$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc.cer File: 21790efa-5999-44a6-9c3e-1ce70307f8cc.cer (raw, json) Hash identifier: vkdGCHQmlrKm1q2coTJ8ThFzAwt7xk74PSqSR6R+ltc= Subject key identifier: 32:94:FF:27:32:41:9D:3E:BE:2A:09:34:F3:26:D1:C1:AD:C0:87:15 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CF884949578DBC36FFFE85F80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Feb 2026 15:42:14 +0000 Certificate not after: Mon 29 May 2028 14:42:14 +0000 Subordinate resources: AS: 36658 IP: 72.18.160.0/19 IP: 172.87.96.0/19 IP: 2605:7180::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:84:94:95:78:db:c3:6f:ff:e8:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 24 15:42:14 2026 GMT Not After : May 29 14:42:14 2028 GMT Subject: CN=21790efa-5999-44a6-9c3e-1ce70307f8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:4f:7d:77:ae:ed:20:56:b4:40:22:fe:22: 3b:1d:80:76:66:6c:57:ab:55:4e:94:0f:21:a2:05: 52:15:8c:94:2b:31:14:f0:e3:43:1d:1a:23:ba:4f: ae:f0:e6:d2:20:50:b4:84:66:64:3f:e8:17:df:3a: 04:ab:93:08:5f:80:9a:97:11:1e:60:01:22:67:7e: 7b:74:3d:b4:b8:84:94:1d:26:1d:6d:e4:e1:1d:23: 20:7d:d4:c4:be:c3:b7:65:8c:1f:36:9c:ca:41:3f: b0:23:20:16:4f:e3:6b:31:be:06:ae:2b:48:1e:1e: 86:66:f2:5b:e0:64:0c:4d:82:98:6d:f1:12:aa:c8: 9f:87:85:ba:90:38:ea:74:57:c4:65:f3:42:3e:61: cc:b8:20:b6:4d:48:5b:83:62:73:0c:e1:03:5e:07: b5:73:06:56:d9:cf:38:a6:34:bd:a3:d4:26:53:6a: 03:71:de:ff:18:f1:32:ca:6f:08:2b:bf:c1:88:b1: 4c:4b:e3:b9:c9:4c:00:39:cc:97:aa:3a:98:14:18: 6a:58:61:81:bf:f1:b7:c2:c4:7e:65:cd:bf:49:6e: 82:dc:1f:44:ee:f3:52:55:85:7d:49:64:60:d1:db: d3:87:3a:55:53:16:18:85:03:ce:94:91:9d:29:75: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:94:FF:27:32:41:9D:3E:BE:2A:09:34:F3:26:D1:C1:AD:C0:87:15 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/21790efa-5999-44a6-9c3e-1ce70307f8cc/21790efa-5999-44a6-9c3e-1ce70307f8cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 72.18.160.0/19 172.87.96.0/19 IPv6: 2605:7180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36658 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:51:3b:ee:6e:10:52:29:c8:98:13:45:58:e1:5c:59:7d:91: 7b:0a:62:2b:0a:6a:c8:28:47:42:64:d6:54:03:24:de:f3:e3: 79:c9:a6:10:6d:a2:e1:47:af:9f:7b:b7:95:87:25:0b:dd:a9: ee:a1:e3:69:1b:a9:5c:cb:da:dc:ed:ed:4f:4a:a6:09:b5:0b: 6c:e0:05:a8:ca:e5:c1:1b:a0:2c:91:a1:4b:ef:d2:22:f6:85: db:69:33:c1:fe:a6:8f:9c:81:83:d4:95:e7:db:78:33:f7:28: 37:77:af:0a:b6:31:97:0e:a5:e8:d9:eb:32:32:c5:bb:a1:04: 07:71:d2:42:7c:2f:4f:ff:0d:b2:1b:7b:f9:97:b1:2f:71:53: 54:27:99:50:e8:53:66:2d:73:4e:5c:86:7d:0a:d1:2b:7c:72: 4a:31:a2:63:a6:ea:42:17:13:61:85:9e:75:fd:e0:5c:da:87: 8d:36:90:80:09:34:ea:ca:43:b2:06:09:80:c8:d5:29:c6:e6: 39:a3:c3:5b:e4:0a:b7:77:27:6d:13:82:a7:5d:eb:db:51:78: ac:c0:1c:e2:d8:b9:6d:7e:42:3f:86:02:28:5f:1c:96:be:94: a2:96:57:c6:70:9a:49:89:d4:35:06:af:05:c0:42:4c:b8:85: 5e:3a:ad:bb -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEz4hJSVeNvDb//oX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNDE1NDIxNFoXDTI4MDUyOTE0NDIxNFowLzEtMCsGA1UEAxMk MjE3OTBlZmEtNTk5OS00NGE2LTljM2UtMWNlNzAzMDdmOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS9PfXeu7SBWtEAi/iI7HYB2ZmxXq1VOlA8h ogVSFYyUKzEU8ONDHRojuk+u8ObSIFC0hGZkP+gX3zoEq5MIX4CalxEeYAEiZ357 dD20uISUHSYdbeThHSMgfdTEvsO3ZYwfNpzKQT+wIyAWT+NrMb4GritIHh6GZvJb 4GQMTYKYbfESqsifh4W6kDjqdFfEZfNCPmHMuCC2TUhbg2JzDOEDXge1cwZW2c84 pjS9o9QmU2oDcd7/GPEyym8IK7/BiLFMS+O5yUwAOcyXqjqYFBhqWGGBv/G3wsR+ Zc2/SW6C3B9E7vNSVYV9SWRg0dvThzpVUxYYhQPOlJGdKXW2iQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFDKU/ycyQZ0+vioJNPMm0cGtwIcVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y MTc5MGVmYS01OTk5LTQ0YTYtOWMzZS0xY2U3MDMwN2Y4Y2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzIxNzkwZWZhLTU5OTktNDRhNi05 YzNlLTFjZTcwMzA3ZjhjYy8yMTc5MGVmYS01OTk5LTQ0YTYtOWMzZS0xY2U3MDMw N2Y4Y2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAVIEqADBAWsV2AwDQQCAAIwBwMFACYFcYAwGgYI KwYBBQUHAQgBAf8ECzAJoAcwBQIDAI8yMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHlRO+5uEFIpyJgTRVjh XFl9kXsKYisKasgoR0Jk1lQDJN7z43nJphBtouFHr597t5WHJQvdqe6h42kbqVzL 2tzt7U9Kpgm1C2zgBajK5cEboCyRoUvv0iL2hdtpM8H+po+cgYPUlefbeDP3KDd3 rwq2MZcOpejZ6zIyxbuhBAdx0kJ8L0//DbIbe/mXsS9xU1QnmVDoU2Ytc05chn0K 0St8ckoxomOm6kIXE2GFnnX94Fzah402kIAJNOrKQ7IGCYDI1SnG5jmjw1vkCrd3 J20Tgqdd69tReKzAHOLYuW1+Qj+GAihfHJa+lKKWV8ZwmkmJ1DUGrwXAQky4hV46 rbs= -----END CERTIFICATE-----Generated at Sun Mar 1 16:22:51 2026 by rpki-client