$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2fbab61-1c93-4b4d-b441-4af21bf5d390.cer File: f2fbab61-1c93-4b4d-b441-4af21bf5d390.cer (raw, json) Hash identifier: D6a+mEev0jiyPfEXRPcvDrUr714XYNpvb8pTWHIeTSU= Subject key identifier: 2B:07:F7:F7:23:40:4F:BE:7D:01:69:EE:FD:77:21:75:43:85:4E:D7 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CCEDAA6F66FCC5A8B47ED1380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2fbab61-1c93-4b4d-b441-4af21bf5d390/f2fbab61-1c93-4b4d-b441-4af21bf5d390.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2fbab61-1c93-4b4d-b441-4af21bf5d390/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Feb 2026 17:31:43 +0000 Certificate not after: Sun 14 May 2028 16:31:43 +0000 Subordinate resources: AS: 20392 IP: 65.110.96.0/19 IP: 2605:5540::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:da:a6:f6:6f:cc:5a:8b:47:ed:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 9 17:31:43 2026 GMT Not After : May 14 16:31:43 2028 GMT Subject: CN=f2fbab61-1c93-4b4d-b441-4af21bf5d390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:8d:e6:db:da:f6:04:72:dd:e1:b2:97:23: b0:9e:55:47:e9:0b:3f:60:62:23:3d:2f:ab:bc:7e: 00:53:7b:ef:7f:9d:58:af:6b:d1:78:ce:a1:0e:ad: 35:0f:21:1c:1a:a8:56:d8:4d:51:bd:69:72:86:a7: a5:f7:48:15:59:4c:40:c6:f4:89:01:53:55:1e:a6: ce:ee:34:45:20:27:c0:c8:5e:23:c5:2d:3f:64:cd: 9b:ba:53:99:f3:3f:6e:01:81:10:48:82:8f:54:2b: 3f:37:30:13:5a:0b:e2:6b:e1:34:62:9d:74:f2:13: 50:67:8e:b7:34:e0:0c:eb:22:9d:53:75:3f:50:8e: 01:d8:95:82:43:07:e4:d6:37:6d:59:08:f9:06:3c: c0:08:47:52:ab:30:bf:2f:64:6c:88:ce:a6:02:c5: 57:f4:bd:03:39:3d:62:4b:c9:db:cc:57:6c:f0:82: 8a:8e:56:5b:6b:74:2a:23:0a:a9:5d:57:3a:e5:1c: d5:b7:58:3d:69:97:8c:5b:5d:98:d9:3d:14:06:7d: 25:15:44:62:6b:7b:f7:c3:84:1d:3f:a7:cd:9b:a8: 14:4d:2d:6c:47:7f:64:90:29:9f:fa:75:d5:7d:5c: 94:b6:65:ed:ce:81:84:02:1a:1e:d5:67:36:7e:ba: 7c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:07:F7:F7:23:40:4F:BE:7D:01:69:EE:FD:77:21:75:43:85:4E:D7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2fbab61-1c93-4b4d-b441-4af21bf5d390/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2fbab61-1c93-4b4d-b441-4af21bf5d390/f2fbab61-1c93-4b4d-b441-4af21bf5d390.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 65.110.96.0/19 IPv6: 2605:5540::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20392 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:93:52:b3:37:2d:2b:60:74:d9:68:02:e6:32:2d:0a:cf:b4: be:0f:af:0e:77:21:64:29:39:c3:f1:5d:b0:cc:65:30:9f:54: d1:22:7b:5b:81:0b:88:1c:f3:50:8f:cf:eb:79:7c:3f:64:43: 16:94:49:58:3f:bd:4d:4d:31:16:d8:f5:5f:36:ae:1d:33:05: d3:cd:9c:fb:70:ff:d9:b6:6c:81:d3:18:e8:20:d2:0a:d3:f2: 33:3f:25:cd:b1:2d:9f:f8:c1:81:55:1e:3d:db:da:83:95:47: 5d:6b:5f:6a:c5:3a:45:6e:e5:05:b4:15:5e:45:3a:1e:f5:48: 22:11:84:81:41:c7:0a:7f:04:d2:ae:82:dc:6e:68:d6:af:31: f5:e6:de:80:79:93:62:8a:89:99:b5:97:03:7b:32:df:3b:50: e4:c9:50:20:ff:0d:66:af:34:53:9c:58:b4:8e:d9:43:45:45: 4d:78:48:47:1e:92:69:d7:73:12:80:5a:14:58:07:ba:68:4f: e1:a4:38:09:25:9d:b9:e1:57:09:d5:a3:10:6a:c0:dd:88:f1: 11:5f:bf:b2:5b:03:06:a0:48:f1:c5:91:99:95:73:1c:21:52: 49:cb:f1:82:91:3c:7f:0c:0e:9c:f7:b3:5b:ec:5e:18:77:d6: c9:85:08:4e -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWEzO2qb2b8xai0ftE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwOTE3MzE0M1oXDTI4MDUxNDE2MzE0M1owLzEtMCsGA1UEAxMk ZjJmYmFiNjEtMWM5My00YjRkLWI0NDEtNGFmMjFiZjVkMzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyiN5tva9gRy3eGylyOwnlVH6Qs/YGIjPS+r vH4AU3vvf51Yr2vReM6hDq01DyEcGqhW2E1RvWlyhqel90gVWUxAxvSJAVNVHqbO 7jRFICfAyF4jxS0/ZM2bulOZ8z9uAYEQSIKPVCs/NzATWgvia+E0Yp108hNQZ463 NOAM6yKdU3U/UI4B2JWCQwfk1jdtWQj5BjzACEdSqzC/L2RsiM6mAsVX9L0DOT1i S8nbzFds8IKKjlZba3QqIwqpXVc65RzVt1g9aZeMW12Y2T0UBn0lFURia3v3w4Qd P6fNm6gUTS1sR39kkCmf+nXVfVyUtmXtzoGEAhoe1Wc2frp80QIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFCsH9/cjQE++fQFp7v13IXVDhU7XMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m MmZiYWI2MS0xYzkzLTRiNGQtYjQ0MS00YWYyMWJmNWQzOTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2YyZmJhYjYxLTFjOTMtNGI0ZC1i NDQxLTRhZjIxYmY1ZDM5MC9mMmZiYWI2MS0xYzkzLTRiNGQtYjQ0MS00YWYyMWJm NWQzOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAVBbmAwDQQCAAIwBwMFACYFVUAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICT6gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlpNSszctK2B02WgC5jItCs+0vg+v DnchZCk5w/FdsMxlMJ9U0SJ7W4ELiBzzUI/P63l8P2RDFpRJWD+9TU0xFtj1Xzau HTMF082c+3D/2bZsgdMY6CDSCtPyMz8lzbEtn/jBgVUePdvag5VHXWtfasU6RW7l BbQVXkU6HvVIIhGEgUHHCn8E0q6C3G5o1q8x9ebegHmTYoqJmbWXA3sy3ztQ5MlQ IP8NZq80U5xYtI7ZQ0VFTXhIRx6SaddzEoBaFFgHumhP4aQ4CSWdueFXCdWjEGrA 3YjxEV+/slsDBqBI8cWRmZVzHCFSScvxgpE8fwwOnPezW+xeGHfWyYUITg== -----END CERTIFICATE-----Generated at Mon Mar 2 01:37:27 2026 by rpki-client