$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cea423b-b8a5-460b-be95-fbfe6d473f9e.cer File: 0cea423b-b8a5-460b-be95-fbfe6d473f9e.cer (raw, json) Hash identifier: XtBfM4fXRgZPHWyzu4HKFN8+xazVlm8QIqRSI8isJfg= Subject key identifier: 05:73:B3:EE:36:C9:71:0D:D9:CD:D0:B5:15:8D:99:63:F0:DF:52:DE Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CBE330554E2737E11E5B7E74C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cea423b-b8a5-460b-be95-fbfe6d473f9e/0cea423b-b8a5-460b-be95-fbfe6d473f9e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cea423b-b8a5-460b-be95-fbfe6d473f9e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 03 Feb 2026 18:21:01 +0000 Certificate not after: Mon 08 May 2028 17:21:01 +0000 Subordinate resources: AS: 8119 IP: 66.112.144.0/20 IP: 69.41.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:be:33:05:54:e2:73:7e:11:e5:b7:e7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 3 18:21:01 2026 GMT Not After : May 8 17:21:01 2028 GMT Subject: CN=0cea423b-b8a5-460b-be95-fbfe6d473f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:43:66:a7:31:f0:50:dd:2b:18:06:a1:3a:f1: 4a:6a:65:38:6e:91:a8:5e:77:5a:41:de:a0:44:6f: cd:53:b4:e4:ab:55:9e:07:43:e1:7f:bd:ba:29:04: d8:55:6c:0b:ca:14:68:02:0e:68:d4:54:09:8a:c1: b6:26:df:02:c5:24:7b:4a:bd:1c:85:0b:0f:7e:41: c8:38:1a:43:1a:a0:d8:8f:40:e0:c9:e1:b1:fd:e6: 50:12:39:df:06:2b:8f:80:39:ed:09:c8:bc:39:ba: f3:49:d8:d5:36:f1:a4:f9:5d:9a:99:e5:61:a8:b8: 53:2f:ba:b1:89:fd:0c:6b:a0:95:be:94:31:52:47: 76:3d:8f:2c:6b:5b:8b:97:8b:01:3a:27:3f:f8:cd: 77:d6:6f:bb:03:df:4b:52:f5:44:e1:b8:8d:dd:40: 0d:d3:6d:4a:fa:f1:ef:d0:42:f9:4e:01:9f:90:b1: cc:e1:50:bb:41:74:11:95:08:4c:39:63:ed:15:73: 54:78:e9:d8:f1:d6:42:c2:83:6f:2e:97:5c:d6:28: fe:7b:b1:75:af:b8:6f:cc:25:a1:9f:3a:00:cf:70: 13:bc:c4:c0:69:b6:86:e1:3b:7a:df:1c:4c:af:12: 76:a0:9f:45:f9:70:82:e1:4c:d6:8f:c3:10:da:cf: cb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:73:B3:EE:36:C9:71:0D:D9:CD:D0:B5:15:8D:99:63:F0:DF:52:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cea423b-b8a5-460b-be95-fbfe6d473f9e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cea423b-b8a5-460b-be95-fbfe6d473f9e/0cea423b-b8a5-460b-be95-fbfe6d473f9e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 66.112.144.0/20 69.41.