$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9b108d7c-c7d4-498a-99da-311c2b5c7ca6.cer File: 9b108d7c-c7d4-498a-99da-311c2b5c7ca6.cer (raw, json) Hash identifier: epmT5MUynl7d8lD8pQW74OVhL+LRhXR6heU7KjiszeY= Subject key identifier: 6D:D5:C4:57:38:48:58:AC:ED:45:5A:14:42:3B:75:CF:3F:EE:35:51 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CB0250DC5207046792E6D3C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9b108d7c-c7d4-498a-99da-311c2b5c7ca6/9b108d7c-c7d4-498a-99da-311c2b5c7ca6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9b108d7c-c7d4-498a-99da-311c2b5c7ca6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 29 Jan 2026 17:31:34 +0000 Certificate not after: Wed 03 May 2028 16:31:34 +0000 Subordinate resources: IP: 104.145.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b0:25:0d:c5:20:70:46:79:2e:6d:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 29 17:31:34 2026 GMT Not After : May 3 16:31:34 2028 GMT Subject: CN=9b108d7c-c7d4-498a-99da-311c2b5c7ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:af:4f:95:00:33:dd:fc:f9:00:72:30:90: 0f:bb:e4:2a:83:7a:9e:53:f2:94:02:e0:d1:e9:b3: 8d:0b:3d:1c:45:7e:1e:ef:1b:57:82:cb:f1:d1:7c: b5:8f:ab:2b:61:a4:30:b1:18:0d:3a:7e:13:32:b9: 38:c4:8f:e5:7f:59:41:6b:7b:a7:67:50:01:1f:f9: 20:9f:ef:d1:1d:81:9f:a0:c7:15:8e:d8:f9:92:7d: fa:24:db:6a:38:79:af:7f:b6:6c:1c:30:8a:f4:73: 35:86:66:ea:ee:44:c2:3f:54:74:08:1c:97:51:12: 4d:0e:72:a0:83:5a:6b:65:34:a3:9a:50:e0:57:a2: f0:fc:a3:c9:62:47:e2:3c:ba:91:4a:1b:de:13:44: 60:f7:e9:30:2a:aa:31:7f:ed:8b:bc:11:83:a6:be: d5:ba:0a:2f:f5:7a:18:f1:f9:06:da:43:aa:68:84: 44:bc:ed:7f:e1:d2:92:d3:4e:22:b6:0d:ea:26:1a: 2d:c8:46:af:50:c1:82:85:8a:bd:c6:70:b2:69:e7: e7:b9:bd:f1:f6:a7:55:2d:b1:a0:b3:21:0e:4f:7c: e5:0b:c0:98:d4:c4:39:aa:aa:2f:60:17:6e:0e:58: ee:3a:64:ec:39:03:66:3d:9b:95:a2:dc:9f:6f:4d: 75:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D5:C4:57:38:48:58:AC:ED:45:5A:14:42:3B:75:CF:3F:EE:35:51 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9b108d7c-c7d4-498a-99da-311c2b5c7ca6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9b108d7c-c7d4-498a-99da-311c2b5c7ca6/9b108d7c-c7d4-498a-99da-311c2b5c7ca6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 104.145.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:71:e8:a9:8b:e1:2f:19:a9:19:b5:5d:07:f6:ff:05:b0:df: 5b:41:8b:be:c8:51:90:43:4c:d8:dd:21:87:85:2a:57:c6:b4: ab:33:ef:a8:ef:8a:ac:ea:78:cf:61:0a:64:dd:dc:8d:3c:57: 68:15:a5:e6:12:13:ef:02:f5:ad:ee:cf:11:fb:de:2b:2f:81: b2:da:51:33:9b:5b:bc:10:1c:a5:08:75:e1:a7:d3:39:1a:e2: 43:0a:6c:78:80:f7:32:77:3d:50:03:64:74:99:51:ae:d2:aa: 1d:c3:dc:ae:ff:16:ea:38:82:59:75:5b:3f:1a:c5:4a:33:c4: 20:6c:93:59:42:13:fa:43:c7:5c:18:32:89:f3:79:8b:d7:a3: 49:6e:d3:8f:dd:11:d6:59:53:ab:97:ee:4b:d9:37:e7:7c:0a: d0:6c:bc:89:c9:b2:45:c6:8b:d0:6a:6d:43:02:20:c8:84:51: 6e:61:a7:86:c8:11:03:83:63:80:c3:ee:7f:a6:0f:09:23:f2: 43:5c:cf:80:4c:f9:90:e5:b0:da:24:6b:4f:d2:d9:50:12:ee: 16:38:22:6d:89:14:d4:57:62:fc:75:cc:59:1a:ad:2f:fb:f7: 5f:42:d1:13:a0:79:cf:8c:2a:6e:d4:01:cc:51:15:24:8e:ae: e1:7a:e7:8a -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEywJQ3FIHBGeS5tPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEyOTE3MzEzNFoXDTI4MDUwMzE2MzEzNFowLzEtMCsGA1UEAxMk OWIxMDhkN2MtYzdkNC00OThhLTk5ZGEtMzExYzJiNWM3Y2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz+vT5UAM938+QByMJAPu+Qqg3qeU/KUAuDR 6bONCz0cRX4e7xtXgsvx0Xy1j6srYaQwsRgNOn4TMrk4xI/lf1lBa3unZ1ABH/kg n+/RHYGfoMcVjtj5kn36JNtqOHmvf7ZsHDCK9HM1hmbq7kTCP1R0CByXURJNDnKg g1prZTSjmlDgV6Lw/KPJYkfiPLqRShveE0Rg9+kwKqoxf+2LvBGDpr7Vugov9XoY 8fkG2kOqaIREvO1/4dKS004itg3qJhotyEavUMGChYq9xnCyaefnub3x9qdVLbGg syEOT3zlC8CY1MQ5qqovYBduDljuOmTsOQNmPZuVotyfb011NQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFG3VxFc4SFis7UVaFEI7dc8/7jVRMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 YjEwOGQ3Yy1jN2Q0LTQ5OGEtOTlkYS0zMTFjMmI1YzdjYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzliMTA4ZDdjLWM3ZDQtNDk4YS05 OWRhLTMxMWMyYjVjN2NhNi85YjEwOGQ3Yy1jN2Q0LTQ5OGEtOTlkYS0zMTFjMmI1 YzdjYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARokSAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZnHoqYvhLxmpGbVdB/b/ BbDfW0GLvshRkENM2N0hh4UqV8a0qzPvqO+KrOp4z2EKZN3cjTxXaBWl5hIT7wL1 re7PEfveKy+BstpRM5tbvBAcpQh14afTORriQwpseID3Mnc9UANkdJlRrtKqHcPc rv8W6jiCWXVbPxrFSjPEIGyTWUIT+kPHXBgyifN5i9ejSW7Tj90R1llTq5fuS9k3 53wK0Gy8icmyRcaL0GptQwIgyIRRbmGnhsgRA4NjgMPuf6YPCSPyQ1zPgEz5kOWw 2iRrT9LZUBLuFjgibYkU1Fdi/HXMWRqtL/v3X0LRE6B5z4wqbtQBzFEVJI6u4Xrn ig== -----END CERTIFICATE-----Generated at Sun Mar 1 18:08:36 2026 by rpki-client