$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer File: 86cd88aa-b3dd-4226-a7ab-c41221343e0b.cer (raw, json) Hash identifier: 86D6KIFgaHFAO6G/kBYt1peYdrCDf4pfe24GKLYvyr4= Subject key identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CFF49A2A99D99C3A83F961600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Feb 2026 01:54:08 +0000 Certificate not after: Thu 01 Jun 2028 00:54:08 +0000 Subordinate resources: AS: 40111 IP: 170.118.248.0/21 IP: 192.68.164.0/24 IP: 208.71.232.0/22 IP: 208.93.32.0/22 IP: 2605:bd80::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ff:49:a2:a9:9d:99:c3:a8:3f:96:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 27 01:54:08 2026 GMT Not After : Jun 1 00:54:08 2028 GMT Subject: CN=86cd88aa-b3dd-4226-a7ab-c41221343e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c9:5f:dd:5f:7e:1a:9d:bc:6f:b1:6b:f7:49: f8:00:23:a6:1a:db:ac:cf:8d:30:00:38:97:c6:5e: 96:a2:2d:ba:06:a0:98:85:7c:f3:2d:f8:3d:15:ad: 0a:b0:62:cf:a6:9c:f4:10:b4:07:7f:0e:48:67:ac: 3a:7d:ff:83:0c:8e:07:20:3b:a3:ba:12:e8:1d:d3: 0d:fd:ff:d6:bf:e9:80:de:e6:2b:c6:88:e9:74:4a: f8:ac:91:07:9c:7e:ca:7b:fe:5e:4b:2a:dd:c9:95: 75:80:c2:69:4a:1a:d4:c2:18:e1:31:b9:76:7b:07: e6:e7:67:4e:3a:d4:ba:c8:9a:f9:80:e1:16:81:c9: f3:7e:2e:81:ae:e9:f7:28:d1:6c:17:a6:b6:27:30: 44:6f:cf:6a:7b:c4:91:fb:d4:f3:59:07:aa:8d:59: 29:a7:42:14:9d:b6:2d:c0:42:40:50:6e:1e:6f:0e: 86:f1:a1:ba:a2:b7:be:ce:ee:da:1c:d1:f1:84:ce: dc:05:a7:49:de:36:d3:60:72:f7:54:41:ad:ed:9a: ca:9c:cb:69:b5:1e:8a:28:b0:ec:3e:8c:96:af:1f: 6d:9b:69:ff:94:cc:c6:d4:b6:5f:7e:59:18:1d:10: 95:50:2f:d0:e2:47:76:1e:f2:24:0b:f1:bb:59:d1: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:92:21:4D:14:54:D2:1F:CB:15:7D:07:31:D6:58:71:85:56:D5:85 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/86cd88aa-b3dd-4226-a7ab-c41221343e0b/86cd88aa-b3dd-4226-a7ab-c41221343e0b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 170.118.248.0/21 192.68.164.0/24 208.71.232.0/22 208.93.32.0/22 IPv6: 2605:bd80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 40111 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:00:be:4b:e6:d4:d5:e7:b3:0c:3f:88:35:11:3e:b2:a1:22: 95:d8:d1:0f:9c:e6:f7:dd:fb:8e:05:12:9e:5a:4f:ce:fe:be: 97:28:c0:58:c3:c2:a2:dc:15:e0:3a:e0:6c:b5:85:21:fc:7f: ed:0f:e0:df:3a:c8:de:d1:02:67:bd:db:77:94:b7:4c:5c:b3: 17:5d:3c:11:01:7b:0c:44:6e:c4:dc:b6:14:21:1b:ca:90:64: fd:27:27:6e:66:22:83:08:77:9d:24:ca:34:89:82:82:f2:6e: 40:7a:ce:70:a3:62:b0:ae:2b:34:1d:13:6a:fb:13:4e:08:b2: 6d:a8:c2:86:ba:23:7f:fa:9f:e9:9d:d6:a8:0a:cb:92:fe:51: 89:e1:e5:69:ad:7e:4e:49:3d:f4:63:09:0a:c0:e2:ff:e2:97: 14:b2:fc:e6:3c:b5:59:00:f3:9e:6d:5b:0e:a4:0a:19:18:2d: c4:fb:85:89:e8:36:65:31:48:90:d1:84:95:4f:55:fb:8f:50: c7:5e:dd:5c:f3:d8:9d:25:3d:8f:bd:2f:c8:56:cf:14:56:fe: c2:8b:73:be:92:69:01:c8:ac:36:d2:a0:d6:2f:e6:59:89:c2: 6b:7a:c0:02:28:36:74:75:30:4a:58:db:74:63:6e:01:c4:4b: cd:0e:16:a8 -----BEGIN CERTIFICATE----- MIIHKjCCBhKgAwIBAgIUAQ0Mn0MoWEz/SaKpnZnDqD+WFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNzAxNTQwOFoXDTI4MDYwMTAwNTQwOFowLzEtMCsGA1UEAxMk ODZjZDg4YWEtYjNkZC00MjI2LWE3YWItYzQxMjIxMzQzZTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMlf3V9+Gp28b7Fr90n4ACOmGtusz40wADiX xl6Woi26BqCYhXzzLfg9Fa0KsGLPppz0ELQHfw5IZ6w6ff+DDI4HIDujuhLoHdMN /f/Wv+mA3uYrxojpdEr4rJEHnH7Ke/5eSyrdyZV1gMJpShrUwhjhMbl2ewfm52dO OtS6yJr5gOEWgcnzfi6Brun3KNFsF6a2JzBEb89qe8SR+9TzWQeqjVkpp0IUnbYt wEJAUG4ebw6G8aG6ore+zu7aHNHxhM7cBadJ3jbTYHL3VEGt7ZrKnMtptR6KKLDs PoyWrx9tm2n/lMzG1LZfflkYHRCVUC/Q4kd2HvIkC/G7WdGJgwIDAQABo4IEPDCC BDgwHQYDVR0OBBYEFDWSIU0UVNIfyxV9BzHWWHGFVtWFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 NmNkODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEyMjEzNDNlMGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzg2Y2Q4OGFhLWIzZGQtNDIyNi1h N2FiLWM0MTIyMTM0M2UwYi84NmNkODhhYS1iM2RkLTQyMjYtYTdhYi1jNDEyMjEz NDNlMGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwQAYIKwYBBQUH AQcBAf8EMTAvMB4EAgABMBgDBAOqdvgDBADARKQDBALQR+gDBALQXSAwDQQCAAIw BwMFACYFvYAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAJyvMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHoA vkvm1NXnsww/iDURPrKhIpXY0Q+c5vfd+44FEp5aT87+vpcowFjDwqLcFeA64Gy1 hSH8f+0P4N86yN7RAme923eUt0xcsxddPBEBewxEbsTcthQhG8qQZP0nJ25mIoMI d50kyjSJgoLybkB6znCjYrCuKzQdE2r7E04Ism2owoa6I3/6n+md1qgKy5L+UYnh 5Wmtfk5JPfRjCQrA4v/ilxSy/OY8tVkA855tWw6kChkYLcT7hYnoNmUxSJDRhJVP VfuPUMde3Vzz2J0lPY+9L8hWzxRW/sKLc76SaQHIrDbSoNYv5lmJwmt6wAIoNnR1 MEpY23RjbgHES80OFqg= -----END CERTIFICATE-----Generated at Mon Mar 2 00:01:17 2026 by rpki-client