$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c.cer File: ea47eec1-be54-4200-af9d-4d45bdead50c.cer (raw, json) Hash identifier: bV3F/q31bT4hKI5GA3up7REZ/HM4hyv+EXBhVd2uzJE= Subject key identifier: 5E:0D:09:8D:07:4E:E6:D3:FD:2E:E3:F4:93:D1:43:48:60:73:64:05 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D5D7BA203785AA245778D4340 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ea47eec1-be54-4200-af9d-4d45bdead50c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Apr 2026 19:40:51 +0000 Certificate not after: Tue 04 Jul 2028 19:40:51 +0000 Subordinate resources: IP: 192.245.61.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:7b:a2:03:78:5a:a2:45:77:8d:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 1 19:40:51 2026 GMT Not After : Jul 4 19:40:51 2028 GMT Subject: CN=ea47eec1-be54-4200-af9d-4d45bdead50c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:06:09:b5:f3:70:13:73:bd:e7:d9:c4:49:5f: c1:3f:f5:15:1a:33:4a:69:9e:8c:e1:22:b8:96:2b: c9:12:eb:30:ee:35:5f:97:38:d3:11:a0:a6:24:64: a5:0c:c7:e7:07:07:70:c2:f4:4b:ec:f2:eb:65:60: 67:a0:e8:33:a1:0a:4a:df:1d:68:46:37:88:f6:2b: 66:2e:14:7b:2d:04:4c:c9:c1:66:e5:37:52:a8:39: 04:06:63:3b:1b:27:c8:97:87:11:9c:89:41:c3:ce: 10:10:1e:82:72:73:60:bd:ad:93:70:8b:50:ae:d1: fb:e1:8c:e1:38:70:f0:45:af:70:2e:97:d7:35:29: ad:ea:a0:3d:17:b5:8b:23:ce:1e:94:ca:b7:ae:8a: 16:25:cb:90:a6:26:82:dd:57:76:9a:5d:58:e6:57: ac:5d:8d:20:29:be:97:33:da:de:c6:7d:fd:b3:64: 83:77:7f:72:4f:78:00:5d:30:07:e4:1a:c9:4a:1c: 04:1d:73:2a:f4:a5:4e:b7:99:41:af:98:c8:5e:fc: c5:17:08:98:9a:d4:96:eb:1d:45:19:9f:5e:0c:f4: 6c:c9:9f:66:1c:78:9b:f7:0d:e9:0c:d4:cd:b7:95: d9:34:6a:9f:70:9e:37:69:b6:9b:26:a4:c6:75:54: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0D:09:8D:07:4E:E6:D3:FD:2E:E3:F4:93:D1:43:48:60:73:64:05 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea47eec1-be54-4200-af9d-4d45bdead50c/ea47eec1-be54-4200-af9d-4d45bdead50c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 192.245.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:ec:ea:0a:47:58:78:1b:3a:11:b1:1f:fa:fb:d3:0f:d7:d5: 31:ac:73:7c:f6:d4:24:70:2a:f7:84:52:ff:d4:66:17:ae:4d: 14:17:47:7a:cf:0f:38:e0:43:45:98:5b:f0:10:71:33:89:72: e1:6b:b5:82:88:80:1e:9b:f1:af:99:9b:c8:bb:fa:d7:28:5a: b8:91:e9:ae:c9:ef:c0:39:06:23:ad:f5:34:b3:03:cc:54:fa: 71:ce:7f:cb:3b:e0:b9:4e:46:6b:31:65:0f:ec:09:63:12:9d: 52:63:2c:12:0d:a7:3a:14:1a:d5:93:3f:81:c4:ee:0e:94:bb: 91:18:8b:6f:50:a1:37:0f:57:34:cf:7d:42:8b:40:81:d8:0e: 1a:eb:2a:d7:a2:cc:e6:3b:2a:7d:30:57:64:13:d4:0c:3f:50: e8:e2:59:57:bc:87:6d:76:6e:5e:b9:c6:e7:ba:26:b7:1b:bf: 1c:30:1f:36:6a:d6:8c:2a:a7:9a:53:6a:6e:b4:2e:6e:7e:7a: 6b:b3:0a:55:22:82:93:27:fe:c0:d4:db:40:06:42:6a:1a:78: 11:ae:e0:a9:d8:3c:10:dd:5b:1f:78:60:9a:14:25:6a:42:6b: 61:6d:6a:f1:91:9c:cf:00:ff:1f:6d:48:9b:40:74:5d:70:49: 0e:bb:33:c4 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1de6IDeFqiRXeNQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwMTE5NDA1MVoXDTI4MDcwNDE5NDA1MVowLzEtMCsGA1UEAxMk ZWE0N2VlYzEtYmU1NC00MjAwLWFmOWQtNGQ0NWJkZWFkNTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwYJtfNwE3O959nESV/BP/UVGjNKaZ6M4SK4 livJEusw7jVflzjTEaCmJGSlDMfnBwdwwvRL7PLrZWBnoOgzoQpK3x1oRjeI9itm LhR7LQRMycFm5TdSqDkEBmM7GyfIl4cRnIlBw84QEB6CcnNgva2TcItQrtH74Yzh OHDwRa9wLpfXNSmt6qA9F7WLI84elMq3rooWJcuQpiaC3Vd2ml1Y5lesXY0gKb6X M9rexn39s2SDd39yT3gAXTAH5BrJShwEHXMq9KVOt5lBr5jIXvzFFwiYmtSW6x1F GZ9eDPRsyZ9mHHib9w3pDNTNt5XZNGqfcJ43ababJqTGdVS1OwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFF4NCY0HTubT/S7j9JPRQ0hgc2QFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l YTQ3ZWVjMS1iZTU0LTQyMDAtYWY5ZC00ZDQ1YmRlYWQ1MGMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2VhNDdlZWMxLWJlNTQtNDIwMC1h ZjlkLTRkNDViZGVhZDUwYy9lYTQ3ZWVjMS1iZTU0LTQyMDAtYWY5ZC00ZDQ1YmRl YWQ1MGMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADA9T0wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHezqCkdYeBs6EbEf+vvT D9fVMaxzfPbUJHAq94RS/9RmF65NFBdHes8POOBDRZhb8BBxM4ly4Wu1goiAHpvx r5mbyLv61yhauJHprsnvwDkGI631NLMDzFT6cc5/yzvguU5GazFlD+wJYxKdUmMs Eg2nOhQa1ZM/gcTuDpS7kRiLb1ChNw9XNM99QotAgdgOGusq16LM5jsqfTBXZBPU DD9Q6OJZV7yHbXZuXrnG57omtxu/HDAfNmrWjCqnmlNqbrQubn56a7MKVSKCkyf+ wNTbQAZCahp4Ea7gqdg8EN1bH3hgmhQlakJrYW1q8ZGczwD/H21Im0B0XXBJDrsz xA== -----END CERTIFICATE-----Generated at Fri Apr 17 02:31:21 2026 by rpki-client