$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/906c5f7a-3df0-4c93-9785-1f769bba6590.cer File: 906c5f7a-3df0-4c93-9785-1f769bba6590.cer (raw, json) Hash identifier: 9qfm9Digs7fSbKvUIQ8GEmWLcjatQ8+GG77tWNP5IhU= Subject key identifier: EF:3A:88:03:BB:76:6C:C7:EE:BC:CF:7B:F5:7B:38:4B:74:5E:45:C7 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D0341F4EAD516DB638D36F880 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/906c5f7a-3df0-4c93-9785-1f769bba6590/906c5f7a-3df0-4c93-9785-1f769bba6590.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/906c5f7a-3df0-4c93-9785-1f769bba6590/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 28 Feb 2026 12:01:54 +0000 Certificate not after: Fri 02 Jun 2028 11:01:54 +0000 Subordinate resources: IP: 23.155.56.0/24 IP: 216.40.76.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:41:f4:ea:d5:16:db:63:8d:36:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 28 12:01:54 2026 GMT Not After : Jun 2 11:01:54 2028 GMT Subject: CN=906c5f7a-3df0-4c93-9785-1f769bba6590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:a2:35:7f:ec:2a:41:4a:65:86:75:3b:17: 1a:07:9a:cb:0f:74:6a:99:94:fa:07:3b:0a:a1:5c: e7:f1:f4:21:ff:a5:17:dc:09:5e:bd:9a:e1:3e:e7: a5:54:5e:b6:76:4d:eb:2a:94:ca:0e:73:e7:fd:42: 08:96:5d:53:1f:4e:18:b4:1a:b7:3e:e3:1f:82:61: c6:46:d5:04:30:7f:43:c0:7f:d8:d4:99:97:3e:8a: 7e:6f:b7:3a:3b:12:65:76:2d:b7:a2:4a:58:9c:77: 66:a2:c8:2a:8c:18:a2:73:c3:26:a6:e2:c8:03:b8: 77:73:0a:1e:17:b8:aa:90:91:2f:3d:ce:f6:48:d6: 20:bb:d3:a8:64:cb:cb:ee:2e:82:fe:96:6e:e7:6f: de:5b:87:b9:1b:9b:d0:83:48:6e:a5:55:31:dc:3d: 37:e8:fa:ba:a6:c2:d8:db:56:c0:32:91:01:86:45: 51:b1:91:2f:59:9b:12:0a:7a:4f:2f:b9:8b:5a:72: 59:3a:d3:26:60:11:27:ce:0b:83:9b:cb:2a:9b:42: 71:eb:30:3e:d4:73:c5:00:77:c0:95:0b:6a:13:a1: 4a:f5:3c:c0:74:1f:ea:c0:85:da:45:d3:99:79:c3: ea:67:79:e5:d6:f9:5a:66:4a:5e:84:bf:37:67:bf: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3A:88:03:BB:76:6C:C7:EE:BC:CF:7B:F5:7B:38:4B:74:5E:45:C7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/906c5f7a-3df0-4c93-9785-1f769bba6590/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/906c5f7a-3df0-4c93-9785-1f769bba6590/906c5f7a-3df0-4c93-9785-1f769bba6590.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.155.56.0/24 216.40.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:84:6a:2a:2c:7e:a4:41:58:9a:d4:c7:39:b9:15:e8:11:4b: 00:c2:1a:10:f7:4b:a9:e2:ec:5c:ea:e2:2f:db:8b:37:55:45: e8:2e:fc:c2:0a:96:03:c7:8f:ab:61:ac:8a:07:02:bc:b0:a8: 6b:15:b0:e5:7e:6d:9d:84:70:1f:59:3d:ff:77:85:3b:b7:fa: df:95:2a:b6:69:72:f1:73:13:5b:b5:ac:e9:1e:55:e9:da:20: 32:f2:9a:d0:3c:fb:1a:ec:12:1f:90:76:2b:e5:5a:f3:60:90: c6:9c:14:47:ba:20:97:d4:5c:8e:96:af:b6:80:8a:d0:5c:dd: 2e:c1:fb:26:c3:35:7d:da:ab:f4:0f:8c:a8:5f:e1:8b:08:4d: 5c:4a:b3:f1:5c:89:d1:ff:0b:28:85:53:28:5e:00:01:f2:63: 62:c9:6e:bf:bd:5b:12:45:92:8d:4b:0c:43:ab:8d:1f:d0:35: 98:ed:9a:4f:7b:16:a2:c5:0d:12:a7:05:4d:ed:a6:e2:5a:af: 8f:d5:12:27:11:69:69:8b:14:55:86:d4:75:f8:95:6a:1b:d2: a2:ba:70:e4:75:5a:e5:35:f6:64:44:5a:1d:ff:94:58:f0:2b: 32:7a:e6:0b:ee:a0:56:03:d6:03:be:f0:10:2d:5b:d1:89:d4: 3e:c9:e6:25 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWE0DQfTq1RbbY402+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyODEyMDE1NFoXDTI4MDYwMjExMDE1NFowLzEtMCsGA1UEAxMk OTA2YzVmN2EtM2RmMC00YzkzLTk3ODUtMWY3NjliYmE2NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplaiNX/sKkFKZYZ1OxcaB5rLD3RqmZT6BzsK oVzn8fQh/6UX3AlevZrhPuelVF62dk3rKpTKDnPn/UIIll1TH04YtBq3PuMfgmHG RtUEMH9DwH/Y1JmXPop+b7c6OxJldi23okpYnHdmosgqjBiic8MmpuLIA7h3cwoe F7iqkJEvPc72SNYgu9OoZMvL7i6C/pZu52/eW4e5G5vQg0hupVUx3D036Pq6psLY 21bAMpEBhkVRsZEvWZsSCnpPL7mLWnJZOtMmYBEnzguDm8sqm0Jx6zA+1HPFAHfA lQtqE6FK9TzAdB/qwIXaRdOZecPqZ3nl1vlaZkpehL83Z78ljQIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFO86iAO7dmzH7rzPe/V7OEt0XkXHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 MDZjNWY3YS0zZGYwLTRjOTMtOTc4NS0xZjc2OWJiYTY1OTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzkwNmM1ZjdhLTNkZjAtNGM5My05 Nzg1LTFmNzY5YmJhNjU5MC85MDZjNWY3YS0zZGYwLTRjOTMtOTc4NS0xZjc2OWJi YTY1OTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAAXmzgDBALYKEwwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVIRqKix+pEFY mtTHObkV6BFLAMIaEPdLqeLsXOriL9uLN1VF6C78wgqWA8ePq2GsigcCvLCoaxWw 5X5tnYRwH1k9/3eFO7f635Uqtmly8XMTW7Ws6R5V6dogMvKa0Dz7GuwSH5B2K+Va 82CQxpwUR7ogl9RcjpavtoCK0FzdLsH7JsM1fdqr9A+MqF/hiwhNXEqz8VyJ0f8L KIVTKF4AAfJjYsluv71bEkWSjUsMQ6uNH9A1mO2aT3sWosUNEqcFTe2m4lqvj9US JxFpaYsUVYbUdfiVahvSorpw5HVa5TX2ZERaHf+UWPArMnrmC+6gVgPWA77wEC1b 0YnUPsnmJQ== -----END CERTIFICATE-----Generated at Sun Mar 1 16:22:06 2026 by rpki-client