$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a.cer File: 09ba236f-45b4-4929-abea-f48ac8e4703a.cer (raw, json) Hash identifier: FwbupubGvxHDUuDuviCGBGAgo/vh4ot9jBsaO14KO2E= Subject key identifier: 16:E1:69:30:3F:82:29:6B:53:4C:31:63:EC:C9:A5:FD:26:5B:5A:B6 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CA790F63FFDCD1600905228E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/09ba236f-45b4-4929-abea-f48ac8e4703a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 15:46:43 +0000 Certificate not after: Sun 30 Apr 2028 14:46:43 +0000 Subordinate resources: AS: 25871 IP: 208.73.152.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:90:f6:3f:fd:cd:16:00:90:52:28:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 26 15:46:43 2026 GMT Not After : Apr 30 14:46:43 2028 GMT Subject: CN=09ba236f-45b4-4929-abea-f48ac8e4703a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cf:57:3b:61:19:23:39:2e:15:01:f9:49:ea: e8:78:0e:e1:ec:c0:30:d3:a3:e7:63:7b:c3:f9:e8: d8:a1:19:3b:c3:7a:54:e4:8e:11:98:33:87:20:ce: df:f4:04:cb:dd:42:45:cd:52:d9:56:20:bf:4c:ec: e2:ef:f4:62:c9:fb:8d:43:09:0b:9d:87:d5:56:bc: 02:7e:45:9a:6e:5b:22:99:a4:47:cf:50:8f:2d:91: 3c:98:19:cc:33:50:4b:f2:c4:d1:2a:4b:8b:80:f3: 82:13:ec:ad:b5:b6:fd:da:a7:92:fa:ec:a0:2f:ab: 21:0a:0e:30:ae:45:70:03:da:45:2e:4b:2e:16:17: 66:83:89:90:89:07:16:06:e8:74:3e:97:dd:87:29: 64:53:16:12:9c:6e:59:37:8f:1a:1b:bd:b3:23:47: 32:7a:ef:28:68:27:79:a6:51:e2:68:db:cf:e9:30: 73:52:28:b3:7a:c2:6f:a5:3d:34:87:62:2c:dc:e9: 0e:72:e5:78:50:c3:5f:d2:18:dd:d8:4e:80:f3:b0: 8a:34:82:55:e0:f1:9f:76:7f:5b:d8:9b:66:3a:76: 28:27:f7:dd:0e:e8:e9:a4:90:e2:f6:39:8b:7d:3b: 17:6f:dc:8a:29:d8:42:47:7a:03:b7:e2:4c:50:c2: 40:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E1:69:30:3F:82:29:6B:53:4C:31:63:EC:C9:A5:FD:26:5B:5A:B6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/09ba236f-45b4-4929-abea-f48ac8e4703a/09ba236f-45b4-4929-abea-f48ac8e4703a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 208.73.152.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 25871 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a5:35:cd:31:e0:eb:70:c3:a4:6a:8f:27:79:66:49:4d:04: eb:03:74:05:02:df:55:d5:1e:1f:fa:a2:7c:ec:8a:ab:9e:42: 69:3b:43:f9:2b:74:77:7d:5d:ab:81:af:a5:79:38:8c:0a:33: 40:7c:41:29:ae:15:bd:b2:37:d5:cc:a0:c1:17:70:28:23:20: b6:77:8b:35:30:98:31:17:9e:d8:65:a9:b4:25:4a:30:15:7a: 4f:bb:e2:76:e7:e8:dd:b1:ea:3f:ad:11:24:67:cb:a7:84:d4: c6:39:7b:4d:2e:bd:46:87:f7:73:0c:bb:0e:8a:00:0e:69:48: 16:d0:b8:b3:b7:1a:71:4e:fd:61:26:c0:db:0a:79:d5:f1:b6: b2:52:18:ac:3d:42:00:81:5a:d6:1e:6b:a6:bc:ba:98:f9:80: 4b:f5:2c:77:b6:49:e8:89:65:26:46:dd:ac:b4:6b:d4:eb:69: b1:10:70:70:c6:3b:ef:88:2f:62:31:f7:f3:a2:2e:d7:4d:f8: 9e:34:85:96:4b:0e:2e:0e:9a:66:18:39:bf:71:86:a4:71:86: 57:62:14:39:c4:e6:69:1d:24:ed:29:3c:d3:f3:b1:69:1f:56: f8:ff:87:56:76:ae:63:19:1f:0c:ad:fb:cc:f2:12:52:9a:c2: 8e:fc:9d:17 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEynkPY//c0WAJBSKOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEyNjE1NDY0M1oXDTI4MDQzMDE0NDY0M1owLzEtMCsGA1UEAxMk MDliYTIzNmYtNDViNC00OTI5LWFiZWEtZjQ4YWM4ZTQ3MDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc9XO2EZIzkuFQH5SeroeA7h7MAw06PnY3vD +ejYoRk7w3pU5I4RmDOHIM7f9ATL3UJFzVLZViC/TOzi7/RiyfuNQwkLnYfVVrwC fkWablsimaRHz1CPLZE8mBnMM1BL8sTRKkuLgPOCE+yttbb92qeS+uygL6shCg4w rkVwA9pFLksuFhdmg4mQiQcWBuh0PpfdhylkUxYSnG5ZN48aG72zI0cyeu8oaCd5 plHiaNvP6TBzUiizesJvpT00h2Is3OkOcuV4UMNf0hjd2E6A87CKNIJV4PGfdn9b 2JtmOnYoJ/fdDujppJDi9jmLfTsXb9yKKdhCR3oDt+JMUMJAfQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFBbhaTA/gilrU0wxY+zJpf0mW1q2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w OWJhMjM2Zi00NWI0LTQ5MjktYWJlYS1mNDhhYzhlNDcwM2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzA5YmEyMzZmLTQ1YjQtNDkyOS1h YmVhLWY0OGFjOGU0NzAzYS8wOWJhMjM2Zi00NWI0LTQ5MjktYWJlYS1mNDhhYzhl NDcwM2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALQSZgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC ZQ8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJqU1zTHg63DDpGqPJ3lmSU0E6wN0BQLfVdUeH/qifOyKq55C aTtD+St0d31dq4GvpXk4jAozQHxBKa4VvbI31cygwRdwKCMgtneLNTCYMRee2GWp tCVKMBV6T7vidufo3bHqP60RJGfLp4TUxjl7TS69Rof3cwy7DooADmlIFtC4s7ca cU79YSbA2wp51fG2slIYrD1CAIFa1h5rpry6mPmAS/Usd7ZJ6IllJkbdrLRr1Otp sRBwcMY774gvYjH386Iu1034njSFlksOLg6aZhg5v3GGpHGGV2IUOcTmaR0k7Sk8 0/OxaR9W+P+HVnauYxkfDK37zPISUprCjvydFw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:23:51 2026 by rpki-client