$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer File: 20044893-520c-4759-8537-c02648d4012e.cer (raw, json) Hash identifier: YVZ7T4FH92hoHB2lJ3WAJVVDUHxLx4pIK+a3X3LmbOw= Subject key identifier: 44:01:A3:4E:E8:95:A1:A5:35:F5:3B:BE:5D:9D:60:D6:59:1F:2F:76 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CE4FCCD2AD71C24A40AB7FC00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Feb 2026 15:48:18 +0000 Certificate not after: Sat 29 Apr 2028 17:14:32 +0000 Subordinate resources: AS: 394904 IP: 23.152.188.0/24 IP: 65.87.208.0/23 IP: 2602:f7a6::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e4:fc:cd:2a:d7:1c:24:a4:0a:b7:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 17 15:48:18 2026 GMT Not After : Apr 29 17:14:32 2028 GMT Subject: CN=20044893-520c-4759-8537-c02648d4012e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c9:4f:3d:57:28:15:34:76:30:b7:3a:bd:fa: a1:aa:87:2e:94:7c:ae:45:4a:6f:3e:f2:d0:2b:d9: 55:98:87:c7:b6:36:27:d1:f0:d9:e6:38:f7:29:32: 08:0d:36:0f:43:f8:f4:c1:b3:16:a4:a9:3f:52:41: ae:07:d7:a7:c0:1e:82:d2:3a:d4:07:92:73:3d:a4: 1a:5a:39:e3:13:e7:ff:bb:61:cb:e8:13:55:01:64: aa:bd:ab:c4:b7:12:d3:0b:8f:12:c3:38:5e:92:5d: e6:9b:05:87:f6:ed:83:49:07:64:a0:ca:a4:7f:43: aa:57:bc:80:bb:d2:e9:90:40:3c:91:2a:6a:aa:e5: c6:17:5a:0a:79:a4:31:08:f1:03:37:87:27:b5:5a: 4b:0b:43:ff:11:86:b9:92:57:c5:be:69:6e:c7:ce: d4:51:0b:69:21:0a:f6:ca:d0:78:80:8a:e5:b7:3b: 41:ff:b5:2d:a1:2d:0c:db:0b:f0:d6:ae:0a:12:57: 1a:06:49:c4:87:77:83:22:6c:1f:89:c4:70:1f:0d: 49:d0:53:2b:32:20:06:df:60:0d:8e:15:00:81:c1: f4:c7:0d:da:37:65:d6:a3:b7:61:9d:41:b6:3d:a6: 74:79:54:82:d4:57:da:f0:79:f3:40:21:19:46:4f: 10:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:01:A3:4E:E8:95:A1:A5:35:F5:3B:BE:5D:9D:60:D6:59:1F:2F:76 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.152.188.0/24 65.87.208.0/23 IPv6: 2602:f7a6::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 394904 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:4a:a7:5c:a5:fe:40:7a:5c:ea:58:23:90:1b:d5:4e:9c:3f: 6e:b6:2d:38:20:30:61:6d:e5:6d:f7:67:61:e6:ba:d5:9c:d0: 03:43:f8:74:39:85:d2:76:a0:00:01:35:d4:c0:9d:aa:e5:d5: 31:1e:fe:22:2a:30:79:14:71:8f:52:44:e2:d3:00:7e:03:88: 37:61:47:b6:99:02:cf:62:0f:a3:15:5b:ef:fd:d6:66:2e:6a: 96:c7:00:dc:c5:d4:2d:aa:ad:21:74:17:b9:82:21:ca:f4:95: c8:bd:a6:e0:3f:5e:7e:10:68:17:00:bf:fa:e8:61:62:e4:87: 8a:48:82:a2:6d:69:73:1e:59:42:83:53:ba:41:b6:ed:5f:90: 99:19:2b:b6:f9:d1:ef:97:9a:0d:01:b5:a4:58:2d:be:c6:e4: c5:a4:60:c4:aa:8b:ce:7c:33:92:b6:96:9c:1c:b5:8e:58:8e: 0f:55:3a:3f:33:98:e3:72:4d:37:cc:08:9d:63:6f:c8:b0:14: 39:f5:f8:70:bf:6e:f9:b4:0f:ad:dd:07:e0:82:98:c6:ec:36: c7:49:17:97:48:a6:bf:7c:c6:89:a6:3d:8c:16:73:7f:c1:7e: f0:34:f0:a2:10:1c:6b:7d:af:04:33:0d:72:ac:0a:a8:2a:7b: 35:c3:fd:5a -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEzk/M0q1xwkpAq3/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxNzE1NDgxOFoXDTI4MDQyOTE3MTQzMlowLzEtMCsGA1UEAxMk MjAwNDQ4OTMtNTIwYy00NzU5LTg1MzctYzAyNjQ4ZDQwMTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAislPPVcoFTR2MLc6vfqhqoculHyuRUpvPvLQ K9lVmIfHtjYn0fDZ5jj3KTIIDTYPQ/j0wbMWpKk/UkGuB9enwB6C0jrUB5JzPaQa WjnjE+f/u2HL6BNVAWSqvavEtxLTC48Swzhekl3mmwWH9u2DSQdkoMqkf0OqV7yA u9LpkEA8kSpqquXGF1oKeaQxCPEDN4cntVpLC0P/EYa5klfFvmlux87UUQtpIQr2 ytB4gIrltztB/7UtoS0M2wvw1q4KElcaBknEh3eDImwficRwHw1J0FMrMiAG32AN jhUAgcH0xw3aN2XWo7dhnUG2PaZ0eVSC1Ffa8HnzQCEZRk8QWQIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFEQBo07olaGlNfU7vl2dYNZZHy92MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y MDA0NDg5My01MjBjLTQ3NTktODUzNy1jMDI2NDhkNDAxMmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzIwMDQ0ODkzLTUyMGMtNDc1OS04 NTM3LWMwMjY0OGQ0MDEyZS8yMDA0NDg5My01MjBjLTQ3NTktODUzNy1jMDI2NDhk NDAxMmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXmLwDBAFBV9AwDgQCAAIwCAMGACYC96YAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYGmDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCISqdcpf5AelzqWCOQ G9VOnD9uti04IDBhbeVt92dh5rrVnNADQ/h0OYXSdqAAATXUwJ2q5dUxHv4iKjB5 FHGPUkTi0wB+A4g3YUe2mQLPYg+jFVvv/dZmLmqWxwDcxdQtqq0hdBe5giHK9JXI vabgP15+EGgXAL/66GFi5IeKSIKibWlzHllCg1O6QbbtX5CZGSu2+dHvl5oNAbWk WC2+xuTFpGDEqovOfDOStpacHLWOWI4PVTo/M5jjck03zAidY2/IsBQ59fhwv275 tA+t3QfggpjG7DbHSReXSKa/fMaJpj2MFnN/wX7wNPCiEBxrfa8EMw1yrAqoKns1 w/1a -----END CERTIFICATE-----Generated at Sun Mar 1 16:24:06 2026 by rpki-client