$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6.cer File: 1e90f840-02b3-4251-9a74-5fab1c71e8d6.cer (raw, json) Hash identifier: 1BnfogiFh01spa8OGUYwh9vxffZugtq6gFU9xqG75yg= Subject key identifier: 09:43:46:9B:98:60:D7:FF:C6:1F:19:FC:04:0C:60:D3:4A:35:EF:91 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584DAABAC082A6F6C348B530FD00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/1e90f840-02b3-4251-9a74-5fab1c71e8d6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 29 Apr 2026 11:45:17 +0000 Certificate not after: Thu 20 Apr 2028 20:07:23 +0000 Subordinate resources: AS: 13809 AS: 402460 IP: 159.150.0.0/16 IP: 2602:80b::/40 IP: 2620:1e::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:ba:c0:82:a6:f6:c3:48:b5:30:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 29 11:45:17 2026 GMT Not After : Apr 20 20:07:23 2028 GMT Subject: CN=1e90f840-02b3-4251-9a74-5fab1c71e8d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:b5:0e:84:75:9c:f5:50:37:9c:ad:71:66: 18:ff:a5:36:81:f3:f5:2c:90:fd:f5:ba:c6:91:1a: 2e:ed:35:63:b0:89:7f:c4:73:81:00:0a:06:18:6f: 06:8a:ea:47:9e:66:57:2a:2d:b9:e3:43:aa:c2:48: 2f:46:23:16:d2:76:1b:23:32:94:5c:0b:2d:8f:a9: a4:ac:e4:13:1a:00:a2:17:1d:94:a9:9c:78:e7:f4: f6:7f:76:0c:f9:2f:24:15:2f:50:59:51:d4:4c:93: 7d:04:0d:33:e0:dd:37:2d:97:55:3e:a7:28:61:94: 76:97:1b:f4:a8:cf:c6:87:ab:e3:00:30:ea:24:11: d3:5a:fe:b6:2f:f5:a0:32:7a:71:1b:58:62:0b:32: 6d:f9:9c:88:23:f5:f6:9c:dd:30:35:4e:39:f3:a6: c6:de:41:a0:9e:89:7f:e8:f0:ea:df:43:e6:86:93: d2:3f:cb:ee:e2:f5:db:11:01:1c:53:c4:08:a6:81: d0:17:41:b1:30:7a:44:a3:8c:25:0b:f0:f5:40:d3: f2:16:34:b9:6a:b0:b3:ac:fc:d0:b1:c4:3b:cc:7a: 3c:54:e5:4a:19:92:8b:80:03:20:40:bd:14:2e:e8: 86:a7:6c:c2:80:ae:aa:7d:8b:f4:e3:0b:6d:dd:88: d5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:43:46:9B:98:60:D7:FF:C6:1F:19:FC:04:0C:60:D3:4A:35:EF:91 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/1e90f840-02b3-4251-9a74-5fab1c71e8d6/1e90f840-02b3-4251-9a74-5fab1c71e8d6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 159.150.0.0/16 IPv6: 2602:80b::/40 2620:1e::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13809 402460 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:f6:ed:10:7d:e2:08:1e:6e:da:02:e4:90:e3:b1:84:29:67: e2:51:9c:f6:e9:ab:93:b9:be:57:5c:cb:5d:7b:94:b6:59:cc: b4:6b:03:e9:49:1c:f4:a4:76:d2:06:06:fb:ff:92:f5:f5:8b: fb:64:2a:6e:8c:16:97:8a:3c:40:54:2e:8d:34:ef:13:2e:9b: b5:fe:97:e7:36:1f:ef:16:8e:5c:11:84:71:88:68:e3:dc:b1: 18:c4:8d:47:f4:51:b2:c8:9c:3d:57:86:df:c8:76:00:79:1d: 45:2d:7d:04:8a:10:bb:23:d6:bc:ad:fe:70:19:02:f3:0f:26: ea:b5:45:40:af:ec:1f:cc:6a:0e:b2:75:35:8a:d9:8d:f1:e1: 7d:43:f2:73:2c:84:1d:7c:b8:42:14:69:02:e3:9b:5e:84:4a: 78:57:e8:a0:98:21:30:52:b9:71:a5:f7:f6:21:68:81:21:6e: df:6f:78:7f:a9:7f:5b:5c:52:fc:90:1b:8b:10:a7:a6:ee:b4: 05:1f:ce:b8:35:2f:d8:33:e3:d1:89:ca:47:d9:48:7c:1b:5f: c3:73:9a:7d:5c:8b:57:d2:8d:cc:e7:cf:cd:b3:b9:5a:84:3e: 93:f6:3a:58:5b:9b:21:09:63:c7:bd:22:64:16:b0:53:56:ca: 5a:2f:c5:da -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE2qusCCpvbDSLUw/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQyOTExNDUxN1oXDTI4MDQyMDIwMDcyM1owLzEtMCsGA1UEAxMk MWU5MGY4NDAtMDJiMy00MjUxLTlhNzQtNWZhYjFjNzFlOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKG1DoR1nPVQN5ytcWYY/6U2gfP1LJD99brG kRou7TVjsIl/xHOBAAoGGG8GiupHnmZXKi2540OqwkgvRiMW0nYbIzKUXAstj6mk rOQTGgCiFx2UqZx45/T2f3YM+S8kFS9QWVHUTJN9BA0z4N03LZdVPqcoYZR2lxv0 qM/Gh6vjADDqJBHTWv62L/WgMnpxG1hiCzJt+ZyII/X2nN0wNU4586bG3kGgnol/ 6PDq30PmhpPSP8vu4vXbEQEcU8QIpoHQF0GxMHpEo4wlC/D1QNPyFjS5arCzrPzQ scQ7zHo8VOVKGZKLgAMgQL0ULuiGp2zCgK6qfYv04wtt3YjVmQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFAlDRpuYYNf/xh8Z/AQMYNNKNe+RMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8x ZTkwZjg0MC0wMmIzLTQyNTEtOWE3NC01ZmFiMWM3MWU4ZDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzFlOTBmODQwLTAyYjMtNDI1MS05 YTc0LTVmYWIxYzcxZThkNi8xZTkwZjg0MC0wMmIzLTQyNTEtOWE3NC01ZmFiMWM3 MWU4ZDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNwYIKwYBBQUH AQcBAf8EKDAmMAsEAgABMAUDAwCfljAXBAIAAjARAwYAJgIICwADBwAmIAAeAAAw HgYIKwYBBQUHAQgBAf8EDzANoAswCQICNfECAwYkHDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBK9u0QfeII Hm7aAuSQ47GEKWfiUZz26auTub5XXMtde5S2Wcy0awPpSRz0pHbSBgb7/5L19Yv7 ZCpujBaXijxAVC6NNO8TLpu1/pfnNh/vFo5cEYRxiGjj3LEYxI1H9FGyyJw9V4bf yHYAeR1FLX0EihC7I9a8rf5wGQLzDybqtUVAr+wfzGoOsnU1itmN8eF9Q/JzLIQd fLhCFGkC45tehEp4V+igmCEwUrlxpff2IWiBIW7fb3h/qX9bXFL8kBuLEKem7rQF H864NS/YM+PRicpH2Uh8G1/Dc5p9XItX0o3M58/Ns7lahD6T9jpYW5shCWPHvSJk FrBTVspaL8Xa -----END CERTIFICATE-----Generated at Wed May 13 03:04:25 2026 by rpki-client