c-cdd7-43f8-a7d1-c700255116b6/ec0e9a2c-cdd7-43f8-a7d1-c700255116b6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 192.139.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:57:53:49:de:db:ea:02:4a:2b:25:ee:27:3d:da:2f:f2:ae: 4f:8f:d6:32:ea:63:59:45:ad:03:a4:4a:f5:32:63:66:df:df: bc:57:53:f5:6a:7c:58:96:34:ba:4b:48:8b:86:24:5a:24:45: d1:cf:8d:cd:e6:df:8f:1a:b6:f6:30:14:78:17:89:bd:c9:1d: c5:02:e1:aa:04:87:42:7d:42:bc:30:cb:ac:5e:41:4b:7e:3b: 1c:0d:fe:95:b8:33:4f:79:de:9e:71:17:20:59:87:d3:8b:71: 37:8b:c0:23:5d:15:cf:79:0b:a6:c0:b9:4d:7a:94:d0:19:95: de:f1:e2:8b:e0:5d:95:be:fc:f9:05:89:18:c9:b3:68:8e:18: 29:74:ea:cd:68:ae:e7:74:cd:47:57:5d:1d:74:68:a2:5d:58: 65:49:b8:c5:3f:0f:9c:cb:ff:c8:09:ef:ef:b3:6b:c4:18:8b: e1:08:27:b1:9f:8c:c2:48:61:c0:32:28:7a:bd:d0:64:bf:ea: 19:50:b7:36:67:9a:55:87:a5:db:ba:23:5b:c9:28:81:0e:bf: 3f:a0:4d:02:56:89:27:c8:b8:5a:93:82:d4:3d:25:ce:df:2f: d3:9e:bc:40:64:5f:b9:d1:d8:4e:cc:0e:7d:4f:75:6a:a1:bc: ff:72:53:19 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE28/f1LTth8Et4aTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDUwNjAwNDUxOFoXDTI4MDgwODAwNDUxOFowLzEtMCsGA1UEAxMk ZWMwZTlhMmMtY2RkNy00M2Y4LWE3ZDEtYzcwMDI1NTExNmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieTMcSi9lOLqiThXs94JB67822j4IjTRnfHf yBBXi1BIrZ1z8Dlt33cr3S5ODfLQSbQiTvdnPc8Sd4NKNSOaUJI+SFr4rss5RXfV Bj/s/vK5RU1NI/C0683pMG953TzTFw7UTlbxYalZuzN4qiBqhKXCcMYY+cNusZcf +eXKr69UkuDG3DUPNq7QppJc5oBCpStGysi9ufzsR7FNnGbORuxBRRlsS90meHl4 AVN8J98FvosDLH6A2EOopObE7yf9x7XbDLS2NCpRwXuRvlAB71pqZbCTRWLnnFj8 JNkiFcnBAezi4iHexSniTNrGvMolm0FxV/ke4P8ApVQx4a0UtQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFPTVnVuz7BhzUKezSgELAXZrtBRSMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9l YzBlOWEyYy1jZGQ3LTQzZjgtYTdkMS1jNzAwMjU1MTE2YjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiL2VjMGU5YTJjLWNkZDctNDNmOC1h N2QxLWM3MDAyNTUxMTZiNi9lYzBlOWEyYy1jZGQ3LTQzZjgtYTdkMS1jNzAwMjU1 MTE2YjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAiwswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAgFdTSd7b6gJKKyXuJz3a L/KuT4/WMupjWUWtA6RK9TJjZt/fvFdT9Wp8WJY0uktIi4YkWiRF0c+Nzebfjxq2 9jAUeBeJvckdxQLhqgSHQn1CvDDLrF5BS347HA3+lbgzT3nennEXIFmH04txN4vA I10Vz3kLpsC5TXqU0BmV3vHii+Bdlb78+QWJGMmzaI4YKXTqzWiu53TNR1ddHXRo ol1YZUm4xT8PnMv/yAnv77NrxBiL4QgnsZ+MwkhhwDIoer3QZL/qGVC3NmeaVYel 27ojW8kogQ6/P6BNAlaJJ8i4WpOC1D0lzt8v0568QGRfudHYTswOfU91aqG8/3JT GQ== -----END CERTIFICATE-----Generated at Wed May 13 01:16:08 2026 by rpki-client