$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab2c5f0f-da9f-45cf-a764-bf960c88e37c.cer File: ab2c5f0f-da9f-45cf-a764-bf960c88e37c.cer (raw, json) Hash identifier: I3YGsXjbmLtnLLJhOTdveU6TOCs8I6stfDW5Kvaxd88= Subject key identifier: 52:A8:C2:65:EF:76:6C:1B:85:FC:68:2A:3D:AB:BF:3D:2B:16:AE:D2 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D716DD7884CDF9762EBF3AA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab2c5f0f-da9f-45cf-a764-bf960c88e37c/ab2c5f0f-da9f-45cf-a764-bf960c88e37c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab2c5f0f-da9f-45cf-a764-bf960c88e37c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 08 Apr 2026 23:09:14 +0000 Certificate not after: Sun 09 Jul 2028 21:14:55 +0000 Subordinate resources: AS: 402376 IP: 104.36.156.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:6d:d7:88:4c:df:97:62:eb:f3:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 8 23:09:14 2026 GMT Not After : Jul 9 21:14:55 2028 GMT Subject: CN=ab2c5f0f-da9f-45cf-a764-bf960c88e37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e9:93:0c:49:92:8a:61:c8:b6:29:5a:04:d9: a6:58:9e:d4:27:53:b5:e5:48:75:27:05:24:29:9e: 37:9b:a1:15:63:ce:d5:92:f1:31:cd:56:18:db:14: ea:01:02:fe:d6:16:26:8e:2b:f5:13:2c:e2:b1:d2: 72:44:89:7f:f0:7a:3a:5d:3d:4c:8f:8e:fc:6c:2c: c3:e6:68:dc:53:4d:27:88:d8:6f:42:d2:37:0b:4e: 4b:4c:9b:7f:51:66:df:0e:41:48:e6:e9:bb:27:b6: a2:d0:74:51:30:9d:59:0c:eb:f6:40:0b:52:cf:7e: d7:cf:df:af:e9:ff:c7:89:8e:44:0a:23:64:50:1d: 23:d4:65:3e:c0:cb:bc:5b:db:3a:b6:f3:c6:93:bf: ef:b9:36:dd:06:10:3e:55:3e:91:3f:d9:69:f2:ad: 00:e8:ca:87:2a:d3:0f:3e:cc:2d:65:ed:98:73:a5: b8:48:ef:58:e8:1a:01:58:4a:79:85:a3:d5:b5:8f: 2c:14:42:85:13:d7:bd:84:69:aa:f0:03:3e:a5:58: 54:49:8c:14:5d:03:b4:a2:17:ed:1b:94:e6:d5:b1: e9:70:0f:f3:50:52:94:05:73:98:91:db:b8:04:ec: 7e:45:cc:8c:b3:2e:bc:79:22:b3:94:ee:4d:33:8f: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:A8:C2:65:EF:76:6C:1B:85:FC:68:2A:3D:AB:BF:3D:2B:16:AE:D2 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab2c5f0f-da9f-45cf-a764-bf960c88e37c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ab2c5f0f-da9f-45cf-a764-bf960c88e37c/ab2c5f0f-da9f-45cf-a764-bf960c88e37c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 104.36.156.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402376 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:cd:2b:8d:e8:87:16:69:ac:14:1b:f4:93:53:c2:dd:2c:57: 55:41:8f:8e:89:d4:37:96:6b:76:c5:44:a8:dc:6e:75:2c:24: 01:97:88:94:1a:df:84:bc:ac:27:c3:95:ba:17:06:44:d3:3c: 4e:69:99:ae:5c:6a:a9:84:33:2d:be:fe:d0:80:5c:8a:15:d5: 8b:b0:3d:40:bb:45:b5:f0:8c:d9:f9:15:f0:4f:a1:d6:43:0c: 5c:d4:e2:75:0b:39:ab:61:ee:13:da:55:a1:5e:98:66:56:da: 10:70:22:27:dd:11:ed:4f:b8:b4:cf:c0:01:08:40:73:ed:d2: f0:05:61:97:38:74:e5:8f:f6:eb:f5:c1:2f:2a:c0:19:90:51: 51:98:8b:b6:ca:23:7c:49:b6:3a:bf:61:b3:aa:ac:09:ce:07: 67:b0:e3:66:c5:31:41:9d:88:a8:41:8a:59:ec:34:d9:c2:31: 35:a5:1c:cf:6d:24:69:bc:7b:b6:b1:21:4c:b3:7b:0c:1e:f3: a4:b4:b5:ad:4b:7a:a3:6d:a8:c0:47:96:ef:e2:21:44:23:a3: 49:1b:29:39:03:f6:f9:25:71:dd:02:22:8f:04:1c:b1:bd:69: c2:c1:11:92:be:ee:42:f5:e4:b7:78:42:62:a6:87:21:14:e8: bb:50:f5:ca -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1xbdeITN+XYuvzqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwODIzMDkxNFoXDTI4MDcwOTIxMTQ1NVowLzEtMCsGA1UEAxMk YWIyYzVmMGYtZGE5Zi00NWNmLWE3NjQtYmY5NjBjODhlMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOmTDEmSimHItilaBNmmWJ7UJ1O15Uh1JwUk KZ43m6EVY87VkvExzVYY2xTqAQL+1hYmjiv1EyzisdJyRIl/8Ho6XT1Mj478bCzD 5mjcU00niNhvQtI3C05LTJt/UWbfDkFI5um7J7ai0HRRMJ1ZDOv2QAtSz37Xz9+v 6f/HiY5ECiNkUB0j1GU+wMu8W9s6tvPGk7/vuTbdBhA+VT6RP9lp8q0A6MqHKtMP PswtZe2Yc6W4SO9Y6BoBWEp5haPVtY8sFEKFE9e9hGmq8AM+pVhUSYwUXQO0ohft G5Tm1bHpcA/zUFKUBXOYkdu4BOx+RcyMsy68eSKzlO5NM49YVwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFFKowmXvdmwbhfxoKj2rvz0rFq7SMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9h YjJjNWYwZi1kYTlmLTQ1Y2YtYTc2NC1iZjk2MGM4OGUzN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2FiMmM1ZjBmLWRhOWYtNDVjZi1h NzY0LWJmOTYwYzg4ZTM3Yy9hYjJjNWYwZi1kYTlmLTQ1Y2YtYTc2NC1iZjk2MGM4 OGUzN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAJoJJwwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiPIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFrNK43ohxZprBQb9JNTwt0sV1VBj46J1DeWa3bFRKjcbnUs JAGXiJQa34S8rCfDlboXBkTTPE5pma5caqmEMy2+/tCAXIoV1YuwPUC7RbXwjNn5 FfBPodZDDFzU4nULOath7hPaVaFemGZW2hBwIifdEe1PuLTPwAEIQHPt0vAFYZc4 dOWP9uv1wS8qwBmQUVGYi7bKI3xJtjq/YbOqrAnOB2ew42bFMUGdiKhBilnsNNnC MTWlHM9tJGm8e7axIUyzewwe86S0ta1LeqNtqMBHlu/iIUQjo0kbKTkD9vklcd0C Io8EHLG9acLBEZK+7kL15Ld4QmKmhyEU6LtQ9co= -----END CERTIFICATE-----Generated at Fri Apr 17 02:20:30 2026 by rpki-client