$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer File: 6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer (raw, json) Hash identifier: 0Pb5Cdt3aJr/QLwVVTmEL3g4pvrodJG72XEfZV4yA3s= Subject key identifier: A4:40:0E:6F:80:B5:29:35:7D:D9:F8:B1:74:6E:D8:28:BD:D0:68:7A Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CFE7099069E5D55C3B4AC4C00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Feb 2026 18:36:50 +0000 Certificate not after: Wed 31 May 2028 17:36:50 +0000 Subordinate resources: AS: 53359 IP: 23.152.132.0/24 IP: 2602:f446::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:70:99:06:9e:5d:55:c3:b4:ac:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 26 18:36:50 2026 GMT Not After : May 31 17:36:50 2028 GMT Subject: CN=6e4a0a5e-aa44-4dce-87f2-8e9cedff1234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e9:2d:b6:de:8b:4f:37:8b:bb:b6:19:e6:8f: c7:8a:d8:31:43:77:66:99:0e:52:a0:09:d4:71:a5: 3a:26:38:93:af:f6:b1:03:25:1a:36:71:48:9f:92: f0:3f:40:43:7f:d2:85:df:53:e9:b9:2c:9d:ae:1b: d2:5d:ca:eb:35:7f:4c:7d:0a:61:2e:0c:26:f1:2b: cc:82:e2:30:1c:06:8a:b1:04:48:99:39:c1:8e:2b: 85:ff:38:f7:f9:f3:88:9b:77:e5:d7:a9:f4:4e:34: 55:3b:d8:2e:05:74:3d:a7:78:30:f3:a8:b7:80:70: 41:40:1f:93:ce:94:2b:6d:ff:7f:52:9a:e7:53:bd: a5:f9:3a:48:38:eb:85:62:b3:f5:7b:83:5e:79:c1: 65:8c:3e:15:f5:62:45:dd:10:5e:43:1e:48:be:7c: 6b:5c:0f:58:9b:49:42:30:e3:ce:b7:1d:14:72:71: e6:72:42:64:c5:30:77:80:0f:40:1d:fb:64:08:2a: f3:56:be:55:38:4b:9a:d8:70:02:c3:82:b9:e3:2e: 62:23:d9:6c:d5:6b:b4:79:ff:40:7d:aa:44:41:79: 9d:e7:e5:ed:8a:84:c0:15:59:32:f5:6f:90:57:8b: 44:00:e4:88:a2:09:1f:2c:b4:c2:ef:ea:fb:b6:8a: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:40:0E:6F:80:B5:29:35:7D:D9:F8:B1:74:6E:D8:28:BD:D0:68:7A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.152.132.0/24 IPv6: 2602:f446::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53359 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:7d:25:71:d3:ae:81:d7:86:bd:c8:79:8d:e0:a9:47:95:9b: dc:9c:01:ff:cf:32:3d:35:eb:f2:22:9e:7f:33:12:85:57:91: b5:e0:0f:13:ed:11:47:fe:51:a3:19:4f:63:e7:c2:81:e7:29: 25:37:b3:bb:9e:02:90:3c:17:49:13:f4:32:5a:e0:6b:82:e1: 48:38:d2:b7:8c:f3:8e:24:9e:4c:29:da:63:14:f7:0c:34:1f: d2:50:93:5e:ae:a1:3a:63:b8:68:fb:07:b5:ff:03:a9:25:e2: 37:1a:84:ea:d3:38:96:3c:ee:7c:a2:37:fe:4f:c0:fb:ae:00: f0:56:e2:4f:2e:b5:34:b6:fc:77:5d:f9:3c:2a:11:7c:2f:70: 89:9d:c1:0b:bd:97:fb:5d:f1:72:0c:a3:78:9f:05:df:6c:8f: fc:6c:47:34:a1:5c:b9:d9:13:80:14:15:83:be:65:83:b0:95: f9:ed:3a:9c:f0:e6:6c:ce:6c:78:c4:39:36:c5:92:9d:d5:76: fa:c1:2c:39:77:54:43:22:c3:b2:26:8a:0c:21:45:a2:09:ec: 95:35:98:aa:05:a9:7d:1e:af:eb:47:17:c4:7c:b2:95:8d:85: 0b:4b:a3:0e:14:ba:60:a8:35:0e:9d:12:e7:35:2b:65:f3:bc: 01:52:d7:2c -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEz+cJkGnl1Vw7SsTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNjE4MzY1MFoXDTI4MDUzMTE3MzY1MFowLzEtMCsGA1UEAxMk NmU0YTBhNWUtYWE0NC00ZGNlLTg3ZjItOGU5Y2VkZmYxMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwukttt6LTzeLu7YZ5o/HitgxQ3dmmQ5SoAnU caU6JjiTr/axAyUaNnFIn5LwP0BDf9KF31PpuSydrhvSXcrrNX9MfQphLgwm8SvM guIwHAaKsQRImTnBjiuF/zj3+fOIm3fl16n0TjRVO9guBXQ9p3gw86i3gHBBQB+T zpQrbf9/UprnU72l+TpIOOuFYrP1e4NeecFljD4V9WJF3RBeQx5IvnxrXA9Ym0lC MOPOtx0UcnHmckJkxTB3gA9AHftkCCrzVr5VOEua2HACw4K54y5iI9ls1Wu0ef9A fapEQXmd5+XtioTAFVky9W+QV4tEAOSIogkfLLTC7+r7toq7TwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKRADm+AtSk1fdn4sXRu2Ci90Gh6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82 ZTRhMGE1ZS1hYTQ0LTRkY2UtODdmMi04ZTljZWRmZjEyMzQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzZlNGEwYTVlLWFhNDQtNGRjZS04 N2YyLThlOWNlZGZmMTIzNC82ZTRhMGE1ZS1hYTQ0LTRkY2UtODdmMi04ZTljZWRm ZjEyMzQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmIQwDgQCAAIwCAMGACYC9EYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDQbzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCcfSVx066B14a9yHmN4KlHlZvc nAH/zzI9NevyIp5/MxKFV5G14A8T7RFH/lGjGU9j58KB5yklN7O7ngKQPBdJE/Qy WuBrguFIONK3jPOOJJ5MKdpjFPcMNB/SUJNerqE6Y7ho+we1/wOpJeI3GoTq0ziW PO58ojf+T8D7rgDwVuJPLrU0tvx3Xfk8KhF8L3CJncELvZf7XfFyDKN4nwXfbI/8 bEc0oVy52ROAFBWDvmWDsJX57Tqc8OZszmx4xDk2xZKd1Xb6wSw5d1RDIsOyJooM IUWiCeyVNZiqBal9Hq/rRxfEfLKVjYULS6MOFLpgqDUOnRLnNStl87wBUtcs -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:12 2026 by rpki-client