$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5171b0e4-bfac-4358-9a87-de97dbea4eb5.cer File: 5171b0e4-bfac-4358-9a87-de97dbea4eb5.cer (raw, json) Hash identifier: hXM7ktFNOvT6pz107DMnd4clc6Hx/3IFXgO0VC/zaD8= Subject key identifier: C3:57:21:E5:B7:B0:21:CD:EF:D1:0B:0E:FE:6B:7B:C4:16:76:03:CB Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D581B21D009FBA10FA20CA280 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5171b0e4-bfac-4358-9a87-de97dbea4eb5/5171b0e4-bfac-4358-9a87-de97dbea4eb5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5171b0e4-bfac-4358-9a87-de97dbea4eb5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Mar 2026 21:27:23 +0000 Certificate not after: Sun 02 Jul 2028 21:27:23 +0000 Subordinate resources: AS: 33408 IP: 66.248.237.0/24 IP: 68.170.8.0/22 IP: 170.39.76.0/22 IP: 2605:8940::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:58:1b:21:d0:09:fb:a1:0f:a2:0c:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 30 21:27:23 2026 GMT Not After : Jul 2 21:27:23 2028 GMT Subject: CN=5171b0e4-bfac-4358-9a87-de97dbea4eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d6:d7:90:81:8d:d8:b8:44:5d:8f:e2:79:a2: f8:c6:9d:6d:06:cb:f9:7c:23:a7:95:0e:de:9d:fd: 54:53:fd:4c:08:50:45:14:20:71:3f:6f:7d:08:27: 22:0f:f2:71:a2:13:91:4b:70:86:28:3c:c1:81:e8: ee:2c:6d:91:b4:6c:3d:6a:81:59:87:14:7c:df:eb: 08:73:fe:70:67:cf:19:63:b1:d5:2a:9c:1f:bd:38: fc:24:8d:02:a6:ef:85:76:3c:81:96:52:67:62:14: 1c:a6:fa:a0:2e:e7:d6:2f:3f:d7:e2:90:93:ac:07: 48:33:ab:30:01:97:d4:32:22:b6:1e:6e:36:92:fa: 9d:9e:eb:37:b3:cd:38:70:09:6b:97:98:6b:ee:f1: a3:91:f2:b6:bb:79:37:10:cd:70:e2:3c:05:93:c4: ed:ab:19:f3:bb:59:10:f6:50:95:d6:4e:39:ee:3d: f3:4e:ea:f8:79:74:26:e2:0e:2a:e0:02:19:8f:d2: 6a:b8:77:dc:46:b7:6c:53:1c:f0:35:80:63:e7:83: 1c:63:e4:6e:14:19:39:64:ed:7a:9d:52:21:7b:8f: de:fe:b1:d2:59:ec:be:97:0f:d8:b4:ac:da:4b:11: 50:62:c8:2a:82:2a:82:bc:8a:25:d2:bb:66:e9:4e: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:57:21:E5:B7:B0:21:CD:EF:D1:0B:0E:FE:6B:7B:C4:16:76:03:CB Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5171b0e4-bfac-4358-9a87-de97dbea4eb5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5171b0e4-bfac-4358-9a87-de97dbea4eb5/5171b0e4-bfac-4358-9a87-de97dbea4eb5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 66.248.237.0/24 68.170.8.0/22 170.39.76.0/22 IPv6: 2605:8940::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 33408 