$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2ca24-eb88-42f0-aeab-c64734a6fc5e.cer File: 5df2ca24-eb88-42f0-aeab-c64734a6fc5e.cer (raw, json) Hash identifier: rHIRHzIzjjs4lKF+A+59TGFGTUu80eXuCvHaSMCDvdI= Subject key identifier: 1C:90:96:3D:06:08:59:6A:D4:AE:CF:2F:7B:71:AF:35:1C:0D:DE:7B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D7083521DCFD5AFC5D9AC30F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2ca24-eb88-42f0-aeab-c64734a6fc5e/5df2ca24-eb88-42f0-aeab-c64734a6fc5e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2ca24-eb88-42f0-aeab-c64734a6fc5e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Apr 2026 15:16:42 +0000 Certificate not after: Tue 11 Jul 2028 15:16:42 +0000 Subordinate resources: AS: 54007 IP: 167.94.22.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:83:52:1d:cf:d5:af:c5:d9:ac:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 8 15:16:42 2026 GMT Not After : Jul 11 15:16:42 2028 GMT Subject: CN=5df2ca24-eb88-42f0-aeab-c64734a6fc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:9a:fd:20:8b:c3:f0:f4:f0:30:64:10:70:89: 03:d9:fc:87:b6:a5:79:9e:5c:2d:c6:c3:7f:aa:aa: 0d:be:a0:e3:d0:14:76:ee:c0:ba:99:59:c1:7f:37: 6f:b9:28:97:53:88:a5:ba:6a:fa:8d:8e:86:89:01: e6:30:ec:15:d6:24:ca:69:3b:28:cf:6a:61:0b:29: 6e:44:e6:42:96:ab:77:a5:3e:38:f2:07:4e:63:ce: 15:af:19:9b:3d:4b:e5:ef:02:da:24:68:fe:bd:12: 36:69:e1:f3:b4:f9:8c:f0:97:97:6a:ea:8f:ef:5f: 8e:c6:84:68:9e:af:57:18:e2:ca:bd:44:16:31:ae: d8:64:d3:b9:34:9e:24:6b:d6:9d:fa:cb:44:79:5b: e0:b3:32:2b:57:22:17:43:2b:b1:94:40:71:58:70: ae:92:54:80:aa:a6:e7:7f:e2:30:51:34:dc:14:17: 57:c5:32:75:8d:a9:68:7a:46:27:b2:ff:12:b5:d4: 38:44:a1:3e:99:37:c6:2f:95:46:be:3a:94:60:02: fd:46:da:1b:eb:f8:1f:9e:ff:80:a1:57:53:07:b2: 00:54:28:32:e2:64:c5:10:bd:1e:cb:9e:ac:b6:cd: 35:04:fc:c7:93:e8:c7:e6:41:d2:83:ca:46:17:64: c5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:90:96:3D:06:08:59:6A:D4:AE:CF:2F:7B:71:AF:35:1C:0D:DE:7B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2ca24-eb88-42f0-aeab-c64734a6fc5e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2ca24-eb88-42f0-aeab-c64734a6fc5e/5df2ca24-eb88-42f0-aeab-c64734a6fc5e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 167.94.22.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54007 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:74:b2:a4:0f:c9:29:ec:b2:c7:17:c0:7a:4c:b9:ee:16:bd: 02:ba:5b:e0:63:bc:26:5c:e9:ba:c7:ef:f9:5a:e1:1d:03:8c: f7:a4:5b:b7:95:31:fc:35:15:ff:75:0c:40:0b:a1:5b:7c:fc: df:61:c6:03:0e:32:81:3c:cc:ef:b3:b3:2e:ca:5c:76:bb:3f: a5:2f:c4:4e:7a:f6:5d:1f:d8:61:f1:4b:40:59:0a:18:2a:13: a7:0c:7e:55:6c:37:d4:a6:2b:cb:ad:d1:ac:c8:1f:72:b9:13: 19:93:f5:e3:a5:9c:57:9c:2e:5e:4f:6c:77:5c:e7:e3:3f:52: e2:6f:04:63:de:97:30:ca:f2:4a:95:58:bd:eb:b7:49:55:40: 92:ea:ba:aa:f6:4c:1a:cc:30:f3:19:84:4f:1b:ea:50:3d:27: 44:9d:2f:dc:08:98:9e:28:2a:74:eb:fe:3b:1a:06:b9:62:f3: 72:1e:24:b4:63:a1:87:09:49:20:1e:73:94:88:3f:80:4b:8b: de:a8:67:65:00:52:d0:b2:ea:6b:5b:9b:e1:41:c5:be:bb:6d: 10:74:6a:07:98:09:99:df:b3:a7:01:22:4f:78:fc:e8:0c:6e: ee:eb:c4:75:d7:8a:7e:49:42:60:22:be:26:fd:24:c3:c3:73: a5:2e:bf:45 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1wg1Idz9WvxdmsMPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwODE1MTY0MloXDTI4MDcxMTE1MTY0MlowLzEtMCsGA1UEAxMk NWRmMmNhMjQtZWI4OC00MmYwLWFlYWItYzY0NzM0YTZmYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJr9IIvD8PTwMGQQcIkD2fyHtqV5nlwtxsN/ qqoNvqDj0BR27sC6mVnBfzdvuSiXU4ilumr6jY6GiQHmMOwV1iTKaTsoz2phCylu ROZClqt3pT448gdOY84VrxmbPUvl7wLaJGj+vRI2aeHztPmM8JeXauqP71+OxoRo nq9XGOLKvUQWMa7YZNO5NJ4ka9ad+stEeVvgszIrVyIXQyuxlEBxWHCuklSAqqbn f+IwUTTcFBdXxTJ1jaloekYnsv8StdQ4RKE+mTfGL5VGvjqUYAL9Rtob6/gfnv+A oVdTB7IAVCgy4mTFEL0ey56sts01BPzHk+jH5kHSg8pGF2TF3QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFByQlj0GCFlq1K7PL3txrzUcDd57MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 ZGYyY2EyNC1lYjg4LTQyZjAtYWVhYi1jNjQ3MzRhNmZjNWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzVkZjJjYTI0LWViODgtNDJmMC1h ZWFiLWM2NDczNGE2ZmM1ZS81ZGYyY2EyNC1lYjg4LTQyZjAtYWVhYi1jNjQ3MzRh NmZjNWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACnXhYwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANL3MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEl0sqQPySnssscXwHpMue4WvQK6W+BjvCZc6brH7/la4R0D jPekW7eVMfw1Ff91DEALoVt8/N9hxgMOMoE8zO+zsy7KXHa7P6UvxE569l0f2GHx S0BZChgqE6cMflVsN9SmK8ut0azIH3K5ExmT9eOlnFecLl5PbHdc5+M/UuJvBGPe lzDK8kqVWL3rt0lVQJLquqr2TBrMMPMZhE8b6lA9J0SdL9wImJ4oKnTr/jsaBrli 83IeJLRjoYcJSSAec5SIP4BLi96oZ2UAUtCy6mtbm+FBxb67bRB0ageYCZnfs6cB Ik94/OgMbu7rxHXXin5JQmAivib9JMPDc6Uuv0U= -----END CERTIFICATE-----Generated at Fri Apr 17 02:20:24 2026 by rpki-client