$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer File: 7a66e7fb-89d9-467a-83cb-031bb17ccfbe.cer (raw, json) Hash identifier: c38V1SgLUskNSJcTiKcj5qXIGRHajIjZLunAgI4G/2g= Subject key identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC43C8E37E50C3460DD35FC80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Feb 2026 22:15:05 +0000 Certificate not after: Wed 10 May 2028 21:15:05 +0000 Subordinate resources: IP: 131.219.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c4:3c:8e:37:e5:0c:34:60:dd:35:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 5 22:15:05 2026 GMT Not After : May 10 21:15:05 2028 GMT Subject: CN=7a66e7fb-89d9-467a-83cb-031bb17ccfbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:b8:37:5b:6c:b5:dd:e8:5d:20:7b:fd:c7: ca:24:a2:53:c8:e5:24:29:4a:9d:16:bd:c8:42:09: 2a:ff:2a:3e:1b:2d:1a:ea:7a:3e:c9:c6:fb:13:bf: 86:31:1e:2e:67:28:d1:4f:4b:fc:1f:7c:a5:2b:73: 89:d6:de:55:68:ff:3e:35:66:5d:00:22:87:d6:80: bc:4e:5c:f1:81:94:0f:7d:ec:84:67:7a:78:51:39: be:14:fe:8f:57:4a:51:4b:a6:be:4c:1d:67:ec:81: 67:81:5a:68:72:43:da:7a:f4:27:e7:cb:68:25:04: 09:fd:5b:f4:58:ea:fe:23:f6:e0:57:13:2b:aa:3f: f4:cd:f2:17:be:bf:a9:73:24:79:b7:0e:56:35:46: 79:40:62:ff:ee:27:15:07:45:51:f2:dc:8d:90:e3: b1:c2:51:04:32:c9:ce:56:36:14:f7:3c:65:a4:d5: ad:74:ec:f2:7c:38:10:57:4b:33:de:01:c2:5c:7a: 13:b6:09:10:9a:27:06:51:e1:9d:ff:a7:ac:3f:21: 95:43:c6:c0:f7:7a:12:f7:b6:b3:7a:9a:11:9a:25: 1f:41:1c:d7:d1:a2:d6:71:dc:f2:41:b2:dd:9e:a8: e3:b9:8b:fb:55:6c:f1:b9:96:78:85:cd:c4:29:3c: aa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:B1:FF:91:E4:42:89:3D:78:4D:56:EF:CB:03:06:EB:CE:E9:BD Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7a66e7fb-89d9-467a-83cb-031bb17ccfbe/7a66e7fb-89d9-467a-83cb-031bb17ccfbe.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 131.219.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:9a:ee:8b:e6:24:f5:f5:5b:d3:27:75:b0:a1:e5:0d:34:8c: 09:ce:93:b3:b7:ad:30:d5:bb:d1:60:8b:5d:3f:e6:18:55:2d: 4c:75:10:f2:26:a5:b7:3a:a2:d0:f7:79:2c:6b:9d:af:b1:df: 7c:d0:91:3f:2f:14:ae:9d:a9:55:ae:5a:46:78:f8:09:a4:ac: 85:b0:61:57:4c:90:06:e2:a5:5d:ef:3a:c8:75:2b:f2:c4:b4: bb:5c:37:b3:63:0b:8b:50:80:ae:98:3f:5f:1b:7b:aa:4e:8a: 47:a9:83:33:98:db:ca:2f:10:47:80:25:f5:9d:bf:82:e6:9f: d7:6c:d4:68:8b:5e:c2:3a:c5:18:f4:8f:1a:03:5c:bd:9d:44: 11:18:38:87:93:f9:69:bb:ee:21:ef:e8:81:93:03:7e:26:30: 5d:19:08:d9:06:f2:55:dc:c3:33:ff:b0:8a:36:f6:61:4d:ad: 77:01:22:77:2d:3e:cd:55:ff:67:71:bd:20:6d:53:c7:df:57: 7d:63:7c:d3:37:66:fc:53:23:e9:6f:b6:1a:0e:3b:30:32:19: 18:5a:7d:1d:37:75:d1:3d:e8:5f:da:a8:c4:92:8a:71:f7:af: 49:ba:30:97:38:c8:39:cb:87:72:b4:a4:df:9f:93:a9:75:96: 5e:05:e0:14 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWEzEPI435Qw0YN01/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNTIyMTUwNVoXDTI4MDUxMDIxMTUwNVowLzEtMCsGA1UEAxMk N2E2NmU3ZmItODlkOS00NjdhLTgzY2ItMDMxYmIxN2NjZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tu4N1tstd3oXSB7/cfKJKJTyOUkKUqdFr3I Qgkq/yo+Gy0a6no+ycb7E7+GMR4uZyjRT0v8H3ylK3OJ1t5VaP8+NWZdACKH1oC8 TlzxgZQPfeyEZ3p4UTm+FP6PV0pRS6a+TB1n7IFngVpockPaevQn58toJQQJ/Vv0 WOr+I/bgVxMrqj/0zfIXvr+pcyR5tw5WNUZ5QGL/7icVB0VR8tyNkOOxwlEEMsnO VjYU9zxlpNWtdOzyfDgQV0sz3gHCXHoTtgkQmicGUeGd/6esPyGVQ8bA93oS97az epoRmiUfQRzX0aLWcdzyQbLdnqjjuYv7VWzxuZZ4hc3EKTyq9QIDAQABo4ID/jCC A/owHQYDVR0OBBYEFJrtsf+R5EKJPXhNVu/LAwbrzum9MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83 YTY2ZTdmYi04OWQ5LTQ2N2EtODNjYi0wMzFiYjE3Y2NmYmUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzdhNjZlN2ZiLTg5ZDktNDY3YS04 M2NiLTAzMWJiMTdjY2ZiZS83YTY2ZTdmYi04OWQ5LTQ2N2EtODNjYi0wMzFiYjE3 Y2NmYmUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCD2zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCQmu6L5iT19VvTJ3WwoeUN NIwJzpOzt60w1bvRYItdP+YYVS1MdRDyJqW3OqLQ93ksa52vsd980JE/LxSunalV rlpGePgJpKyFsGFXTJAG4qVd7zrIdSvyxLS7XDezYwuLUICumD9fG3uqTopHqYMz mNvKLxBHgCX1nb+C5p/XbNRoi17COsUY9I8aA1y9nUQRGDiHk/lpu+4h7+iBkwN+ JjBdGQjZBvJV3MMz/7CKNvZhTa13ASJ3LT7NVf9ncb0gbVPH31d9Y3zTN2b8UyPp b7YaDjswMhkYWn0dN3XRPehf2qjEkopx969JujCXOMg5y4dytKTfn5OpdZZeBeAU -----END CERTIFICATE-----Generated at Sun Mar 1 22:06:30 2026 by rpki-client