$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.cer File: 1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.cer (raw, json) Hash identifier: w40oX9Sdx3bYyPphN9+6EGst5dDXU34vZNklECcqfrQ= Subject key identifier: 83:75:39:FD:A3:0B:31:DE:65:83:6B:61:DF:D8:8A:30:BC:09:65:77 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F93B3A7E52A58135646D59F20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 21 Oct 2026 15:21:16 +0000 Certificate not after: Wed 10 May 2028 16:25:15 +0000 Subordinate resources: AS: 403114 IP: 198.17.175.0/24 IP: 199.165.202.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:93:b3:a7:e5:2a:58:13:56:46:d5:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 21 15:21:16 2026 GMT Not After : May 10 16:25:15 2028 GMT Subject: CN=1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:bf:f4:5c:0a:95:ea:6f:c9:63:8c:9a:47: e5:66:e3:e4:26:a8:4d:84:b4:80:70:22:37:b9:56: d7:75:13:20:1e:40:a6:ef:f9:4e:d8:21:de:be:f7: ce:66:6e:8c:a8:ab:ce:3e:cf:99:ea:19:a9:61:20: 6c:66:bd:59:df:43:77:a3:d2:0b:61:e6:46:91:f9: db:a0:e6:9a:ea:64:81:bb:fa:da:cc:9e:72:a8:74: a2:c3:70:8a:91:eb:8d:8b:9f:bd:d8:29:9a:e2:3f: 2c:2e:ab:71:fb:27:06:43:79:52:95:ad:f0:33:c0: aa:21:50:7d:38:5b:df:c5:65:cf:4d:e8:50:ae:1e: dd:e0:ff:a2:97:22:3b:33:a2:d0:4c:26:16:4d:03: 57:03:43:f4:c3:4a:07:20:6d:e7:0d:8f:e1:4a:2f: 40:ad:0d:58:90:2b:6c:73:1a:7e:ef:32:0d:92:38: 4d:9b:c4:73:b7:1e:79:c3:9c:75:2d:e3:9c:ca:51: 78:27:91:02:36:06:0c:6e:04:40:d2:05:6c:2a:98: 55:38:d9:ea:52:f2:7d:5a:65:f6:e1:62:e9:ca:17: ce:14:67:6c:8d:e4:b7:c7:1d:77:6f:ae:48:b0:28: 64:cb:95:d3:90:24:9d:b0:72:18:6b:f2:c7:8f:66: 0a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:75:39:FD:A3:0B:31:DE:65:83:6B:61:DF:D8:8A:30:BC:09:65:77 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0/1eeef0c1-fe9e-4a96-aabd-5f95a9b0eef0.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 198.17.175.0/24 199.165.202.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 403114 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:68:4a:d1:e4:b4:ee:70:19:09:6e:fa:56:2b:78:c5:8a:7c: 3d:07:57:01:7f:16:da:a3:f7:36:11:2f:94:8f:21:3a:eb:4b: ca:52:53:5a:00:bc:9f:38:4d:46:ff:1b:6d:d9:e5:ab:fa:82: 10:50:86:78:74:93:b3:d6:f2:d3:2e:1f:f2:6b:e1:93:c6:cc: a6:54:26:97:8f:4e:bb:96:be:dc:a6:bc:e7:e9:0e:4b:b5:9d: 64:fc:c3:d5:30:cc:f0:bb:34:8a:0a:c5:99:2a:86:82:6e:88: 1c:c8:0e:61:a5:7c:2a:b8:fb:44:19:63:37:ce:f0:00:c2:d5: 33:90:f5:c3:e2:14:95:ae:b2:80:a2:bb:97:5e:70:63:6f:6f: c2:18:f5:0d:c4:29:78:ed:36:b8:b6:cf:08:04:67:b7:aa:09: 9a:71:9a:6f:a7:85:96:32:8f:fa:24:88:d4:de:c8:cc:89:f7: a8:64:70:fc:72:23:bb:9b:11:08:e3:a6:0d:a1:b9:14:66:7f: 61:96:49:87:82:db:52:7b:e5:8c:9d:99:23:b3:93:87:ec:53: 88:3a:79:41:dd:cb:3f:48:89:be:21:a6:90:aa:79:8e:0a:c7: 51:00:32:9f:f5:68:41:9d:e7:13:7a:61:69:fc:b2:a1:85:07: bc:38:09:c8 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE+Ts6flKlgTVkbVnyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAyMTE1MjExNloXDTI4MDUxMDE2MjUxNVowLzEtMCsGA1UEAxMk MWVlZWYwYzEtZmU5ZS00YTk2LWFhYmQtNWY5NWE5YjBlZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCm/9FwKlepvyWOMmkflZuPkJqhNhLSAcCI3 uVbXdRMgHkCm7/lO2CHevvfOZm6MqKvOPs+Z6hmpYSBsZr1Z30N3o9ILYeZGkfnb oOaa6mSBu/razJ5yqHSiw3CKkeuNi5+92Cma4j8sLqtx+ycGQ3lSla3wM8CqIVB9 OFvfxWXPTehQrh7d4P+ilyI7M6LQTCYWTQNXA0P0w0oHIG3nDY/hSi9ArQ1YkCts cxp+7zINkjhNm8Rztx55w5x1LeOcylF4J5ECNgYMbgRA0gVsKphVONnqUvJ9WmX2 4WLpyhfOFGdsjeS3xx13b65IsChky5XTkCSdsHIYa/LHj2YKAQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFIN1Of2jCzHeZYNrYd/YijC8CWV3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8x ZWVlZjBjMS1mZTllLTRhOTYtYWFiZC01Zjk1YTliMGVlZjAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzFlZWVmMGMxLWZlOWUtNGE5Ni1h YWJkLTVmOTVhOWIwZWVmMC8xZWVlZjBjMS1mZTllLTRhOTYtYWFiZC01Zjk1YTli MGVlZjAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADGEa8DBADHpcowGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiaqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAF9oStHktO5wGQlu+lYreMWKfD0HVwF/Ftqj9zYR L5SPITrrS8pSU1oAvJ84TUb/G23Z5av6ghBQhnh0k7PW8tMuH/Jr4ZPGzKZUJpeP TruWvtymvOfpDku1nWT8w9UwzPC7NIoKxZkqhoJuiBzIDmGlfCq4+0QZYzfO8ADC 1TOQ9cPiFJWusoCiu5decGNvb8IY9Q3EKXjtNri2zwgEZ7eqCZpxmm+nhZYyj/ok iNTeyMyJ96hkcPxyI7ubEQjjpg2huRRmf2GWSYeC21J75YydmSOzk4fsU4g6eUHd yz9Iib4hppCqeY4Kx1EAMp/1aEGd5xN6YWn8sqGFB7w4Ccg= -----END CERTIFICATE-----Generated at Thu Nov 5 17:26:42 2026 by rpki-client