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 8119 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:13:f7:a2:7a:5d:d8:dc:c3:6b:4b:b6:54:75:51:fb:5c:8b: d9:fe:55:d7:51:d9:fe:b8:5a:ed:d1:a7:f9:21:6b:3e:43:aa: 49:3e:b5:6a:2c:ca:07:54:a3:3b:e2:1d:83:fc:fb:60:49:cf: 51:17:94:07:da:f4:70:34:7e:9d:33:c6:66:0e:94:9e:51:81: b3:55:e5:e8:bc:18:9e:3e:61:58:c3:53:d7:27:d9:2a:d6:0d: 56:d8:96:a9:81:1d:bb:e7:1c:04:0e:a2:91:5e:92:de:81:1b: 9c:27:cd:fa:85:e6:63:41:b5:7a:cb:47:5a:6e:40:d9:82:69: 2c:23:e4:75:f7:5c:b4:95:ff:75:f8:cd:00:43:55:8f:66:fe: 19:8a:cf:e5:20:c1:45:6d:75:5c:ac:2a:27:a6:e1:90:9f:95: b5:b7:39:c5:79:12:dd:ee:32:eb:73:9c:b2:7d:94:a8:ab:13: 66:3e:d9:e6:79:20:45:72:de:5f:4a:60:a4:4f:37:b1:8c:ff: 24:be:aa:c7:1c:53:d5:51:80:b9:aa:bf:69:3e:07:b5:d1:98: 35:ea:d0:1d:9e:7a:62:73:b4:87:e8:86:bb:4f:9a:3a:82:8d: 22:9c:5d:08:3c:31:80:73:6f:3b:f7:ce:0c:fe:a6:12:89:77: bf:30:ed:51 -----BEGIN CERTIFICATE----- MIIHDjCCBfagAwIBAgIUAQ0Mn0MoWEy+MwVU4nN+EeW350wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwMzE4MjEwMVoXDTI4MDUwODE3MjEwMVowLzEtMCsGA1UEAxMk MGNlYTQyM2ItYjhhNS00NjBiLWJlOTUtZmJmZTZkNDczZjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0NmpzHwUN0rGAahOvFKamU4bpGoXndaQd6g RG/NU7Tkq1WeB0Phf726KQTYVWwLyhRoAg5o1FQJisG2Jt8CxSR7Sr0chQsPfkHI OBpDGqDYj0DgyeGx/eZQEjnfBiuPgDntCci8ObrzSdjVNvGk+V2ameVhqLhTL7qx if0Ma6CVvpQxUkd2PY8sa1uLl4sBOic/+M131m+7A99LUvVE4biN3UAN021K+vHv 0EL5TgGfkLHM4VC7QXQRlQhMOWPtFXNUeOnY8dZCwoNvLpdc1ij+e7F1r7hvzCWh nzoAz3ATvMTAabaG4Tt63xxMrxJ2oJ9F+XCC4UzWj8MQ2s/LVQIDAQABo4IEIDCC BBwwHQYDVR0OBBYEFAVzs+42yXEN2c3QtRWNmWPw31LeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w Y2VhNDIzYi1iOGE1LTQ2MGItYmU5NS1mYmZlNmQ0NzNmOWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzBjZWE0MjNiLWI4YTUtNDYwYi1i ZTk1LWZiZmU2ZDQ3M2Y5ZS8wY2VhNDIzYi1iOGE1LTQ2MGItYmU5NS1mYmZlNmQ0 NzNmOWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBARCcJADBARFKdAwGQYIKwYBBQUHAQgBAf8ECjAI oAYwBAICH7cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAExP3onpd2NzDa0u2VHVR+1yL2f5V11HZ/rha7dGn +SFrPkOqST61aizKB1SjO+Idg/z7YEnPUReUB9r0cDR+nTPGZg6UnlGBs1Xl6LwY nj5hWMNT1yfZKtYNVtiWqYEdu+ccBA6ikV6S3oEbnCfN+oXmY0G1estHWm5A2YJp LCPkdfdctJX/dfjNAENVj2b+GYrP5SDBRW11XKwqJ6bhkJ+Vtbc5xXkS3e4y63Oc sn2UqKsTZj7Z5nkgRXLeX0pgpE83sYz/JL6qxxxT1VGAuaq/aT4HtdGYNerQHZ56 YnO0h+iGu0+aOoKNIpxdCDwxgHNvO/fODP6mEol3vzDtUQ== -----END CERTIFICATE-----Generated at Sun Mar 1 14:40:28 2026 by rpki-client