$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer File: c4147360-87bc-49de-9f1c-3c020bc4f1ee.cer (raw, json) Hash identifier: bk2xyeTRyLLd/28uOom00ydiAslPXqNomln+Z3asMb4= Subject key identifier: 99:BC:B1:E3:04:DA:A9:29:0F:BA:75:31:F2:6E:85:53:FD:C3:CA:86 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CBB2488DD579F7715D1CBF180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 16:04:25 +0000 Certificate not after: Sun 07 May 2028 15:04:25 +0000 Subordinate resources: AS: 20210 IP: 206.109.104.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bb:24:88:dd:57:9f:77:15:d1:cb:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 2 16:04:25 2026 GMT Not After : May 7 15:04:25 2028 GMT Subject: CN=c4147360-87bc-49de-9f1c-3c020bc4f1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c0:90:82:a4:7c:10:34:8a:35:67:42:1e:a1: 27:46:04:10:e6:5d:b7:f3:7b:ac:42:af:53:e5:c4: 4c:28:62:01:bd:56:e9:53:8e:2c:0a:d6:2e:f9:fd: 8a:69:38:f0:31:51:87:2a:04:61:a5:80:e1:f1:dc: 00:0b:ee:fc:69:fc:be:3c:6c:35:79:44:d9:9f:99: cb:79:d5:eb:43:37:27:92:fc:e0:8b:ac:14:dc:df: 5d:a2:18:41:05:56:58:78:4b:51:4d:35:96:62:7a: 39:ab:8c:ae:40:2b:77:a9:c6:7d:b5:86:f5:a7:cf: f8:2f:60:56:cf:92:ad:1e:78:22:6f:55:89:99:2c: a0:ca:44:1f:59:c7:02:6b:bf:54:4c:f4:9a:f2:9c: a8:21:d1:91:86:33:28:ee:f4:68:98:4a:4c:b3:0d: 75:50:16:e0:54:f8:fe:36:c4:48:35:a3:2f:c4:3b: 64:bf:ef:17:3b:75:1c:b9:e8:c1:6b:10:88:fc:c8: 57:60:ec:f3:77:52:bd:9b:c8:d6:76:9a:92:cb:77: d9:ce:f7:64:45:9c:49:6b:ae:47:c1:be:46:f5:6f: db:5b:90:8b:51:77:fe:1c:94:80:c7:95:d4:9e:48: bf:da:27:34:dd:c3:0b:97:15:51:d8:f2:99:2e:5c: 47:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BC:B1:E3:04:DA:A9:29:0F:BA:75:31:F2:6E:85:53:FD:C3:CA:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c4147360-87bc-49de-9f1c-3c020bc4f1ee/c4147360-87bc-49de-9f1c-3c020bc4f1ee.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 206.109.104.0/23 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20210 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:4d:24:e3:f4:d7:4d:df:6f:01:07:f7:05:b6:29:c5:23:6a: 24:e2:65:23:0e:6f:f3:a2:dc:a3:77:ba:ea:0c:8c:08:b7:9b: a8:8d:8d:3c:31:0b:9f:68:27:49:6a:d7:ca:8a:aa:5f:50:05: 8c:3f:bb:c0:2e:81:2b:b7:26:c3:b6:bb:6a:fc:22:a6:00:07: c3:9d:fe:6d:e9:b0:4b:09:31:42:1f:59:1a:30:7e:8e:36:23: ec:f8:32:07:c2:07:1d:aa:db:55:e5:f3:19:98:83:f0:29:2b: 8a:ec:d6:5f:e0:ae:a6:67:c0:0f:9a:e4:82:bb:0a:9a:cf:17: af:0f:a7:70:0d:86:ff:bd:ba:19:c6:aa:6c:f4:76:7c:5f:24: cd:f4:b7:a6:40:a3:4e:78:dd:34:4a:cc:e2:f4:fd:20:7a:ef: d7:2d:2e:ff:65:dd:4b:34:48:1f:88:1a:14:89:27:63:1c:fe: bb:45:8b:8e:64:43:71:a1:ef:22:58:03:5d:e0:2c:af:b7:b4: c4:53:b5:5f:37:a6:0b:8d:98:d0:62:df:37:ab:00:61:5f:89: 29:17:13:21:0f:7c:36:7d:bc:e0:e6:9c:f9:29:11:be:0c:6d: bc:ab:df:87:f2:58:fa:38:ca:a5:b9:75:bc:88:0f:d6:82:8e: 76:ba:18:b2 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEy7JIjdV593FdHL8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwMjE2MDQyNVoXDTI4MDUwNzE1MDQyNVowLzEtMCsGA1UEAxMk YzQxNDczNjAtODdiYy00OWRlLTlmMWMtM2MwMjBiYzRmMWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4sCQgqR8EDSKNWdCHqEnRgQQ5l2383usQq9T 5cRMKGIBvVbpU44sCtYu+f2KaTjwMVGHKgRhpYDh8dwAC+78afy+PGw1eUTZn5nL edXrQzcnkvzgi6wU3N9dohhBBVZYeEtRTTWWYno5q4yuQCt3qcZ9tYb1p8/4L2BW z5KtHngib1WJmSygykQfWccCa79UTPSa8pyoIdGRhjMo7vRomEpMsw11UBbgVPj+ NsRINaMvxDtkv+8XO3UcuejBaxCI/MhXYOzzd1K9m8jWdpqSy3fZzvdkRZxJa65H wb5G9W/bW5CLUXf+HJSAx5XUnki/2ic03cMLlxVR2PKZLlxHZwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFJm8seME2qkpD7p1MfJuhVP9w8qGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j NDE0NzM2MC04N2JjLTQ5ZGUtOWYxYy0zYzAyMGJjNGYxZWUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2M0MTQ3MzYwLTg3YmMtNDlkZS05 ZjFjLTNjMDIwYmM0ZjFlZS9jNDE0NzM2MC04N2JjLTQ5ZGUtOWYxYy0zYzAyMGJj NGYxZWUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAHObWgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC TvIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAi00k4/TXTd9vAQf3BbYpxSNqJOJlIw5v86Lco3e66gyMCLeb qI2NPDELn2gnSWrXyoqqX1AFjD+7wC6BK7cmw7a7avwipgAHw53+bemwSwkxQh9Z GjB+jjYj7PgyB8IHHarbVeXzGZiD8CkriuzWX+CupmfAD5rkgrsKms8Xrw+ncA2G /726GcaqbPR2fF8kzfS3pkCjTnjdNErM4vT9IHrv1y0u/2XdSzRIH4gaFIknYxz+ u0WLjmRDcaHvIlgDXeAsr7e0xFO1XzemC42Y0GLfN6sAYV+JKRcTIQ98Nn284Oac +SkRvgxtvKvfh/JY+jjKpbl1vIgP1oKOdroYsg== -----END CERTIFICATE-----Generated at Sun Mar 1 18:09:49 2026 by rpki-client