$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e.cer File: 548a2224-5b79-42e3-b397-0cb3e8f5d20e.cer (raw, json) Hash identifier: K75CTwwrgSDTDkx19lerZBXLe+H4xrp5ypaptRAWG78= Subject key identifier: D2:59:97:29:C7:10:34:9B:9D:47:7A:5D:92:76:DF:97:D0:0E:21:8B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CFC902C83F374FB1C3AEB7400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/548a2224-5b79-42e3-b397-0cb3e8f5d20e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Feb 2026 02:28:50 +0000 Certificate not after: Wed 31 May 2028 01:28:50 +0000 Subordinate resources: AS: 393989 IP: 66.33.76.0/24 IP: 190.151.137.0/24 IP: 209.59.246.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:90:2c:83:f3:74:fb:1c:3a:eb:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 26 02:28:50 2026 GMT Not After : May 31 01:28:50 2028 GMT Subject: CN=548a2224-5b79-42e3-b397-0cb3e8f5d20e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:b0:20:17:36:62:3a:84:2e:30:b5:dc:6b: 3c:9c:af:b0:bb:b3:82:e9:a5:73:23:4b:c1:0e:cc: c9:5c:63:c5:f0:b8:98:d4:d1:82:c7:29:50:9b:65: 21:23:3b:77:c3:61:b2:52:e5:fd:36:81:7f:28:88: 7d:df:14:d9:1e:fa:eb:39:97:01:e7:53:6e:e4:81: 58:27:5e:15:b8:09:f0:90:54:93:e5:5c:47:f3:44: a0:54:36:41:8a:b6:0f:5e:9c:f4:28:ce:51:14:00: 5d:8c:f6:ae:7c:64:ca:66:5e:ca:19:31:7c:e0:d9: be:b7:7f:21:db:34:47:0a:2a:37:21:7f:5f:ae:b1: 32:2c:37:3a:62:ed:e6:4f:3d:20:51:57:c4:cb:a0: 46:30:b5:d7:13:43:96:97:32:3b:a3:a4:c5:61:36: ed:91:75:eb:ca:b5:d2:d4:7e:b8:8b:a2:b1:89:39: b6:cf:57:60:e1:89:aa:b9:66:f0:2c:3f:89:85:cd: e9:a3:8a:d5:c7:8f:bf:03:ac:91:5a:c8:0e:33:79: 0a:ec:b5:ab:8c:ae:df:f0:a4:7c:f5:5e:6f:64:da: ca:ad:f0:98:ab:7c:ac:bc:23:11:42:87:fe:63:03: 12:37:64:3b:2c:6f:0d:26:0e:04:c6:24:1c:a3:e2: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:59:97:29:C7:10:34:9B:9D:47:7A:5D:92:76:DF:97:D0:0E:21:8B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/548a2224-5b79-42e3-b397-0cb3e8f5d20e/548a2224-5b79-42e3-b397-0cb3e8f5d20e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 66.33.76.0/24 190.151.137.0/24 209.59.246.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393989 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:23:e6:51:3e:03:0a:f6:11:22:61:6d:53:a6:86:eb:c8:ae: ca:53:62:be:3d:f2:8a:33:18:64:15:14:cf:1d:5d:2f:6a:46: 14:a1:74:76:e6:76:b8:63:f2:9b:c4:a3:52:02:be:34:f4:25: 4c:a3:af:e0:a5:e0:47:8e:cf:82:4d:6e:b6:d6:37:0d:47:66: 22:50:16:46:be:ae:8b:ba:2b:5c:f3:a3:84:8c:82:6a:75:c5: 40:1c:13:1c:e8:91:8f:d9:8d:a4:e1:7f:c9:2c:67:27:58:32: a7:03:52:fd:1d:ac:06:3b:ea:9b:65:2d:9a:08:8d:84:86:3a: 18:e4:cc:76:49:88:89:be:27:ef:56:8c:a7:0f:f2:e4:1a:dc: 0c:d5:14:79:eb:4b:15:d7:dc:8c:49:26:c4:a4:2b:8f:d4:89: 65:97:cc:5b:35:31:a6:66:ff:73:bb:ba:18:3c:59:e2:99:c7: 85:61:c4:36:9b:0f:3a:3f:7d:1f:bb:05:50:52:e0:93:5f:09: f5:5d:77:e4:26:3d:8a:b4:5f:13:c8:4a:1d:79:76:8d:20:4e: 71:b2:f3:c0:9f:d6:2d:b6:4c:7e:2e:6a:c1:ad:61:82:e4:c7: f6:5e:2f:30:a2:3a:c2:cf:4f:64:f0:93:12:a8:1a:2e:82:5a: f4:5e:9f:8f -----BEGIN CERTIFICATE----- MIIHFTCCBf2gAwIBAgIUAQ0Mn0MoWEz8kCyD83T7HDrrdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNjAyMjg1MFoXDTI4MDUzMTAxMjg1MFowLzEtMCsGA1UEAxMk NTQ4YTIyMjQtNWI3OS00MmUzLWIzOTctMGNiM2U4ZjVkMjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcSwIBc2YjqELjC13Gs8nK+wu7OC6aVzI0vB DszJXGPF8LiY1NGCxylQm2UhIzt3w2GyUuX9NoF/KIh93xTZHvrrOZcB51Nu5IFY J14VuAnwkFST5VxH80SgVDZBirYPXpz0KM5RFABdjPaufGTKZl7KGTF84Nm+t38h 2zRHCio3IX9frrEyLDc6Yu3mTz0gUVfEy6BGMLXXE0OWlzI7o6TFYTbtkXXryrXS 1H64i6KxiTm2z1dg4YmquWbwLD+Jhc3po4rVx4+/A6yRWsgOM3kK7LWrjK7f8KR8 9V5vZNrKrfCYq3ysvCMRQof+YwMSN2Q7LG8NJg4ExiQco+J+wQIDAQABo4IEJzCC BCMwHQYDVR0OBBYEFNJZlynHEDSbnUd6XZJ235fQDiGLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 NDhhMjIyNC01Yjc5LTQyZTMtYjM5Ny0wY2IzZThmNWQyMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzU0OGEyMjI0LTViNzktNDJlMy1i Mzk3LTBjYjNlOGY1ZDIwZS81NDhhMjIyNC01Yjc5LTQyZTMtYjM5Ny0wY2IzZThm NWQyMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBABCIUwDBAC+l4kDBADRO/YwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBgMFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFsj5lE+Awr2ESJhbVOmhuvIrspTYr49 8oozGGQVFM8dXS9qRhShdHbmdrhj8pvEo1ICvjT0JUyjr+Cl4EeOz4JNbrbWNw1H ZiJQFka+rou6K1zzo4SMgmp1xUAcExzokY/ZjaThf8ksZydYMqcDUv0drAY76ptl LZoIjYSGOhjkzHZJiIm+J+9WjKcP8uQa3AzVFHnrSxXX3IxJJsSkK4/UiWWXzFs1 MaZm/3O7uhg8WeKZx4VhxDabDzo/fR+7BVBS4JNfCfVdd+QmPYq0XxPISh15do0g TnGy88Cf1i22TH4uasGtYYLkx/ZeLzCiOsLPT2TwkxKoGi6CWvRen48= -----END CERTIFICATE-----Generated at Sun Mar 1 14:40:30 2026 by rpki-client