$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5.cer File: d0247306-290f-4f19-89c3-f2f1fe2c16d5.cer (raw, json) Hash identifier: rTtLoU5teU3PWmk81ZJSh+wOj6QH1QodIXAJ74qUyzY= Subject key identifier: 29:01:B4:58:73:01:74:01:DA:58:66:DA:B5:8A:DE:C4:B7:C4:4C:7E Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CB2F87590E79CDE132AF20500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/d0247306-290f-4f19-89c3-f2f1fe2c16d5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 17:49:08 +0000 Certificate not after: Thu 04 May 2028 16:49:08 +0000 Subordinate resources: AS: 4927 IP: 64.4.128.0/19 IP: 64.29.224.0/20 IP: 64.68.128.0/20 IP: 199.201.128.0/24 IP: 205.254.224.0/19 IP: 207.71.192.0/18 IP: 207.154.64.0/18 IP: 2001:19f8::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:f8:75:90:e7:9c:de:13:2a:f2:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 30 17:49:08 2026 GMT Not After : May 4 16:49:08 2028 GMT Subject: CN=d0247306-290f-4f19-89c3-f2f1fe2c16d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:76:ab:5f:14:7d:2d:db:b7:06:70:28:dc:7d: f7:c6:2e:3d:28:f9:d7:06:5b:3d:05:99:6b:b8:42: 70:8a:07:c6:7b:7c:55:05:1b:05:0a:88:26:c3:fb: a2:9b:21:16:cf:e7:25:81:e8:e9:51:a5:e3:b0:cc: 70:89:5d:20:4f:0b:c6:56:7d:94:84:05:7c:cf:22: 97:34:0c:d7:8e:4e:f2:d9:b0:a8:4f:25:f3:63:39: a6:dc:27:9f:3d:2e:c4:d0:d4:4e:84:13:65:a2:19: 35:cc:be:46:78:83:ff:5e:01:4f:94:5e:69:24:bf: 86:aa:33:6e:1e:94:8f:b6:31:0a:86:33:00:be:ec: 9d:d1:92:6c:9f:37:73:86:36:e7:83:7a:a7:24:60: 7f:89:26:78:48:26:20:9c:64:14:c0:76:72:98:1d: fb:32:04:1c:43:df:28:93:ae:67:ef:95:67:a2:42: c7:e9:b0:da:0a:8c:b6:7d:57:cc:b5:ca:a3:ea:91: 4b:b8:f6:43:34:4e:00:b6:d4:0b:31:32:5a:d2:32: 1e:01:22:f1:6a:7e:98:20:c8:07:56:12:4a:d8:5a: 6d:b4:cf:44:ec:e9:f0:e8:a7:0b:07:27:0b:6f:a5: 14:77:91:c8:59:97:c9:fe:71:84:d5:22:02:63:d1: 11:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:01:B4:58:73:01:74:01:DA:58:66:DA:B5:8A:DE:C4:B7:C4:4C:7E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d0247306-290f-4f19-89c3-f2f1fe2c16d5/d0247306-290f-4f19-89c3-f2f1fe2c16d5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 64.4.128.0/19 64.29.224.0/20 64.68.128.0/20 199.201.128.0/24 205.254.224.0/19 207.71.192.0/18 207.154.64.0/18 IPv6: 2001:19f8::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4927 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:e3:03:b2:ee:1e:c1:8b:ae:19:32:83:69:95:e2:be:01:ec: 