$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.cer File: 0a1ff3e6-c9a5-4864-9107-b8da19c23c53.cer (raw, json) Hash identifier: KRXaRw0TzNAmlEp+bUOnRtstncExBVJVWXp9gPva+EM= Subject key identifier: 64:41:3C:3D:D9:54:12:74:22:99:05:26:52:06:96:5D:42:58:7F:DF Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC11909E0EA9D25E0C76A1700 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Feb 2026 19:16:06 +0000 Certificate not after: Tue 09 May 2028 18:16:06 +0000 Subordinate resources: AS: 32560 IP: 74.119.228.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c1:19:09:e0:ea:9d:25:e0:c7:6a:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 4 19:16:06 2026 GMT Not After : May 9 18:16:06 2028 GMT Subject: CN=0a1ff3e6-c9a5-4864-9107-b8da19c23c53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:34:fb:5d:bb:5f:e2:25:e2:6b:b4:60:8a:8d: 9f:e1:61:19:6e:14:3d:1d:15:6c:81:3c:29:72:0a: ec:ff:02:32:73:95:ee:42:d0:a2:6c:15:63:15:a7: ec:13:d5:ee:bd:24:6e:f4:40:3a:62:59:77:d5:09: 6c:0e:de:d0:65:fe:6f:26:16:35:06:47:73:7d:fd: f6:2d:c6:cf:c0:f4:0c:03:40:b0:47:4d:ca:21:a9: 18:4f:85:08:4b:88:64:15:6e:6f:07:26:2f:0d:68: 30:39:1b:f0:17:95:b4:e7:cd:69:c0:9b:5c:d9:76: c6:8d:03:72:5b:34:79:62:e7:07:4a:60:3d:e4:a4: 84:28:82:ad:e1:bb:93:78:35:6a:c9:9f:27:6b:29: ba:16:c2:32:97:d7:9b:fd:82:45:03:75:dd:7b:62: b7:62:90:37:a8:f7:83:28:04:4c:3b:dd:a4:b3:9e: 9c:1c:d6:5f:2e:d6:73:d1:6d:05:d8:ea:45:0b:3a: 10:28:15:bf:da:d9:f2:15:0a:68:4a:20:38:83:4c: 36:45:9e:59:83:04:4c:46:e5:d0:89:ca:63:18:39: b0:53:59:6a:16:4f:31:fa:ba:ae:f8:ac:87:27:9d: 8b:a2:7e:16:e9:0b:b5:01:d0:7a:b1:7f:1a:e5:5a: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:41:3C:3D:D9:54:12:74:22:99:05:26:52:06:96:5D:42:58:7F:DF Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0a1ff3e6-c9a5-4864-9107-b8da19c23c53/0a1ff3e6-c9a5-4864-9107-b8da19c23c53.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 74.119.228.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 32560 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f7:5e:20:5b:46:7e:5e:97:08:2a:51:d2:ab:50:87:f5:4a: d3:a7:e6:75:5a:c1:d1:76:5e:59:c5:f4:50:43:d3:59:76:74: 60:b2:15:3d:d9:99:85:2d:55:60:c2:42:92:ac:01:f0:4b:7f: 29:30:81:96:5a:63:eb:d6:0b:97:ff:99:03:01:b4:76:53:6f: 1c:d4:b9:84:51:7c:a4:84:fd:ac:32:f7:c9:4a:fb:9d:3d:45: d9:70:ce:01:67:87:fc:bb:ff:9b:ef:a1:9f:31:ba:bd:0d:d7: 12:d9:c4:5b:6e:f8:02:c4:c1:40:08:4d:c0:34:c9:9c:33:b0: d3:a2:c1:93:e1:b4:79:32:2b:f5:f9:ac:99:3a:24:c9:1c:2e: ad:90:1a:05:f6:32:bc:f4:3b:85:51:00:aa:f3:0c:db:e0:e7: cc:4a:a8:f1:d7:82:c3:14:8a:9f:ed:ab:14:21:c3:4d:0c:bd: 7d:9d:21:e9:b4:a6:8a:f5:6c:6e:b7:ef:c2:50:04:e3:08:db: 51:4a:52:23:2b:d7:6a:32:ff:76:47:dd:b0:42:b9:81:13:6c: 97:7a:aa:00:a9:82:8d:04:e7:87:9e:3b:3a:91:a4:77:f8:11: 77:43:7a:47:c6:d0:9f:2e:f2:c8:55:72:59:29:e0:4d:50:1a: df:27:b1:ba -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEzBGQng6p0l4MdqFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNDE5MTYwNloXDTI4MDUwOTE4MTYwNlowLzEtMCsGA1UEAxMk MGExZmYzZTYtYzlhNS00ODY0LTkxMDctYjhkYTE5YzIzYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjT7Xbtf4iXia7Rgio2f4WEZbhQ9HRVsgTwp cgrs/wIyc5XuQtCibBVjFafsE9XuvSRu9EA6Yll31QlsDt7QZf5vJhY1Bkdzff32 LcbPwPQMA0CwR03KIakYT4UIS4hkFW5vByYvDWgwORvwF5W0581pwJtc2XbGjQNy WzR5YucHSmA95KSEKIKt4buTeDVqyZ8naym6FsIyl9eb/YJFA3Xde2K3YpA3qPeD KARMO92ks56cHNZfLtZz0W0F2OpFCzoQKBW/2tnyFQpoSiA4g0w2RZ5ZgwRMRuXQ icpjGDmwU1lqFk8x+rqu+KyHJ52Lon4W6Qu1AdB6sX8a5Vr6KwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFGRBPD3ZVBJ0IpkFJlIGll1CWH/fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w YTFmZjNlNi1jOWE1LTQ4NjQtOTEwNy1iOGRhMTljMjNjNTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzBhMWZmM2U2LWM5YTUtNDg2NC05 MTA3LWI4ZGExOWMyM2M1My8wYTFmZjNlNi1jOWE1LTQ4NjQtOTEwNy1iOGRhMTlj MjNjNTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJKd+QwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC fzAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAJfdeIFtGfl6XCCpR0qtQh/VK06fmdVrB0XZeWcX0UEPTWXZ0 YLIVPdmZhS1VYMJCkqwB8Et/KTCBllpj69YLl/+ZAwG0dlNvHNS5hFF8pIT9rDL3 yUr7nT1F2XDOAWeH/Lv/m++hnzG6vQ3XEtnEW274AsTBQAhNwDTJnDOw06LBk+G0 eTIr9fmsmTokyRwurZAaBfYyvPQ7hVEAqvMM2+DnzEqo8deCwxSKn+2rFCHDTQy9 fZ0h6bSmivVsbrfvwlAE4wjbUUpSIyvXajL/dkfdsEK5gRNsl3qqAKmCjQTnh547 OpGkd/gRd0N6R8bQny7yyFVyWSngTVAa3yexug== -----END CERTIFICATE-----Generated at Mon Mar 2 00:03:24 2026 by rpki-client