$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3.cer File: dc538d34-7317-4797-a396-38a8bb1a4da3.cer (raw, json) Hash identifier: q/QZTzY78lNwEvHWnTY5uXifVhZhfz8jWXwj/zTmDio= Subject key identifier: AF:34:29:86:4E:0D:FC:D7:23:A2:E7:57:BD:30:D8:92:94:0C:A9:68 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CF60D727254C33B458B08B32B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/dc538d34-7317-4797-a396-38a8bb1a4da3.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Feb 2026 18:30:35 +0000 Certificate not after: Sun 28 May 2028 17:30:35 +0000 Subordinate resources: AS: 401674 IP: 161.108.136.0/21 IP: 2604:c60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f6:0d:72:72:54:c3:3b:45:8b:08:b3:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 23 18:30:35 2026 GMT Not After : May 28 17:30:35 2028 GMT Subject: CN=dc538d34-7317-4797-a396-38a8bb1a4da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:63:ad:df:46:e1:74:32:b2:14:2a:8c:e2: a7:f7:fa:45:c5:47:95:41:e1:9d:a3:4d:12:a3:6f: 82:6f:4b:31:63:1c:1e:50:3b:49:29:93:af:44:6b: be:51:42:7f:ac:12:92:c8:b3:48:96:34:57:d3:59: 88:a9:d4:22:70:b8:a7:70:87:6d:89:6b:15:08:5e: 94:26:de:ce:3d:c0:dd:f7:fb:5c:61:b8:7d:d4:14: b2:77:bc:5e:5a:e3:a2:8f:81:1c:6c:14:22:94:b7: 94:86:f2:06:0e:a8:8f:6d:0a:0b:6d:c3:34:f0:84: 35:c2:aa:a2:6e:b9:b3:fc:f8:08:48:b7:c8:df:f2: 6f:c5:8a:82:85:58:61:2a:97:23:6a:2f:c9:18:d4: 48:51:70:c7:0f:03:f3:57:c9:c3:8f:e6:f6:c8:39: 88:29:34:fd:41:25:0f:1d:ea:ab:fd:27:d1:38:b8: f1:41:f8:5c:38:d2:1d:9a:c2:af:ad:6f:8a:b4:fd: 6c:b2:01:71:23:9d:77:b3:43:1b:ad:92:8b:81:ff: ea:62:8c:8e:47:a0:20:e2:76:d3:fe:4b:8c:3d:c3: d9:86:df:e5:b3:17:6e:e3:07:3c:5f:65:1f:88:8f: bc:46:13:ab:ef:4b:4f:b4:dc:d8:57:54:ed:fa:7f: de:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:34:29:86:4E:0D:FC:D7:23:A2:E7:57:BD:30:D8:92:94:0C:A9:68 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/dc538d34-7317-4797-a396-38a8bb1a4da3/dc538d34-7317-4797-a396-38a8bb1a4da3.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 161.108.136.0/21 IPv6: 2604:c60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401674 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:57:94:76:49:62:2e:d2:35:a6:d5:a6:6d:5a:cd:91:48:b2: b5:2a:39:0b:b8:47:73:86:dc:20:21:08:32:2a:ec:b1:8d:f5: 93:1a:b7:35:d8:e4:7b:41:50:45:a9:b5:83:40:c6:9b:76:b8: 95:37:a0:c9:41:0e:6a:bd:83:ea:6d:8e:ee:cd:55:47:25:ad: 77:dc:bd:27:c1:bc:c8:08:77:d5:0c:6e:f0:a3:56:82:a0:7e: 1a:e3:58:ab:14:94:0e:30:72:11:a5:f7:8a:0f:b5:ff:38:50: fe:56:56:be:f9:76:48:29:87:c9:29:e1:93:1a:1a:32:5e:df: 99:79:4d:13:8b:08:cb:6e:63:86:08:b7:a0:38:67:1c:e4:7a: 63:e8:0e:b6:6a:7b:12:67:2b:2a:62:46:a0:f3:d8:3a:69:48: 4f:97:4b:39:6c:b1:ba:7b:92:dc:9a:17:51:95:22:5f:12:cf: 7b:07:27:ed:a5:3b:3a:1f:4d:c2:f5:1a:07:ec:93:81:6c:91: fb:1f:b0:23:dc:4a:1c:9e:60:97:ed:a9:57:2a:d4:e6:85:ee: 99:ac:6c:58:c2:32:4b:68:17:2e:4a:96:46:64:01:ae:db:ff: bf:70:1b:17:4e:bf:db:6b:9b:c2:b5:39:b0:9d:c9:29:c5:15: 57:81:84:e2 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEz2DXJyVMM7RYsIsyswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyMzE4MzAzNVoXDTI4MDUyODE3MzAzNVowLzEtMCsGA1UEAxMk ZGM1MzhkMzQtNzMxNy00Nzk3LWEzOTYtMzhhOGJiMWE0ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYxjrd9G4XQyshQqjOKn9/pFxUeVQeGdo00S o2+Cb0sxYxweUDtJKZOvRGu+UUJ/rBKSyLNIljRX01mIqdQicLincIdtiWsVCF6U Jt7OPcDd9/tcYbh91BSyd7xeWuOij4EcbBQilLeUhvIGDqiPbQoLbcM08IQ1wqqi brmz/PgISLfI3/JvxYqChVhhKpcjai/JGNRIUXDHDwPzV8nDj+b2yDmIKTT9QSUP Heqr/SfROLjxQfhcONIdmsKvrW+KtP1ssgFxI513s0MbrZKLgf/qYoyOR6Ag4nbT /kuMPcPZht/lsxdu4wc8X2UfiI+8RhOr70tPtNzYV1Tt+n/eKQIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFK80KYZODfzXI6LnV70w2JKUDKloMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9k YzUzOGQzNC03MzE3LTQ3OTctYTM5Ni0zOGE4YmIxYTRkYTMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2RjNTM4ZDM0LTczMTctNDc5Ny1h Mzk2LTM4YThiYjFhNGRhMy9kYzUzOGQzNC03MzE3LTQ3OTctYTM5Ni0zOGE4YmIx YTRkYTMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAOhbIgwDQQCAAIwBwMFACYEDGAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiEKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAtXlHZJYi7SNabVpm1azZFIsrUq OQu4R3OG3CAhCDIq7LGN9ZMatzXY5HtBUEWptYNAxpt2uJU3oMlBDmq9g+ptju7N VUclrXfcvSfBvMgId9UMbvCjVoKgfhrjWKsUlA4wchGl94oPtf84UP5WVr75dkgp h8kp4ZMaGjJe35l5TROLCMtuY4YIt6A4ZxzkemPoDrZqexJnKypiRqDz2DppSE+X Szlssbp7ktyaF1GVIl8Sz3sHJ+2lOzofTcL1Ggfsk4FskfsfsCPcShyeYJftqVcq 1OaF7pmsbFjCMktoFy5KlkZkAa7b/79wGxdOv9trm8K1ObCdySnFFVeBhOI= -----END CERTIFICATE-----Generated at Sun Mar 1 16:22:38 2026 by rpki-client