$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b24c8d2c-965f-4056-aec3-cb0367f62a31.cer File: b24c8d2c-965f-4056-aec3-cb0367f62a31.cer (raw, json) Hash identifier: ChLZcDmOOrli9+eMg5dKEB/M7xuJkJBdzFJWQrwpjd8= Subject key identifier: 6E:78:8E:06:04:51:B2:86:01:E7:2D:50:08:49:70:FB:06:DB:D8:20 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CF17500D39879DA375BC54080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b24c8d2c-965f-4056-aec3-cb0367f62a31/b24c8d2c-965f-4056-aec3-cb0367f62a31.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b24c8d2c-965f-4056-aec3-cb0367f62a31/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Feb 2026 03:00:12 +0000 Certificate not after: Sat 27 May 2028 02:00:12 +0000 Subordinate resources: IP: 173.46.144.0/20 IP: 206.72.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f1:75:00:d3:98:79:da:37:5b:c5:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 22 03:00:12 2026 GMT Not After : May 27 02:00:12 2028 GMT Subject: CN=b24c8d2c-965f-4056-aec3-cb0367f62a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:bb:58:3a:d8:45:ca:14:09:b0:94:af:4c: ed:af:5b:f1:2a:21:52:a9:75:fe:36:b9:51:b2:01: 1a:ce:bf:8f:35:28:84:11:37:37:69:1d:cd:32:f3: a3:0a:5d:c0:09:af:35:87:e7:ef:e1:21:27:f4:5c: bc:88:d6:b9:af:cd:05:7d:ce:30:ab:f2:31:aa:97: fd:78:46:41:93:31:d7:14:c7:ac:c8:c9:53:33:13: 26:c0:fd:6f:d2:a5:70:4d:fe:c7:d7:40:2f:58:fc: 88:00:7b:19:1d:10:63:34:b1:34:26:79:a9:f0:65: b9:4c:20:dc:e4:ba:e0:e7:c5:19:59:a8:5e:56:5d: 68:a6:1d:b7:e2:42:06:d2:3a:c3:90:e7:72:2a:d3: e4:a8:d2:bb:79:5b:38:ab:de:c2:fd:b8:c0:e7:37: 0b:8a:ac:45:a2:e3:0e:6a:45:58:93:ea:25:6c:55: 8f:83:79:59:a2:d9:a1:4d:c8:32:40:b5:fe:bc:d1: 42:92:9f:2d:af:6c:8f:c3:3f:e6:2e:37:df:2d:4c: 82:21:52:18:06:91:05:6a:33:c2:4c:e6:f9:c9:73: a6:45:e7:e7:65:fd:b2:31:c6:7f:76:b8:d0:fc:33: 3e:7b:9f:2b:8d:9c:b6:cf:6a:14:0a:12:90:2e:44: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:78:8E:06:04:51:B2:86:01:E7:2D:50:08:49:70:FB:06:DB:D8:20 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b24c8d2c-965f-4056-aec3-cb0367f62a31/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b24c8d2c-965f-4056-aec3-cb0367f62a31/b24c8d2c-965f-4056-aec3-cb0367f62a31.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 173.46.144.0/20 206.72.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:fa:1e:5d:2c:3d:48:65:2c:99:a7:39:d7:dd:92:38:ab:64: fc:0e:c4:ac:d4:d7:7d:c6:9c:45:98:77:39:b0:d1:8c:a5:66: 7f:06:eb:e3:06:3a:a7:e1:bf:50:61:c2:ef:f9:8d:23:05:8f: c2:84:82:50:1c:4e:f9:5a:de:d0:10:cb:30:6f:da:fe:bc:8c: 8c:fd:2b:90:33:e9:c4:41:1c:a1:1b:12:72:b9:be:80:14:ab: 9d:4e:22:22:a3:bd:33:a2:35:7d:48:31:4b:de:fc:35:50:ab: ee:9c:fd:cb:0b:26:23:44:74:9b:55:35:b0:3f:be:a4:7c:03: b8:37:77:a9:16:b5:0c:ab:d1:fc:8f:79:38:1f:e2:20:06:1e: a8:0c:c5:15:69:7d:14:41:7c:97:2e:b5:db:04:59:1d:bd:2c: aa:bc:ab:3e:49:76:bf:e1:dc:5f:d5:3c:3a:ed:95:d3:02:00: ce:15:a1:a1:4a:b7:33:ed:82:5f:7b:ed:80:b4:3b:74:b6:36: 97:34:9a:63:71:c0:30:ab:8e:ef:13:05:e5:7a:13:e3:20:4f: 4d:09:d6:8b:60:92:48:de:fb:0f:7f:b1:28:c6:1d:03:0c:f3: 56:ed:13:0b:8a:97:fb:43:74:10:21:3a:5d:f1:64:0b:f8:31: 37:5f:b7:56 -----BEGIN CERTIFICATE----- MIIG8zCCBdugAwIBAgIUAQ0Mn0MoWEzxdQDTmHnaN1vFQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyMjAzMDAxMloXDTI4MDUyNzAyMDAxMlowLzEtMCsGA1UEAxMk YjI0YzhkMmMtOTY1Zi00MDU2LWFlYzMtY2IwMzY3ZjYyYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZi7WDrYRcoUCbCUr0ztr1vxKiFSqXX+NrlR sgEazr+PNSiEETc3aR3NMvOjCl3ACa81h+fv4SEn9Fy8iNa5r80Ffc4wq/Ixqpf9 eEZBkzHXFMesyMlTMxMmwP1v0qVwTf7H10AvWPyIAHsZHRBjNLE0Jnmp8GW5TCDc 5Lrg58UZWaheVl1oph234kIG0jrDkOdyKtPkqNK7eVs4q97C/bjA5zcLiqxFouMO akVYk+olbFWPg3lZotmhTcgyQLX+vNFCkp8tr2yPwz/mLjffLUyCIVIYBpEFajPC TOb5yXOmRefnZf2yMcZ/drjQ/DM+e58rjZy2z2oUChKQLkRnywIDAQABo4IEBTCC BAEwHQYDVR0OBBYEFG54jgYEUbKGAectUAhJcPsG29ggMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i MjRjOGQyYy05NjVmLTQwNTYtYWVjMy1jYjAzNjdmNjJhMzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2IyNGM4ZDJjLTk2NWYtNDA1Ni1h ZWMzLWNiMDM2N2Y2MmEzMS9iMjRjOGQyYy05NjVmLTQwNTYtYWVjMy1jYjAzNjdm NjJhMzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAStLpADBATOSHAwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAjPoeXSw9SGUs mac5192SOKtk/A7ErNTXfcacRZh3ObDRjKVmfwbr4wY6p+G/UGHC7/mNIwWPwoSC UBxO+Vre0BDLMG/a/ryMjP0rkDPpxEEcoRsScrm+gBSrnU4iIqO9M6I1fUgxS978 NVCr7pz9ywsmI0R0m1U1sD++pHwDuDd3qRa1DKvR/I95OB/iIAYeqAzFFWl9FEF8 ly612wRZHb0sqryrPkl2v+HcX9U8Ou2V0wIAzhWhoUq3M+2CX3vtgLQ7dLY2lzSa Y3HAMKuO7xMF5XoT4yBPTQnWi2CSSN77D3+xKMYdAwzzVu0TC4qX+0N0ECE6XfFk C/gxN1+3Vg== -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:01 2026 by rpki-client