$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff.cer File: 2521532d-a0f2-43a5-a2a8-640c423476ff.cer (raw, json) Hash identifier: ernMfAoM1UpuPF+F6bdwTCb4HX+INnbLovwa5dOCSBc= Subject key identifier: 02:D1:ED:CA:38:4C:15:8C:31:28:4B:ED:20:C4:D6:D9:CF:6C:EB:98 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD2EB8AA8D35B79775129FEC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 04:28:59 +0000 Certificate not after: Tue 16 May 2028 03:28:59 +0000 Subordinate resources: AS: 10922 IP: 167.254.228.0/22 IP: 2604:2c20::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d2:eb:8a:a8:d3:5b:79:77:51:29:fe:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 11 04:28:59 2026 GMT Not After : May 16 03:28:59 2028 GMT Subject: CN=2521532d-a0f2-43a5-a2a8-640c423476ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ac:65:77:15:9b:ed:00:0c:88:57:9a:6a:62: c2:d0:61:70:34:e4:c8:8a:1c:c0:4d:72:96:bf:42: 75:14:52:d7:ab:e2:c2:a4:ff:cf:49:5a:b0:4b:b0: fa:e6:ca:9b:e4:08:de:20:3e:37:6b:32:51:fb:08: 8d:da:09:07:4b:73:35:1e:e7:c0:cf:67:f5:46:c9: 81:9b:62:c7:f2:af:3f:f4:ff:69:50:54:57:67:0e: 27:b6:c3:d2:7f:0e:8e:ff:cd:f2:08:ed:0e:7c:f3: bd:15:9d:c4:f1:8b:4d:a1:0f:00:86:07:dd:fe:b0: 89:ae:dc:5a:5a:38:06:64:3b:43:77:0c:7e:51:1f: a4:64:0c:f9:a2:03:17:85:72:fd:88:f8:ea:08:dd: d2:95:ad:d1:19:ff:fa:c0:1e:7d:82:21:f7:c0:f1: 9f:92:75:5f:bc:24:87:0c:41:a8:f7:c0:6c:e9:9d: bb:d9:c4:15:b0:63:74:e0:4c:d4:9f:8c:03:3e:2a: 87:69:0c:e4:ef:69:3d:5e:82:d5:57:6f:0f:aa:5f: 52:bf:67:fc:f8:f5:d1:21:f1:44:db:79:07:d1:9d: f4:c9:68:79:86:5c:9f:01:41:92:d3:c9:dc:46:cc: e4:a3:0b:e0:6a:72:b8:89:e1:fc:ea:35:82:13:43: 35:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D1:ED:CA:38:4C:15:8C:31:28:4B:ED:20:C4:D6:D9:CF:6C:EB:98 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2521532d-a0f2-43a5-a2a8-640c423476ff/2521532d-a0f2-43a5-a2a8-640c423476ff.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 167.254.228.0/22 IPv6: 2604:2c20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10922 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:65:ed:42:99:b7:3f:12:1f:bb:3f:e1:60:fd:68:48:17:d0: d5:6d:19:6a:e1:2f:db:17:87:56:71:06:d0:10:f7:60:04:ce: 6b:d7:4c:57:a5:8f:46:0c:48:b1:08:06:4d:f9:81:c7:e8:a0: c8:a6:c1:0a:57:64:c0:ab:50:4a:f3:9f:d1:73:08:bc:56:e4: d6:be:ce:fd:01:ba:5f:49:1f:c1:70:76:b5:e7:66:93:9c:6a: bc:85:2f:5b:d4:ea:20:69:d4:32:cb:2d:96:7d:81:6e:2f:b9: 88:18:c6:bf:08:7b:fc:2a:5b:9a:34:f0:76:c0:63:a0:8a:f8: 38:ad:ca:d2:b1:5c:7f:c7:f9:26:e6:5a:ca:e8:80:e2:be:80: 23:70:bb:61:fe:5d:d2:ce:d3:3f:82:04:90:77:24:0e:e8:21: e1:97:4a:66:c5:e4:44:4c:2a:44:88:36:93:41:30:c9:59:b1: 07:76:7f:d1:e4:c5:c9:02:01:d9:96:3b:0a:60:99:34:43:6a: d9:f5:2b:52:ba:d5:58:80:b2:9e:9d:21:88:bd:28:3a:b8:82: ff:0f:68:eb:4e:17:c7:dc:64:3d:ae:2b:1b:4a:06:b9:ba:63: bd:6c:a2:66:8b:e3:9c:c5:47:85:ff:09:c4:58:49:99:3c:75: 62:d7:ae:9e -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEzS64qo01t5d1Ep/sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMTA0Mjg1OVoXDTI4MDUxNjAzMjg1OVowLzEtMCsGA1UEAxMk MjUyMTUzMmQtYTBmMi00M2E1LWEyYTgtNjQwYzQyMzQ3NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaxldxWb7QAMiFeaamLC0GFwNOTIihzATXKW v0J1FFLXq+LCpP/PSVqwS7D65sqb5AjeID43azJR+wiN2gkHS3M1HufAz2f1RsmB m2LH8q8/9P9pUFRXZw4ntsPSfw6O/83yCO0OfPO9FZ3E8YtNoQ8Ahgfd/rCJrtxa WjgGZDtDdwx+UR+kZAz5ogMXhXL9iPjqCN3Sla3RGf/6wB59giH3wPGfknVfvCSH DEGo98Bs6Z272cQVsGN04EzUn4wDPiqHaQzk72k9XoLVV28Pql9Sv2f8+PXRIfFE 23kH0Z30yWh5hlyfAUGS08ncRszkowvganK4ieH86jWCE0M1vwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFALR7co4TBWMMShL7SDE1tnPbOuYMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y NTIxNTMyZC1hMGYyLTQzYTUtYTJhOC02NDBjNDIzNDc2ZmYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzI1MjE1MzJkLWEwZjItNDNhNS1h MmE4LTY0MGM0MjM0NzZmZi8yNTIxNTMyZC1hMGYyLTQzYTUtYTJhOC02NDBjNDIz NDc2ZmYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAKn/uQwDQQCAAIwBwMFACYELCAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICKqowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAmWXtQpm3PxIfuz/hYP1oSBfQ1W0Z auEv2xeHVnEG0BD3YATOa9dMV6WPRgxIsQgGTfmBx+igyKbBCldkwKtQSvOf0XMI vFbk1r7O/QG6X0kfwXB2tedmk5xqvIUvW9TqIGnUMsstln2Bbi+5iBjGvwh7/Cpb mjTwdsBjoIr4OK3K0rFcf8f5JuZayuiA4r6AI3C7Yf5d0s7TP4IEkHckDugh4ZdK ZsXkREwqRIg2k0EwyVmxB3Z/0eTFyQIB2ZY7CmCZNENq2fUrUrrVWICynp0hiL0o OriC/w9o604Xx9xkPa4rG0oGubpjvWyiZovjnMVHhf8JxFhJmTx1Yteung== -----END CERTIFICATE-----Generated at Sun Mar 1 18:09:54 2026 by rpki-client