$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer File: 8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.cer (raw, json) Hash identifier: RsedJdm3mPRJSB67at8qrDV5DYQVXMQ3Wk3u9/jaJMA= Subject key identifier: 0C:7F:51:3A:CA:E6:89:01:EF:B6:04:40:C6:22:EB:65:05:EC:5B:4A Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD99684A48440466C69F08900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Feb 2026 13:48:19 +0000 Certificate not after: Wed 17 May 2028 03:10:37 +0000 Subordinate resources: AS: 402163 IP: 23.153.212.0/24 IP: 2602:f464::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d9:96:84:a4:84:40:46:6c:69:f0:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 13 13:48:19 2026 GMT Not After : May 17 03:10:37 2028 GMT Subject: CN=8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bd:14:7c:11:95:7a:41:09:bc:f3:ee:e1:30: 9d:78:d9:57:07:cf:73:4c:ba:b9:22:6a:d1:cf:67: fe:fd:0f:ae:00:b5:14:92:f0:67:1f:30:47:1a:a6: 6a:31:4a:bb:bf:c5:d9:3d:ea:ef:d5:19:bc:e3:ab: 7c:3f:a0:81:8a:cb:e4:96:0f:ab:9f:03:af:9f:f5: b3:97:77:b5:64:cb:6c:8e:da:24:a9:79:29:fa:ba: 8f:a9:d5:49:3f:66:3f:f2:9c:e0:a5:31:95:6f:c3: db:39:92:87:70:c6:27:33:e6:62:77:39:66:03:01: d6:57:db:bd:87:cb:69:88:55:41:0e:ac:db:f6:7a: 3a:22:ad:d0:22:b3:44:77:59:d7:b3:5b:12:a5:f3: ba:2e:c5:68:46:84:cb:99:0a:e6:4d:8f:6d:9b:f7: 0c:23:5a:bc:03:51:eb:9f:13:da:5a:62:c8:a8:a0: dc:19:75:48:41:e0:4d:53:89:7f:23:d9:d6:85:1f: 86:39:d6:77:24:86:63:52:b4:3b:9c:88:4d:ae:22: 02:fe:41:68:7c:c3:a8:a7:3c:1d:ca:42:9e:fd:63: 25:11:14:27:b0:8d:6d:6a:3a:34:a8:67:19:51:f4: 19:cb:ae:d6:cb:27:5f:8e:8e:fc:03:8f:63:6d:55: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:7F:51:3A:CA:E6:89:01:EF:B6:04:40:C6:22:EB:65:05:EC:5B:4A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e/8ffd8679-e9cf-4fd4-83b3-d97aa70ecc3e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.153.212.0/24 IPv6: 2602:f464::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402163 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:38:d0:a7:3e:7e:21:0a:82:7c:9f:e7:04:93:0b:5a:7b:45: d6:73:e9:c0:f3:ee:0e:5c:eb:88:dc:fa:5c:46:60:be:3f:ff: c6:89:f2:dd:30:8a:fe:2e:5d:dc:54:a3:4c:13:b3:96:04:fb: 35:6d:93:25:91:d3:bd:23:94:c8:e0:78:ac:62:0f:1c:6c:0e: 50:14:7c:9e:cd:60:76:88:e0:26:8e:d7:d9:19:7a:db:aa:28: 73:f9:a3:3a:6a:e8:d9:42:ad:6c:45:c8:ec:42:bf:f1:80:3f: 67:9f:f3:9a:c8:d6:33:4c:59:79:cf:cb:e5:74:02:c3:3b:41: 6d:6c:c8:35:eb:04:d0:ff:95:eb:2c:ed:06:32:4e:ab:14:53: 5b:6f:91:50:ed:4a:ea:03:72:3c:c4:a8:b3:92:54:fe:ff:21: 75:e2:80:cc:2c:df:98:27:77:f5:c8:c8:47:59:4a:a7:07:ad: 60:5f:b0:c9:88:df:31:b5:3e:d3:48:80:1b:08:1c:fe:25:52: 95:12:bb:3e:f5:31:e5:2b:93:30:5b:a5:2d:b1:bc:bf:e8:29: 0c:2d:e3:4a:15:a5:2b:90:27:69:4d:5b:58:e9:a5:a7:05:7a: f5:d8:b0:dc:12:a5:46:ea:b1:24:a1:b4:19:76:b7:75:95:be: f3:93:ca:b7 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEzZloSkhEBGbGnwiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMzEzNDgxOVoXDTI4MDUxNzAzMTAzN1owLzEtMCsGA1UEAxMk OGZmZDg2NzktZTljZi00ZmQ0LTgzYjMtZDk3YWE3MGVjYzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir0UfBGVekEJvPPu4TCdeNlXB89zTLq5ImrR z2f+/Q+uALUUkvBnHzBHGqZqMUq7v8XZPerv1Rm846t8P6CBisvklg+rnwOvn/Wz l3e1ZMtsjtokqXkp+rqPqdVJP2Y/8pzgpTGVb8PbOZKHcMYnM+ZidzlmAwHWV9u9 h8tpiFVBDqzb9no6Iq3QIrNEd1nXs1sSpfO6LsVoRoTLmQrmTY9tm/cMI1q8A1Hr nxPaWmLIqKDcGXVIQeBNU4l/I9nWhR+GOdZ3JIZjUrQ7nIhNriIC/kFofMOopzwd ykKe/WMlERQnsI1tajo0qGcZUfQZy67Wyydfjo78A49jbVVBhwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFAx/UTrK5okB77YEQMYi62UF7FtKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 ZmZkODY3OS1lOWNmLTRmZDQtODNiMy1kOTdhYTcwZWNjM2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzhmZmQ4Njc5LWU5Y2YtNGZkNC04 M2IzLWQ5N2FhNzBlY2MzZS84ZmZkODY3OS1lOWNmLTRmZDQtODNiMy1kOTdhYTcw ZWNjM2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmdQwDgQCAAIwCAMGACYC9GQAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYi8zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8ONCnPn4hCoJ8n+cEkwtae0XW c+nA8+4OXOuI3PpcRmC+P//GifLdMIr+Ll3cVKNME7OWBPs1bZMlkdO9I5TI4His Yg8cbA5QFHyezWB2iOAmjtfZGXrbqihz+aM6aujZQq1sRcjsQr/xgD9nn/OayNYz TFl5z8vldALDO0FtbMg16wTQ/5XrLO0GMk6rFFNbb5FQ7UrqA3I8xKizklT+/yF1 4oDMLN+YJ3f1yMhHWUqnB61gX7DJiN8xtT7TSIAbCBz+JVKVErs+9THlK5MwW6Ut sby/6CkMLeNKFaUrkCdpTVtY6aWnBXr12LDcEqVG6rEkobQZdrd1lb7zk8q3 -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:27 2026 by rpki-client