4e:e8:04:1e:08:cb:59:0b:b5:20:73:0e:4c:2f:4a:74:94:81: d7:3f:1d:f3:66:5a:3d:7f:58:cf:6d:ce:35:94:31:ef:78:9b: 53:58:1e:62:e6:5b:dc:f2:16:c7:2e:47:49:50:81:81:f6:da: e5:4e:06:4a:85:87:bb:4a:c2:99:22:8b:12:f2:a6:11:76:d6: c4:ce:94:63:5b:22:aa:91:c7:6f:36:01:b0:2a:21:2b:65:29: dd:aa:92:93:c7:01:b1:c0:3b:06:48:55:3c:a2:90:5b:6c:64: 43:e9:13:d8:cf:f6:ce:af:97:8c:03:a2:ee:34:14:f5:68:c2: 7d:0c:eb:6e:f0:66:4d:9a:54:b9:2a:09:df:cb:35:63:46:ec: ff:ff:6c:bb:8b:52:b2:8c:90:41:00:a8:2b:94:7c:38:8e:22: 3a:26:e4:b0:0c:58:ff:10:71:d4:f9:48:2e:40:c2:ad:cd:0e: 41:13:21:98:1a:30:a9:1a:fc:44:eb:75:c0:de:be:dc:a8:2b: ed:e5:59:ca:8b:80:55:3b:d5:94:1d:54:1d:0e:5a:dc:27:85: a6:b6:74:8d:ed:9b:3d:55:f8:3c:0b:1e:da:7f:0b:a3:85:ab: 11:79:41:9f -----BEGIN CERTIFICATE----- MIIHOzCCBiOgAwIBAgIUAQ0Mn0MoWEyy+HWQ55zeEyryBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEzMDE3NDkwOFoXDTI4MDUwNDE2NDkwOFowLzEtMCsGA1UEAxMk ZDAyNDczMDYtMjkwZi00ZjE5LTg5YzMtZjJmMWZlMmMxNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXarXxR9Ldu3BnAo3H33xi49KPnXBls9BZlr uEJwigfGe3xVBRsFCogmw/uimyEWz+clgejpUaXjsMxwiV0gTwvGVn2UhAV8zyKX NAzXjk7y2bCoTyXzYzmm3CefPS7E0NROhBNlohk1zL5GeIP/XgFPlF5pJL+GqjNu HpSPtjEKhjMAvuyd0ZJsnzdzhjbng3qnJGB/iSZ4SCYgnGQUwHZymB37MgQcQ98o k65n75VnokLH6bDaCoy2fVfMtcqj6pFLuPZDNE4AttQLMTJa0jIeASLxan6YIMgH VhJK2FpttM9E7Onw6KcLBycLb6UUd5HIWZfJ/nGE1SICY9ER2wIDAQABo4IETTCC BEkwHQYDVR0OBBYEFCkBtFhzAXQB2lhm2rWK3sS3xEx+MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9k MDI0NzMwNi0yOTBmLTRmMTktODljMy1mMmYxZmUyYzE2ZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2QwMjQ3MzA2LTI5MGYtNGYxOS04 OWMzLWYyZjFmZTJjMTZkNS9kMDI0NzMwNi0yOTBmLTRmMTktODljMy1mMmYxZmUy YzE2ZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwUgYIKwYBBQUH AQcBAf8EQzBBMDAEAgABMCoDBAVABIADBARAHeADBARARIADBADHyYADBAXN/uAD BAbPR8ADBAbPmkAwDQQCAAIwBwMFACABGfgwGQYIKwYBBQUHAQgBAf8ECjAIoAYw BAICEz8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAe+MDsu4ewYuuGTKDaZXivgHsTugEHgjLWQu1IHMOTC9K dJSB1z8d82ZaPX9Yz23ONZQx73ibU1geYuZb3PIWxy5HSVCBgfba5U4GSoWHu0rC mSKLEvKmEXbWxM6UY1siqpHHbzYBsCohK2Up3aqSk8cBscA7BkhVPKKQW2xkQ+kT 2M/2zq+XjAOi7jQU9WjCfQzrbvBmTZpUuSoJ38s1Y0bs//9su4tSsoyQQQCoK5R8 OI4iOibksAxY/xBx1PlILkDCrc0OQRMhmBowqRr8ROt1wN6+3Kgr7eVZyouAVTvV lB1UHQ5a3CeFprZ0je2bPVX4PAse2n8Lo4WrEXlBnw== -----END CERTIFICATE-----Generated at Sun Mar 1 16:24:13 2026 by rpki-client