$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer File: e5dea660-bf59-4b4c-b9ad-4a6787e03fce.cer (raw, json) Hash identifier: C+Jv27wgED5KtbcjfhWliGTGjx75rCinxI0yFKl90vY= Subject key identifier: E0:0D:DE:B2:A7:48:59:FF:35:95:E4:65:A6:D6:5C:6F:09:A5:FF:DE Authority key identifier: F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 Certificate issuer: /CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Certificate serial: 010D0C9F4328584D333CCE281852B64FFB434D80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Mar 2026 16:30:19 +0000 Certificate not after: Sun 22 Aug 2027 18:09:18 +0000 Subordinate resources: AS: 401654 AS: 402154 IP: 64.27.0.0/19 IP: 198.41.96.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:33:3c:ce:28:18:52:b6:4f:fb:43:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6b5ad28-1cbc-47ab-904e-45361a5487c3 Validity Not Before: Mar 17 16:30:19 2026 GMT Not After : Aug 22 18:09:18 2027 GMT Subject: CN=e5dea660-bf59-4b4c-b9ad-4a6787e03fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:79:2f:2a:65:67:1c:1c:af:6a:6c:2c:c7: 08:46:00:93:43:dd:ba:91:a4:97:0a:d4:22:f9:39: 8a:f6:03:36:dc:b3:5a:47:7f:bf:66:57:ad:b8:49: 02:d9:3c:35:9e:43:53:30:5f:de:84:37:84:3a:ba: 92:6c:81:7e:ad:f2:e8:2f:8a:69:6b:d6:2e:e1:a8: ca:6d:ef:d6:24:8f:49:26:5d:ea:7b:ee:92:33:84: e0:17:86:a2:88:dc:44:75:1f:ac:31:81:a1:36:cd: 8b:76:89:f5:7a:c0:82:31:fa:41:5e:d5:7b:c2:d5: 49:e2:06:33:f8:01:1e:c3:90:6a:61:ac:01:61:fe: 66:20:1d:0c:2b:38:4d:d0:71:e9:02:7e:11:97:2e: 94:2a:05:07:6a:91:1c:0e:2d:6f:b0:4c:53:e3:16: b6:d2:8d:98:10:45:a8:e2:73:b5:49:f3:15:88:c9: 7f:70:2c:7e:be:cc:38:d7:70:5c:a8:d4:f4:09:2f: f9:3c:32:31:f2:06:ff:5a:17:e8:09:8a:21:7a:0b: 42:71:99:7b:57:c4:cd:69:f8:74:a1:dd:53:b5:8b: f6:37:b6:be:eb:67:ad:f1:77:3d:4b:f9:20:f8:6d: 00:04:a3:db:56:ab:0c:0e:ce:ef:78:85:6f:f4:b1: 87:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:0D:DE:B2:A7:48:59:FF:35:95:E4:65:A6:D6:5C:6F:09:A5:FF:DE Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e5dea660-bf59-4b4c-b9ad-4a6787e03fce/e5dea660-bf59-4b4c-b9ad-4a6787e03fce.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl X509v3 Authority Key Identifier: keyid:F6:FA:EA:1C:30:68:51:BA:F4:00:9F:C6:B6:75:ED:AE:8F:F2:41:C0 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer sbgp-ipAddrBlock: critical IPv4: 64.27.0.0/19 198.41.96.