$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer File: 5e22d7ae-1224-43fb-907a-6690f7bd9a2e.cer (raw, json) Hash identifier: UwLnMy+o2xI+06Aok0GjZUtSSNl4unlgxK2rotacfCg= Subject key identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 Authority key identifier: 1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 Certificate issuer: /CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Certificate serial: 010D0C9F4328584D2E9D22797C69E93E53704C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Mar 2026 00:45:21 +0000 Certificate not after: Sun 18 Jun 2028 00:45:21 +0000 Subordinate resources: IP: 64.40.128.0/20 IP: 2607:9240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2e:9d:22:79:7c:69:e9:3e:53:70:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead073c-b9f0-4523-b39e-a3c7dab97c25 Validity Not Before: Mar 16 00:45:21 2026 GMT Not After : Jun 18 00:45:21 2028 GMT Subject: CN=5e22d7ae-1224-43fb-907a-6690f7bd9a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:85:70:56:f4:04:1e:87:88:59:27:93:a6:24: ae:ae:ef:62:a3:34:c8:3e:5e:7b:a3:22:80:29:f4: 7e:19:6d:91:9d:3b:13:56:fc:e9:5d:9d:18:30:3a: 96:b9:1f:ae:14:53:50:30:12:99:da:a6:48:68:20: f1:89:53:ec:ff:17:ab:ee:4d:90:c4:df:31:b3:27: 8d:1f:f9:58:f7:9f:df:87:f2:f4:56:e8:94:6f:ed: 10:96:b2:9d:8b:a8:3d:69:bc:fa:2b:61:e9:cb:01: ac:a1:67:26:cd:d5:3d:24:89:11:17:70:17:60:0c: f1:3e:83:b1:0a:18:57:ad:64:2f:bd:0e:2f:4d:9a: 99:d2:8d:5d:38:53:27:50:e8:43:89:77:41:06:3a: 62:59:34:53:c5:62:f2:4c:85:56:8c:66:c5:e7:a5: f6:6f:69:31:78:8d:f2:73:dd:36:83:5a:c5:91:34: f8:79:dd:93:7b:23:ca:14:f0:e7:c3:8c:b1:0d:5c: 9b:a9:0d:c1:02:2a:e0:cc:15:71:1a:0a:6c:cd:b9: 59:1e:f2:d8:c4:57:3c:de:76:78:51:18:ea:50:43: 36:d7:c2:bc:db:67:d6:81:ed:ce:8d:26:68:49:fd: c4:18:87:04:f0:8d:f3:e0:4e:97:b1:7b:e0:ff:22: 18:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B1:66:1F:22:1A:63:15:3A:73:41:10:72:AE:0E:CC:D7:BA:34:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5e22d7ae-1224-43fb-907a-6690f7bd9a2e/5e22d7ae-1224-43fb-907a-6690f7bd9a2e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl X509v3 Authority Key Identifier: keyid:1B:76:38:EB:5E:74:1A:2A:FC:64:BF:F4:80:B7:32:18:BB:8A:08:D2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer sbgp-ipAddrBlock: critical IPv4: 64.40.128.0/20 IPv6: 2607:9240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8a:83:d2:ea:d6:b2:d3:31:be:e9:a3:c0:22:2b:45:72:3e: 50:10:84:83:cc:19:a5:6d:1c:fe:5a:8b:4f:8a:e3:08:79:43: 41:6f:fd:9a:b6:27:b0:8a:ec:9b:52:ce:21:36:ab:06:b7:39: