$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer File: 2af9df74-e88e-4433-b765-051efef6177a.cer (raw, json) Hash identifier: BPznzsT90yZVm4m0VxsujSL4R7/Q0XVL4SlTEMfCuT0= Subject key identifier: 8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D0F80D624310867A2A250C834 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 21:18:17 +0000 Certificate not after: Tue 06 Jun 2028 20:18:17 +0000 Subordinate resources: AS: 1035 AS: 1041 AS: 13567 AS: 400406 IP: 192.206.119.0/24 IP: 205.203.64.0 -- 205.203.73.255 IP: 205.203.76.0 -- 205.203.95.255 IP: 2620:21:8000::/48 IP: 2620:10b:e000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0f:80:d6:24:31:08:67:a2:a2:50:c8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 4 21:18:17 2026 GMT Not After : Jun 6 20:18:17 2028 GMT Subject: CN=2af9df74-e88e-4433-b765-051efef6177a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d2:49:41:81:23:dd:41:f2:38:79:5d:69:67: ef:48:b3:47:e4:62:41:c5:a6:ad:87:b1:94:6b:50: 42:0c:6a:8b:26:af:e0:be:27:ab:91:00:2e:27:52: 62:e0:b5:7b:b3:db:8d:34:22:03:1e:4c:bc:6a:f8: 79:86:e3:3e:a9:9a:e8:e9:fc:b3:89:18:69:fc:ce: 20:51:36:e1:6e:2d:f2:5f:26:36:bd:cf:c8:ee:6c: 43:a4:b7:63:0a:9d:f5:64:fd:02:67:0e:57:b3:73: 00:d1:56:2e:d2:6f:bc:d0:c7:16:9d:c9:4a:8d:79: 15:fe:91:ee:11:5b:08:6b:c2:a4:b8:9b:c7:22:fd: d1:1d:e2:be:93:95:26:4f:99:fe:78:f5:13:cd:06: 45:87:3a:fe:3b:a5:ad:96:8f:cc:5c:07:ad:2b:d1: 79:7c:01:1d:b2:24:ee:80:03:d6:be:ec:71:58:c5: ce:88:11:7a:98:6c:fc:d4:ed:2f:36:67:56:89:c5: 53:c1:e6:34:ce:ba:e5:0b:bb:91:96:cd:e4:f9:e7: d2:ca:b0:47:79:44:f9:24:d8:84:fe:e7:1d:39:76: 09:2d:c5:5a:a9:66:e2:d6:3c:d3:d1:cb:94:d2:e3: f7:7b:ba:d0:45:cb:b3:e5:70:fe:b2:e4:dd:2f:60: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 192.206.119.0/24 205.203.64.0-205.203.73.255 205.203.76.0-205.203.95.255 IPv6: 2620:21:8000::/48 2620:10b:e000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1035 1041 13567 400406 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:79:a3:91:b4:b5:50:65:96:dc:3f:b8:e6:78:56:12:ee:0c: 49:d5:9c:63:96:57:22:1d:82:af:46:62:a0:3c:5a:92:98:8b: 69:7f:dd:d7:b8:d6:40:57:79:61:57:cf:17:8d:4c:05:06:a8: 34:3d:b5:ff:5f:8c:50:77:1a:a3:e4:5e:9f:b7:3b:88:54:ad: 15:7f:52:64:c4:2a:7e:7e:49:cf:9c:f3:08:25:80:2b:2f:60: cd:61:b8:cc:c7:98:93:ab:e2:ac:e0:dd:27:35:32:ba:94:27: 91:c0:29:e4:d2:fe:f4:16:86:28:27:85:43:53:de:3c:21:0c: c9:b2:40:bb:38:07:52:71:36:14:c1:4b:00:41:d5:2a:22:71: fb:3f:bf:28:a4:cb:87:0b:fd:67:8b:e9:77:df:b7:61:56:a8: 31:d2:a3:94:dc:36:79:6a:b5:c8:ce:ae:25:31:96:68:60:69: c8:b1:b6:07:f4:47:e8:4f:11:d7:65:a4:5a:9b:14:08:64:8e: 2c:84:00:fa:c0:6c:e9:f6:19:3d:8d:c0:38:21:2c:d8:40:ad: 95:44:57:c6:3b:a1:c3:f5:c8:b6:58:c9:61:f3:6e:75:92:ce: a8:e7:ae:60:41:cd:dc:55:0a:bc:17:71:df:13:cf:50:c5:e1: 18:7d:7e:38 -----BEGIN CERTIFICATE----- MIIHSjCCBjKgAwIBAgIUAQ0Mn0MoWE0PgNYkMQhnoqJQyDQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNDIxMTgxN1oXDTI4MDYwNjIwMTgxN1owLzEtMCsGA1UEAxMk MmFmOWRmNzQtZTg4ZS00NDMzLWI3NjUtMDUxZWZlZjYxNzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldJJQYEj3UHyOHldaWfvSLNH5GJBxaath7GU a1BCDGqLJq/gvierkQAuJ1Ji4LV7s9uNNCIDHky8avh5huM+qZro6fyziRhp/M4g UTbhbi3yXyY2vc/I7mxDpLdjCp31ZP0CZw5Xs3MA0VYu0m+80McWnclKjXkV/pHu EVsIa8KkuJvHIv3RHeK+k5UmT5n+ePUTzQZFhzr+O6Wtlo/MXAetK9F5fAEdsiTu gAPWvuxxWMXOiBF6mGz81O0vNmdWicVTweY0zrrlC7uRls3k+efSyrBHeUT5JNiE /ucdOXYJLcVaqWbi1jzT0cuU0uP3e7rQRcuz5XD+suTdL2ClcwIDAQABo4IEXDCC BFgwHQYDVR0OBBYEFIsmWlEjddhTCzvxl2OSlhewIhAWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y YWY5ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFlZmVmNjE3N2EvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzJhZjlkZjc0LWU4OGUtNDQzMy1i NzY1LTA1MWVmZWY2MTc3YS8yYWY5ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFlZmVm NjE3N2EubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwVAYIKwYBBQUH AQcBAf8ERTBDMCgEAgABMCIDBADAzncwDAMEBs3LQAMEAc3LSDAMAwQCzctMAwQF zctAMBcEAgACMBEDBwAmIAAhgAADBgAmIAEL4DAmBggrBgEFBQcBCAEB/wQXMBWg EzARAgIECwICBBECAjT/AgMGHBYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAD3mjkbS1UGWW3D+45nhWEu4M SdWcY5ZXIh2Cr0ZioDxakpiLaX/d17jWQFd5YVfPF41MBQaoND21/1+MUHcao+Re n7c7iFStFX9SZMQqfn5Jz5zzCCWAKy9gzWG4zMeYk6virODdJzUyupQnkcAp5NL+ 9BaGKCeFQ1PePCEMybJAuzgHUnE2FMFLAEHVKiJx+z+/KKTLhwv9Z4vpd9+3YVao MdKjlNw2eWq1yM6uJTGWaGBpyLG2B/RH6E8R12WkWpsUCGSOLIQA+sBs6fYZPY3A OCEs2ECtlURXxjuhw/XItljJYfNudZLOqOeuYEHN3FUKvBdx3xPPUMXhGH1+OA== -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:50 2026 by rpki-client