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401654 402154 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:01:b5:9e:bf:b0:b8:f4:35:cf:50:d4:11:20:8f:84:64:50: 99:b7:7f:41:83:78:93:d2:55:bc:a6:a2:ae:6a:a0:11:72:7b: 8f:3c:5d:ae:a4:cc:50:54:b9:d1:2c:3a:52:c5:c4:f5:4e:6a: 38:03:35:6d:7b:0c:16:c6:09:2a:4f:ef:79:ba:4e:12:ad:70: cd:96:0d:c1:9f:b5:1b:51:4d:63:5f:16:ec:26:eb:03:c5:a0: ca:36:dc:06:c2:fd:a5:ea:71:81:b8:83:7d:97:59:61:83:d9: e7:b9:79:9f:a2:b3:0d:ed:c0:9f:7a:57:9c:a5:0a:df:36:de: 83:d1:80:bc:63:62:11:e0:90:50:60:ce:55:88:ef:e7:4d:d6: 05:d3:36:42:dc:0c:87:ac:5b:dc:bf:71:66:a1:10:fd:0a:2f: 0e:4e:22:4e:f0:1f:a8:3f:c9:bb:a7:15:4b:0c:4e:db:9c:b1: 9a:8b:13:59:03:d6:55:6f:be:cb:d6:70:00:43:42:9a:19:83: 3b:3b:7a:a4:47:6e:6a:3f:b0:e3:ea:28:93:0e:3a:00:85:b0: 84:d6:76:a4:ad:87:44:81:af:5d:4c:27:3f:cf:5f:7e:29:14: 7b:3c:8e:04:27:cd:98:de:b9:98:39:3c:79:eb:e4:05:a7:f5: f2:f9:4a:14 -----BEGIN CERTIFICATE----- MIIHFDCCBfygAwIBAgIUAQ0Mn0MoWE0zPM4oGFK2T/tDTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4 N2MzMB4XDTI2MDMxNzE2MzAxOVoXDTI3MDgyMjE4MDkxOFowLzEtMCsGA1UEAxMk ZTVkZWE2NjAtYmY1OS00YjRjLWI5YWQtNGE2Nzg3ZTAzZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsd5LyplZxwcr2psLMcIRgCTQ926kaSXCtQi +TmK9gM23LNaR3+/ZletuEkC2Tw1nkNTMF/ehDeEOrqSbIF+rfLoL4ppa9Yu4ajK be/WJI9JJl3qe+6SM4TgF4aiiNxEdR+sMYGhNs2Ldon1esCCMfpBXtV7wtVJ4gYz +AEew5BqYawBYf5mIB0MKzhN0HHpAn4Rly6UKgUHapEcDi1vsExT4xa20o2YEEWo 4nO1SfMViMl/cCx+vsw413BcqNT0CS/5PDIx8gb/WhfoCYohegtCcZl7V8TNafh0 od1TtYv2N7a+62et8Xc9S/kg+G0ABKPbVqsMDs7veIVv9LGHZwIDAQABo4IEJjCC BCIwHQYDVR0OBBYEFOAN3rKnSFn/NZXkZabWXG8Jpf/eMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9l NWRlYTY2MC1iZjU5LTRiNGMtYjlhZC00YTY3ODdlMDNmY2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgt MWNiYy00N2FiLTkwNGUtNDUzNjFhNTQ4N2MzL2U1ZGVhNjYwLWJmNTktNGI0Yy1i OWFkLTRhNjc4N2UwM2ZjZS9lNWRlYTY2MC1iZjU5LTRiNGMtYjlhZC00YTY3ODdl MDNmY2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVh ZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kNmI1YWQyOC0xY2JjLTQ3 YWItOTA0ZS00NTM2MWE1NDg3YzMuY3JsMB8GA1UdIwQYMBaAFPb66hwwaFG69ACf xrZ17a6P8kHAMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2 YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAVAGwADBAXGKWAwHwYIKwYBBQUHAQgBAf8EEDAO oAwwCgIDBiD2AgMGIuowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhAG1nr+wuPQ1z1DUESCPhGRQmbd/QYN4 k9JVvKairmqgEXJ7jzxdrqTMUFS50Sw6UsXE9U5qOAM1bXsMFsYJKk/vebpOEq1w zZYNwZ+1G1FNY18W7CbrA8WgyjbcBsL9pepxgbiDfZdZYYPZ57l5n6KzDe3An3pX nKUK3zbeg9GAvGNiEeCQUGDOVYjv503WBdM2QtwMh6xb3L9xZqEQ/QovDk4iTvAf qD/Ju6cVSwxO25yxmosTWQPWVW++y9ZwAENCmhmDOzt6pEduaj+w4+ookw46AIWw hNZ2pK2HRIGvXUwnP89ffikUezyOBCfNmN65mDk8eevkBaf18vlKFA== -----END CERTIFICATE-----Generated at Thu Mar 26 08:27:23 2026 by rpki-client