$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.cer File: 2bc7478a-bf84-445b-8cb4-96cf1733e5aa.cer (raw, json) Hash identifier: 6T7ZvDvfzuWCfSPhrRjgZNSAkjORNnvc41LFwnTW5Aw= Subject key identifier: 4C:87:F0:56:58:3F:02:3F:B0:86:8B:76:18:6D:84:7C:2D:2C:A1:2A Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D43D3605C59411388E0AA3FC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 15:06:38 +0000 Certificate not after: Sun 25 Jun 2028 15:06:38 +0000 Subordinate resources: AS: 402300 IP: 198.181.154.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:d3:60:5c:59:41:13:88:e0:aa:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 23 15:06:38 2026 GMT Not After : Jun 25 15:06:38 2028 GMT Subject: CN=2bc7478a-bf84-445b-8cb4-96cf1733e5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9b:65:3e:36:ee:cf:47:33:3f:76:9b:e8:fc: 5d:c6:4b:6b:53:e0:01:c1:5e:e5:c6:8b:c7:7c:11: 78:5e:c3:2c:46:f5:16:ca:97:84:b6:71:28:1d:75: e8:77:f2:9c:e4:6b:fd:5f:d2:59:a0:4d:10:1d:af: a9:01:e4:02:5e:4c:16:b5:95:d1:83:b7:e9:03:9d: 63:27:05:e0:a2:3a:fe:2e:09:e0:57:04:a0:d7:03: d2:e9:47:9d:22:3e:e7:1d:2c:b3:f6:61:19:5c:9f: f6:a6:5a:68:b5:b9:4d:d7:f3:2d:5f:68:d9:b5:b6: a1:ca:78:06:e8:c3:40:b4:17:3c:41:41:dc:54:d8: e5:37:dd:6c:93:af:dc:fb:1d:15:25:28:bb:83:9b: 83:48:03:0b:69:dd:7a:19:2b:84:d2:dc:1f:fa:1c: 8a:f0:05:0e:ea:82:b2:89:c7:e9:be:7f:b4:7f:10: 73:d4:f2:93:78:63:d0:24:a8:f7:78:e3:ba:53:db: a4:6d:51:f4:a8:78:f0:54:58:9a:8d:27:ff:33:94: cf:be:7e:72:1a:5b:cf:93:90:8f:a4:2f:f2:12:b5: e3:07:5d:06:9a:3e:d7:6f:f4:82:7a:fe:bb:09:b1: 79:2f:ee:de:09:69:3c:5d:e8:25:29:83:98:1a:c8: 44:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:87:F0:56:58:3F:02:3F:B0:86:8B:76:18:6D:84:7C:2D:2C:A1:2A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2bc7478a-bf84-445b-8cb4-96cf1733e5aa/2bc7478a-bf84-445b-8cb4-96cf1733e5aa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 198.181.154.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402300 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:54:5d:96:bd:8e:00:d9:fa:01:3b:10:d5:91:23:15:52:2b: e0:31:4c:8f:31:5c:68:46:92:43:35:07:ce:58:91:dc:4b:95: 6e:54:fb:8f:32:9a:5b:75:02:fa:93:f4:6e:f6:cc:5c:d8:65: 29:b9:1f:ea:63:19:5c:07:e0:e3:25:d0:2f:16:4f:6b:1e:7b: c7:5a:a8:f0:16:89:f0:b3:d7:11:3a:2b:20:3e:67:e0:67:d9: bd:3d:b8:95:4a:13:75:67:2e:04:3a:0f:c4:37:a0:62:54:3d: 56:91:90:68:7f:1b:92:8b:1a:45:f4:f2:39:4b:65:56:5e:de: 96:f1:44:fe:d4:2f:50:42:b1:7e:4a:3c:83:49:b8:21:37:fa: b4:34:c0:c5:47:9b:76:1d:4b:0d:d6:5c:8d:fe:76:39:f0:3f: f8:72:a8:d6:c4:63:c0:39:73:06:3a:eb:95:cd:7b:5f:4c:04: 11:8f:13:da:29:dc:4c:6d:38:42:54:74:df:ca:00:bd:68:47: d7:2e:a7:df:69:c7:2a:a3:aa:d1:2d:45:a6:ae:40:02:6a:9d: 79:17:0b:d6:df:8c:a2:93:39:15:f2:93:69:e3:aa:b4:1d:ef: eb:65:40:30:34:0d:dd:9f:fd:fa:d0:4f:22:5d:ff:bd:44:a8: 9a:6c:fe:ee -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1D02BcWUETiOCqP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMzE1MDYzOFoXDTI4MDYyNTE1MDYzOFowLzEtMCsGA1UEAxMk MmJjNzQ3OGEtYmY4NC00NDViLThjYjQtOTZjZjE3MzNlNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjptlPjbuz0czP3ab6PxdxktrU+ABwV7lxovH fBF4XsMsRvUWypeEtnEoHXXod/Kc5Gv9X9JZoE0QHa+pAeQCXkwWtZXRg7fpA51j JwXgojr+LgngVwSg1wPS6UedIj7nHSyz9mEZXJ/2plpotblN1/MtX2jZtbahyngG 6MNAtBc8QUHcVNjlN91sk6/c+x0VJSi7g5uDSAMLad16GSuE0twf+hyK8AUO6oKy icfpvn+0fxBz1PKTeGPQJKj3eOO6U9ukbVH0qHjwVFiajSf/M5TPvn5yGlvPk5CP pC/yErXjB10Gmj7Xb/SCev67CbF5L+7eCWk8XeglKYOYGshE2QIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFEyH8FZYPwI/sIaLdhhthHwtLKEqMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y YmM3NDc4YS1iZjg0LTQ0NWItOGNiNC05NmNmMTczM2U1YWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzJiYzc0NzhhLWJmODQtNDQ1Yi04 Y2I0LTk2Y2YxNzMzZTVhYS8yYmM3NDc4YS1iZjg0LTQ0NWItOGNiNC05NmNmMTcz M2U1YWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGtZowGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiN8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABxUXZa9jgDZ+gE7ENWRIxVSK+AxTI8xXGhGkkM1B85YkdxL lW5U+48ymlt1AvqT9G72zFzYZSm5H+pjGVwH4OMl0C8WT2see8daqPAWifCz1xE6 KyA+Z+Bn2b09uJVKE3VnLgQ6D8Q3oGJUPVaRkGh/G5KLGkX08jlLZVZe3pbxRP7U L1BCsX5KPINJuCE3+rQ0wMVHm3YdSw3WXI3+djnwP/hyqNbEY8A5cwY665XNe19M BBGPE9op3ExtOEJUdN/KAL1oR9cup99pxyqjqtEtRaauQAJqnXkXC9bfjKKTORXy k2njqrQd7+tlQDA0Dd2f/frQTyJd/71EqJps/u4= -----END CERTIFICATE-----Generated at Wed Mar 25 21:16:41 2026 by rpki-client