$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.cer File: e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.cer (raw, json) Hash identifier: 6SA4rA89FBZZQXP9kM4WUNUBSpDGDrGQn1BRCKTcXGE= Subject key identifier: 0F:1A:B0:3F:4A:8E:84:18:30:E6:F2:72:72:39:BD:0E:91:86:9D:80 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CFBA6908D6FBFA73624EC0400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Feb 2026 18:38:08 +0000 Certificate not after: Tue 30 May 2028 17:38:08 +0000 Subordinate resources: AS: 6343 AS: 19572 IP: 192.135.189.0/24 IP: 209.173.248.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fb:a6:90:8d:6f:bf:a7:36:24:ec:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 25 18:38:08 2026 GMT Not After : May 30 17:38:08 2028 GMT Subject: CN=e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:25:1c:c6:a6:f5:41:05:d5:82:1c:78:79:bc: c9:5f:ac:ee:ba:97:1a:2d:57:a9:93:91:95:1b:1a: 4b:a6:b4:fc:4d:42:5b:b7:38:b3:cf:63:4a:ff:7f: 73:8e:a2:51:39:cc:f6:e8:11:34:22:7e:a6:7c:b8: 7a:cf:03:81:d4:43:4e:85:98:9a:68:07:f7:dc:b4: f1:fe:b7:36:e6:c8:0a:8e:77:41:57:b2:2e:e1:db: 9f:b3:d2:25:a8:8e:64:0a:03:73:65:87:bc:16:87: e9:63:fc:73:b8:d2:af:ed:70:56:7f:70:8d:64:e0: 3b:b8:1d:57:ea:57:e9:a4:1d:d7:de:90:91:a8:4a: ef:e4:95:3d:b3:21:5a:68:fa:47:bf:d4:55:05:90: c8:e2:de:31:9d:90:fc:0a:dd:cc:00:61:fa:fe:61: f9:37:5d:fb:2b:ed:8a:c6:0e:61:4c:dc:63:24:f9: f9:75:f9:d0:7b:7d:88:ae:de:f4:2d:9c:3f:9d:23: 04:0f:fb:27:5b:9a:e6:98:14:30:69:24:06:11:f0: 24:db:c0:0f:83:60:2b:45:5d:06:24:1b:95:d6:26: 9b:d8:05:67:49:1d:e6:2e:41:7a:c6:43:2b:af:48: 8e:24:e8:9d:91:ed:6c:5b:99:4c:f7:d1:32:c0:7f: cc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1A:B0:3F:4A:8E:84:18:30:E6:F2:72:72:39:BD:0E:91:86:9D:80 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1/e8753aa8-d1c8-4cf8-95d4-c8fdaa973ed1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 192.135.189.0/24 209.173.248.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6343 19572 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:36:91:23:3d:82:46:b0:b5:01:c1:0c:0a:56:f3:38:57:27: 5d:6a:ce:e7:d8:b6:9e:44:eb:86:3d:28:90:e3:e5:95:45:28: 1a:2f:38:9e:ac:bc:c8:3c:91:6d:7a:ba:53:07:89:41:ed:67: b7:ed:b9:87:6d:fe:76:26:67:00:8a:8b:53:94:c8:70:35:05: 15:63:9b:0f:d1:2e:61:b3:40:55:ae:49:e7:5e:a1:c2:6c:f1: 4b:06:69:77:7f:81:cc:e5:06:e9:3d:f9:4f:6b:88:61:d9:20: 82:f8:fb:fb:b2:c7:ca:8e:7a:8a:a7:31:9a:f0:fc:45:88:90: f8:5d:25:4b:0c:ef:c5:ed:14:31:d7:83:2c:58:53:62:36:fa: 76:87:48:66:b8:e9:c0:b0:f6:55:8b:a6:73:fc:4b:4c:8b:ee: c6:c3:d2:57:41:59:5b:7b:3b:48:1f:75:66:ea:99:a4:65:f4: 36:84:76:32:03:0b:5c:b7:8d:5c:b8:10:22:76:76:a1:d3:04: 30:eb:53:36:8c:3f:61:f5:81:5d:4c:bc:69:f2:2e:84:ff:4b: a5:d8:91:19:a0:d6:89:14:42:e3:79:b9:de:c9:94:f3:63:30: 63:fe:3e:3d:43:f9:5f:fb:66:94:d1:00:63:55:10:c4:12:1c: 3b:10:91:2b -----BEGIN CERTIFICATE----- MIIHEjCCBfqgAwIBAgIUAQ0Mn0MoWEz7ppCNb7+nNiTsBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNTE4MzgwOFoXDTI4MDUzMDE3MzgwOFowLzEtMCsGA1UEAxMk ZTg3NTNhYTgtZDFjOC00Y2Y4LTk1ZDQtYzhmZGFhOTczZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCUcxqb1QQXVghx4ebzJX6zuupcaLVepk5GV GxpLprT8TUJbtzizz2NK/39zjqJROcz26BE0In6mfLh6zwOB1ENOhZiaaAf33LTx /rc25sgKjndBV7Iu4dufs9IlqI5kCgNzZYe8FofpY/xzuNKv7XBWf3CNZOA7uB1X 6lfppB3X3pCRqErv5JU9syFaaPpHv9RVBZDI4t4xnZD8Ct3MAGH6/mH5N137K+2K xg5hTNxjJPn5dfnQe32Irt70LZw/nSMED/snW5rmmBQwaSQGEfAk28APg2ArRV0G JBuV1iab2AVnSR3mLkF6xkMrr0iOJOidke1sW5lM99EywH/MwwIDAQABo4IEJDCC BCAwHQYDVR0OBBYEFA8asD9KjoQYMObycnI5vQ6Rhp2AMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l ODc1M2FhOC1kMWM4LTRjZjgtOTVkNC1jOGZkYWE5NzNlZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2U4NzUzYWE4LWQxYzgtNGNmOC05 NWQ0LWM4ZmRhYTk3M2VkMS9lODc1M2FhOC1kMWM4LTRjZjgtOTVkNC1jOGZkYWE5 NzNlZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBADAh70DBALRrfgwHQYIKwYBBQUHAQgBAf8EDjAM oAowCAICGMcCAkx0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKA2kSM9gkawtQHBDApW8zhXJ11qzufYtp5E 64Y9KJDj5ZVFKBovOJ6svMg8kW16ulMHiUHtZ7ftuYdt/nYmZwCKi1OUyHA1BRVj mw/RLmGzQFWuSedeocJs8UsGaXd/gczlBuk9+U9riGHZIIL4+/uyx8qOeoqnMZrw /EWIkPhdJUsM78XtFDHXgyxYU2I2+naHSGa46cCw9lWLpnP8S0yL7sbD0ldBWVt7 O0gfdWbqmaRl9DaEdjIDC1y3jVy4ECJ2dqHTBDDrUzaMP2H1gV1MvGnyLoT/S6XY kRmg1okUQuN5ud7JlPNjMGP+Pj1D+V/7ZpTRAGNVEMQSHDsQkSs= -----END CERTIFICATE-----Generated at Sun Mar 1 14:40:44 2026 by rpki-client