$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e17afca1-c49e-41ce-b354-e8ef15da4d27.cer File: e17afca1-c49e-41ce-b354-e8ef15da4d27.cer (raw, json) Hash identifier: RtEHOZ//lwXEI0Ia/sBJevlSf2eX1fd+NQSGeO+EiDU= Subject key identifier: 52:62:AD:C6:2D:A0:67:94:6E:5C:E5:E9:84:EA:F5:DC:D2:14:83:B3 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D003ABB79C476CD8895F4616C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e17afca1-c49e-41ce-b354-e8ef15da4d27/e17afca1-c49e-41ce-b354-e8ef15da4d27.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e17afca1-c49e-41ce-b354-e8ef15da4d27/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 27 Feb 2026 09:59:55 +0000 Certificate not after: Thu 01 Jun 2028 08:59:55 +0000 Subordinate resources: IP: 216.109.180.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:3a:bb:79:c4:76:cd:88:95:f4:61:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 27 09:59:55 2026 GMT Not After : Jun 1 08:59:55 2028 GMT Subject: CN=e17afca1-c49e-41ce-b354-e8ef15da4d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cd:11:21:ec:57:a3:9e:4c:0b:0e:ce:60:d5: 35:6a:41:9e:d6:fe:3a:44:e4:e5:51:2f:b3:e1:30: ed:03:e4:9d:45:01:d3:86:4f:81:e0:80:03:35:3a: 59:52:5e:03:f7:64:e4:11:94:44:45:6d:50:2a:78: 97:4a:47:f2:fa:0c:8a:2b:b2:5f:cd:d9:d2:d3:b9: 9d:ba:cb:60:83:01:76:44:8f:dc:30:67:f6:ea:42: 48:12:d4:39:e2:6a:45:ac:2e:35:38:86:b1:64:02: d4:a8:a9:fc:f1:40:88:f9:37:c6:d5:01:8d:27:bd: bb:b7:49:c8:07:b4:4b:4e:f7:f4:27:0a:3e:e6:b8: c4:29:55:f2:0c:5f:91:af:ff:71:51:11:09:36:ac: 3d:f5:c5:c7:a7:2c:7f:4a:78:ff:20:f1:7f:05:76: de:24:fc:70:0d:71:46:e9:8d:8b:59:44:9f:08:ec: 74:10:f7:73:dc:63:55:64:1d:7a:be:ed:87:9d:da: c1:c6:0e:8a:f6:b2:9a:73:e2:e2:bd:66:79:9b:33: 53:cc:e0:2f:20:57:47:7d:b9:77:6a:0a:67:01:f9: 4c:ce:ef:58:81:2e:ae:26:51:c9:a4:ba:78:b3:1c: 79:58:9e:15:1f:f1:11:1b:97:ac:ed:2e:c6:2d:31: 99:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:62:AD:C6:2D:A0:67:94:6E:5C:E5:E9:84:EA:F5:DC:D2:14:83:B3 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e17afca1-c49e-41ce-b354-e8ef15da4d27/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e17afca1-c49e-41ce-b354-e8ef15da4d27/e17afca1-c49e-41ce-b354-e8ef15da4d27.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 216.109.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:21:71:67:1c:80:a1:f7:85:b9:59:8c:ab:09:1d:bd:9d:4d: e2:22:cd:d4:5d:5f:20:be:48:0b:a1:fb:b5:24:8a:e7:8e:ca: fa:de:40:d2:67:99:7a:f1:f4:a6:19:ad:0b:72:3f:69:5b:1f: 06:53:cb:0c:1e:49:5a:ab:5a:a6:94:0f:ee:8e:b7:47:8c:0b: 61:43:b5:3e:34:93:4c:ef:5e:ae:d7:a9:12:a9:6a:95:c3:f4: a6:a6:cf:f5:c3:0c:af:71:de:c2:b9:a8:73:c0:62:ed:a1:f3: af:51:8e:b4:1e:2f:58:60:37:4f:a4:b8:54:d3:2b:ec:03:28: 16:1c:03:d7:62:c1:43:c6:c6:a8:bd:f0:ce:18:e0:b7:22:8d: 08:0d:2a:30:e1:65:2e:e6:59:e8:5d:37:54:de:0f:75:f8:c0: 0c:ba:b7:1b:92:a2:ef:43:e9:74:72:7e:91:49:26:5b:1a:92: fc:78:2b:36:3f:a5:c4:31:23:0d:bd:59:f6:a2:37:e8:1d:39: 98:62:3c:92:b8:77:95:e8:f5:62:ce:4d:67:9e:d4:c9:71:ce: dd:92:a2:b3:d2:25:1f:27:af:9d:78:9d:3d:5c:bc:c5:c2:72: 30:5b:87:7a:af:1c:6f:6f:64:52:4c:33:46:04:1e:52:07:36: 08:a2:56:dd -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0AOrt5xHbNiJX0YWwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNzA5NTk1NVoXDTI4MDYwMTA4NTk1NVowLzEtMCsGA1UEAxMk ZTE3YWZjYTEtYzQ5ZS00MWNlLWIzNTQtZThlZjE1ZGE0ZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM0RIexXo55MCw7OYNU1akGe1v46ROTlUS+z 4TDtA+SdRQHThk+B4IADNTpZUl4D92TkEZRERW1QKniXSkfy+gyKK7JfzdnS07md ustggwF2RI/cMGf26kJIEtQ54mpFrC41OIaxZALUqKn88UCI+TfG1QGNJ727t0nI B7RLTvf0Jwo+5rjEKVXyDF+Rr/9xUREJNqw99cXHpyx/Snj/IPF/BXbeJPxwDXFG 6Y2LWUSfCOx0EPdz3GNVZB16vu2HndrBxg6K9rKac+LivWZ5mzNTzOAvIFdHfbl3 agpnAflMzu9YgS6uJlHJpLp4sxx5WJ4VH/ERG5es7S7GLTGZCwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFFJircYtoGeUblzl6YTq9dzSFIOzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l MTdhZmNhMS1jNDllLTQxY2UtYjM1NC1lOGVmMTVkYTRkMjcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2UxN2FmY2ExLWM0OWUtNDFjZS1i MzU0LWU4ZWYxNWRhNGQyNy9lMTdhZmNhMS1jNDllLTQxY2UtYjM1NC1lOGVmMTVk YTRkMjcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBALYbbQwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUiFxZxyAofeFuVmMqwkd vZ1N4iLN1F1fIL5IC6H7tSSK547K+t5A0meZevH0phmtC3I/aVsfBlPLDB5JWqta ppQP7o63R4wLYUO1PjSTTO9ertepEqlqlcP0pqbP9cMMr3Hewrmoc8Bi7aHzr1GO tB4vWGA3T6S4VNMr7AMoFhwD12LBQ8bGqL3wzhjgtyKNCA0qMOFlLuZZ6F03VN4P dfjADLq3G5Ki70PpdHJ+kUkmWxqS/HgrNj+lxDEjDb1Z9qI36B05mGI8krh3lej1 Ys5NZ57UyXHO3ZKis9IlHyevnXidPVy8xcJyMFuHeq8cb29kUkwzRgQeUgc2CKJW 3Q== -----END CERTIFICATE-----Generated at Sun Mar 1 16:21:09 2026 by rpki-client