$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb5557df-b1ca-4b5f-8985-75b6ccf7244f.cer File: fb5557df-b1ca-4b5f-8985-75b6ccf7244f.cer (raw, json) Hash identifier: hg/YcCVrS9D7Q70LuR0pHUModbClA/3HYBNYwaYZQjU= Subject key identifier: 3B:39:89:F2:45:0E:C6:18:E3:46:D6:EC:25:DC:3D:12:20:C4:25:E7 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC37E9CB175D4AF18F1707380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb5557df-b1ca-4b5f-8985-75b6ccf7244f/fb5557df-b1ca-4b5f-8985-75b6ccf7244f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb5557df-b1ca-4b5f-8985-75b6ccf7244f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Feb 2026 15:52:22 +0000 Certificate not after: Wed 10 May 2028 14:52:22 +0000 Subordinate resources: AS: 399492 IP: 198.180.160.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c3:7e:9c:b1:75:d4:af:18:f1:70:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 5 15:52:22 2026 GMT Not After : May 10 14:52:22 2028 GMT Subject: CN=fb5557df-b1ca-4b5f-8985-75b6ccf7244f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:94:82:58:d1:e3:53:8e:a8:a3:aa:c0:e5:1c: dc:b7:15:b7:27:94:11:83:82:0f:d6:84:a5:e8:a3: ad:30:fd:e9:4f:b1:0d:4b:92:20:9a:87:67:1c:89: 3b:52:f5:5f:98:f5:99:0c:e7:cf:52:b3:f9:50:70: 63:eb:d0:8a:5b:3c:0f:10:dd:ee:93:60:c6:10:2b: af:06:55:d4:ba:ab:c8:2f:02:ac:20:da:d1:83:01: 31:7d:bf:f2:0d:74:e2:e1:4b:0f:96:e8:95:4e:cd: 69:99:b9:82:25:ff:04:43:f1:ac:94:ee:97:1b:3b: 65:e0:9b:c0:9a:aa:26:17:f2:ad:f5:46:05:6e:7d: 7e:20:55:13:b5:11:4d:7a:fe:68:5d:5a:f5:50:b7: 36:1d:31:94:d7:8c:01:9e:c8:a9:b5:22:c3:46:86: f4:88:80:7f:74:c6:4e:e1:fa:eb:d6:9b:a6:67:97: 85:ff:85:23:2d:b6:08:bf:4a:df:88:2a:d9:cb:74: 29:0a:e2:9e:2d:c4:b7:bc:5a:af:8a:50:a5:7b:79: d0:93:0b:04:b5:8b:e9:d6:f5:5b:a7:f5:10:d7:ad: ed:f2:c1:85:bf:a9:14:69:31:28:24:92:5c:58:40: f5:d4:b8:80:69:4e:77:f2:03:23:ad:62:a1:fd:45: 7d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:39:89:F2:45:0E:C6:18:E3:46:D6:EC:25:DC:3D:12:20:C4:25:E7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb5557df-b1ca-4b5f-8985-75b6ccf7244f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/fb5557df-b1ca-4b5f-8985-75b6ccf7244f/fb5557df-b1ca-4b5f-8985-75b6ccf7244f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 198.180.160.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399492 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:e4:37:69:d4:eb:81:73:8e:f8:d4:83:02:ec:e1:fe:9d:02: fc:6d:a7:c6:49:1a:08:58:f4:90:bc:81:a5:7a:22:dc:48:d0: 5d:ef:cc:fd:90:79:84:87:3a:55:11:d1:32:44:e9:10:53:83: dc:63:c0:51:59:ce:d0:df:d0:39:83:04:68:19:3a:64:d3:ff: 65:95:a8:b3:2a:c7:39:5b:4f:a6:c1:24:f3:cd:90:85:16:b8: 72:e4:68:b1:21:49:b9:c4:35:05:35:aa:60:9d:e2:b1:a2:63: 38:e0:b2:bb:60:36:e8:d9:69:88:89:73:8a:ff:17:0e:9a:cd: 57:d2:0c:70:13:01:c1:3f:95:06:e0:a7:97:3a:95:b9:e1:2b: c7:2e:55:d9:01:de:11:58:d3:d6:16:1d:63:6c:ff:6c:0d:f2: 38:45:79:7d:55:31:9a:84:11:cb:b7:17:26:a5:4a:95:0b:f5: 9d:1a:29:4f:11:52:8f:c7:83:bc:b5:77:d1:57:81:c7:80:bb: 9f:1d:28:07:72:80:2e:77:d4:e8:21:e9:84:7e:3c:34:93:5f: af:b8:08:db:a1:01:3b:2e:b4:34:3e:96:7d:70:3b:51:93:38: 87:37:1e:9e:de:af:39:18:a0:7f:5a:24:c2:d1:53:73:eb:a6: 00:90:17:4b -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEzDfpyxddSvGPFwc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNTE1NTIyMloXDTI4MDUxMDE0NTIyMlowLzEtMCsGA1UEAxMk ZmI1NTU3ZGYtYjFjYS00YjVmLTg5ODUtNzViNmNjZjcyNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZSCWNHjU46oo6rA5RzctxW3J5QRg4IP1oSl 6KOtMP3pT7ENS5IgmodnHIk7UvVfmPWZDOfPUrP5UHBj69CKWzwPEN3uk2DGECuv BlXUuqvILwKsINrRgwExfb/yDXTi4UsPluiVTs1pmbmCJf8EQ/GslO6XGztl4JvA mqomF/Kt9UYFbn1+IFUTtRFNev5oXVr1ULc2HTGU14wBnsiptSLDRob0iIB/dMZO 4frr1pumZ5eF/4UjLbYIv0rfiCrZy3QpCuKeLcS3vFqvilCle3nQkwsEtYvp1vVb p/UQ163t8sGFv6kUaTEoJJJcWED11LiAaU538gMjrWKh/UV9AQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFDs5ifJFDsYY40bW7CXcPRIgxCXnMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m YjU1NTdkZi1iMWNhLTRiNWYtODk4NS03NWI2Y2NmNzI0NGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2ZiNTU1N2RmLWIxY2EtNGI1Zi04 OTg1LTc1YjZjY2Y3MjQ0Zi9mYjU1NTdkZi1iMWNhLTRiNWYtODk4NS03NWI2Y2Nm NzI0NGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGtKAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BhiEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIfkN2nU64FzjvjUgwLs4f6dAvxtp8ZJGghY9JC8gaV6ItxI 0F3vzP2QeYSHOlUR0TJE6RBTg9xjwFFZztDf0DmDBGgZOmTT/2WVqLMqxzlbT6bB JPPNkIUWuHLkaLEhSbnENQU1qmCd4rGiYzjgsrtgNujZaYiJc4r/Fw6azVfSDHAT AcE/lQbgp5c6lbnhK8cuVdkB3hFY09YWHWNs/2wN8jhFeX1VMZqEEcu3FyalSpUL 9Z0aKU8RUo/Hg7y1d9FXgceAu58dKAdygC531Ogh6YR+PDSTX6+4CNuhATsutDQ+ ln1wO1GTOIc3Hp7erzkYoH9aJMLRU3PrpgCQF0s= -----END CERTIFICATE-----Generated at Sun Mar 1 20:04:12 2026 by rpki-client