$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4eedbd89-8d3c-48b7-b4c4-f570b5ea1642.cer File: 4eedbd89-8d3c-48b7-b4c4-f570b5ea1642.cer (raw, json) Hash identifier: gWVWZqnxijL3ILqrYBoaJIYqNxotRFy7wDsgYNWkZHo= Subject key identifier: EA:DB:4C:36:AB:66:E4:7F:27:05:EF:52:E2:AA:8A:52:F9:50:31:7B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CA7561C1AC616B434146DCB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4eedbd89-8d3c-48b7-b4c4-f570b5ea1642/4eedbd89-8d3c-48b7-b4c4-f570b5ea1642.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4eedbd89-8d3c-48b7-b4c4-f570b5ea1642/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 26 Jan 2026 13:48:08 +0000 Certificate not after: Sun 30 Apr 2028 12:48:08 +0000 Subordinate resources: AS: 19317 IP: 108.179.136.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:56:1c:1a:c6:16:b4:34:14:6d:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 26 13:48:08 2026 GMT Not After : Apr 30 12:48:08 2028 GMT Subject: CN=4eedbd89-8d3c-48b7-b4c4-f570b5ea1642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:08:bb:d7:7d:9e:93:e6:6c:66:d6:a8:d7: 35:76:89:91:9c:2d:03:dc:b3:ac:01:11:76:12:05: 41:2b:9c:a6:30:56:f3:1f:75:dd:c4:71:60:40:42: 72:95:72:43:dc:fd:49:3b:20:fa:50:b2:3e:79:97: 76:e3:7d:22:de:c9:35:f7:01:bb:10:dc:2d:fb:82: ef:ee:40:c5:4e:31:aa:8f:eb:e0:59:a3:a5:2c:02: da:1d:2d:8d:23:d4:c1:d3:90:80:3d:be:f9:78:4b: 64:b0:55:69:a7:06:f6:51:29:6b:4c:e2:fc:af:f6: 61:a1:bc:15:ac:d0:78:f6:c1:6f:34:cc:10:31:2e: 98:b5:8f:fb:93:43:3a:4b:03:bf:14:e7:d4:9b:c7: 8c:28:97:64:23:d8:8a:2a:c5:59:d3:d3:92:a7:a5: 5f:38:fc:b2:83:c0:5e:eb:0e:26:b7:e5:82:96:4f: b3:92:78:0a:b8:5a:95:c6:dc:f8:45:5e:83:11:73: 4b:f7:cb:ff:71:c0:dd:72:93:3a:bf:9d:a1:a5:f1: 1f:d1:70:3e:41:4f:99:60:be:b0:72:fd:41:86:c1: b1:bf:e5:8b:be:04:10:d1:b6:d1:c8:d7:a8:2b:95: 75:aa:82:95:b1:87:2c:c5:c4:52:80:d6:5f:94:db: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:DB:4C:36:AB:66:E4:7F:27:05:EF:52:E2:AA:8A:52:F9:50:31:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4eedbd89-8d3c-48b7-b4c4-f570b5ea1642/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4eedbd89-8d3c-48b7-b4c4-f570b5ea1642/4eedbd89-8d3c-48b7-b4c4-f570b5ea1642.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 108.179.136.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 19317 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:44:50:0c:6b:9c:e7:91:9a:83:15:0b:d1:e9:b8:86:44:c9: f7:33:7d:33:cb:50:0e:d7:0a:7a:34:6e:f4:e5:e1:fc:e7:84: 0b:c0:f5:75:e7:d7:2a:93:6f:a1:bb:84:2d:b6:01:2a:04:56: 19:aa:09:87:e4:cd:72:c7:79:42:79:13:a9:1a:a2:f0:04:60: 67:12:5e:70:19:32:56:ed:60:cd:a8:f7:73:a3:b0:cc:2a:92: da:6b:7f:5f:52:1f:2b:3a:28:90:82:af:61:f3:40:87:98:2d: 67:95:9c:43:87:80:e4:ca:2d:3e:ae:8f:b5:a4:f9:df:1c:df: f0:6a:80:03:61:96:ba:cf:48:b6:f6:d4:7e:ef:31:c2:70:1e: 01:7f:f5:4e:89:7a:e6:c4:17:57:2c:c8:77:89:53:33:71:86: 4f:02:bd:28:26:ce:de:a6:a0:17:e5:10:98:5f:40:ad:70:1f: ea:1f:b0:ef:40:10:f2:6b:a7:ee:cf:3a:29:59:f5:19:a1:fb: fb:3b:98:3f:0d:bd:81:40:2d:3a:a6:91:ad:da:e2:05:92:02: 50:57:d2:58:99:10:fd:65:9c:87:af:a0:f0:43:26:b2:3f:0d: 1d:24:5f:2e:cf:59:cb:6f:25:f1:29:4e:32:fa:3a:63:35:e3: e4:62:46:c5 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEynVhwaxha0NBRtywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEyNjEzNDgwOFoXDTI4MDQzMDEyNDgwOFowLzEtMCsGA1UEAxMk NGVlZGJkODktOGQzYy00OGI3LWI0YzQtZjU3MGI1ZWExNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/AIu9d9npPmbGbWqNc1domRnC0D3LOsARF2 EgVBK5ymMFbzH3XdxHFgQEJylXJD3P1JOyD6ULI+eZd2430i3sk19wG7ENwt+4Lv 7kDFTjGqj+vgWaOlLALaHS2NI9TB05CAPb75eEtksFVppwb2USlrTOL8r/ZhobwV rNB49sFvNMwQMS6YtY/7k0M6SwO/FOfUm8eMKJdkI9iKKsVZ09OSp6VfOPyyg8Be 6w4mt+WClk+zkngKuFqVxtz4RV6DEXNL98v/ccDdcpM6v52hpfEf0XA+QU+ZYL6w cv1BhsGxv+WLvgQQ0bbRyNeoK5V1qoKVsYcsxcRSgNZflNuaewIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFOrbTDarZuR/JwXvUuKqilL5UDF7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 ZWVkYmQ4OS04ZDNjLTQ4YjctYjRjNC1mNTcwYjVlYTE2NDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzRlZWRiZDg5LThkM2MtNDhiNy1i NGM0LWY1NzBiNWVhMTY0Mi80ZWVkYmQ4OS04ZDNjLTQ4YjctYjRjNC1mNTcwYjVl YTE2NDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJss4gwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC S3UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAcURQDGuc55GagxUL0em4hkTJ9zN9M8tQDtcKejRu9OXh/OeE C8D1defXKpNvobuELbYBKgRWGaoJh+TNcsd5QnkTqRqi8ARgZxJecBkyVu1gzaj3 c6OwzCqS2mt/X1IfKzookIKvYfNAh5gtZ5WcQ4eA5MotPq6PtaT53xzf8GqAA2GW us9ItvbUfu8xwnAeAX/1Tol65sQXVyzId4lTM3GGTwK9KCbO3qagF+UQmF9ArXAf 6h+w70AQ8mun7s86KVn1GaH7+zuYPw29gUAtOqaRrdriBZICUFfSWJkQ/WWch6+g 8EMmsj8NHSRfLs9Zy28l8SlOMvo6YzXj5GJGxQ== -----END CERTIFICATE-----Generated at Sun Mar 1 18:09:45 2026 by rpki-client