$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer File: 13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.cer (raw, json) Hash identifier: Veqh8GTcIsb3APe7JhtZtFr6p8MiXdeZGQNVcuq9pBw= Subject key identifier: 45:77:DE:44:A4:E3:4C:8A:9A:F2:2E:30:CB:B3:D3:CB:D1:9A:C7:C5 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D49710B75F957BC7E5454FE80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 15:23:21 +0000 Certificate not after: Tue 27 Jun 2028 15:23:21 +0000 Subordinate resources: AS: 20107 IP: 136.141.0.0/16 IP: 167.120.0.0/16 IP: 216.99.64.0/19 IP: 2620:0:1a00::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:71:0b:75:f9:57:bc:7e:54:54:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 25 15:23:21 2026 GMT Not After : Jun 27 15:23:21 2028 GMT Subject: CN=13f31b18-a04d-4db3-a3a5-b76ea4fe56fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:46:23:ff:50:08:e7:8d:c4:83:9c:b5:ed:8f: ec:ed:7e:f8:0f:ff:8d:9a:d4:2f:23:df:27:29:e8: 21:9e:ff:4a:f1:9d:0f:26:54:d1:bd:68:13:92:cb: 19:b7:16:fe:47:7d:41:e7:84:3a:06:09:90:1a:d3: 53:94:17:fa:03:51:0e:7c:92:e6:a5:5e:74:5e:a8: 41:34:f3:60:16:75:4d:a5:b9:44:e3:1f:41:c7:d0: d6:f4:8d:c3:98:70:c8:00:05:16:2a:f6:e9:1a:2c: ce:24:37:7d:7f:e5:a9:f1:78:a2:5d:85:4f:da:fb: a2:ea:c8:25:e5:e7:42:c9:f8:9a:b8:71:62:30:c0: f6:78:f1:c3:81:c0:ff:d2:cc:b4:6a:50:6d:05:08: 12:e1:b0:b2:d4:6c:05:34:00:cb:18:db:20:32:38: a2:9b:9c:89:ed:c8:d3:e9:21:ab:18:c0:90:46:34: f0:15:65:cb:25:d1:93:9b:59:dd:3a:2d:90:b4:8e: d0:33:2d:6d:ae:5c:90:b3:94:0a:36:25:d7:9b:7a: 05:1d:4e:84:83:d0:2e:c7:bd:33:72:3d:06:ef:cf: 82:cf:3f:e5:10:7c:9d:b3:84:7e:ed:37:cb:7d:ea: 31:a0:69:1b:11:53:dc:a6:c8:31:48:f1:1b:f9:ce: 8f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:77:DE:44:A4:E3:4C:8A:9A:F2:2E:30:CB:B3:D3:CB:D1:9A:C7:C5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb/13f31b18-a04d-4db3-a3a5-b76ea4fe56fb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 136.141.0.0/16 167.120.0.0/16 216.99.64.0/19 IPv6: 2620:0:1a00::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 20107 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:80:7e:b8:94:d5:45:11:53:0c:96:e1:e7:36:f5:ab:04:b0: 12:02:61:b0:6b:d7:d9:4e:7d:77:ac:0c:dd:01:91:83:e0:45: d7:16:76:25:df:14:40:f5:41:87:c6:c2:27:92:88:75:f2:51: cc:94:21:0e:b2:0e:03:55:01:e9:90:a2:ad:3e:fc:b6:d4:ab: 8e:5f:b7:3f:60:08:20:da:b5:18:4b:f3:87:6d:a1:f3:7a:a3: 09:22:0d:6c:db:43:2f:78:dc:ab:70:45:bf:9f:b1:3e:7f:a6: 77:d3:e0:e0:72:7a:66:09:1b:9a:83:79:b7:a0:db:b6:19:7b: be:2d:69:63:dc:e9:e3:56:bf:dd:f4:0b:37:86:e3:1c:ad:58: c2:40:6e:c4:30:8d:60:83:06:62:37:43:ba:bf:8d:30:dd:5a: 41:1a:38:20:67:da:f1:cd:d2:a0:7b:14:da:3f:2f:d3:89:bf: cc:a5:81:0f:da:9d:a8:fd:27:ff:29:88:8b:0e:a9:86:47:8e: 4f:83:20:b9:76:ca:09:d8:80:93:41:7c:45:e1:03:6a:c3:34: 78:f8:ba:0a:b3:52:bc:71:32:b8:aa:7f:47:b8:99:b3:d2:bc: 68:a1:d9:c3:9d:a9:96:b1:52:6b:99:1d:d9:6f:74:49:44:7a: d3:12:04:cc -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE1JcQt1+Ve8flRU/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyNTE1MjMyMVoXDTI4MDYyNzE1MjMyMVowLzEtMCsGA1UEAxMk MTNmMzFiMTgtYTA0ZC00ZGIzLWEzYTUtYjc2ZWE0ZmU1NmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkYj/1AI543Eg5y17Y/s7X74D/+NmtQvI98n Keghnv9K8Z0PJlTRvWgTkssZtxb+R31B54Q6BgmQGtNTlBf6A1EOfJLmpV50XqhB NPNgFnVNpblE4x9Bx9DW9I3DmHDIAAUWKvbpGizOJDd9f+Wp8XiiXYVP2vui6sgl 5edCyfiauHFiMMD2ePHDgcD/0sy0alBtBQgS4bCy1GwFNADLGNsgMjiim5yJ7cjT 6SGrGMCQRjTwFWXLJdGTm1ndOi2QtI7QMy1trlyQs5QKNiXXm3oFHU6Eg9Aux70z cj0G78+Czz/lEHyds4R+7TfLfeoxoGkbEVPcpsgxSPEb+c6P/wIDAQABo4IENTCC BDEwHQYDVR0OBBYEFEV33kSk40yKmvIuMMuz08vRmsfFMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8x M2YzMWIxOC1hMDRkLTRkYjMtYTNhNS1iNzZlYTRmZTU2ZmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzEzZjMxYjE4LWEwNGQtNGRiMy1h M2E1LWI3NmVhNGZlNTZmYi8xM2YzMWIxOC1hMDRkLTRkYjMtYTNhNS1iNzZlYTRm ZTU2ZmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwOgYIKwYBBQUH AQcBAf8EKzApMBYEAgABMBADAwCIjQMDAKd4AwQF2GNAMA8EAgACMAkDBwAmIAAA GgAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICToswVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAbYB+uJTVRRFT DJbh5zb1qwSwEgJhsGvX2U59d6wM3QGRg+BF1xZ2Jd8UQPVBh8bCJ5KIdfJRzJQh DrIOA1UB6ZCirT78ttSrjl+3P2AIINq1GEvzh22h83qjCSINbNtDL3jcq3BFv5+x Pn+md9Pg4HJ6ZgkbmoN5t6Dbthl7vi1pY9zp41a/3fQLN4bjHK1YwkBuxDCNYIMG YjdDur+NMN1aQRo4IGfa8c3SoHsU2j8v04m/zKWBD9qdqP0n/ymIiw6phkeOT4Mg uXbKCdiAk0F8ReEDasM0ePi6CrNSvHEyuKp/R7iZs9K8aKHZw52plrFSa5kd2W90 SUR60xIEzA== -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:52 2026 by rpki-client