$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer File: 5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer (raw, json) Hash identifier: Tf/b6JQjOjwoMlKt/g0oFIp4cW0eo5vnUHlkyV7anlw= Subject key identifier: 41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D55C286C2EE6897F368AECC40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 30 Mar 2026 01:17:14 +0000 Certificate not after: Sun 02 Jul 2028 01:17:14 +0000 Subordinate resources: AS: 15312 IP: 23.148.52.0/24 IP: 2602:f503::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:c2:86:c2:ee:68:97:f3:68:ae:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 30 01:17:14 2026 GMT Not After : Jul 2 01:17:14 2028 GMT Subject: CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d5:38:e0:50:b2:4e:ae:68:89:1f:39:8b:fe: 98:ae:26:eb:5f:46:f2:7f:2a:41:b9:25:43:3b:55: 24:a9:bd:bb:d3:69:85:a8:3c:68:94:87:45:4f:89: 6a:72:59:e4:2a:d7:8b:a8:97:44:fd:aa:f0:39:66: ef:63:e6:d4:73:0c:7c:6b:e5:7f:01:55:84:f7:bf: fc:54:f0:3c:83:f7:23:49:72:a4:25:32:7c:da:9b: 68:d3:78:05:24:02:cf:a6:12:2d:49:23:18:f4:05: 7c:50:de:3e:42:84:a1:af:d7:16:37:e7:54:68:d7: 3d:b1:8d:40:ad:f3:33:85:2f:7e:16:74:63:45:36: 02:4c:0c:40:80:f5:1e:04:53:e6:b7:34:92:e4:fc: 26:78:21:d7:01:4d:e7:7f:05:4c:d9:b0:b2:3d:2c: b2:dc:3c:b6:75:4d:10:12:af:54:4e:7c:f8:eb:7c: bc:55:d1:02:ef:c3:0d:ca:1d:c9:ac:a6:4a:36:ca: 78:ad:fb:b6:8d:f8:c8:18:e1:ab:6f:4c:f4:51:e8: 1b:cf:d9:11:43:06:98:13:2e:18:ab:46:f5:85:7e: ed:4f:00:f7:7d:fc:56:f8:7f:02:b2:08:9a:2a:d3: 82:6f:e2:cc:3d:60:d8:9c:39:61:80:67:3b:04:f2: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.148.52.0/24 IPv6: 2602:f503::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 15312 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f5:26:5c:93:62:98:86:47:38:6e:e4:72:de:99:1e:ec:f0: bc:67:8e:35:a5:35:29:fd:bb:1b:06:0f:e1:b5:a2:81:b2:20: fa:f0:c5:12:d1:41:19:c1:40:05:22:4c:37:15:f4:7f:be:31: 08:66:6c:5b:14:fa:24:38:6b:4f:3a:e0:6e:9e:a4:64:10:55: d6:d3:0a:1f:61:0b:64:ff:2c:7a:81:b3:d3:ac:0b:39:6e:83: 87:0b:41:c8:bd:ef:c2:6f:1d:0f:02:5e:73:8d:cf:26:5c:0f: ec:c4:b8:0d:d4:01:7d:95:28:1f:11:30:16:7c:d8:b8:0a:ed: 9e:ff:37:85:88:06:71:d3:c0:f1:3b:ae:3a:e6:98:de:5e:64: 89:55:96:a7:4a:45:1c:70:c8:7c:3c:4a:d3:8e:76:a2:32:d3: c8:8d:7a:cb:6e:18:55:70:b2:2c:f8:4d:09:41:ac:84:af:f9: 71:3a:16:2f:5d:d6:db:07:af:d1:98:8e:75:5f:25:56:94:e7: 52:e9:05:f1:cf:df:08:2c:c7:47:08:5c:3a:79:f9:e1:7c:f6: be:c3:f9:f3:67:fa:4d:28:d9:01:c6:39:ac:c2:f1:29:87:84: 71:83:8d:dd:42:39:79:48:2c:1f:02:a5:96:e2:bb:78:0a:eb: 21:93:4a:cf -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE1VwobC7miX82iuzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMzMDAxMTcxNFoXDTI4MDcwMjAxMTcxNFowLzEtMCsGA1UEAxMk NWRmMmY5ZDQtNjkyZC00ZmJmLTliNjktN2NhMjE2MmJlOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdU44FCyTq5oiR85i/6YribrX0byfypBuSVD O1Ukqb2702mFqDxolIdFT4lqclnkKteLqJdE/arwOWbvY+bUcwx8a+V/AVWE97/8 VPA8g/cjSXKkJTJ82pto03gFJALPphItSSMY9AV8UN4+QoShr9cWN+dUaNc9sY1A rfMzhS9+FnRjRTYCTAxAgPUeBFPmtzSS5PwmeCHXAU3nfwVM2bCyPSyy3Dy2dU0Q Eq9UTnz463y8VdEC78MNyh3JrKZKNsp4rfu2jfjIGOGrb0z0Uegbz9kRQwaYEy4Y q0b1hX7tTwD3ffxW+H8CsgiaKtOCb+LMPWDYnDlhgGc7BPKTYQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFEHCclWJ1P9Nu94zXY7x6L32WqvIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 ZGYyZjlkNC02OTJkLTRmYmYtOWI2OS03Y2EyMTYyYmU5NDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzVkZjJmOWQ0LTY5MmQtNGZiZi05 YjY5LTdjYTIxNjJiZTk0Ny81ZGYyZjlkNC02OTJkLTRmYmYtOWI2OS03Y2EyMTYy YmU5NDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXlDQwDgQCAAIwCAMGACYC9QMAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAjvQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAf1JlyTYpiGRzhu5HLemR7s8Lxn jjWlNSn9uxsGD+G1ooGyIPrwxRLRQRnBQAUiTDcV9H++MQhmbFsU+iQ4a0864G6e pGQQVdbTCh9hC2T/LHqBs9OsCzlug4cLQci978JvHQ8CXnONzyZcD+zEuA3UAX2V KB8RMBZ82LgK7Z7/N4WIBnHTwPE7rjrmmN5eZIlVlqdKRRxwyHw8StOOdqIy08iN estuGFVwsiz4TQlBrISv+XE6Fi9d1tsHr9GYjnVfJVaU51LpBfHP3wgsx0cIXDp5 +eF89r7D+fNn+k0o2QHGOazC8SmHhHGDjd1COXlILB8CpZbiu3gK6yGTSs8= -----END CERTIFICATE-----Generated at Fri Apr 17 02:20:25 2026 by rpki-client