$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43.cer File: 1b3c8613-4b1a-405c-b15c-a5a254c02c43.cer (raw, json) Hash identifier: 6jiUm69pp9wpkH2y/nFCaY3w6E9CzTvdtLmLmkWZcvg= Subject key identifier: 27:86:24:5F:46:D5:5E:83:F7:D8:F2:59:32:58:B2:33:21:D0:56:FC Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D32CFF82D353C81617E223600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/1b3c8613-4b1a-405c-b15c-a5a254c02c43.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 17 Mar 2026 12:51:02 +0000 Certificate not after: Mon 19 Jun 2028 12:51:02 +0000 Subordinate resources: AS: 11598 AS: 53537 IP: 64.207.96.0/20 IP: 199.21.248.0/22 IP: 2606:7800::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:cf:f8:2d:35:3c:81:61:7e:22:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 17 12:51:02 2026 GMT Not After : Jun 19 12:51:02 2028 GMT Subject: CN=1b3c8613-4b1a-405c-b15c-a5a254c02c43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:ff:a2:bf:b8:25:2e:36:c0:df:2e:38:01: 15:18:80:e3:ec:fb:8a:e9:31:51:73:62:9d:aa:a2: 3d:6a:b6:e7:aa:5f:ba:ca:1a:02:d8:4c:63:27:e8: 62:05:38:b1:1f:ea:e2:64:d4:d1:66:6d:84:ff:c6: 16:a0:d3:de:27:95:e4:f0:03:a6:65:2f:46:5a:47: 75:70:d3:9e:61:f4:28:d8:d1:21:16:73:c5:2b:cb: cb:52:a7:64:6b:0c:89:aa:a6:2b:67:ba:f7:2a:57: a3:d6:bf:09:00:71:19:45:15:5b:e9:ba:d0:f7:b2: 80:df:ae:15:46:43:44:45:30:2d:95:6b:66:43:eb: ed:88:bc:a3:c1:ea:3d:df:db:32:6a:04:c4:7f:d5: 79:ba:02:4c:c8:03:e7:a8:7e:53:81:bd:19:e2:9e: 07:dd:67:6c:66:2d:a4:21:51:c1:b4:69:e6:7a:71: 29:f5:ee:83:4b:8e:35:44:3c:16:4d:0c:dd:cf:1c: e7:8a:86:3a:20:f9:e0:f4:23:c9:a8:4f:52:d8:2f: 17:65:7e:bb:05:32:b2:9e:05:8c:9d:e4:51:ed:a2: fa:75:11:57:36:e5:7f:66:44:7f:ae:bc:e6:1b:e1: cf:55:88:17:e8:2f:2c:be:35:34:38:6a:07:d8:3c: 69:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:86:24:5F:46:D5:5E:83:F7:D8:F2:59:32:58:B2:33:21:D0:56:FC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1b3c8613-4b1a-405c-b15c-a5a254c02c43/1b3c8613-4b1a-405c-b15c-a5a254c02c43.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 64.207.96.0/20 199.21.248.0/22 IPv6: 2606:7800::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11598 53537 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:59:65:4b:57:c3:b1:a8:73:ac:40:24:e7:47:6a:55:10:e2: a4:d1:1d:68:74:fb:ac:01:09:a1:73:8f:69:2f:70:97:87:9e: a4:c1:f6:e4:d9:e2:10:1c:fa:8f:6b:db:62:56:d5:a8:14:fc: 96:3d:14:42:12:08:81:22:6d:a7:95:0b:4f:f5:85:d8:ec:1e: 2f:61:7a:3b:c2:6c:1e:23:cb:61:05:29:83:84:c4:02:16:f5: 43:88:2a:73:89:66:7e:00:e4:61:3d:c8:0e:ec:f1:b3:7c:48: 25:a9:b1:87:8c:6f:35:f5:83:02:97:67:47:71:ac:6f:2c:c5: d0:f7:ce:3d:47:67:dd:43:91:ce:00:66:5c:a7:07:a8:22:bf: 10:b6:46:cb:65:7a:8d:ad:e5:48:91:c0:41:94:a8:a9:a9:8d: 6a:98:e2:ba:55:b6:e8:69:fc:2c:26:8b:1c:d8:4f:30:f0:df: 56:de:8f:bc:3f:9d:30:cd:21:01:e7:28:53:ff:02:b1:ac:13: 16:f5:18:a0:91:7a:b7:e9:d2:0e:8d:33:cc:e2:b4:30:5f:e8: 9e:8c:52:44:6e:de:ea:a5:d0:70:6b:3b:c7:fb:ab:94:27:1c: f4:66:a6:4e:e2:90:61:d7:5f:55:11:2f:fc:af:8a:af:7e:a9: 28:16:a7:c7 -----BEGIN CERTIFICATE----- MIIHIjCCBgqgAwIBAgIUAQ0Mn0MoWE0yz/gtNTyBYX4iNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxNzEyNTEwMloXDTI4MDYxOTEyNTEwMlowLzEtMCsGA1UEAxMk MWIzYzg2MTMtNGIxYS00MDVjLWIxNWMtYTVhMjU0YzAyYzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCz/or+4JS42wN8uOAEVGIDj7PuK6TFRc2Kd qqI9arbnql+6yhoC2ExjJ+hiBTixH+riZNTRZm2E/8YWoNPeJ5Xk8AOmZS9GWkd1 cNOeYfQo2NEhFnPFK8vLUqdkawyJqqYrZ7r3Klej1r8JAHEZRRVb6brQ97KA364V RkNERTAtlWtmQ+vtiLyjweo939syagTEf9V5ugJMyAPnqH5Tgb0Z4p4H3WdsZi2k IVHBtGnmenEp9e6DS441RDwWTQzdzxznioY6IPng9CPJqE9S2C8XZX67BTKyngWM neRR7aL6dRFXNuV/ZkR/rrzmG+HPVYgX6C8svjU0OGoH2Dxp7QIDAQABo4IENDCC BDAwHQYDVR0OBBYEFCeGJF9G1V6D99jyWTJYsjMh0Fb8MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8x YjNjODYxMy00YjFhLTQwNWMtYjE1Yy1hNWEyNTRjMDJjNDMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzFiM2M4NjEzLTRiMWEtNDA1Yy1i MTVjLWE1YTI1NGMwMmM0My8xYjNjODYxMy00YjFhLTQwNWMtYjE1Yy1hNWEyNTRj MDJjNDMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBIEAgABMAwDBARAz2ADBALHFfgwDQQCAAIwBwMFACYGeAAwHgYI KwYBBQUHAQgBAf8EDzANoAswCQICLU4CAwDRITBUBgNVHSABAf8ESjBIMEYGCCsG AQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291 cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSWWVLV8OxqHOs QCTnR2pVEOKk0R1odPusAQmhc49pL3CXh56kwfbk2eIQHPqPa9tiVtWoFPyWPRRC EgiBIm2nlQtP9YXY7B4vYXo7wmweI8thBSmDhMQCFvVDiCpziWZ+AORhPcgO7PGz fEglqbGHjG819YMCl2dHcaxvLMXQ9849R2fdQ5HOAGZcpweoIr8QtkbLZXqNreVI kcBBlKipqY1qmOK6VbboafwsJosc2E8w8N9W3o+8P50wzSEB5yhT/wKxrBMW9Rig kXq36dIOjTPM4rQwX+iejFJEbt7qpdBwazvH+6uUJxz0ZqZO4pBh119VES/8r4qv fqkoFqfH -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:53 2026 by rpki-client