ff:72:62:46:b1:44:07:f0:6f:4f:37:6c:9d:6d:ce:7c:f9:cc: ca:4c:76:60:c3:e6:57:ce:7a:86:6b:0c:7e:e0:3f:53:af:a9: fa:04:b6:a2:b9:ac:15:57:e2:0c:aa:6f:db:1e:70:3d:e3:61: 84:89:70:44:f4:ea:b3:dc:49:f6:67:42:19:e7:e1:37:29:76: a2:8a:b1:10:8f:08:ff:2d:09:97:b5:5a:31:6e:dd:bb:85:a1: b3:4f:4f:30:98:80:54:5d:6a:30:e1:f6:94:fc:01:2b:54:ef: 0f:e7:a4:03:ae:0b:ba:b1:33:83:78:67:88:8c:19:2a:e4:53: 6c:ef:27:b6:28:64:01:ed:39:5e:0f:51:7b:ee:45:16:b6:6b: d8:65:be:07:ad:c8:52:71:44:62:c7:8c:b2:2b:b7:ad:27:68: 10:cd:9d:f3:c4:c8:03:5f:20:a5:c2:98:79:08:c3:9c:bf:5b: 4c:ed:ff:ac:86:8a:d1:b7:3f:18:c4:2b:ef:f8:ce:ce:b7:7c: 43:d2:ee:01 -----BEGIN CERTIFICATE----- MIIG/DCCBeSgAwIBAgIUAQ0Mn0MoWE0unSJ5fGnpPlNwTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3 YzI1MB4XDTI2MDMxNjAwNDUyMVoXDTI4MDYxODAwNDUyMVowLzEtMCsGA1UEAxMk NWUyMmQ3YWUtMTIyNC00M2ZiLTkwN2EtNjY5MGY3YmQ5YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIVwVvQEHoeIWSeTpiSuru9iozTIPl57oyKA KfR+GW2RnTsTVvzpXZ0YMDqWuR+uFFNQMBKZ2qZIaCDxiVPs/xer7k2QxN8xsyeN H/lY95/fh/L0VuiUb+0QlrKdi6g9abz6K2HpywGsoWcmzdU9JIkRF3AXYAzxPoOx ChhXrWQvvQ4vTZqZ0o1dOFMnUOhDiXdBBjpiWTRTxWLyTIVWjGbF56X2b2kxeI3y c902g1rFkTT4ed2TeyPKFPDnw4yxDVybqQ3BAirgzBVxGgpszblZHvLYxFc83nZ4 URjqUEM218K822fWge3OjSZoSf3EGIcE8I3z4E6XsXvg/yIYlQIDAQABo4IEDjCC BAowHQYDVR0OBBYEFGCxZh8iGmMVOnNBEHKuDszXujRoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81 ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdiZDlhMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2Mt YjlmMC00NTIzLWIzOWUtYTNjN2RhYjk3YzI1LzVlMjJkN2FlLTEyMjQtNDNmYi05 MDdhLTY2OTBmN2JkOWEyZS81ZTIyZDdhZS0xMjI0LTQzZmItOTA3YS02NjkwZjdi ZDlhMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQw NzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZWFkMDczYy1iOWYwLTQ1 MjMtYjM5ZS1hM2M3ZGFiOTdjMjUuY3JsMB8GA1UdIwQYMBaAFBt2OOtedBoq/GS/ 9IC3Mhi7igjSMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZl YWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBARAKIAwDQQCAAIwBwMFACYHkkAwVAYDVR0gAQH/ BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmlu Lm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA Z4qD0urWstMxvumjwCIrRXI+UBCEg8wZpW0c/lqLT4rjCHlDQW/9mrYnsIrsm1LO ITarBrc5/3JiRrFEB/BvTzdsnW3OfPnMykx2YMPmV856hmsMfuA/U6+p+gS2orms FVfiDKpv2x5wPeNhhIlwRPTqs9xJ9mdCGefhNyl2ooqxEI8I/y0Jl7VaMW7du4Wh s09PMJiAVF1qMOH2lPwBK1TvD+ekA64LurEzg3hniIwZKuRTbO8ntihkAe05Xg9R e+5FFrZr2GW+B63IUnFEYseMsiu3rSdoEM2d88TIA18gpcKYeQjDnL9bTO3/rIaK 0bc/GMQr7/jOzrd8Q9LuAQ== -----END CERTIFICATE-----Generated at Wed Mar 25 23:14:38 2026 by rpki-client