$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d.cer File: 5138ff7a-a438-4510-900e-06d2a889f64d.cer (raw, json) Hash identifier: GKtNLKQzf5W09nLrcqFFZSwyDOBvYqWJ5YGkiF/rrn0= Subject key identifier: CE:5B:8A:C6:88:96:F1:CA:2D:E9:E4:EE:A5:EF:E4:28:8F:CF:8C:2B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CEE4700E06E1637FBD8DC4EA0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/5138ff7a-a438-4510-900e-06d2a889f64d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Feb 2026 23:40:05 +0000 Certificate not after: Thu 25 May 2028 22:40:05 +0000 Subordinate resources: AS: 397315 IP: 65.87.210.0/23 IP: 2605:2440::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ee:47:00:e0:6e:16:37:fb:d8:dc:4e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 20 23:40:05 2026 GMT Not After : May 25 22:40:05 2028 GMT Subject: CN=5138ff7a-a438-4510-900e-06d2a889f64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:fc:be:3e:e3:42:1a:38:95:15:95:40:cd: 4c:c9:a1:26:07:9e:7a:82:66:b5:96:11:7b:b1:66: 99:d4:c8:bb:67:6d:fb:84:57:bf:5c:1d:e9:86:91: 9c:d1:57:40:f6:85:11:73:e4:eb:01:9b:a9:b5:1b: c8:10:17:7b:44:f4:ae:a6:8e:3c:0a:c2:d8:80:78: 60:31:20:2a:a2:5a:65:97:27:d8:eb:89:f5:67:73: de:1e:bb:66:30:46:80:0b:7e:c0:b6:75:cd:4c:5c: e6:c8:c4:13:dc:09:71:64:8c:73:e4:3a:7b:74:b8: f5:8e:f5:4c:5b:39:4b:a2:41:7c:d7:1f:03:de:a0: c2:8d:85:07:10:83:88:60:25:ea:d5:fe:12:c2:53: d3:50:b3:30:ac:62:53:32:48:ac:1e:1c:ef:af:eb: 44:17:fa:9b:89:70:16:7e:88:e0:ae:d2:2d:42:78: fe:df:4e:ec:9e:f4:38:b0:83:4a:39:3b:eb:5a:7a: ba:27:ef:22:7d:07:e2:36:62:78:06:79:86:0b:b7: 97:10:cf:6e:a2:d2:75:18:c4:0c:d2:0c:75:e1:c7: 45:4c:01:87:c5:f8:43:37:8b:86:7e:7f:3f:13:d3: 6d:1f:8a:52:cb:64:96:d0:0e:8a:63:1a:f1:c2:6e: 80:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:5B:8A:C6:88:96:F1:CA:2D:E9:E4:EE:A5:EF:E4:28:8F:CF:8C:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5138ff7a-a438-4510-900e-06d2a889f64d/5138ff7a-a438-4510-900e-06d2a889f64d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 65.87.210.0/23 IPv6: 2605:2440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 397315 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a6:48:33:3f:67:0f:66:a8:d0:9a:d4:e0:83:8b:db:04:37: d4:4d:17:cb:08:df:27:de:c1:c7:36:d1:84:0a:30:1b:ca:c8: fb:e9:ae:63:5d:70:91:92:be:75:62:6f:4e:60:37:25:76:99: e7:9a:84:99:39:b2:0a:af:85:14:27:a6:ec:02:e3:fa:b3:da: c2:c7:70:87:df:d6:91:e3:30:96:e7:ae:9b:4e:5d:5e:55:af: 10:90:ba:21:4a:41:ab:8b:65:7e:b2:21:a0:d8:5e:57:1e:1f: 0f:39:7f:c9:29:48:8b:2a:d5:ea:ad:a7:c4:90:c8:60:d9:fd: 23:ff:85:52:49:c0:85:f5:dc:68:19:b9:6d:6f:ca:c2:eb:6f: f6:a4:a9:f6:eb:46:83:35:c4:05:1e:76:ff:2b:bc:5e:f5:c3: b0:bd:1f:97:f9:f4:94:b0:2a:c4:6c:77:19:49:2c:7a:c6:7d: f4:0b:aa:e9:f1:41:96:69:be:40:6b:bf:b7:f4:3f:97:44:9a: 2c:f5:ce:1b:9a:e4:d4:4c:7d:30:ac:d3:ee:e2:37:d7:d6:50: dc:f6:a8:0f:1f:20:82:ed:38:94:55:d3:1a:9c:67:e3:66:ec: 44:1a:f7:7b:d4:f3:ce:8b:f3:39:f7:ef:ed:26:48:8e:9c:c5: 24:ab:c8:bf -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEzuRwDgbhY3+9jcTqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyMDIzNDAwNVoXDTI4MDUyNTIyNDAwNVowLzEtMCsGA1UEAxMk NTEzOGZmN2EtYTQzOC00NTEwLTkwMGUtMDZkMmE4ODlmNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV38vj7jQho4lRWVQM1MyaEmB556gma1lhF7 sWaZ1Mi7Z237hFe/XB3phpGc0VdA9oURc+TrAZuptRvIEBd7RPSupo48CsLYgHhg MSAqolpllyfY64n1Z3PeHrtmMEaAC37AtnXNTFzmyMQT3AlxZIxz5Dp7dLj1jvVM WzlLokF81x8D3qDCjYUHEIOIYCXq1f4SwlPTULMwrGJTMkisHhzvr+tEF/qbiXAW fojgrtItQnj+307snvQ4sINKOTvrWnq6J+8ifQfiNmJ4BnmGC7eXEM9uotJ1GMQM 0gx14cdFTAGHxfhDN4uGfn8/E9NtH4pSy2SW0A6KYxrxwm6AQwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFM5bisaIlvHKLenk7qXv5CiPz4wrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 MTM4ZmY3YS1hNDM4LTQ1MTAtOTAwZS0wNmQyYTg4OWY2NGQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzUxMzhmZjdhLWE0MzgtNDUxMC05 MDBlLTA2ZDJhODg5ZjY0ZC81MTM4ZmY3YS1hNDM4LTQ1MTAtOTAwZS0wNmQyYTg4 OWY2NGQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAFBV9IwDQQCAAIwBwMFACYFJEAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBhADMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHGmSDM/Zw9mqNCa1OCDi9sEN9RN F8sI3yfewcc20YQKMBvKyPvprmNdcJGSvnVib05gNyV2meeahJk5sgqvhRQnpuwC 4/qz2sLHcIff1pHjMJbnrptOXV5VrxCQuiFKQauLZX6yIaDYXlceHw85f8kpSIsq 1eqtp8SQyGDZ/SP/hVJJwIX13GgZuW1vysLrb/akqfbrRoM1xAUedv8rvF71w7C9 H5f59JSwKsRsdxlJLHrGffQLqunxQZZpvkBrv7f0P5dEmiz1zhua5NRMfTCs0+7i N9fWUNz2qA8fIILtOJRV0xqcZ+Nm7EQa93vU886L8zn37+0mSI6cxSSryL8= -----END CERTIFICATE-----Generated at Sun Mar 1 20:04:22 2026 by rpki-client