$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer File: 6cfa06d7-0867-402b-ab91-a8affe4fb964.cer (raw, json) Hash identifier: 9P+Eg9p3dQG8SnyStdKm/gkrElCBWqxF7cm0U5ILBTU= Subject key identifier: DD:20:70:BB:F2:5F:0C:43:B6:EA:69:47:C2:C6:8B:46:BA:56:17:4D Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CE268BE20E716DD064D4B5600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 16 Feb 2026 17:38:22 +0000 Certificate not after: Sun 21 May 2028 16:38:22 +0000 Subordinate resources: IP: 23.158.200.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e2:68:be:20:e7:16:dd:06:4d:4b:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 16 17:38:22 2026 GMT Not After : May 21 16:38:22 2028 GMT Subject: CN=6cfa06d7-0867-402b-ab91-a8affe4fb964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:87:a8:23:44:fb:fe:0e:57:fd:b2:32:d6:bd: ba:d4:46:e5:b1:56:1d:af:e3:27:eb:0b:f1:6e:3b: 31:4f:53:26:22:89:3d:59:27:38:05:18:c9:fd:3e: a6:4a:82:08:a1:c2:24:d2:7a:70:99:1f:e9:ee:fa: 03:8e:61:2a:ac:1c:5b:ee:3f:76:a4:55:19:9b:df: da:b8:59:fd:37:89:b3:4c:d0:3b:a7:dd:8c:f8:3c: a3:2a:7f:d2:1f:c2:56:a0:f9:0b:e8:37:20:32:50: 74:07:78:19:9d:92:14:34:ec:72:f3:66:3b:5d:9d: 00:86:5d:9a:46:7a:14:db:de:b4:9d:03:df:75:bb: 12:17:49:7d:d6:9e:3b:4e:4d:04:b4:5b:74:6f:8c: 00:5d:1a:a3:5b:10:66:fd:6e:d4:b7:41:32:47:2b: 9f:78:3c:62:05:f7:83:c3:3d:be:77:98:5b:0a:7d: 1c:0c:28:b8:48:3d:f3:bc:04:c1:f3:03:f8:12:5c: 89:47:bc:ac:93:33:21:30:bd:e8:cf:ba:46:95:ae: 6c:4c:1f:0a:f4:81:fe:99:57:db:74:a7:43:4d:d8: d4:1e:19:d8:49:12:cc:54:0f:8d:47:1a:a7:14:f7: 94:b0:fd:30:0f:10:59:0c:b6:30:a5:dd:11:90:4c: a1:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:20:70:BB:F2:5F:0C:43:B6:EA:69:47:C2:C6:8B:46:BA:56:17:4D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.158.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bb:8a:6d:1f:18:a9:b1:c5:f8:15:37:6e:3d:d9:67:f1:68: c4:ed:2c:30:86:89:d0:14:13:a8:24:fe:db:3b:02:83:29:51: 15:a3:fb:3a:66:00:35:a9:a1:99:76:12:86:c2:f6:15:e6:f3: a1:6c:04:3e:ab:10:41:72:a1:da:59:07:ff:2e:1e:d1:66:dc: b1:e1:35:b4:2f:cd:fd:cf:73:a0:6a:e0:5f:ce:c3:0c:da:23: c2:11:28:44:a2:bc:05:b8:8b:ef:27:58:12:06:9d:fa:e0:e2: 15:ef:9f:19:15:47:e1:f7:93:7e:ad:b4:7c:e0:a1:92:e5:0d: 54:eb:5a:c5:75:7b:17:dd:0d:d7:5d:39:35:dd:67:c3:87:e9: 84:49:5f:bc:71:dd:08:2b:1e:54:98:c6:ae:e8:44:bf:60:3b: 1a:3b:d7:b2:4a:32:bc:2d:3e:86:ad:76:f1:c9:e6:ef:2d:15: 92:2d:68:04:4c:79:9f:dc:76:ee:11:d3:5b:c4:55:e5:3b:5a: d2:5e:05:ec:11:9b:64:27:af:28:88:ac:9d:cf:29:55:ad:69: df:39:b9:9a:b5:a9:78:88:66:0a:3e:2c:6f:9f:da:bd:dd:ad: da:bd:9e:ee:bf:04:32:ce:5a:b9:04:57:b7:db:b9:bc:66:bd: 30:98:42:eb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEziaL4g5xbdBk1LVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxNjE3MzgyMloXDTI4MDUyMTE2MzgyMlowLzEtMCsGA1UEAxMk NmNmYTA2ZDctMDg2Ny00MDJiLWFiOTEtYThhZmZlNGZiOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoeoI0T7/g5X/bIy1r261EblsVYdr+Mn6wvx bjsxT1MmIok9WSc4BRjJ/T6mSoIIocIk0npwmR/p7voDjmEqrBxb7j92pFUZm9/a uFn9N4mzTNA7p92M+DyjKn/SH8JWoPkL6DcgMlB0B3gZnZIUNOxy82Y7XZ0Ahl2a RnoU2960nQPfdbsSF0l91p47Tk0EtFt0b4wAXRqjWxBm/W7Ut0EyRyufeDxiBfeD wz2+d5hbCn0cDCi4SD3zvATB8wP4ElyJR7yskzMhML3oz7pGla5sTB8K9IH+mVfb dKdDTdjUHhnYSRLMVA+NRxqnFPeUsP0wDxBZDLYwpd0RkEyh7QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFN0gcLvyXwxDtuppR8LGi0a6VhdNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 Y2ZhMDZkNy0wODY3LTQwMmItYWI5MS1hOGFmZmU0ZmI5NjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzZjZmEwNmQ3LTA4NjctNDAyYi1h YjkxLWE4YWZmZTRmYjk2NC82Y2ZhMDZkNy0wODY3LTQwMmItYWI5MS1hOGFmZmU0 ZmI5NjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAAXnsgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAILuKbR8YqbHF+BU3bj3Z Z/FoxO0sMIaJ0BQTqCT+2zsCgylRFaP7OmYANamhmXYShsL2FebzoWwEPqsQQXKh 2lkH/y4e0WbcseE1tC/N/c9zoGrgX87DDNojwhEoRKK8BbiL7ydYEgad+uDiFe+f GRVH4feTfq20fOChkuUNVOtaxXV7F90N1105Nd1nw4fphElfvHHdCCseVJjGruhE v2A7GjvXskoyvC0+hq128cnm7y0Vki1oBEx5n9x27hHTW8RV5Tta0l4F7BGbZCev KIisnc8pVa1p3zm5mrWpeIhmCj4sb5/avd2t2r2e7r8EMs5auQRXt9u5vGa9MJhC 6w== -----END CERTIFICATE-----Generated at Sun Mar 1 18:08:33 2026 by rpki-client