$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.cer File: d46b5c04-6ffd-4817-a7a5-68bc91297a0e.cer (raw, json) Hash identifier: EkUQo3WeqvI07Gx8HGka+eLLaJ9JR4x7gca3pgbNTa8= Subject key identifier: B8:12:04:53:57:27:CC:9D:C8:BE:BB:84:0F:41:1E:95:44:AC:B6:E3 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CBB65AF24FDA9045375B64980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Feb 2026 18:15:41 +0000 Certificate not after: Sun 07 May 2028 17:15:41 +0000 Subordinate resources: AS: 26481 IP: 199.33.120.0/21 IP: 209.74.104.0/21 IP: 2602:f649::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bb:65:af:24:fd:a9:04:53:75:b6:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 2 18:15:41 2026 GMT Not After : May 7 17:15:41 2028 GMT Subject: CN=d46b5c04-6ffd-4817-a7a5-68bc91297a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5b:b0:15:a0:4e:d6:bf:df:d4:a2:8a:93:0b: 57:6b:51:11:10:cd:53:7b:cd:9a:6a:8c:e5:8c:b7: 3c:5e:08:d2:89:9f:81:b2:fb:ec:7d:bb:66:de:db: 52:17:12:50:da:f0:bb:73:8c:0e:be:55:e4:06:f3: 26:2e:52:c4:17:ff:50:ad:ae:87:df:47:d7:b1:ed: 7e:22:c1:a1:a3:86:7a:e0:db:77:aa:8e:b9:63:86: 58:6c:63:f3:8f:b4:ba:ea:3f:9b:20:d5:29:5c:e7: 3f:38:bf:62:c5:c8:30:1f:d0:a4:2c:16:4b:0b:f9: 7e:4b:e5:b2:ef:43:9c:71:21:d3:74:71:23:f1:20: 3e:a5:a6:8b:ea:0c:70:8c:c2:24:9b:3e:b5:67:07: 78:50:06:a3:b3:26:de:65:9d:77:02:13:41:0b:d0: f2:68:ba:8e:e5:57:7c:8d:f8:06:f6:50:05:b5:ca: 3d:3c:dd:3f:62:44:12:e3:6d:21:51:38:b2:7e:64: ec:d3:75:fc:9b:d8:f3:35:bd:23:50:98:2b:fe:ee: 6f:db:9a:85:c5:a8:61:d6:f6:fa:03:63:c6:f9:66: 08:61:6b:43:25:1b:ad:92:ee:52:c7:95:4c:eb:2d: 34:b0:0b:4d:12:b6:0b:dc:72:44:db:fc:03:06:b5: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:12:04:53:57:27:CC:9D:C8:BE:BB:84:0F:41:1E:95:44:AC:B6:E3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d46b5c04-6ffd-4817-a7a5-68bc91297a0e/d46b5c04-6ffd-4817-a7a5-68bc91297a0e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 199.33.120.0/21 209.74.104.0/21 IPv6: 2602:f649::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26481 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:cf:75:37:d8:c3:6d:b6:d3:e6:50:82:19:f4:b2:88:72:3d: 2d:12:1a:7e:c6:26:f8:4d:cc:e0:3c:34:6b:ed:cd:2a:48:ab: 60:1e:cc:1e:ab:10:7c:7e:b6:5d:16:28:e2:84:d3:de:26:42: 09:5c:34:51:2d:a0:8e:ce:66:97:54:e6:31:06:2d:c5:b2:f4: 65:da:3e:df:21:8c:e2:60:86:bd:aa:1a:87:bb:7c:ea:b7:b9: 97:ff:fa:b9:19:a7:48:75:3c:fc:a1:e2:8b:fb:e9:75:31:24: 75:9d:13:67:a2:9d:43:d4:34:c0:d4:41:40:4f:4d:6c:f8:a0: d5:f2:bd:12:3d:a3:d3:26:23:2b:42:e7:5f:24:da:15:73:9c: 5a:3b:f3:71:45:ee:5a:f4:85:c6:c0:3e:47:ac:82:50:8f:43: e3:6e:f3:bc:31:46:09:9d:20:02:6c:b8:6b:37:84:ff:b3:f2: 3a:1c:58:f8:ff:82:b4:65:82:01:3d:97:60:35:08:f6:3e:c9: 5f:4a:aa:45:d5:d4:d8:12:58:a7:e4:c3:92:cc:84:a5:d4:d4: 50:31:98:26:35:b0:be:87:49:a8:ce:59:ef:22:3e:05:9d:01: f9:2d:89:b2:2c:6f:19:01:15:cb:5b:85:7a:53:a8:ee:c4:d3: cc:43:5b:ef -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWEy7Za8k/akEU3W2SYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwMjE4MTU0MVoXDTI4MDUwNzE3MTU0MVowLzEtMCsGA1UEAxMk ZDQ2YjVjMDQtNmZmZC00ODE3LWE3YTUtNjhiYzkxMjk3YTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnluwFaBO1r/f1KKKkwtXa1EREM1Te82aaozl jLc8XgjSiZ+Bsvvsfbtm3ttSFxJQ2vC7c4wOvlXkBvMmLlLEF/9Qra6H30fXse1+ IsGho4Z64Nt3qo65Y4ZYbGPzj7S66j+bINUpXOc/OL9ixcgwH9CkLBZLC/l+S+Wy 70OccSHTdHEj8SA+paaL6gxwjMIkmz61Zwd4UAajsybeZZ13AhNBC9DyaLqO5Vd8 jfgG9lAFtco9PN0/YkQS420hUTiyfmTs03X8m9jzNb0jUJgr/u5v25qFxahh1vb6 A2PG+WYIYWtDJRutku5Sx5VM6y00sAtNErYL3HJE2/wDBrUDxQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFLgSBFNXJ8ydyL67hA9BHpVErLbjMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9k NDZiNWMwNC02ZmZkLTQ4MTctYTdhNS02OGJjOTEyOTdhMGUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2Q0NmI1YzA0LTZmZmQtNDgxNy1h N2E1LTY4YmM5MTI5N2EwZS9kNDZiNWMwNC02ZmZkLTQ4MTctYTdhNS02OGJjOTEy OTdhMGUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAPHIXgDBAPRSmgwDgQCAAIwCAMGBCYC9kkAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAmdxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjPdTfYw2220+ZQghn0 sohyPS0SGn7GJvhNzOA8NGvtzSpIq2AezB6rEHx+tl0WKOKE094mQglcNFEtoI7O ZpdU5jEGLcWy9GXaPt8hjOJghr2qGoe7fOq3uZf/+rkZp0h1PPyh4ov76XUxJHWd E2einUPUNMDUQUBPTWz4oNXyvRI9o9MmIytC518k2hVznFo783FF7lr0hcbAPkes glCPQ+Nu87wxRgmdIAJsuGs3hP+z8jocWPj/grRlggE9l2A1CPY+yV9KqkXV1NgS WKfkw5LMhKXU1FAxmCY1sL6HSajOWe8iPgWdAfktibIsbxkBFctbhXpTqO7E08xD W+8= -----END CERTIFICATE-----Generated at Sun Mar 1 14:40:12 2026 by rpki-client