$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.cer File: 0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.cer (raw, json) Hash identifier: odyCgLE18+1lbuYcllFr8RZUV5ZJNIxG/Xcda+X85hQ= Subject key identifier: 4D:2F:44:8B:8E:BF:31:A5:86:8D:75:D4:55:5D:52:71:83:CD:46:F7 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D490F7BE8A63F542E5746A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 12:06:47 +0000 Certificate not after: Tue 27 Jun 2028 12:06:47 +0000 Subordinate resources: IP: 23.131.136.0/24 IP: 2602:fece::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:0f:7b:e8:a6:3f:54:2e:57:46:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 25 12:06:47 2026 GMT Not After : Jun 27 12:06:47 2028 GMT Subject: CN=0bc475b7-f559-4c8e-a66b-c6e0cacf90f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6b:1b:f1:8e:13:9a:d5:3c:4d:07:af:73:08: 23:b6:bf:1a:30:bd:34:58:62:b6:b9:ad:62:cc:39: 1c:61:5e:f2:9c:d3:f0:b2:93:a0:68:d8:e7:0a:c0: 08:dd:97:2e:b2:b3:71:96:4a:2f:a7:38:67:45:6d: 32:47:cd:6e:4f:14:6e:38:c6:3c:db:58:16:b6:6f: d7:13:c8:cb:df:02:85:11:60:fc:37:dc:62:28:93: d8:10:67:6e:e7:7f:0b:52:e6:82:ba:29:ef:a4:97: 54:0b:c2:af:3f:5c:ea:3b:6a:7b:dc:19:e7:a8:94: db:9e:1a:1e:82:58:d9:cd:05:0d:69:ba:bf:1e:2f: c0:f4:a6:76:66:31:f5:95:dd:b5:38:86:36:63:a0: 4d:62:fe:52:48:a5:6d:9f:3c:8f:7d:7b:e8:d2:c1: 25:2c:54:b2:81:19:0f:cb:2d:fc:c8:b9:e1:d8:95: 6a:69:76:8e:10:2f:ee:e2:9d:8c:c9:d9:8e:41:40: da:e2:4c:64:42:02:30:49:28:7b:fc:50:95:d6:3f: 1b:c7:cd:a7:41:2d:2e:9b:23:07:4c:ef:ac:85:84: 27:83:20:8e:36:08:56:f6:a2:5b:86:ff:97:9e:3e: be:7d:99:87:04:8c:76:99:2b:0a:a2:3e:4a:98:29: 49:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2F:44:8B:8E:BF:31:A5:86:8D:75:D4:55:5D:52:71:83:CD:46:F7 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6/0bc475b7-f559-4c8e-a66b-c6e0cacf90f6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.131.136.0/24 IPv6: 2602:fece::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:82:41:ea:e6:38:5f:6a:b8:c2:c9:e3:be:ca:58:a6:23:a9: 2a:6b:15:78:65:1a:35:ee:f4:38:33:f5:ae:2f:14:95:53:da: a4:ca:95:4d:9c:10:60:00:1f:40:85:dc:4f:91:88:21:d2:25: b1:2a:f7:27:d9:e3:ac:cd:d5:7d:66:2c:c8:5a:1e:8d:4a:60: 8f:3a:e6:0f:62:9d:3b:96:87:9f:f9:31:6b:98:d7:fa:b6:2f: e7:72:77:fc:2a:1d:69:10:ce:0b:fb:43:1e:36:03:4f:78:c8: 58:ec:97:57:70:bf:07:80:50:76:ea:2e:0f:ca:49:23:49:f6: fe:82:a2:77:b9:9d:f7:22:74:45:a0:8b:32:f1:b6:10:01:d4: 28:7a:8e:10:09:ef:fd:13:dd:31:d9:8e:b8:5b:f5:fd:f6:2b: 16:86:7e:f2:00:e6:d3:f4:00:84:d3:7a:10:cb:28:e4:95:8c: 93:35:5e:32:ad:27:3f:8b:1e:ce:48:68:c0:3b:55:76:a6:32: e3:e2:07:d5:d3:3b:ca:d0:ec:77:29:71:67:94:90:cf:a2:eb: 7e:49:01:ef:49:74:7b:94:db:0b:fe:09:9e:d8:50:0b:38:0c: c0:f3:a7:99:8e:7c:1b:86:3a:46:60:da:a0:5b:40:a1:1e:03: c6:21:ed:f5 -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE1JD3vopj9ULldGqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyNTEyMDY0N1oXDTI4MDYyNzEyMDY0N1owLzEtMCsGA1UEAxMk MGJjNDc1YjctZjU1OS00YzhlLWE2NmItYzZlMGNhY2Y5MGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2sb8Y4TmtU8TQevcwgjtr8aML00WGK2ua1i zDkcYV7ynNPwspOgaNjnCsAI3ZcusrNxlkovpzhnRW0yR81uTxRuOMY821gWtm/X E8jL3wKFEWD8N9xiKJPYEGdu538LUuaCuinvpJdUC8KvP1zqO2p73BnnqJTbnhoe gljZzQUNabq/Hi/A9KZ2ZjH1ld21OIY2Y6BNYv5SSKVtnzyPfXvo0sElLFSygRkP yy38yLnh2JVqaXaOEC/u4p2MydmOQUDa4kxkQgIwSSh7/FCV1j8bx82nQS0umyMH TO+shYQngyCONghW9qJbhv+Xnj6+fZmHBIx2mSsKoj5KmClJHwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFE0vRIuOvzGlho111FVdUnGDzUb3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w YmM0NzViNy1mNTU5LTRjOGUtYTY2Yi1jNmUwY2FjZjkwZjYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzBiYzQ3NWI3LWY1NTktNGM4ZS1h NjZiLWM2ZTBjYWNmOTBmNi8wYmM0NzViNy1mNTU5LTRjOGUtYTY2Yi1jNmUwY2Fj ZjkwZjYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXg4gwDgQCAAIwCAMGACYC/s4AMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB ACiCQermOF9quMLJ477KWKYjqSprFXhlGjXu9Dgz9a4vFJVT2qTKlU2cEGAAH0CF 3E+RiCHSJbEq9yfZ46zN1X1mLMhaHo1KYI865g9inTuWh5/5MWuY1/q2L+dyd/wq HWkQzgv7Qx42A094yFjsl1dwvweAUHbqLg/KSSNJ9v6Cone5nfcidEWgizLxthAB 1Ch6jhAJ7/0T3THZjrhb9f32KxaGfvIA5tP0AITTehDLKOSVjJM1XjKtJz+LHs5I aMA7VXamMuPiB9XTO8rQ7HcpcWeUkM+i635JAe9JdHuU2wv+CZ7YUAs4DMDzp5mO fBuGOkZg2qBbQKEeA8Yh7fU= -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:56 2026 by rpki-client