$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc.cer File: 686765eb-e888-49bd-ad42-3fca936861cc.cer (raw, json) Hash identifier: lfhBRN7HyzejV75lze/77qNV48Rzx9i5qSfi3xNSOVQ= Subject key identifier: 35:09:EE:88:5E:0F:63:24:51:3E:2A:1F:EA:62:73:9D:94:F8:40:A4 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD51BFB9EBAD21CDC82F56300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/686765eb-e888-49bd-ad42-3fca936861cc.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 23:18:12 +0000 Certificate not after: Tue 16 May 2028 22:18:12 +0000 Subordinate resources: AS: 402160 IP: 23.149.220.0/24 IP: 2602:f513::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d5:1b:fb:9e:ba:d2:1c:dc:82:f5:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 11 23:18:12 2026 GMT Not After : May 16 22:18:12 2028 GMT Subject: CN=686765eb-e888-49bd-ad42-3fca936861cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:16:43:6a:b2:73:51:98:63:0a:13:22:05: 31:37:dd:96:2b:3b:56:67:3b:43:59:e7:17:6b:28: d2:70:0d:4a:a9:ab:36:61:e5:80:52:4b:8b:b3:9e: ff:fa:40:55:0a:dc:14:88:b8:4d:b7:7d:c0:22:a1: 9f:fa:5b:66:7a:9a:1c:0b:6d:5d:06:56:44:cf:d8: f3:9c:2f:55:ed:12:b4:c6:a6:fa:db:ce:97:13:0d: da:bd:5f:90:13:ca:51:65:89:7f:ae:b6:2a:1c:31: 1e:0c:8f:8e:fc:ed:1f:78:e8:8d:0c:9c:62:bc:3f: 63:41:1d:b6:cf:9c:aa:ae:a4:74:bb:36:1d:92:2f: 64:20:c7:34:f6:da:27:00:5a:f6:7f:9d:e5:3e:52: a8:e2:35:b0:5f:df:7c:57:46:40:1d:d7:0f:ef:51: 69:f6:9c:87:4b:c2:af:ea:51:22:a6:5e:74:52:3d: 45:7d:d1:70:ba:81:70:fc:af:fd:cb:c5:5a:48:40: 69:84:84:65:f0:df:6d:18:47:7f:19:46:aa:01:b2: 09:5c:54:c4:99:49:1e:b0:31:30:b1:34:04:f0:b2: bc:0d:1d:48:9b:09:41:dd:44:84:29:47:f5:97:09: f7:c0:eb:c7:2b:15:32:9e:d5:83:27:b2:3d:49:cf: f0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:09:EE:88:5E:0F:63:24:51:3E:2A:1F:EA:62:73:9D:94:F8:40:A4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/686765eb-e888-49bd-ad42-3fca936861cc.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.149.220.0/24 IPv6: 2602:f513::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402160 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:cf:c1:e3:bf:a6:93:a4:03:9a:d6:d4:c8:d0:b5:69:2c:ca: 45:10:4c:99:79:5e:7b:c1:f8:6e:24:6c:a1:d5:8f:1d:13:c7: ee:15:da:44:e4:87:07:4c:9c:e0:c1:40:7d:2c:c2:27:25:85: 41:1e:95:4a:63:ef:7a:21:a9:57:13:be:96:25:1f:3b:4c:b2: 82:2c:2c:fd:da:f7:38:9a:55:94:a2:9d:03:ee:bf:a7:55:8a: 04:ee:a4:ce:cf:c8:ab:5c:2e:01:4f:7d:ee:60:d1:a1:b1:ae: 36:89:e6:6e:eb:ce:d5:c8:7d:d2:23:41:b3:fe:10:3b:15:d4: d6:24:84:c3:56:7d:bb:e9:f1:66:ab:48:bd:fb:1a:de:da:43: a7:04:b4:25:c3:b8:32:83:14:32:29:59:cd:5e:fa:4f:f5:94: 4f:52:92:20:8b:bf:20:74:ce:d8:3f:53:13:6f:49:ff:6b:a5: 9b:7c:5b:6c:d6:7c:79:af:4d:8c:b3:cc:54:e9:e5:eb:ac:e6: c7:6b:08:64:aa:3d:fd:f1:b5:1c:13:fc:9b:b9:36:84:3a:18: d8:32:74:b7:66:5c:58:59:0b:e4:b2:f8:6d:df:24:ba:de:1e: 39:74:b3:97:94:78:7f:2d:e2:75:c7:4b:6e:af:b0:cc:2e:64: e4:61:8e:94 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEzVG/ueutIc3IL1YwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMTIzMTgxMloXDTI4MDUxNjIyMTgxMlowLzEtMCsGA1UEAxMk Njg2NzY1ZWItZTg4OC00OWJkLWFkNDItM2ZjYTkzNjg2MWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b0WQ2qyc1GYYwoTIgUxN92WKztWZztDWecX ayjScA1Kqas2YeWAUkuLs57/+kBVCtwUiLhNt33AIqGf+ltmepocC21dBlZEz9jz nC9V7RK0xqb6286XEw3avV+QE8pRZYl/rrYqHDEeDI+O/O0feOiNDJxivD9jQR22 z5yqrqR0uzYdki9kIMc09tonAFr2f53lPlKo4jWwX998V0ZAHdcP71Fp9pyHS8Kv 6lEipl50Uj1FfdFwuoFw/K/9y8VaSEBphIRl8N9tGEd/GUaqAbIJXFTEmUkesDEw sTQE8LK8DR1ImwlB3USEKUf1lwn3wOvHKxUyntWDJ7I9Sc/wEwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFDUJ7oheD2MkUT4qH+pic52U+ECkMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 ODY3NjVlYi1lODg4LTQ5YmQtYWQ0Mi0zZmNhOTM2ODYxY2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzY4Njc2NWViLWU4ODgtNDliZC1h ZDQyLTNmY2E5MzY4NjFjYy82ODY3NjVlYi1lODg4LTQ5YmQtYWQ0Mi0zZmNhOTM2 ODYxY2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXldwwDgQCAAIwCAMGACYC9RMAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYi8DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAGz8Hjv6aTpAOa1tTI0LVpLMpF EEyZeV57wfhuJGyh1Y8dE8fuFdpE5IcHTJzgwUB9LMInJYVBHpVKY+96IalXE76W JR87TLKCLCz92vc4mlWUop0D7r+nVYoE7qTOz8irXC4BT33uYNGhsa42ieZu687V yH3SI0Gz/hA7FdTWJITDVn276fFmq0i9+xre2kOnBLQlw7gygxQyKVnNXvpP9ZRP UpIgi78gdM7YP1MTb0n/a6WbfFts1nx5r02Ms8xU6eXrrObHawhkqj398bUcE/yb uTaEOhjYMnS3ZlxYWQvksvht3yS63h45dLOXlHh/LeJ1x0tur7DMLmTkYY6U -----END CERTIFICATE-----Generated at Sun Mar 1 20:04:07 2026 by rpki-client