$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d.cer File: 533262a8-b69a-4f2d-9dc6-57837d45247d.cer (raw, json) Hash identifier: pLxk1On7ajsu1jRrWsWRh1tnd0NujKVelT6bYIHISKI= Subject key identifier: 5F:92:6E:54:CC:2A:87:FF:E4:48:B3:FE:19:12:7F:0D:41:31:85:0E Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CEDE646F12E433B1C7D4DC100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/533262a8-b69a-4f2d-9dc6-57837d45247d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 20 Feb 2026 20:25:12 +0000 Certificate not after: Thu 25 May 2028 19:25:12 +0000 Subordinate resources: IP: 198.161.255.0/24 IP: 2620:5c::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:e6:46:f1:2e:43:3b:1c:7d:4d:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 20 20:25:12 2026 GMT Not After : May 25 19:25:12 2028 GMT Subject: CN=533262a8-b69a-4f2d-9dc6-57837d45247d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4e:09:6d:b2:bc:02:25:da:b5:e9:43:38:95: e4:4f:46:ab:89:90:a4:7c:e8:f5:49:3e:0e:5d:89: 7c:bd:24:b9:e6:eb:77:39:21:af:d0:20:1d:ff:4b: a4:15:a1:6e:69:2a:8e:f9:c5:77:7a:58:db:36:7a: 9d:d8:11:d4:f2:d4:e7:63:cd:ce:8d:00:0c:73:e3: d4:59:f2:62:6c:af:b6:f0:43:02:e9:d8:05:96:b6: 9c:90:d4:22:57:60:e6:4a:45:1a:0a:a7:75:13:1d: 60:bf:ff:d0:5d:88:e7:5e:57:1b:c9:49:14:a7:70: 39:cb:3d:f5:c5:07:c4:39:d4:92:2c:5e:79:54:c9: dc:ca:3a:d0:9c:d5:97:b3:0d:b1:4a:cb:3d:ed:07: 11:74:e0:cd:f8:77:75:e2:79:97:da:ee:3a:41:c2: 83:33:69:ab:39:82:d8:f9:d0:0c:bf:19:52:11:d6: 07:8e:66:21:71:33:5c:dc:29:37:f3:82:86:41:a5: 4c:c9:83:e7:7f:af:74:62:45:0d:27:90:43:4c:6c: 57:cd:40:84:91:09:ca:90:86:14:7d:1f:4f:f2:8e: 8a:5b:01:93:65:9d:5f:d7:03:18:e5:ba:c4:20:c7: 65:86:14:d3:63:6e:9b:08:b7:d5:f8:6d:63:5e:8d: 86:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:92:6E:54:CC:2A:87:FF:E4:48:B3:FE:19:12:7F:0D:41:31:85:0E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/533262a8-b69a-4f2d-9dc6-57837d45247d/533262a8-b69a-4f2d-9dc6-57837d45247d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 198.161.255.0/24 IPv6: 2620:5c::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:c2:1a:9c:98:1f:36:33:86:22:3b:bd:3c:f6:8b:e2:d6:88: f0:e6:d6:4c:71:a3:d9:a4:ff:69:97:26:02:2b:1b:a1:34:a3: 14:4c:fb:0d:86:4f:f3:38:7d:6f:d5:c6:ee:de:02:3d:89:2d: d1:ab:50:e1:43:84:06:ee:a7:43:6b:e0:e3:dd:72:55:b0:a6: c6:f3:8f:64:22:1e:c3:b1:85:81:4c:c9:96:5b:ed:30:c5:dd: 1e:50:1f:27:f4:97:b6:27:09:8e:97:38:38:12:88:96:85:17: e2:46:95:c5:e0:52:77:f9:8f:ab:8b:7a:18:22:b1:d0:c4:d4: 10:fc:e4:22:72:a0:36:63:aa:9e:4b:84:9a:15:92:74:dc:a0: 32:41:a3:10:3b:bd:a1:0c:be:c9:94:2c:6d:07:c8:9f:bc:83: 8b:4f:c8:87:6b:64:25:14:20:46:36:b6:10:9d:34:46:f5:55: b6:3f:0f:62:f9:2b:77:6e:c5:5f:f5:bd:e8:17:8e:0c:09:04: 97:9b:2f:8f:50:ad:d8:22:f6:08:b4:e1:e0:bb:48:78:9f:4c: bb:36:ba:52:1a:74:c8:48:5f:ab:c1:96:cd:a6:24:9e:d6:56: fe:0c:72:84:54:44:be:63:03:05:a7:cb:9d:a3:1c:f5:a5:a0: a3:05:4c:97 -----BEGIN CERTIFICATE----- MIIG/jCCBeagAwIBAgIUAQ0Mn0MoWEzt5kbxLkM7HH1NwQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyMDIwMjUxMloXDTI4MDUyNTE5MjUxMlowLzEtMCsGA1UEAxMk NTMzMjYyYTgtYjY5YS00ZjJkLTlkYzYtNTc4MzdkNDUyNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh04JbbK8AiXatelDOJXkT0ariZCkfOj1ST4O XYl8vSS55ut3OSGv0CAd/0ukFaFuaSqO+cV3eljbNnqd2BHU8tTnY83OjQAMc+PU WfJibK+28EMC6dgFlrackNQiV2DmSkUaCqd1Ex1gv//QXYjnXlcbyUkUp3A5yz31 xQfEOdSSLF55VMncyjrQnNWXsw2xSss97QcRdODN+Hd14nmX2u46QcKDM2mrOYLY +dAMvxlSEdYHjmYhcTNc3Ck384KGQaVMyYPnf690YkUNJ5BDTGxXzUCEkQnKkIYU fR9P8o6KWwGTZZ1f1wMY5brEIMdlhhTTY26bCLfV+G1jXo2GlwIDAQABo4IEEDCC BAwwHQYDVR0OBBYEFF+SblTMKof/5Eiz/hkSfw1BMYUOMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 MzMyNjJhOC1iNjlhLTRmMmQtOWRjNi01NzgzN2Q0NTI0N2QvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzUzMzI2MmE4LWI2OWEtNGYyZC05 ZGM2LTU3ODM3ZDQ1MjQ3ZC81MzMyNjJhOC1iNjlhLTRmMmQtOWRjNi01NzgzN2Q0 NTI0N2QubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADGof8wDwQCAAIwCQMHACYgAFwAADBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCNwhqcmB82M4YiO7089ovi1ojw5tZMcaPZpP9plyYCKxuhNKMUTPsNhk/zOH1v 1cbu3gI9iS3Rq1DhQ4QG7qdDa+Dj3XJVsKbG849kIh7DsYWBTMmWW+0wxd0eUB8n 9Je2JwmOlzg4EoiWhRfiRpXF4FJ3+Y+ri3oYIrHQxNQQ/OQicqA2Y6qeS4SaFZJ0 3KAyQaMQO72hDL7JlCxtB8ifvIOLT8iHa2QlFCBGNrYQnTRG9VW2Pw9i+St3bsVf 9b3oF44MCQSXmy+PUK3YIvYItOHgu0h4n0y7NrpSGnTISF+rwZbNpiSe1lb+DHKE VES+YwMFp8udoxz1paCjBUyX -----END CERTIFICATE-----Generated at Mon Mar 2 00:01:06 2026 by rpki-client