$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.cer File: cda2dd6b-7ad6-4c49-80a2-5ab58364f431.cer (raw, json) Hash identifier: 1NHcxzbnzmPLwyY4bT6mZ570PiRxYXs9cBnHo3U4jxk= Subject key identifier: 48:4C:07:42:A3:06:64:E2:4A:CA:BF:C1:42:46:3A:CF:54:53:C6:60 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD3E1DC229AA1B0684C2413E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 12:45:17 +0000 Certificate not after: Tue 16 May 2028 11:45:17 +0000 Subordinate resources: AS: 402187 IP: 23.153.124.0/24 IP: 2602:f46c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d3:e1:dc:22:9a:a1:b0:68:4c:24:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 11 12:45:17 2026 GMT Not After : May 16 11:45:17 2028 GMT Subject: CN=cda2dd6b-7ad6-4c49-80a2-5ab58364f431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4f:e4:7f:ae:a5:6f:52:6f:76:e7:20:ca:f6: ca:f3:35:68:71:45:cd:c4:66:c2:f1:ff:82:65:e4: 51:d7:51:8a:5f:46:ff:78:57:fa:93:eb:9c:54:f9: b1:6e:0d:71:b6:aa:83:37:d1:16:7e:57:39:5d:41: 1c:57:31:9e:a1:c8:95:b3:b9:3a:3e:22:c7:24:6e: b7:b7:f8:b0:6f:de:09:2b:b3:76:eb:41:e8:8d:9e: b8:cc:c6:5f:67:98:fb:89:42:93:91:20:f2:95:08: 51:71:db:70:53:7c:af:34:d5:87:8c:35:02:66:ca: a4:20:57:f4:fc:01:75:70:d5:68:eb:41:1c:ab:8f: 5c:85:b6:c8:f9:5e:29:d9:4c:8c:15:8f:f1:07:4e: 33:bb:c0:24:44:d9:e9:41:35:b3:7b:b0:b6:42:4f: 5d:1c:46:6c:44:83:02:c4:fb:f3:89:ea:d2:05:7a: 9a:fe:81:7a:56:d1:0e:ee:b0:f3:ba:df:35:4b:bd: 26:d7:e9:8b:b5:13:96:4b:55:9a:cd:b6:05:1c:91: b6:64:06:8a:7a:0d:05:a4:2b:e8:5a:53:f7:54:69: c7:a8:a5:59:1a:f9:fc:56:06:7c:85:ad:45:d3:87: 33:2e:e2:cb:27:5f:7f:1e:18:4b:7a:76:43:96:0a: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:4C:07:42:A3:06:64:E2:4A:CA:BF:C1:42:46:3A:CF:54:53:C6:60 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.153.124.0/24 IPv6: 2602:f46c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402187 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:37:3b:3c:45:5f:6e:cd:42:c2:78:c1:b0:d0:bc:d8:35:57: bd:af:ca:62:ab:b3:3c:08:22:7d:ac:1c:f0:a1:8a:61:f7:fa: f0:a6:b9:ff:2f:c7:ea:ce:f1:62:6e:25:8c:bc:72:60:d0:d3: 28:af:b0:2c:d5:fa:7c:be:fe:e1:da:98:fb:f9:86:c8:12:93: d5:b3:35:75:b3:96:1e:ee:88:9d:2d:5d:20:3b:32:12:5f:aa: fd:c2:76:8d:f7:3f:06:35:4c:34:09:28:45:0f:31:f0:86:ee: 6a:f6:fb:31:0d:98:8a:53:94:dc:c3:2e:83:47:b6:78:3e:af: 8d:1f:2c:69:dc:2b:1b:b3:b2:84:42:cd:0c:5b:ef:a6:83:99: f9:20:80:62:8a:05:52:ce:bf:e4:8c:b1:0f:a5:5c:8a:ed:34: f4:f0:71:21:7f:1d:69:84:44:16:23:b4:9c:0d:01:98:53:1e: 52:76:6e:a2:0b:22:30:a1:2a:e2:73:68:f0:fb:2b:f3:da:76: e1:6c:f4:5a:61:07:73:78:ee:8b:a3:36:80:f4:d1:e9:a8:3d: 2b:ad:72:5b:7e:bd:7b:c3:14:d3:05:fb:2c:63:fa:c6:8d:5b: f7:71:df:10:6b:ff:7a:8a:05:03:fc:a6:32:04:9b:fb:05:02: 25:b0:a3:18 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEzT4dwimqGwaEwkE+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMTEyNDUxN1oXDTI4MDUxNjExNDUxN1owLzEtMCsGA1UEAxMk Y2RhMmRkNmItN2FkNi00YzQ5LTgwYTItNWFiNTgzNjRmNDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok/kf66lb1JvducgyvbK8zVocUXNxGbC8f+C ZeRR11GKX0b/eFf6k+ucVPmxbg1xtqqDN9EWflc5XUEcVzGeociVs7k6PiLHJG63 t/iwb94JK7N260HojZ64zMZfZ5j7iUKTkSDylQhRcdtwU3yvNNWHjDUCZsqkIFf0 /AF1cNVo60Ecq49chbbI+V4p2UyMFY/xB04zu8AkRNnpQTWze7C2Qk9dHEZsRIMC xPvzierSBXqa/oF6VtEO7rDzut81S70m1+mLtROWS1WazbYFHJG2ZAaKeg0FpCvo WlP3VGnHqKVZGvn8VgZ8ha1F04czLuLLJ19/HhhLenZDlgozYwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEhMB0KjBmTiSsq/wUJGOs9UU8ZgMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j ZGEyZGQ2Yi03YWQ2LTRjNDktODBhMi01YWI1ODM2NGY0MzEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2NkYTJkZDZiLTdhZDYtNGM0OS04 MGEyLTVhYjU4MzY0ZjQzMS9jZGEyZGQ2Yi03YWQ2LTRjNDktODBhMi01YWI1ODM2 NGY0MzEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmXwwDgQCAAIwCAMGACYC9GwAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjCzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByNzs8RV9uzULCeMGw0LzYNVe9 r8piq7M8CCJ9rBzwoYph9/rwprn/L8fqzvFibiWMvHJg0NMor7As1fp8vv7h2pj7 +YbIEpPVszV1s5Ye7oidLV0gOzISX6r9wnaN9z8GNUw0CShFDzHwhu5q9vsxDZiK U5Tcwy6DR7Z4Pq+NHyxp3Csbs7KEQs0MW++mg5n5IIBiigVSzr/kjLEPpVyK7TT0 8HEhfx1phEQWI7ScDQGYUx5Sdm6iCyIwoSric2jw+yvz2nbhbPRaYQdzeO6LozaA 9NHpqD0rrXJbfr17wxTTBfssY/rGjVv3cd8Qa/96igUD/KYyBJv7BQIlsKMY -----END CERTIFICATE-----Generated at Sun Mar 1 16:22:09 2026 by rpki-client