$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.cer File: 94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.cer (raw, json) Hash identifier: YfjKukudO38NayFSRqrbQ26LP287OjLAYeRCKTV8Ecc= Subject key identifier: 5C:12:31:4B:7E:FD:BA:67:B0:4B:EB:E3:0B:49:94:7C:62:D5:F9:00 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD433C47E3D195580D3A30900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 15:30:19 +0000 Certificate not after: Tue 16 May 2028 11:48:03 +0000 Subordinate resources: AS: 402204 IP: 23.153.140.0/24 IP: 2602:f466::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:33:c4:7e:3d:19:55:80:d3:a3:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 11 15:30:19 2026 GMT Not After : May 16 11:48:03 2028 GMT Subject: CN=94ca04b5-3bd3-40d2-91b3-57cfc8886ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:ca:94:46:49:58:30:66:64:da:b7:23:a2: e8:22:e7:43:7e:76:81:3d:35:15:58:17:c2:fc:a4: 2a:e0:15:2e:f3:20:1a:c9:2a:9b:44:f4:bc:da:41: 8c:fb:18:b6:96:9f:5a:85:74:28:34:2f:ec:7b:84: 2c:a1:7e:3b:5a:f6:b8:26:1a:fb:0c:fc:55:7f:26: 7f:7b:2e:f7:84:fc:7e:9e:be:ed:f5:49:9b:d6:78: 9e:3c:64:10:cb:b7:ce:5a:c3:b8:ce:21:77:f4:79: 8b:2c:6a:07:61:6a:99:63:3b:1f:fd:50:44:7f:b3: 6b:3b:90:b8:6c:78:de:92:c4:45:8b:a2:2f:fc:f6: ea:a8:d8:e3:b3:1b:59:a9:5c:a1:2c:ba:9e:26:83: 34:c9:a6:44:31:5f:b6:fd:b9:21:d0:5e:10:fa:37: f7:8d:60:1e:f6:12:48:bc:56:aa:5b:f6:1f:8d:e4: 78:ad:90:92:95:17:c2:8a:4b:0b:d6:1c:02:54:ef: e1:87:30:32:bc:f0:4f:ba:5a:4d:e3:32:97:63:d2: 4f:4d:cd:27:76:18:cf:bc:66:3e:16:be:2d:d6:1b: b8:d7:a0:1f:92:98:b1:79:70:88:96:dc:6a:16:88: 8b:3f:a8:fe:32:cc:7e:c0:0b:37:86:eb:9f:39:1f: d8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:12:31:4B:7E:FD:BA:67:B0:4B:EB:E3:0B:49:94:7C:62:D5:F9:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9/94ca04b5-3bd3-40d2-91b3-57cfc8886ca9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.153.140.0/24 IPv6: 2602:f466::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402204 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:34:65:8b:15:e0:4b:d7:31:ee:1b:c7:7f:d8:cf:c0:98:a6: 92:d7:84:56:59:3a:a7:d5:a5:05:d0:ae:fc:5e:d2:68:00:73: 85:8f:46:eb:67:18:7e:97:b4:35:7d:ea:49:0a:5c:45:61:ec: b6:af:93:fd:38:c2:2c:27:22:30:68:c3:38:fa:90:35:64:9c: de:ac:9b:40:85:08:12:71:67:01:f8:ce:0b:88:5b:be:3f:fd: c7:88:67:4e:84:80:05:f3:bd:9d:1b:20:ce:49:f9:32:3e:3f: a6:ab:27:ff:56:ea:7d:98:ce:c3:90:57:68:ea:42:97:ee:26: a6:3a:f1:73:05:55:3a:c1:a3:79:3e:f9:ce:26:43:59:a6:9a: 01:a0:6f:d2:90:18:4e:26:d9:68:f2:f0:3e:04:13:5e:9a:c5: 68:44:f5:bf:07:3a:ee:28:e3:bf:68:6f:0c:d6:08:a1:ed:70: d3:f9:65:33:97:5b:3d:70:75:0f:1e:08:30:52:49:af:c5:45: 76:19:67:b6:7b:cb:5b:d0:9d:04:d8:cc:99:8c:3b:a8:e9:e9: b8:8d:33:d2:2f:2a:9d:a6:12:d0:62:e3:be:ae:6b:ab:66:a1: 51:fa:0f:81:4c:9c:84:a2:fa:ca:af:6e:ac:47:a5:19:aa:34: 3b:ae:0f:2b -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEzUM8R+PRlVgNOjCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMTE1MzAxOVoXDTI4MDUxNjExNDgwM1owLzEtMCsGA1UEAxMk OTRjYTA0YjUtM2JkMy00MGQyLTkxYjMtNTdjZmM4ODg2Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwPKlEZJWDBmZNq3I6LoIudDfnaBPTUVWBfC /KQq4BUu8yAaySqbRPS82kGM+xi2lp9ahXQoNC/se4QsoX47Wva4Jhr7DPxVfyZ/ ey73hPx+nr7t9Umb1niePGQQy7fOWsO4ziF39HmLLGoHYWqZYzsf/VBEf7NrO5C4 bHjeksRFi6Iv/PbqqNjjsxtZqVyhLLqeJoM0yaZEMV+2/bkh0F4Q+jf3jWAe9hJI vFaqW/YfjeR4rZCSlRfCiksL1hwCVO/hhzAyvPBPulpN4zKXY9JPTc0ndhjPvGY+ Fr4t1hu416AfkpixeXCIltxqFoiLP6j+Msx+wAs3huufOR/Y3QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFFwSMUt+/bpnsEvr4wtJlHxi1fkAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 NGNhMDRiNS0zYmQzLTQwZDItOTFiMy01N2NmYzg4ODZjYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzk0Y2EwNGI1LTNiZDMtNDBkMi05 MWIzLTU3Y2ZjODg4NmNhOS85NGNhMDRiNS0zYmQzLTQwZDItOTFiMy01N2NmYzg4 ODZjYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmYwwDgQCAAIwCAMGACYC9GYAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjHDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCPNGWLFeBL1zHuG8d/2M/AmKaS 14RWWTqn1aUF0K78XtJoAHOFj0brZxh+l7Q1fepJClxFYey2r5P9OMIsJyIwaMM4 +pA1ZJzerJtAhQgScWcB+M4LiFu+P/3HiGdOhIAF872dGyDOSfkyPj+mqyf/Vup9 mM7DkFdo6kKX7iamOvFzBVU6waN5PvnOJkNZppoBoG/SkBhOJtlo8vA+BBNemsVo RPW/BzruKOO/aG8M1gih7XDT+WUzl1s9cHUPHggwUkmvxUV2GWe2e8tb0J0E2MyZ jDuo6em4jTPSLyqdphLQYuO+rmurZqFR+g+BTJyEovrKr26sR6UZqjQ7rg8r -----END CERTIFICATE-----Generated at Sun Mar 1 18:08:51 2026 by rpki-client