$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70.cer File: 3425f5dc-cd25-4419-9cf8-b269b4d13e70.cer (raw, json) Hash identifier: 5uMyEVQQDge2EJhvPPbmmJz8XRa3Ur3ll6KJzpToFqQ= Subject key identifier: BB:6A:D0:C7:FB:0C:8B:22:8B:5B:AE:F1:73:68:52:B4:BE:F1:C4:41 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CE30EB9D756411F406015EC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/3425f5dc-cd25-4419-9cf8-b269b4d13e70.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Feb 2026 23:12:48 +0000 Certificate not after: Sun 21 May 2028 22:12:48 +0000 Subordinate resources: AS: 22466 IP: 104.152.204.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e3:0e:b9:d7:56:41:1f:40:60:15:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 16 23:12:48 2026 GMT Not After : May 21 22:12:48 2028 GMT Subject: CN=3425f5dc-cd25-4419-9cf8-b269b4d13e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:88:f5:98:64:6e:a0:58:5c:f9:5e:4e:4d: b4:19:4b:93:5f:e0:6a:d7:77:d0:70:cc:5a:9d:a6: 68:d0:84:7c:99:ec:be:81:5e:66:fa:d0:27:bc:e0: 59:72:30:ea:68:78:37:ef:1f:68:84:6c:53:26:24: 06:ae:44:87:c7:8a:7c:91:d5:bc:5f:23:59:2a:d0: ef:9f:1b:99:61:cf:d6:43:a6:f2:f3:81:ab:f0:d5: 77:00:c6:b0:20:43:bd:cf:d7:2c:50:42:c7:f4:bb: bf:4b:75:c7:3f:45:9d:a1:06:44:68:e0:93:07:0b: 1c:fd:e4:c0:33:6e:c2:d8:fe:11:18:bc:e3:0e:0f: a8:97:8f:c8:28:f8:c9:1a:d9:75:9c:53:eb:7f:c9: 94:a7:f3:a2:2f:79:17:e8:87:cb:25:eb:8b:81:be: 4f:eb:33:26:ca:ed:91:19:1e:8a:c0:33:da:82:6b: a6:eb:2b:64:98:87:00:81:8f:b3:9c:46:ff:38:1a: 80:80:39:4a:03:08:99:4e:08:17:bf:81:cc:d8:28: bd:f7:2a:27:b7:88:dc:b6:86:ec:d3:b3:d5:15:57: af:c5:75:84:51:7c:c5:79:ef:86:df:aa:07:9c:08: a8:94:8b:32:06:47:e6:ab:4d:61:5d:9a:24:83:6f: e3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6A:D0:C7:FB:0C:8B:22:8B:5B:AE:F1:73:68:52:B4:BE:F1:C4:41 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3425f5dc-cd25-4419-9cf8-b269b4d13e70/3425f5dc-cd25-4419-9cf8-b269b4d13e70.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 104.152.204.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22466 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:81:42:1f:aa:a9:e1:fd:d1:8e:f7:bb:49:41:ee:19:d9:8f: e4:12:d4:a8:db:36:15:58:ca:22:45:99:ab:ff:62:39:f1:a3: dd:9a:c4:c0:72:20:1d:ab:49:45:8e:5c:21:99:75:8c:25:62: eb:47:0d:9c:ad:ae:82:4e:e3:8d:8d:59:d6:3b:7a:20:76:f1: 47:13:24:13:ba:c6:ae:e3:c1:89:fd:c1:32:95:77:77:5d:a5: 5a:3c:cd:35:0d:16:03:18:01:16:f0:5a:ac:fc:d8:de:ad:b8: f3:8e:ef:3b:9e:24:3d:d7:2f:0b:bb:4a:ba:ed:be:6b:0a:1e: 4b:02:eb:47:4c:33:40:f1:07:8a:8f:cd:e3:d0:af:81:3d:3e: a3:cc:d4:02:4a:e9:b7:6b:fc:a6:96:8d:59:b2:94:d3:4d:7b: 06:b6:4f:03:87:89:c5:05:da:a2:c6:1a:9e:08:87:70:dd:73: 42:76:d3:29:8d:74:e1:19:1d:d5:17:0e:d0:1f:a3:ff:23:0a: 6f:f2:d7:ed:70:e3:06:66:86:a5:ec:77:7f:68:91:85:88:30: e2:4f:73:37:c3:d1:cf:80:f2:b5:86:d5:29:38:d3:65:b1:a8: 3e:f7:1a:6c:1b:2a:67:79:7a:2c:3a:9c:71:65:ac:d1:3f:09: b4:31:a6:ac -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEzjDrnXVkEfQGAV7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxNjIzMTI0OFoXDTI4MDUyMTIyMTI0OFowLzEtMCsGA1UEAxMk MzQyNWY1ZGMtY2QyNS00NDE5LTljZjgtYjI2OWI0ZDEzZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjKI9ZhkbqBYXPleTk20GUuTX+Bq13fQcMxa naZo0IR8mey+gV5m+tAnvOBZcjDqaHg37x9ohGxTJiQGrkSHx4p8kdW8XyNZKtDv nxuZYc/WQ6by84Gr8NV3AMawIEO9z9csUELH9Lu/S3XHP0WdoQZEaOCTBwsc/eTA M27C2P4RGLzjDg+ol4/IKPjJGtl1nFPrf8mUp/OiL3kX6IfLJeuLgb5P6zMmyu2R GR6KwDPagmum6ytkmIcAgY+znEb/OBqAgDlKAwiZTggXv4HM2Ci99yont4jctobs 07PVFVevxXWEUXzFee+G36oHnAiolIsyBkfmq01hXZokg2/jtQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFLtq0Mf7DIsii1uu8XNoUrS+8cRBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z NDI1ZjVkYy1jZDI1LTQ0MTktOWNmOC1iMjY5YjRkMTNlNzAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzM0MjVmNWRjLWNkMjUtNDQxOS05 Y2Y4LWIyNjliNGQxM2U3MC8zNDI1ZjVkYy1jZDI1LTQ0MTktOWNmOC1iMjY5YjRk MTNlNzAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJomMwwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC V8IwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAW4FCH6qp4f3Rjve7SUHuGdmP5BLUqNs2FVjKIkWZq/9iOfGj 3ZrEwHIgHatJRY5cIZl1jCVi60cNnK2ugk7jjY1Z1jt6IHbxRxMkE7rGruPBif3B MpV3d12lWjzNNQ0WAxgBFvBarPzY3q24847vO54kPdcvC7tKuu2+awoeSwLrR0wz QPEHio/N49CvgT0+o8zUAkrpt2v8ppaNWbKU0017BrZPA4eJxQXaosYangiHcN1z QnbTKY104Rkd1RcO0B+j/yMKb/LX7XDjBmaGpex3f2iRhYgw4k9zN8PRz4DytYbV KTjTZbGoPvcabBsqZ3l6LDqccWWs0T8JtDGmrA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:10:09 2026 by rpki-client