$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer File: 72ef9c16-2d45-4e8c-b035-49d30318c10f.cer (raw, json) Hash identifier: kzp1Tnm9E42UI2ecoltrODKI7aCQtQ7Pfsyum9naT54= Subject key identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D7F133B71CEBBF38594D55200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Apr 2026 20:27:59 +0000 Certificate not after: Sun 16 Jul 2028 20:27:59 +0000 Subordinate resources: AS: 10352 AS: 36206 IP: 63.247.32.0/20 IP: 66.208.64.0/20 IP: 206.176.192.0/19 IP: 209.94.160.0/19 IP: 216.105.208.0/20 IP: 2605:7240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:13:3b:71:ce:bb:f3:85:94:d5:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 13 20:27:59 2026 GMT Not After : Jul 16 20:27:59 2028 GMT Subject: CN=72ef9c16-2d45-4e8c-b035-49d30318c10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:3c:c9:32:c1:37:c8:ab:e0:e2:a7:0a:88: 25:e1:57:d1:07:d0:80:4e:dc:ec:28:ee:10:d6:36: df:9e:6e:bf:05:2f:9d:c0:d3:fe:ef:78:b0:56:14: 9d:c4:b8:3c:26:76:e3:c0:0c:0a:93:e5:35:d8:a0: dd:05:ee:0d:a7:95:09:89:7f:c9:71:2c:09:26:f6: b0:3d:b2:5f:65:14:0f:52:0d:9b:52:fb:6d:28:34: 3b:41:b7:b4:8e:b5:cf:08:32:41:18:9d:5e:f5:8b: ae:ab:d0:0a:d4:f3:dc:f4:b9:b7:65:b8:5b:55:f1: d4:7c:d8:39:44:c2:6c:73:2d:e8:bb:74:b2:f6:58: c3:4e:17:af:84:51:4b:34:52:80:9c:fa:b8:94:ba: f8:3f:f0:57:4c:aa:d9:43:be:4f:95:6d:36:c2:e3: 5d:7e:3e:a6:bb:0e:11:7f:66:0d:92:2a:d2:9e:5f: 24:3f:4f:bf:73:32:90:1a:e3:ac:d5:7a:64:dd:34: f6:22:93:e9:f1:27:d7:82:c6:9d:17:72:73:c5:72: 70:88:2d:46:b2:d3:25:fd:f5:5b:64:19:5a:71:0d: e6:e3:fe:ab:12:ef:a2:2b:cb:09:26:bb:0a:96:9a: 6f:b5:fa:47:ed:87:e6:77:24:5b:28:73:70:38:2b: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 63.247.32.0/20 66.208.64.0/20 206.176.192.0/19 209.94.160.0/19 216.105.208.0/20 IPv6: 2605:7240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10352 36206 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e8:f5:68:31:13:fb:ea:b2:c1:91:b4:c6:13:b2:06:c7:bd: ad:ac:50:00:74:38:4f:d1:40:66:2f:66:6a:ec:8b:e2:e1:48: 5a:8e:09:36:57:42:ea:fa:89:44:7e:18:13:ed:da:d7:9a:e8: e0:65:70:2c:eb:04:2e:4e:27:9f:19:61:1e:ae:3d:b8:7c:9e: 85:eb:81:34:a6:f6:ec:02:4b:c6:a0:45:a6:31:ec:ac:28:70: 6f:b5:84:dd:e6:26:e1:d3:84:da:bb:21:3c:86:3e:56:be:d4: 08:72:f0:a2:70:8d:5a:b9:74:63:b7:f3:2e:7c:70:cf:4a:92: 1f:cb:8f:6e:e5:9d:80:a3:6e:ef:31:a4:69:bc:f3:56:5e:27: fc:f2:1a:9b:ea:a5:49:f7:c0:07:5f:6d:ee:eb:10:fc:d3:c9: c4:2b:53:1e:95:eb:05:9f:f4:40:98:6b:08:c7:40:75:1e:85: 15:62:0c:a8:ce:4e:e7:06:60:31:cc:7e:93:e6:03:18:fa:43: 23:ad:e7:37:b3:5e:a1:37:65:37:1b:23:88:c0:1f:b3:9d:de: 5b:f1:f1:b1:89:25:ee:b9:21:e6:6c:e3:26:3e:ec:eb:79:ba: c1:7a:33:db:ff:66:5e:12:d9:51:12:14:00:3b:b2:c0:fe:91: 26:00:85:2d -----BEGIN CERTIFICATE----- MIIHNDCCBhygAwIBAgIUAQ0Mn0MoWE1/EztxzrvzhZTVUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxMzIwMjc1OVoXDTI4MDcxNjIwMjc1OVowLzEtMCsGA1UEAxMk NzJlZjljMTYtMmQ0NS00ZThjLWIwMzUtNDlkMzAzMThjMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX88yTLBN8ir4OKnCogl4VfRB9CATtzsKO4Q 1jbfnm6/BS+dwNP+73iwVhSdxLg8JnbjwAwKk+U12KDdBe4Np5UJiX/JcSwJJvaw PbJfZRQPUg2bUvttKDQ7Qbe0jrXPCDJBGJ1e9Yuuq9AK1PPc9Lm3ZbhbVfHUfNg5 RMJscy3ou3Sy9ljDThevhFFLNFKAnPq4lLr4P/BXTKrZQ75PlW02wuNdfj6muw4R f2YNkirSnl8kP0+/czKQGuOs1Xpk3TT2IpPp8SfXgsadF3JzxXJwiC1GstMl/fVb ZBlacQ3m4/6rEu+iK8sJJrsKlppvtfpH7YfmdyRbKHNwOCucjQIDAQABo4IERjCC BEIwHQYDVR0OBBYEFMCUGh6Vea/NUy9mj0/SX2P3aqiIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83 MmVmOWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQzMDMxOGMxMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzcyZWY5YzE2LTJkNDUtNGU4Yy1i MDM1LTQ5ZDMwMzE4YzEwZi83MmVmOWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQzMDMx OGMxMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAQ/9yADBARC0EADBAXOsMADBAXRXqADBATYadAw DQQCAAIwBwMFACYFckAwHgYIKwYBBQUHAQgBAf8EDzANoAswCQICKHACAwCNbjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCS6PVoMRP76rLBkbTGE7IGx72trFAAdDhP0UBmL2Zq7Ivi4Uhajgk2 V0Lq+olEfhgT7drXmujgZXAs6wQuTiefGWEerj24fJ6F64E0pvbsAkvGoEWmMeys KHBvtYTd5ibh04TauyE8hj5WvtQIcvCicI1auXRjt/MufHDPSpIfy49u5Z2Ao27v MaRpvPNWXif88hqb6qVJ98AHX23u6xD808nEK1MelesFn/RAmGsIx0B1HoUVYgyo zk7nBmAxzH6T5gMY+kMjrec3s16hN2U3GyOIwB+znd5b8fGxiSXuuSHmbOMmPuzr ebrBejPb/2ZeEtlREhQAO7LA/pEmAIUt -----END CERTIFICATE-----Generated at Fri Apr 17 02:31:15 2026 by rpki-client