$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer File: 1068cac9-dc99-4d0e-acf7-ce09e28ae97d.cer (raw, json) Hash identifier: jCBO2V361MfqvkZzhIOxbnTTchFSDFO/YjMUAwYzyJw= Subject key identifier: DB:21:91:80:9A:67:B7:AD:18:FE:AC:29:68:53:B7:59:60:94:74:9A Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CFDD040F3115A668B154B3414 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Feb 2026 13:13:45 +0000 Certificate not after: Wed 31 May 2028 12:13:45 +0000 Subordinate resources: AS: 402019 IP: 23.149.52.0/24 IP: 2602:f547::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fd:d0:40:f3:11:5a:66:8b:15:4b:34:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 26 13:13:45 2026 GMT Not After : May 31 12:13:45 2028 GMT Subject: CN=1068cac9-dc99-4d0e-acf7-ce09e28ae97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0e:53:04:d2:84:9e:93:28:d5:e1:95:a3:44: 9c:2c:1a:0e:c8:cb:ce:9f:f9:55:56:20:6f:f0:9d: d9:ae:de:ee:7d:d0:a9:26:b0:31:cc:4e:2f:5a:30: 88:79:94:1b:e5:67:29:20:c6:bf:dd:9e:56:dd:6f: 2c:10:b7:98:c9:e0:cb:d7:ca:9c:eb:56:fc:47:c0: 61:08:c1:e0:4d:e7:08:97:d5:f0:dc:d2:15:eb:40: 38:d7:b1:b7:16:70:30:3b:67:41:ae:de:69:4c:62: 14:97:f7:3c:27:08:99:89:92:15:f9:40:8e:c3:99: 59:1c:d2:2b:e0:9b:9b:7f:5e:19:90:e1:66:bd:e0: d2:9f:69:37:a0:60:06:58:ba:0d:e5:da:d2:7e:a9: 08:17:95:3e:58:26:98:5d:77:71:76:af:e3:3f:be: b3:82:1a:42:5e:04:38:26:b3:a7:29:4e:06:4f:ce: 6e:7c:98:06:c4:90:df:ca:96:68:2a:24:6e:f7:86: 77:eb:56:c2:0e:64:d4:c1:48:a0:78:23:47:35:a8: 0f:85:9a:12:e0:ed:43:31:1a:38:bb:28:53:11:5f: 5b:db:c3:02:e0:2c:68:17:8a:9b:88:6f:16:ee:ef: 70:2c:41:36:09:7d:ed:7c:81:52:88:a5:36:00:d7: c9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:21:91:80:9A:67:B7:AD:18:FE:AC:29:68:53:B7:59:60:94:74:9A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1068cac9-dc99-4d0e-acf7-ce09e28ae97d/1068cac9-dc99-4d0e-acf7-ce09e28ae97d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.149.52.0/24 IPv6: 2602:f547::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402019 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4a:f6:21:75:35:e4:4c:da:8a:b5:1f:61:d8:2c:73:aa:5e: 82:13:1d:dd:dc:8d:f1:41:68:6e:f8:d2:56:32:01:5c:29:ed: ba:50:64:79:8e:22:7f:d4:56:26:9b:65:29:97:2d:83:d8:16: ad:f9:3b:f8:08:33:2b:9b:2c:ce:0f:bc:ea:4a:96:ae:2d:9d: 6e:d8:20:fe:8c:03:50:9b:0a:5d:61:ce:8a:ad:58:86:8a:8a: 03:e5:e6:bc:2c:b7:d7:91:e8:77:0e:26:9d:37:0a:09:90:8b: a2:d2:2d:72:3e:59:de:6c:f4:d8:8b:ba:73:f1:80:6a:0b:95: c3:46:cf:0b:92:e3:b6:f2:ff:99:15:d9:11:72:76:38:ec:89: 2b:9e:ad:af:95:d2:8c:03:6d:97:e1:01:0f:4b:31:61:e3:44: d6:18:ef:6d:fa:26:69:36:78:4e:7b:82:b9:c6:1f:f5:60:d7: ac:57:96:51:0c:d2:d3:f2:f3:0a:71:b7:3e:7d:e3:4e:70:66: f6:35:7e:9d:22:4c:dc:1d:36:cd:8e:20:5e:43:84:e9:4f:42: d8:e6:43:42:b4:a7:b6:35:7f:74:db:0c:c4:39:0c:34:c2:9c: f3:4c:ae:1f:65:c6:73:65:f7:e3:9a:78:2a:c6:38:22:48:45: 96:85:81:cf -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEz90EDzEVpmixVLNBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNjEzMTM0NVoXDTI4MDUzMTEyMTM0NVowLzEtMCsGA1UEAxMk MTA2OGNhYzktZGM5OS00ZDBlLWFjZjctY2UwOWUyOGFlOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw5TBNKEnpMo1eGVo0ScLBoOyMvOn/lVViBv 8J3Zrt7ufdCpJrAxzE4vWjCIeZQb5WcpIMa/3Z5W3W8sELeYyeDL18qc61b8R8Bh CMHgTecIl9Xw3NIV60A417G3FnAwO2dBrt5pTGIUl/c8JwiZiZIV+UCOw5lZHNIr 4Jubf14ZkOFmveDSn2k3oGAGWLoN5drSfqkIF5U+WCaYXXdxdq/jP76zghpCXgQ4 JrOnKU4GT85ufJgGxJDfypZoKiRu94Z361bCDmTUwUigeCNHNagPhZoS4O1DMRo4 uyhTEV9b28MC4CxoF4qbiG8W7u9wLEE2CX3tfIFSiKU2ANfJ+wIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFNshkYCaZ7etGP6sKWhTt1lglHSaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8x MDY4Y2FjOS1kYzk5LTRkMGUtYWNmNy1jZTA5ZTI4YWU5N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzEwNjhjYWM5LWRjOTktNGQwZS1h Y2Y3LWNlMDllMjhhZTk3ZC8xMDY4Y2FjOS1kYzk5LTRkMGUtYWNmNy1jZTA5ZTI4 YWU5N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlTQwDgQCAAIwCAMGBCYC9UcAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYiYzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgSvYhdTXkTNqKtR9h2Cxzql6C Ex3d3I3xQWhu+NJWMgFcKe26UGR5jiJ/1FYmm2Uply2D2Bat+Tv4CDMrmyzOD7zq SpauLZ1u2CD+jANQmwpdYc6KrViGiooD5ea8LLfXkeh3DiadNwoJkIui0i1yPlne bPTYi7pz8YBqC5XDRs8LkuO28v+ZFdkRcnY47Ikrnq2vldKMA22X4QEPSzFh40TW GO9t+iZpNnhOe4K5xh/1YNesV5ZRDNLT8vMKcbc+feNOcGb2NX6dIkzcHTbNjiBe Q4TpT0LY5kNCtKe2NX902wzEOQw0wpzzTK4fZcZzZffjmngqxjgiSEWWhYHP -----END CERTIFICATE-----Generated at Sun Mar 1 20:04:08 2026 by rpki-client