$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a.cer File: b9396d2d-9694-49ee-99c2-276ed6a18d8a.cer (raw, json) Hash identifier: j/1eHyasQtKDmsK+lKlPDStR4XfNy8P4MwCTQkiPBGI= Subject key identifier: 0B:3F:C8:E3:07:23:BB:95:95:D1:35:8F:E7:FB:7F:1D:E0:68:EF:68 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CF8F3F2EDE19A395363120460 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/b9396d2d-9694-49ee-99c2-276ed6a18d8a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Feb 2026 19:26:38 +0000 Certificate not after: Mon 29 May 2028 18:26:38 +0000 Subordinate resources: AS: 393483 IP: 23.153.220.0/24 IP: 2620:bb:5000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:f3:f2:ed:e1:9a:39:53:63:12:04:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 24 19:26:38 2026 GMT Not After : May 29 18:26:38 2028 GMT Subject: CN=b9396d2d-9694-49ee-99c2-276ed6a18d8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f5:1d:8e:55:dd:e7:1d:48:d2:68:a0:bd:ed: 68:bd:3b:34:35:92:b5:11:bd:5c:f8:12:3a:a9:0e: 68:07:f6:f0:87:53:fa:bd:9f:db:97:e5:de:0a:f7: 64:69:ef:33:bb:8b:32:44:90:8e:21:bc:7e:a8:79: c4:23:1b:d8:1e:fc:e3:8d:a4:50:2e:2e:f9:da:48: 1c:82:de:d5:78:31:30:ad:a8:7e:21:c3:77:8a:ed: 22:08:fa:54:0b:42:b8:31:f9:f3:4f:34:21:17:dd: 1f:1b:ff:84:58:c9:f3:06:30:dc:2f:ef:ee:cb:ff: 32:d7:d3:6e:19:81:ac:bf:88:71:74:32:c2:5b:57: a7:4d:ad:cf:d0:3e:69:5b:26:c6:c2:e0:7d:4d:75: 6d:3b:be:fa:20:38:78:7a:e8:cb:c9:f9:38:9d:ca: db:5b:a0:f5:05:8e:85:45:7d:84:60:6e:0a:f2:0b: dd:24:fb:1f:f8:64:3e:52:5c:2b:c2:c5:96:61:f7: 6b:eb:9f:46:f9:73:fb:6b:e3:ae:c1:55:53:82:3f: 62:9f:56:ba:45:1a:4e:a3:8c:63:7e:5a:fa:52:64: 9a:2b:c2:e0:99:3e:9d:1b:83:c7:88:62:df:29:2c: 2f:8e:91:ab:e7:98:12:f8:42:0b:58:fe:28:fa:40: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3F:C8:E3:07:23:BB:95:95:D1:35:8F:E7:FB:7F:1D:E0:68:EF:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/b9396d2d-9694-49ee-99c2-276ed6a18d8a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.153.220.0/24 IPv6: 2620:bb:5000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393483 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:64:0f:4a:a2:15:74:f6:34:83:8e:32:59:57:75:f1:43:7d: 83:12:2b:86:66:2a:5b:66:59:27:c4:ef:5c:53:51:a2:8f:4c: 2f:63:39:eb:a0:dc:46:37:53:07:c8:d3:8d:d8:78:de:7f:42: f0:e0:0a:27:37:72:3e:2b:50:3e:b0:3a:79:a3:4a:e4:7e:71: ff:94:3c:bc:69:d4:aa:31:3c:af:b2:cc:b6:e2:b1:96:34:9a: e5:30:62:48:ab:81:75:5c:64:99:9d:38:94:ac:09:5f:90:e4: 96:b7:fa:7b:bc:c9:12:a1:bb:38:87:19:60:61:10:c8:1f:eb: ca:e8:0c:3d:bb:16:e0:b1:cf:93:88:25:0f:29:ed:7c:08:a2: 8e:e0:7d:4b:43:5a:2b:0a:d5:95:8c:b4:b3:1d:9e:88:cb:04: 91:c3:8a:e4:a7:ba:d0:f1:f3:48:60:32:91:82:85:ed:18:6c: 33:6a:16:e3:29:ab:1c:e5:1f:f8:90:23:e9:31:57:20:6c:01: 1f:b2:8e:46:cf:db:fe:38:be:01:85:f7:d1:a5:52:e8:74:1b: 1f:37:ea:9f:69:a5:60:75:2a:14:dd:18:63:75:c9:c9:40:68: 3d:78:5a:7a:9e:47:ca:ee:15:9e:44:2d:98:96:95:bb:98:ac: 9d:6d:f9:59 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWEz48/Lt4Zo5U2MSBGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNDE5MjYzOFoXDTI4MDUyOTE4MjYzOFowLzEtMCsGA1UEAxMk YjkzOTZkMmQtOTY5NC00OWVlLTk5YzItMjc2ZWQ2YTE4ZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PUdjlXd5x1I0migve1ovTs0NZK1Eb1c+BI6 qQ5oB/bwh1P6vZ/bl+XeCvdkae8zu4syRJCOIbx+qHnEIxvYHvzjjaRQLi752kgc gt7VeDEwrah+IcN3iu0iCPpUC0K4MfnzTzQhF90fG/+EWMnzBjDcL+/uy/8y19Nu GYGsv4hxdDLCW1enTa3P0D5pWybGwuB9TXVtO776IDh4eujLyfk4ncrbW6D1BY6F RX2EYG4K8gvdJPsf+GQ+UlwrwsWWYfdr659G+XP7a+OuwVVTgj9in1a6RRpOo4xj flr6UmSaK8LgmT6dG4PHiGLfKSwvjpGr55gS+EILWP4o+kBtcQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFAs/yOMHI7uVldE1j+f7fx3gaO9oMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i OTM5NmQyZC05Njk0LTQ5ZWUtOTljMi0yNzZlZDZhMThkOGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2I5Mzk2ZDJkLTk2OTQtNDllZS05 OWMyLTI3NmVkNmExOGQ4YS9iOTM5NmQyZC05Njk0LTQ5ZWUtOTljMi0yNzZlZDZh MThkOGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXmdwwDwQCAAIwCQMHACYgALtQADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGAQswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATGQPSqIVdPY0g44yWVd18UN9 gxIrhmYqW2ZZJ8TvXFNRoo9ML2M566DcRjdTB8jTjdh43n9C8OAKJzdyPitQPrA6 eaNK5H5x/5Q8vGnUqjE8r7LMtuKxljSa5TBiSKuBdVxkmZ04lKwJX5Dklrf6e7zJ EqG7OIcZYGEQyB/ryugMPbsW4LHPk4glDyntfAiijuB9S0NaKwrVlYy0sx2eiMsE kcOK5Ke60PHzSGAykYKF7RhsM2oW4ymrHOUf+JAj6TFXIGwBH7KORs/b/ji+AYX3 0aVS6HQbHzfqn2mlYHUqFN0YY3XJyUBoPXhaep5Hyu4VnkQtmJaVu5isnW35WQ== -----END CERTIFICATE-----Generated at Mon Mar 2 00:03:04 2026 by rpki-client