$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c88c237b-2263-4206-adb8-41de1a85a73f.cer File: c88c237b-2263-4206-adb8-41de1a85a73f.cer (raw, json) Hash identifier: EbgXXKywi8nlz2Cu4AlxpjkCAIw+nozZ5mKNg0pfjF0= Subject key identifier: F3:2E:5C:B2:2C:15:AE:12:0E:83:18:62:0F:4F:52:C5:56:19:D5:C4 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC692CCC8CC6626BE6D8A0480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c88c237b-2263-4206-adb8-41de1a85a73f/c88c237b-2263-4206-adb8-41de1a85a73f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c88c237b-2263-4206-adb8-41de1a85a73f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Feb 2026 18:20:28 +0000 Certificate not after: Thu 11 May 2028 17:20:28 +0000 Subordinate resources: AS: 400201 IP: 23.129.88.0/24 IP: 131.143.200.0/22 IP: 2602:fbf7::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:92:cc:c8:cc:66:26:be:6d:8a:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 6 18:20:28 2026 GMT Not After : May 11 17:20:28 2028 GMT Subject: CN=c88c237b-2263-4206-adb8-41de1a85a73f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9b:44:07:77:41:7d:ed:14:c7:50:6a:f4:95: 3b:e3:0c:1f:62:08:bb:c0:47:ff:5f:c0:89:ef:e5: 5e:7f:9c:ad:94:d3:e4:72:cf:2f:f7:5f:58:5d:ad: 6d:fa:0e:e4:51:de:4a:97:c7:b4:3b:01:d3:43:55: 26:4d:39:9b:5f:9b:04:bb:07:4f:c2:56:34:83:20: 71:7d:9d:48:df:6f:0d:a2:ef:a8:39:7f:09:8c:0c: f3:f8:b9:5c:93:93:11:12:0d:ac:0c:c4:7e:ab:7c: ea:11:0f:54:79:de:1b:73:c6:02:b7:de:90:b3:42: 46:a9:47:23:fa:d7:26:98:bf:a7:f0:3a:f0:3a:6f: f4:96:e8:67:73:f1:6c:9b:78:c6:d6:1f:7e:55:63: 25:9a:70:23:3a:0e:85:3e:bc:15:ba:89:9a:0c:fa: f2:78:21:6d:de:ef:ec:33:62:5c:9c:55:23:16:65: 1c:c1:a5:53:6c:f8:bb:d3:a6:47:55:54:50:2f:b6: c2:c1:07:e3:2a:d3:a0:e7:bf:68:f5:58:49:13:59: a5:b6:22:17:ca:c0:9e:0b:16:f4:c1:c0:2b:db:c2: d9:d3:fa:57:a2:30:20:48:c6:cf:67:b3:78:b2:45: 71:99:6c:86:87:ae:d8:ef:f0:15:47:79:56:c6:c9: 26:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2E:5C:B2:2C:15:AE:12:0E:83:18:62:0F:4F:52:C5:56:19:D5:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c88c237b-2263-4206-adb8-41de1a85a73f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c88c237b-2263-4206-adb8-41de1a85a73f/c88c237b-2263-4206-adb8-41de1a85a73f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.129.88.0/24 131.143.200.0/22 IPv6: 2602:fbf7::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400201 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:30:f5:bc:e6:f5:a5:0c:f8:97:ce:6c:e2:9b:b6:f9:5c:4a: 5f:e1:0f:4f:c9:18:ad:fb:bc:e7:54:d6:36:2e:fb:3d:1e:45: 1d:15:8d:c9:c7:d8:e9:12:64:8f:b6:7b:ac:11:9c:90:c6:ed: f3:cf:2d:04:14:c9:37:b5:d5:c3:4f:8b:c3:18:ef:a9:3c:ad: 01:ed:2f:f6:8b:10:f5:78:69:29:db:d1:40:96:eb:4d:bf:fd: dc:05:f5:0d:b5:84:11:16:e9:0e:cb:67:88:71:e0:e8:3d:bb: f7:43:00:9a:03:12:42:27:27:01:39:fa:ec:70:31:33:9e:ef: 63:3e:fa:dd:6d:e9:5d:b4:94:39:14:3c:93:7c:e2:a4:90:ca: af:96:53:7d:b2:68:44:8c:2a:94:90:9a:cd:d0:be:0e:cb:3c: 26:59:c3:d4:3e:b1:5e:23:52:92:ac:92:0a:98:36:64:50:5e: f7:fb:6b:19:a1:3a:5d:1c:ff:24:cc:7c:54:5e:aa:d4:bb:17: e0:db:b7:75:b2:f6:b7:73:98:87:87:93:d5:8c:61:11:0b:86: 75:2a:1d:2a:eb:00:a9:07:36:cb:94:e2:dd:05:15:de:33:9f: 68:f2:d3:60:5e:05:d9:3d:25:fb:0e:af:13:77:3f:9c:5f:7f: 32:bc:c6:40 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWEzGkszIzGYmvm2KBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNjE4MjAyOFoXDTI4MDUxMTE3MjAyOFowLzEtMCsGA1UEAxMk Yzg4YzIzN2ItMjI2My00MjA2LWFkYjgtNDFkZTFhODVhNzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJtEB3dBfe0Ux1Bq9JU74wwfYgi7wEf/X8CJ 7+Vef5ytlNPkcs8v919YXa1t+g7kUd5Kl8e0OwHTQ1UmTTmbX5sEuwdPwlY0gyBx fZ1I328Nou+oOX8JjAzz+Llck5MREg2sDMR+q3zqEQ9Ued4bc8YCt96Qs0JGqUcj +tcmmL+n8DrwOm/0luhnc/Fsm3jG1h9+VWMlmnAjOg6FPrwVuomaDPryeCFt3u/s M2JcnFUjFmUcwaVTbPi706ZHVVRQL7bCwQfjKtOg579o9VhJE1mltiIXysCeCxb0 wcAr28LZ0/pXojAgSMbPZ7N4skVxmWyGh67Y7/AVR3lWxskm2QIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFPMuXLIsFa4SDoMYYg9PUsVWGdXEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j ODhjMjM3Yi0yMjYzLTQyMDYtYWRiOC00MWRlMWE4NWE3M2YvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2M4OGMyMzdiLTIyNjMtNDIwNi1h ZGI4LTQxZGUxYTg1YTczZi9jODhjMjM3Yi0yMjYzLTQyMDYtYWRiOC00MWRlMWE4 NWE3M2YubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXgVgDBAKDj8gwDgQCAAIwCAMGBCYC+/cAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYbSTBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBbMPW85vWlDPiXzmzi m7b5XEpf4Q9PyRit+7znVNY2Lvs9HkUdFY3Jx9jpEmSPtnusEZyQxu3zzy0EFMk3 tdXDT4vDGO+pPK0B7S/2ixD1eGkp29FAlutNv/3cBfUNtYQRFukOy2eIceDoPbv3 QwCaAxJCJycBOfrscDEznu9jPvrdbeldtJQ5FDyTfOKkkMqvllN9smhEjCqUkJrN 0L4OyzwmWcPUPrFeI1KSrJIKmDZkUF73+2sZoTpdHP8kzHxUXqrUuxfg27d1sva3 c5iHh5PVjGERC4Z1Kh0q6wCpBzbLlOLdBRXeM59o8tNgXgXZPSX7Dq8Tdz+cX38y vMZA -----END CERTIFICATE-----Generated at Sun Mar 1 16:22:04 2026 by rpki-client