$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer File: fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.cer (raw, json) Hash identifier: EY7JQDAb8wdfwuIuUFg+NxIOmAJ9f3fjxwze8I3cAl8= Subject key identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02 Authority key identifier: 64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C Certificate issuer: /CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Certificate serial: 010D0C9F4328584D263D168FFEB55482DBCAA040 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Mar 2026 00:45:22 +0000 Certificate not after: Thu 15 Jun 2028 00:45:22 +0000 Subordinate resources: AS: 54381 IP: 66.180.72.0/21 IP: 199.122.112.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:3d:16:8f:fe:b5:54:82:db:ca:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf Validity Not Before: Mar 13 00:45:22 2026 GMT Not After : Jun 15 00:45:22 2028 GMT Subject: CN=fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:34:6e:6f:68:f7:0e:5b:0f:b3:f9:2c:20:cc: a5:42:03:a6:ae:b0:5d:d6:1b:9e:bf:30:e4:d1:1e: 0c:c9:9f:9b:c3:59:a4:ba:c6:ef:ae:a2:77:b8:0d: 27:32:c9:5e:0d:ae:03:01:95:b9:d7:c7:ef:b8:c9: 06:f6:08:64:7f:6b:84:4f:89:b5:6b:97:ca:dd:a5: f4:11:5e:46:47:4e:39:e6:76:4a:6c:bc:90:37:3a: e8:32:ff:57:c3:ed:7b:08:30:d4:70:22:bd:64:bd: 4d:28:ef:1d:39:bb:c0:c7:9c:14:82:49:f9:16:e0: fb:27:49:e8:96:5e:0e:ca:3a:4b:1b:fd:3d:0f:f9: 69:dd:28:01:f7:58:ad:9e:76:ac:f0:2f:a7:8f:23: 5a:c1:f7:50:22:a4:a7:c1:95:a9:52:3f:98:b8:00: aa:2f:d7:9d:84:31:9a:22:c5:f2:4b:78:9e:f2:44: 16:00:67:cc:47:40:c5:31:a6:9f:d0:e0:92:f3:b1: 66:1e:e1:6c:9b:43:f3:06:80:73:ab:9e:8e:8f:66: 44:45:9b:16:13:f8:a7:d7:3d:22:6e:2f:bd:6e:7b: 8b:09:7b:82:ae:84:4d:2e:50:d1:52:12:0f:25:d1: 9e:49:11:6d:51:da:eb:5f:d0:1a:22:c7:ca:d6:63: 0b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:65:B2:69:5E:FF:A6:97:15:1F:58:7B:B3:A5:0A:DE:04:BC:7F:02 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff/fe4e4a5a-c8e4-4444-983d-abfe6c5e9eff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl X509v3 Authority Key Identifier: keyid:64:4E:15:EB:1D:67:F8:F2:7D:94:08:F2:BB:3C:6D:02:4D:F5:C9:8C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer sbgp-ipAddrBlock: critical IPv4: 66.180.72.0/21 199.122.112.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54381 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c1:77:81:d3:21:9c:02:89:e9:bf:47:82:c0:78:7e:c6:94: 57:99:7b:f9:20:c0:0a:cf:8f:e4:da:23:5a:2b:89:f0:2d:2d: 5f:51:8e:be:b7:75:4f:5c:36:fb:f4:e3:6e:d8:e7:70:81:28: 91:1f:a0:42:ae:55:bc:4b:38:18:65:14:4e:73:c2:90:aa:4d: c5:ab:58:f7:11:69:a9:22:ca:2a:48:97:54:9e:7a:a4:6d:2f: d6:22:0d:3d:59:42:64:17:16:1b:fb:3c:d3:f4:b1:ed:f7:04: 2b:ac:5d:56:97:9e:9c:40:b8:a2:25:7d:f4:34:2c:90:5e:e7: e3:87:22:aa:e9:08:1a:fb:6d:2b:48:11:a2:9b:42:c3:7d:c9: 68:70:7e:fa:95:ad:ea:b8:06:a5:4e:24:ec:5f:46:6d:28:17: 1b:4c:d3:6d:99:b2:47:f2:ec:61:25:6e:66:d8:30:fc:8a:87: 9d:87:85:b7:43:4b:4a:ce:8e:0c:f7:b8:91:16:5f:a6:da:38: 2e:55:3c:57:f8:34:41:52:40:13:9b:ea:db:d2:57:f7:a7:3b: f2:04:6f:98:e0:19:bc:23:a2:58:fe:54:97:ee:f3:c7:74:85: 23:80:00:7c:e1:73:71:9f:2a:03:e7:fd:07:60:41:84:40:42: 21:7d:d6:8e -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE0mPRaP/rVUgtvKoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFk OWJmMB4XDTI2MDMxMzAwNDUyMloXDTI4MDYxNTAwNDUyMlowLzEtMCsGA1UEAxMk ZmU0ZTRhNWEtYzhlNC00NDQ0LTk4M2QtYWJmZTZjNWU5ZWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTRub2j3DlsPs/ksIMylQgOmrrBd1huevzDk 0R4MyZ+bw1mkusbvrqJ3uA0nMsleDa4DAZW518fvuMkG9ghkf2uET4m1a5fK3aX0 EV5GR0455nZKbLyQNzroMv9Xw+17CDDUcCK9ZL1NKO8dObvAx5wUgkn5FuD7J0no ll4OyjpLG/09D/lp3SgB91itnnas8C+njyNawfdQIqSnwZWpUj+YuACqL9edhDGa IsXyS3ie8kQWAGfMR0DFMaaf0OCS87FmHuFsm0PzBoBzq56Oj2ZERZsWE/in1z0i bi+9bnuLCXuCroRNLlDRUhIPJdGeSRFtUdrrX9AaIsfK1mML3wIDAQABo4IEITCC BB0wHQYDVR0OBBYEFDVlsmle/6aXFR9Ye7OlCt4EvH8CMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9m ZTRlNGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZlNmM1ZTllZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYt NmNiYi00Y2Y3LWI1OTktZTlkMGU5ODFkOWJmL2ZlNGU0YTVhLWM4ZTQtNDQ0NC05 ODNkLWFiZmU2YzVlOWVmZi9mZTRlNGE1YS1jOGU0LTQ0NDQtOTgzZC1hYmZlNmM1 ZTllZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1 NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kOWQxNTcyZi02Y2JiLTRj ZjctYjU5OS1lOWQwZTk4MWQ5YmYuY3JsMB8GA1UdIwQYMBaAFGROFesdZ/jyfZQI 8rs8bQJN9cmMMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5 ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBANCtEgDBALHenAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDANRtMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAKXBd4HTIZwCiem/R4LAeH7GlFeZe/kgwArPj+Ta I1orifAtLV9Rjr63dU9cNvv0427Y53CBKJEfoEKuVbxLOBhlFE5zwpCqTcWrWPcR aakiyipIl1SeeqRtL9YiDT1ZQmQXFhv7PNP0se33BCusXVaXnpxAuKIlffQ0LJBe 5+OHIqrpCBr7bStIEaKbQsN9yWhwfvqVreq4BqVOJOxfRm0oFxtM022Zskfy7GEl bmbYMPyKh52HhbdDS0rOjgz3uJEWX6baOC5VPFf4NEFSQBOb6tvSV/enO/IEb5jg Gbwjolj+VJfu88d0hSOAAHzhc3GfKgPn/QdgQYRAQiF91o4= -----END CERTIFICATE-----Generated at Thu Mar 26 05:32:44 2026 by rpki-client