$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9.cer File: bba4d47d-81d9-426f-989d-103f6cf490c9.cer (raw, json) Hash identifier: miuxseAvEvp0CuYLomLJJR+yzMIRjZIRwaT8PXZxt40= Subject key identifier: 4F:5E:15:B9:F3:0C:6D:6C:E7:90:3C:19:17:99:6C:76:1A:F1:B9:62 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D5D6043E2698217C55F4FB000 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/bba4d47d-81d9-426f-989d-103f6cf490c9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Apr 2026 18:45:43 +0000 Certificate not after: Tue 04 Jul 2028 18:45:43 +0000 Subordinate resources: IP: 209.177.64.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:60:43:e2:69:82:17:c5:5f:4f:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 1 18:45:43 2026 GMT Not After : Jul 4 18:45:43 2028 GMT Subject: CN=bba4d47d-81d9-426f-989d-103f6cf490c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bc:37:ab:99:6d:55:cb:ee:7b:1a:cb:fc:b5: 5f:3b:4f:02:32:4e:31:bc:ae:10:8c:1b:dd:dd:1b: 75:7c:2c:51:14:19:9a:66:a4:c9:3c:5d:ce:28:ba: b1:40:5e:48:45:ca:41:cf:6a:2c:9e:80:62:2b:07: 70:81:11:a5:90:16:06:b0:f2:dc:83:65:4a:e5:61: 36:5f:40:89:33:5e:ed:d6:eb:ab:93:cd:6f:cb:b0: 47:26:cd:57:1a:01:a5:4f:b3:12:4b:99:61:ba:52: 32:42:ca:74:50:9b:dc:fb:ee:60:25:01:4f:59:22: 4f:dc:35:ca:aa:ed:16:93:56:87:a4:d9:d3:0e:92: 03:cd:8b:f1:2b:e8:de:79:a2:02:27:89:65:da:82: da:a1:8c:27:b6:72:b8:73:e0:a9:af:00:98:2a:30: 7f:0a:cf:34:2e:e4:06:6c:96:4a:f4:b3:a6:76:80: 54:a3:73:93:b6:5b:b8:0d:ee:c7:5a:b2:54:6b:ba: e3:3b:ff:82:59:74:e2:e2:a8:5d:cc:5d:2b:c5:47: eb:68:58:b3:4f:72:76:22:42:19:b8:a9:52:61:6f: f3:07:b2:4b:d8:bb:17:45:aa:bf:68:ae:c2:4b:4a: 4e:ac:79:28:86:36:c5:56:fb:b7:52:d2:e2:7f:b8: a6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5E:15:B9:F3:0C:6D:6C:E7:90:3C:19:17:99:6C:76:1A:F1:B9:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bba4d47d-81d9-426f-989d-103f6cf490c9/bba4d47d-81d9-426f-989d-103f6cf490c9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 209.177.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:cf:2d:ec:90:5a:2d:3d:0d:1c:06:b5:9a:b2:9c:64:9a:c5: fc:92:b8:52:7b:a8:77:0b:c5:6f:39:e9:e7:db:37:a8:2b:84: 69:3e:23:fa:00:da:66:2e:ea:7e:a6:f1:04:03:b1:b5:62:e4: 39:32:ab:95:25:38:d9:99:80:31:5a:63:95:c0:15:6f:35:89: 31:75:53:68:0e:32:3e:61:ff:39:85:88:96:83:6c:d0:1e:1c: f6:6b:18:0b:79:84:54:d6:ec:27:db:e2:ee:5e:86:74:e6:92: 3f:d3:7c:56:f3:4d:38:17:d4:1a:d7:43:5a:ff:a7:9b:5b:d9: b8:a0:25:a7:0e:dc:87:53:b4:41:65:2c:cb:81:e3:18:30:86: 6f:e2:4f:b5:42:b0:6c:6b:6e:f8:bc:83:e2:69:fc:a8:02:f7: 24:13:a1:35:e5:30:d8:48:2d:de:26:51:09:6b:1b:db:aa:d9: c5:c4:3d:c0:ab:0b:b4:08:7d:db:59:04:71:f1:09:9b:f1:61: 85:0d:39:b9:71:97:89:6e:8c:63:a4:f0:be:6a:f4:26:ad:e1: 81:82:28:23:45:cb:2a:4f:d0:91:cc:e1:e0:58:24:43:a7:90: cb:d6:e0:34:5b:e6:41:74:31:1c:f5:3d:00:fc:13:cf:50:3d: c5:7b:ad:62 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1dYEPiaYIXxV9PsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwMTE4NDU0M1oXDTI4MDcwNDE4NDU0M1owLzEtMCsGA1UEAxMk YmJhNGQ0N2QtODFkOS00MjZmLTk4OWQtMTAzZjZjZjQ5MGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bw3q5ltVcvuexrL/LVfO08CMk4xvK4QjBvd 3Rt1fCxRFBmaZqTJPF3OKLqxQF5IRcpBz2osnoBiKwdwgRGlkBYGsPLcg2VK5WE2 X0CJM17t1uurk81vy7BHJs1XGgGlT7MSS5lhulIyQsp0UJvc++5gJQFPWSJP3DXK qu0Wk1aHpNnTDpIDzYvxK+jeeaICJ4ll2oLaoYwntnK4c+CprwCYKjB/Cs80LuQG bJZK9LOmdoBUo3OTtlu4De7HWrJUa7rjO/+CWXTi4qhdzF0rxUfraFizT3J2IkIZ uKlSYW/zB7JL2LsXRaq/aK7CS0pOrHkohjbFVvu3UtLif7imaQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFE9eFbnzDG1s55A8GReZbHYa8bliMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i YmE0ZDQ3ZC04MWQ5LTQyNmYtOTg5ZC0xMDNmNmNmNDkwYzkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JiYTRkNDdkLTgxZDktNDI2Zi05 ODlkLTEwM2Y2Y2Y0OTBjOS9iYmE0ZDQ3ZC04MWQ5LTQyNmYtOTg5ZC0xMDNmNmNm NDkwYzkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPRsUAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH88t7JBaLT0NHAa1mrKc ZJrF/JK4UnuodwvFbznp59s3qCuEaT4j+gDaZi7qfqbxBAOxtWLkOTKrlSU42ZmA MVpjlcAVbzWJMXVTaA4yPmH/OYWIloNs0B4c9msYC3mEVNbsJ9vi7l6GdOaSP9N8 VvNNOBfUGtdDWv+nm1vZuKAlpw7ch1O0QWUsy4HjGDCGb+JPtUKwbGtu+LyD4mn8 qAL3JBOhNeUw2Egt3iZRCWsb26rZxcQ9wKsLtAh921kEcfEJm/FhhQ05uXGXiW6M Y6Twvmr0Jq3hgYIoI0XLKk/Qkczh4FgkQ6eQy9bgNFvmQXQxHPU9APwTz1A9xXut Yg== -----END CERTIFICATE-----Generated at Fri Apr 17 02:31:16 2026 by rpki-client