$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/04de5cf1-02f2-49e3-8a4d-4b03e7800bfb.cer File: 04de5cf1-02f2-49e3-8a4d-4b03e7800bfb.cer (raw, json) Hash identifier: 9Qc27Uv2ZW0eFhJA6J8AdrIlv9fc1uRazSvudeSTCq0= Subject key identifier: A0:E6:A7:32:71:75:89:99:A5:8C:03:B3:A2:D5:74:DA:EF:E0:2F:82 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CF65E9962F4C651EBFC8F9E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/04de5cf1-02f2-49e3-8a4d-4b03e7800bfb/04de5cf1-02f2-49e3-8a4d-4b03e7800bfb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/04de5cf1-02f2-49e3-8a4d-4b03e7800bfb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Feb 2026 21:14:06 +0000 Certificate not after: Sun 28 May 2028 20:14:06 +0000 Subordinate resources: AS: 19987 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:5e:99:62:f4:c6:51:eb:fc:8f:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 23 21:14:06 2026 GMT Not After : May 28 20:14:06 2028 GMT Subject: CN=04de5cf1-02f2-49e3-8a4d-4b03e7800bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:54:08:12:9e:f2:89:fa:92:8e:f1:5c:d4:56: 34:11:9d:f8:fa:2b:b2:d4:c9:80:15:2c:f4:75:c5: 41:bd:ec:a2:f6:51:fa:dc:9e:c9:b9:80:92:ce:94: 44:26:16:41:84:d4:e9:91:11:a6:81:78:eb:1f:e6: e2:2c:37:5a:9b:6f:51:09:e4:82:f2:9c:2e:a9:07: cf:82:d0:6e:6d:fe:a3:7f:85:66:15:85:c3:31:9a: bb:42:f2:4c:66:0b:0b:65:e4:df:07:62:ca:58:52: 47:1a:1e:e2:0f:5e:df:fa:c6:9e:0b:86:b9:41:55: 05:ea:f6:b5:3b:80:d0:b3:71:ef:a2:99:47:b8:a4: ef:6a:0c:e0:f5:63:b2:42:12:1f:ba:7b:92:a1:b2: 58:ba:64:34:8e:55:f9:f8:38:01:d2:64:87:d8:05: 71:8d:d4:0f:0a:c6:76:ed:6d:54:fd:82:2c:38:12: c2:b9:cd:1c:b7:8b:d0:4b:6c:8b:fe:b8:48:25:e1: a4:34:41:33:a6:c0:f6:17:36:dd:af:ff:e2:2e:73: 5e:03:9d:ea:9d:93:4b:45:ea:e5:58:34:e1:87:bc: d8:5b:e5:ae:ee:68:22:53:b5:d5:db:ca:79:05:77: 04:b1:8e:79:47:17:32:c4:77:6b:57:d9:c3:be:e4: e1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E6:A7:32:71:75:89:99:A5:8C:03:B3:A2:D5:74:DA:EF:E0:2F:82 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/04de5cf1-02f2-49e3-8a4d-4b03e7800bfb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/04de5cf1-02f2-49e3-8a4d-4b03e7800bfb/04de5cf1-02f2-49e3-8a4d-4b03e7800bfb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 19987 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:90:26:a7:82:d0:41:cb:4b:24:b0:62:45:d2:ab:ba:7c:fa: b1:25:80:98:13:52:e5:4d:d7:ed:0b:32:b3:82:de:d1:76:e1: a0:8e:af:e0:eb:8c:b1:ed:45:32:a6:99:4b:e8:97:97:ab:6e: 0a:b5:71:62:71:83:28:37:9d:78:16:f4:f2:a7:aa:32:8e:16: c0:21:86:80:05:68:3b:a6:76:16:98:16:a1:50:06:13:9b:b7: 90:56:ee:0a:06:a8:24:65:9c:2e:80:1f:45:69:a0:67:15:7c: 1b:9f:61:45:8f:2a:84:3c:c4:59:2a:65:68:b4:90:98:ca:a4: d7:67:1f:25:79:ef:f5:0e:1b:1e:4c:72:3f:86:46:a9:e1:fe: 77:de:ba:21:91:0d:68:ed:5e:a1:ca:16:40:af:60:7d:02:5a: b0:c7:63:c8:b5:c8:cb:eb:ad:53:50:68:53:58:13:19:03:e5: 79:03:21:0f:ae:27:e4:f3:b1:58:0b:04:b4:9d:e8:1e:58:75: 6d:91:eb:df:45:b9:ea:7f:4a:c9:93:f5:b0:c8:1e:f7:1a:a1: 30:dc:2c:22:dd:03:09:45:76:04:46:a4:c6:48:44:40:ea:db: 09:a0:60:b1:9f:98:6f:b5:7a:5b:6f:b8:b6:16:12:e1:81:13: 02:36:6f:9a -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWEz2Xpli9MZR6/yPnkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyMzIxMTQwNloXDTI4MDUyODIwMTQwNlowLzEtMCsGA1UEAxMk MDRkZTVjZjEtMDJmMi00OWUzLThhNGQtNGIwM2U3ODAwYmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVQIEp7yifqSjvFc1FY0EZ34+iuy1MmAFSz0 dcVBveyi9lH63J7JuYCSzpREJhZBhNTpkRGmgXjrH+biLDdam29RCeSC8pwuqQfP gtBubf6jf4VmFYXDMZq7QvJMZgsLZeTfB2LKWFJHGh7iD17f+saeC4a5QVUF6va1 O4DQs3HvoplHuKTvagzg9WOyQhIfunuSobJYumQ0jlX5+DgB0mSH2AVxjdQPCsZ2 7W1U/YIsOBLCuc0ct4vQS2yL/rhIJeGkNEEzpsD2Fzbdr//iLnNeA53qnZNLRerl WDThh7zYW+Wu7mgiU7XV28p5BXcEsY55RxcyxHdrV9nDvuThBwIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFKDmpzJxdYmZpYwDs6LVdNrv4C+CMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w NGRlNWNmMS0wMmYyLTQ5ZTMtOGE0ZC00YjAzZTc4MDBiZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzA0ZGU1Y2YxLTAyZjItNDllMy04 YTRkLTRiMDNlNzgwMGJmYi8wNGRlNWNmMS0wMmYyLTQ5ZTMtOGE0ZC00YjAzZTc4 MDBiZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICThMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAn5Amp4LQQctLJLBiRdKrunz6sSWA mBNS5U3X7Qsys4Le0XbhoI6v4OuMse1FMqaZS+iXl6tuCrVxYnGDKDedeBb08qeq Mo4WwCGGgAVoO6Z2FpgWoVAGE5u3kFbuCgaoJGWcLoAfRWmgZxV8G59hRY8qhDzE WSplaLSQmMqk12cfJXnv9Q4bHkxyP4ZGqeH+d966IZENaO1eocoWQK9gfQJasMdj yLXIy+utU1BoU1gTGQPleQMhD64n5POxWAsEtJ3oHlh1bZHr30W56n9KyZP1sMge 9xqhMNwsIt0DCUV2BEakxkhEQOrbCaBgsZ+Yb7V6W2+4thYS4YETAjZvmg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:02 2026 by rpki-client