$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88b8073a-ff36-4eec-b277-2f9327925201.cer File: 88b8073a-ff36-4eec-b277-2f9327925201.cer (raw, json) Hash identifier: s6Ahy+ULcctOYQlFt0icr64HygbaFClY+NIZ3Lg6Rdg= Subject key identifier: 98:9E:95:BE:88:A9:18:16:2D:85:97:8F:95:67:05:CE:BA:D4:ED:64 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC69644399FB60485AE8DD100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88b8073a-ff36-4eec-b277-2f9327925201/88b8073a-ff36-4eec-b277-2f9327925201.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88b8073a-ff36-4eec-b277-2f9327925201/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Feb 2026 18:27:28 +0000 Certificate not after: Thu 11 May 2028 17:27:28 +0000 Subordinate resources: AS: 26272 IP: 23.166.160.0/24 IP: 204.144.120.0/22 IP: 2605:ec0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:96:44:39:9f:b6:04:85:ae:8d:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 6 18:27:28 2026 GMT Not After : May 11 17:27:28 2028 GMT Subject: CN=88b8073a-ff36-4eec-b277-2f9327925201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:2d:50:9a:61:76:9c:89:57:b0:02:d5:d1:db: 3e:46:4e:31:29:73:d3:df:df:62:be:a9:f4:68:54: 40:2a:8f:fb:5b:8a:3b:3d:c9:7d:d4:78:c9:7a:7e: f0:42:48:7d:13:aa:70:d4:21:a5:01:12:33:48:89: 60:66:27:52:c7:4f:7b:8d:dc:b9:a7:d1:fc:f2:fe: 8b:30:f6:c7:5e:4d:05:87:5f:74:fa:26:57:4f:8b: 5b:3d:14:0d:af:d2:43:5a:4b:30:b2:9a:4d:b5:cd: ef:48:67:98:3c:3c:e6:15:2b:f2:81:e1:a3:04:35: eb:63:2b:d1:ae:4c:fa:60:b2:35:4f:34:b5:f9:b4: 66:43:d7:5f:32:e6:13:8e:e2:48:3e:81:28:c0:4d: 7f:61:76:7c:98:70:d7:48:82:5a:01:70:b0:16:78: 7c:ee:2c:ef:e2:c7:60:9d:f1:0f:c9:4a:2b:72:45: 56:f9:3f:51:c0:bd:8e:58:87:6f:3e:d3:c6:6e:73: 4d:c0:82:b8:0d:09:8a:e7:bc:e6:90:26:b7:04:84: a0:80:f5:73:a9:86:26:6e:64:e4:17:68:48:7b:c5: 76:f9:11:6b:ee:ac:16:6f:2c:d1:de:35:8c:b4:48: 2d:e6:c6:04:c1:b1:10:54:07:68:e1:e3:67:cb:41: 1b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:9E:95:BE:88:A9:18:16:2D:85:97:8F:95:67:05:CE:BA:D4:ED:64 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88b8073a-ff36-4eec-b277-2f9327925201/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88b8073a-ff36-4eec-b277-2f9327925201/88b8073a-ff36-4eec-b277-2f9327925201.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.166.160.0/24 204.144.120.0/22 IPv6: 2605:ec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26272 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:46:00:0b:d5:c7:71:6c:02:e8:19:e3:3b:01:4a:43:72:da: af:6d:bc:42:27:46:8a:a6:55:3b:27:b0:3c:b3:83:4d:df:17: e4:77:cd:a4:45:8a:c9:b0:12:e3:5f:62:09:d9:c2:5a:34:0f: fa:26:21:98:af:37:3d:78:9f:a2:79:71:57:3b:e0:5f:4a:84: f3:0c:2f:73:47:e0:de:79:e4:ba:ed:cf:eb:94:23:6c:71:09: 90:48:10:df:9d:90:0e:83:b1:3c:f8:cd:d9:6e:b8:3d:65:7c: f0:a4:64:cc:1d:91:af:3c:8e:8f:1f:13:05:e3:4e:3b:cf:e6: 9c:3f:19:24:d4:f8:83:1a:2a:a2:e8:bd:f1:fb:1e:7c:8a:46: 4b:cd:a1:2b:18:b7:c2:0b:02:4a:57:57:c1:ef:69:d4:3f:ab: 0b:45:35:ed:05:ba:40:c2:64:04:a4:fa:6d:60:cf:27:d7:2e: 99:28:42:92:39:63:70:0c:fe:cd:14:f8:08:02:65:c1:14:68: a0:5f:29:c5:6d:53:51:e1:9a:49:e2:09:40:6f:5b:ef:ec:d4: df:f2:b3:07:70:cf:b1:e3:54:4a:d1:7f:b8:00:d1:26:ee:63: 60:84:60:23:61:dd:b6:15:8a:c9:68:29:21:0d:6c:77:aa:3f: 96:fc:65:c1 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWEzGlkQ5n7YEha6N0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNjE4MjcyOFoXDTI4MDUxMTE3MjcyOFowLzEtMCsGA1UEAxMk ODhiODA3M2EtZmYzNi00ZWVjLWIyNzctMmY5MzI3OTI1MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/S1QmmF2nIlXsALV0ds+Rk4xKXPT399ivqn0 aFRAKo/7W4o7Pcl91HjJen7wQkh9E6pw1CGlARIzSIlgZidSx097jdy5p9H88v6L MPbHXk0Fh190+iZXT4tbPRQNr9JDWkswsppNtc3vSGeYPDzmFSvygeGjBDXrYyvR rkz6YLI1TzS1+bRmQ9dfMuYTjuJIPoEowE1/YXZ8mHDXSIJaAXCwFnh87izv4sdg nfEPyUorckVW+T9RwL2OWIdvPtPGbnNNwIK4DQmK57zmkCa3BISggPVzqYYmbmTk F2hIe8V2+RFr7qwWbyzR3jWMtEgt5sYEwbEQVAdo4eNny0EbWwIDAQABo4IELzCC BCswHQYDVR0OBBYEFJielb6IqRgWLYWXj5VnBc661O1kMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 OGI4MDczYS1mZjM2LTRlZWMtYjI3Ny0yZjkzMjc5MjUyMDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzg4YjgwNzNhLWZmMzYtNGVlYy1i Mjc3LTJmOTMyNzkyNTIwMS84OGI4MDczYS1mZjM2LTRlZWMtYjI3Ny0yZjkzMjc5 MjUyMDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBAAXpqADBALMkHgwDQQCAAIwBwMFACYFDsAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICZqAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlkYAC9XHcWwC6BnjOwFK Q3Lar228QidGiqZVOyewPLODTd8X5HfNpEWKybAS419iCdnCWjQP+iYhmK83PXif onlxVzvgX0qE8wwvc0fg3nnkuu3P65QjbHEJkEgQ352QDoOxPPjN2W64PWV88KRk zB2RrzyOjx8TBeNOO8/mnD8ZJNT4gxoqoui98fsefIpGS82hKxi3wgsCSldXwe9p 1D+rC0U17QW6QMJkBKT6bWDPJ9cumShCkjljcAz+zRT4CAJlwRRooF8pxW1TUeGa SeIJQG9b7+zU3/KzB3DPseNUStF/uADRJu5jYIRgI2HdthWKyWgpIQ1sd6o/lvxl wQ== -----END CERTIFICATE-----Generated at Sun Mar 1 14:40:26 2026 by rpki-client