$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.cer File: 1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.cer (raw, json) Hash identifier: xZTbEkOKgilHb+9JfZe+zgg7qXc5ldTQndvrJQfpTGg= Subject key identifier: 83:75:39:FD:A3:0B:31:DE:65:83:6B:61:DF:D8:8A:30:BC:09:65:77 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC3ACB4713B596FFDF5969580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Feb 2026 17:25:15 +0000 Certificate not after: Wed 10 May 2028 16:25:15 +0000 Subordinate resources: IP: 198.17.175.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:ac:b4:71:3b:59:6f:fd:f5:96:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 5 17:25:15 2026 GMT Not After : May 10 16:25:15 2028 GMT Subject: CN=1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:bf:f4:5c:0a:95:ea:6f:c9:63:8c:9a:47: e5:66:e3:e4:26:a8:4d:84:b4:80:70:22:37:b9:56: d7:75:13:20:1e:40:a6:ef:f9:4e:d8:21:de:be:f7: ce:66:6e:8c:a8:ab:ce:3e:cf:99:ea:19:a9:61:20: 6c:66:bd:59:df:43:77:a3:d2:0b:61:e6:46:91:f9: db:a0:e6:9a:ea:64:81:bb:fa:da:cc:9e:72:a8:74: a2:c3:70:8a:91:eb:8d:8b:9f:bd:d8:29:9a:e2:3f: 2c:2e:ab:71:fb:27:06:43:79:52:95:ad:f0:33:c0: aa:21:50:7d:38:5b:df:c5:65:cf:4d:e8:50:ae:1e: dd:e0:ff:a2:97:22:3b:33:a2:d0:4c:26:16:4d:03: 57:03:43:f4:c3:4a:07:20:6d:e7:0d:8f:e1:4a:2f: 40:ad:0d:58:90:2b:6c:73:1a:7e:ef:32:0d:92:38: 4d:9b:c4:73:b7:1e:79:c3:9c:75:2d:e3:9c:ca:51: 78:27:91:02:36:06:0c:6e:04:40:d2:05:6c:2a:98: 55:38:d9:ea:52:f2:7d:5a:65:f6:e1:62:e9:ca:17: ce:14:67:6c:8d:e4:b7:c7:1d:77:6f:ae:48:b0:28: 64:cb:95:d3:90:24:9d:b0:72:18:6b:f2:c7:8f:66: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:75:39:FD:A3:0B:31:DE:65:83:6B:61:DF:D8:8A:30:BC:09:65:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 198.17.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:af:24:97:bd:89:bb:a6:e4:02:0f:bd:58:c6:37:a1:e0:35: ef:01:ac:af:22:91:ae:85:24:c5:7d:3d:e5:58:ef:38:1d:09: 0a:40:00:3c:86:6d:03:10:79:ba:9c:1f:58:f6:93:d6:ab:50: fa:e6:d5:15:f6:ed:e5:50:bc:45:72:4f:f3:b8:50:a9:94:ee: 66:d3:e7:35:a4:33:d0:6b:6e:0d:9b:fd:eb:be:f7:df:73:cd: 44:0e:07:da:10:68:d8:b7:b4:02:20:dc:1a:d9:be:3f:99:5a: 05:e6:19:5f:23:9d:bc:fa:7c:6f:87:42:a0:9c:66:7f:97:3c: e4:e1:2f:37:07:5b:e7:4e:ca:77:6d:71:64:b9:29:eb:36:a2: 01:52:52:14:7a:53:b2:6f:57:1f:03:ae:93:7c:cc:4f:d0:8c: 6e:85:1e:bf:75:a1:ef:95:4b:53:59:ca:89:fa:17:73:d5:c6: db:43:b2:a0:a9:55:80:aa:ad:ad:31:03:3b:32:8d:d5:0f:13: 05:da:c4:42:5e:42:9c:c9:80:d5:7c:32:e6:c7:ff:62:44:0a: a3:e2:ae:6e:91:bf:f2:04:3d:0f:c3:a2:ec:69:4c:68:54:95: 0c:58:05:68:f5:11:ff:1f:b7:41:9a:0e:68:12:da:54:06:dd: bf:8f:e7:3e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzDrLRxO1lv/fWWlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNTE3MjUxNVoXDTI4MDUxMDE2MjUxNVowLzEtMCsGA1UEAxMk MWVlZWYwYzEtZmU5ZS00YTk2LWFhYmQtNWY5NWE5YjBlZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCm/9FwKlepvyWOMmkflZuPkJqhNhLSAcCI3 uVbXdRMgHkCm7/lO2CHevvfOZm6MqKvOPs+Z6hmpYSBsZr1Z30N3o9ILYeZGkfnb oOaa6mSBu/razJ5yqHSiw3CKkeuNi5+92Cma4j8sLqtx+ycGQ3lSla3wM8CqIVB9 OFvfxWXPTehQrh7d4P+ilyI7M6LQTCYWTQNXA0P0w0oHIG3nDY/hSi9ArQ1YkCts cxp+7zINkjhNm8Rztx55w5x1LeOcylF4J5ECNgYMbgRA0gVsKphVONnqUvJ9WmX2 4WLpyhfOFGdsjeS3xx13b65IsChky5XTkCSdsHIYa/LHj2YKAQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFIN1Of2jCzHeZYNrYd/YijC8CWV3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8x ZWVlZjBjMS1mZTllLTRhOTYtYWFiZC01Zjk1YTliMGVlZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzFlZWVmMGMxLWZlOWUtNGE5Ni1h YWJkLTVmOTVhOWIwZWVmMC8xZWVlZjBjMS1mZTllLTRhOTYtYWFiZC01Zjk1YTli MGVlZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGEa8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAga8kl72Ju6bkAg+9WMY3 oeA17wGsryKRroUkxX095VjvOB0JCkAAPIZtAxB5upwfWPaT1qtQ+ubVFfbt5VC8 RXJP87hQqZTuZtPnNaQz0GtuDZv9677333PNRA4H2hBo2Le0AiDcGtm+P5laBeYZ XyOdvPp8b4dCoJxmf5c85OEvNwdb507Kd21xZLkp6zaiAVJSFHpTsm9XHwOuk3zM T9CMboUev3Wh75VLU1nKifoXc9XG20OyoKlVgKqtrTEDOzKN1Q8TBdrEQl5CnMmA 1Xwy5sf/YkQKo+KubpG/8gQ9D8Oi7GlMaFSVDFgFaPUR/x+3QZoOaBLaVAbdv4/n Pg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:20:59 2026 by rpki-client