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:29:c3:44:72:82:2a:db:16:7d:92:a8:a2:5d:55:f4:78:05: a9:b6:62:36:19:a3:2f:ac:1b:bd:6f:8c:c1:0d:f9:bd:22:80: 3f:a1:c8:10:96:07:66:af:d0:43:c6:19:4f:57:2f:49:01:bb: d9:21:38:c6:15:2b:20:b1:75:b4:12:67:8f:ec:5f:dd:b3:29: b3:40:3f:96:8a:91:fa:a6:f6:a7:46:1b:e1:0e:cc:6f:fd:48: 51:cb:5d:31:e8:f6:86:81:7e:ae:17:70:71:40:2d:78:07:9d: 65:d1:ce:bb:7f:5a:31:bf:57:12:c7:f4:77:fd:6b:5a:b9:20: 97:bc:68:d1:ee:bc:72:c1:c6:9f:91:4d:d9:16:36:f9:b4:ba: 6d:52:2d:df:99:79:1a:17:88:45:68:f2:13:b6:e9:1a:b7:2e: d4:cb:65:dd:65:3d:76:d6:1a:2b:e4:ff:ef:55:3b:97:bd:3a: 4e:a3:9d:b7:9a:c4:0c:ca:5e:30:46:e2:a0:4f:7a:e5:2b:17: c9:3d:07:de:82:ad:d2:de:60:1a:1d:76:c4:22:12:7a:13:13: a7:e9:ad:a3:d6:26:17:21:f6:74:27:f9:30:b4:ca:99:be:bd: 2f:15:20:66:37:11:c3:6d:02:6f:e5:76:60:ad:13:a0:d9:f4: 08:88:ed:5f -----BEGIN CERTIFICATE----- MIIHJDCCBgygAwIBAgIUAQ0Mn0MoWE1YGyHQCfuhD6IMooAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMzMDIxMjcyM1oXDTI4MDcwMjIxMjcyM1owLzEtMCsGA1UEAxMk NTE3MWIwZTQtYmZhYy00MzU4LTlhODctZGU5N2RiZWE0ZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtbXkIGN2LhEXY/ieaL4xp1tBsv5fCOnlQ7e nf1UU/1MCFBFFCBxP299CCciD/JxohORS3CGKDzBgejuLG2RtGw9aoFZhxR83+sI c/5wZ88ZY7HVKpwfvTj8JI0Cpu+FdjyBllJnYhQcpvqgLufWLz/X4pCTrAdIM6sw AZfUMiK2Hm42kvqdnus3s804cAlrl5hr7vGjkfK2u3k3EM1w4jwFk8Ttqxnzu1kQ 9lCV1k457j3zTur4eXQm4g4q4AIZj9JquHfcRrdsUxzwNYBj54McY+RuFBk5ZO16 nVIhe4/e/rHSWey+lw/YtKzaSxFQYsgqgiqCvIol0rtm6U4+6QIDAQABo4IENjCC BDIwHQYDVR0OBBYEFMNXIeW3sCHN79ELDv5re8QWdgPLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 MTcxYjBlNC1iZmFjLTQzNTgtOWE4Ny1kZTk3ZGJlYTRlYjUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzUxNzFiMGU0LWJmYWMtNDM1OC05 YTg3LWRlOTdkYmVhNGViNS81MTcxYjBlNC1iZmFjLTQzNTgtOWE4Ny1kZTk3ZGJl YTRlYjUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBgEAgABMBIDBABC+O0DBAJEqggDBAKqJ0wwDQQCAAIwBwMFACYF iUAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAIKAMFQGA1UdIAEB/wRKMEgwRgYI KwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVz b3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAI0pw0Rygirb Fn2SqKJdVfR4Bam2YjYZoy+sG71vjMEN+b0igD+hyBCWB2av0EPGGU9XL0kBu9kh OMYVKyCxdbQSZ4/sX92zKbNAP5aKkfqm9qdGG+EOzG/9SFHLXTHo9oaBfq4XcHFA LXgHnWXRzrt/WjG/VxLH9Hf9a1q5IJe8aNHuvHLBxp+RTdkWNvm0um1SLd+ZeRoX iEVo8hO26Rq3LtTLZd1lPXbWGivk/+9VO5e9Ok6jnbeaxAzKXjBG4qBPeuUrF8k9 B96CrdLeYBoddsQiEnoTE6fpraPWJhch9nQn+TC0ypm+vS8VIGY3EcNtAm/ldmCt E6DZ9AiI7V8= -----END CERTIFICATE-----Generated at Fri Apr 17 02:31:20 2026 by rpki-client