$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee8a3205-4770-4059-97ef-c6fe98844ae7.cer File: ee8a3205-4770-4059-97ef-c6fe98844ae7.cer (raw, json) Hash identifier: i7Eb4YDj1RKFuWrPXsuKdSwudVCfDMpWaoIgevKXOYE= Subject key identifier: 35:26:65:9F:F4:4C:DE:7D:38:88:4E:A1:35:9A:CB:57:E4:86:92:F9 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CF889B2F4E12E686E1FA83980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee8a3205-4770-4059-97ef-c6fe98844ae7/ee8a3205-4770-4059-97ef-c6fe98844ae7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee8a3205-4770-4059-97ef-c6fe98844ae7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 24 Feb 2026 15:52:33 +0000 Certificate not after: Mon 29 May 2028 14:52:33 +0000 Subordinate resources: IP: 192.150.210.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:89:b2:f4:e1:2e:68:6e:1f:a8:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 24 15:52:33 2026 GMT Not After : May 29 14:52:33 2028 GMT Subject: CN=ee8a3205-4770-4059-97ef-c6fe98844ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:17:0e:88:f6:f8:94:6b:13:39:19:12:75:fa: 93:a6:c0:d2:43:87:06:46:54:1b:e7:03:f9:99:4a: 56:0d:03:08:77:22:e1:f8:67:a9:75:dd:4b:5e:06: ce:11:b7:9d:ef:c8:32:cd:3d:1f:0d:0c:88:b1:d9: 20:52:0c:a2:2b:ad:52:55:07:d8:b0:8d:5c:86:e8: 50:2d:f9:c5:ff:52:9c:c4:9c:e9:e5:76:e6:c1:fa: 01:8b:5b:f9:43:6e:3d:04:b5:bb:78:bb:0b:c6:fc: 2a:b5:57:39:65:cb:46:4b:18:7f:6c:01:f0:57:e2: 6f:cf:80:63:bc:5f:19:a1:7a:60:5c:f8:6c:b1:a0: 2d:2b:12:e9:79:3c:59:4b:2d:52:27:e0:68:cb:3e: 9a:d9:50:ef:02:94:c9:87:bb:7a:5d:9d:92:70:5e: b1:b6:9e:32:31:d5:82:f0:c7:78:a4:75:d9:eb:db: 3e:34:ed:e9:6e:c7:dc:bc:db:78:23:27:69:45:0e: fb:32:01:70:d1:99:26:fe:f6:09:fa:74:a4:64:ea: 6d:3a:a4:cc:2e:e0:7c:77:b4:c0:c9:cf:00:79:cd: 7b:de:84:e7:3a:94:f2:ff:59:1e:6f:5e:96:b7:40: ab:90:bf:c0:64:3b:5b:63:4b:cd:eb:17:52:a9:06: 27:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:26:65:9F:F4:4C:DE:7D:38:88:4E:A1:35:9A:CB:57:E4:86:92:F9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee8a3205-4770-4059-97ef-c6fe98844ae7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee8a3205-4770-4059-97ef-c6fe98844ae7/ee8a3205-4770-4059-97ef-c6fe98844ae7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 192.150.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:af:63:af:18:7a:1f:aa:95:e1:26:e6:ee:89:b8:ba:07:f4: 5b:9e:dd:64:64:79:e6:38:79:b5:1b:cc:23:4a:c2:1f:19:3c: 1f:ad:27:96:a0:e6:ff:52:a2:04:4d:8d:ea:75:c1:63:d9:5b: fa:4f:56:30:29:cd:60:18:56:31:41:9c:39:fd:87:9c:7d:c9: a4:88:18:2f:0d:d7:a2:24:3e:b8:ff:7a:7e:bd:89:e9:1c:ab: 42:94:de:7d:10:1c:56:ca:50:3e:12:d7:77:4f:89:4e:ed:57: 7b:6b:89:7a:74:73:d2:36:62:2e:72:5e:b0:e3:45:f8:20:ca: 1b:74:dc:e9:d2:15:80:ff:36:3c:a9:ab:85:f1:11:f4:bf:60: 54:1a:a3:2a:9c:4a:91:64:a0:5c:ed:82:cf:d6:86:ee:a2:a1: db:4d:d7:ff:81:a5:47:0a:7a:bb:db:da:87:6d:b8:e7:87:01: 9e:58:ab:68:12:d4:cd:c7:81:d5:41:4d:07:2f:20:b8:c7:c6: 0b:3f:37:ae:36:6c:5a:b1:d0:21:a5:6d:40:b2:62:bb:bc:dc: 2b:d5:d2:89:55:86:6e:de:cd:d2:7c:15:17:c1:1d:17:d7:b8: a6:23:73:a6:c5:d2:5a:6d:58:75:12:3f:ce:e0:99:42:7d:3d: d3:60:70:c0 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEz4ibL04S5obh+oOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIyNDE1NTIzM1oXDTI4MDUyOTE0NTIzM1owLzEtMCsGA1UEAxMk ZWU4YTMyMDUtNDc3MC00MDU5LTk3ZWYtYzZmZTk4ODQ0YWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhcOiPb4lGsTORkSdfqTpsDSQ4cGRlQb5wP5 mUpWDQMIdyLh+Gepdd1LXgbOEbed78gyzT0fDQyIsdkgUgyiK61SVQfYsI1chuhQ LfnF/1KcxJzp5XbmwfoBi1v5Q249BLW7eLsLxvwqtVc5ZctGSxh/bAHwV+Jvz4Bj vF8ZoXpgXPhssaAtKxLpeTxZSy1SJ+Boyz6a2VDvApTJh7t6XZ2ScF6xtp4yMdWC 8Md4pHXZ69s+NO3pbsfcvNt4IydpRQ77MgFw0Zkm/vYJ+nSkZOptOqTMLuB8d7TA yc8Aec173oTnOpTy/1keb16Wt0CrkL/AZDtbY0vN6xdSqQYnywIDAQABo4ID/zCC A/swHQYDVR0OBBYEFDUmZZ/0TN59OIhOoTWay1fkhpL5MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l ZThhMzIwNS00NzcwLTQwNTktOTdlZi1jNmZlOTg4NDRhZTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2VlOGEzMjA1LTQ3NzAtNDA1OS05 N2VmLWM2ZmU5ODg0NGFlNy9lZThhMzIwNS00NzcwLTQwNTktOTdlZi1jNmZlOTg4 NDRhZTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADAltIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS69jrxh6H6qV4Sbm7om4 ugf0W57dZGR55jh5tRvMI0rCHxk8H60nlqDm/1KiBE2N6nXBY9lb+k9WMCnNYBhW MUGcOf2HnH3JpIgYLw3XoiQ+uP96fr2J6RyrQpTefRAcVspQPhLXd0+JTu1Xe2uJ enRz0jZiLnJesONF+CDKG3Tc6dIVgP82PKmrhfER9L9gVBqjKpxKkWSgXO2Cz9aG 7qKh203X/4GlRwp6u9vah22454cBnliraBLUzceB1UFNBy8guMfGCz83rjZsWrHQ IaVtQLJiu7zcK9XSiVWGbt7N0nwVF8EdF9e4piNzpsXSWm1YdRI/zuCZQn0902Bw wA== -----END CERTIFICATE-----Generated at Sun Mar 1 18:10:07 2026 by rpki-client