$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83.cer File: 2c9b4e4b-748b-4793-9d99-06f7509dca83.cer (raw, json) Hash identifier: CG5jOD7RNFjOevAm6CLoLxoK5iVA6SWt/egapcupZrk= Subject key identifier: 06:9D:85:BB:F0:68:12:AC:86:38:EC:AA:21:FF:B9:7B:03:D2:59:D5 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D43412E0C915F2A1ECB039480 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/2c9b4e4b-748b-4793-9d99-06f7509dca83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 10:12:04 +0000 Certificate not after: Sun 25 Jun 2028 10:12:04 +0000 Subordinate resources: AS: 27173 IP: 162.252.232.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:43:41:2e:0c:91:5f:2a:1e:cb:03:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 23 10:12:04 2026 GMT Not After : Jun 25 10:12:04 2028 GMT Subject: CN=2c9b4e4b-748b-4793-9d99-06f7509dca83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:00:39:78:48:a9:0c:22:fd:c6:bd:59:57:4d: 2a:f0:1d:ec:d4:be:98:91:2e:0c:bf:56:fd:42:13: 88:63:a9:d8:9e:5c:38:96:ad:40:42:89:2e:0e:33: 2c:fc:5c:8a:02:bb:07:05:78:05:0e:df:a7:1d:7e: b1:a1:2c:c1:ef:a2:5a:ee:47:63:de:b9:a2:f8:61: 18:98:15:12:2d:ec:53:a0:7f:80:0e:1f:40:47:c6: ab:d1:5d:16:d7:cb:10:21:1c:75:e0:9c:12:b6:ad: b4:c3:67:e9:36:88:a9:c1:4a:7b:73:c3:47:05:ca: 49:aa:df:e2:df:a1:c4:d1:50:50:41:7d:dc:04:f5: d2:cc:b3:2b:cd:89:64:f5:fc:a3:a7:74:a6:b7:16: 15:2b:71:77:61:d8:f0:1a:1b:57:56:9a:b9:3a:95: 40:7c:e5:ec:51:77:2d:68:03:88:02:43:ca:04:e0: bd:6b:ab:f1:2a:6f:46:97:ae:a6:ee:28:ab:c8:0a: ca:e1:a3:73:7f:47:a8:7d:77:f0:64:40:76:14:39: 64:bc:c6:48:f6:36:12:ec:7f:4c:4c:3d:a8:c0:14: 33:57:77:10:aa:df:14:a5:e8:6a:ec:ba:43:be:05: a7:75:8f:7b:d3:77:08:25:9e:be:49:fa:1c:59:c6: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9D:85:BB:F0:68:12:AC:86:38:EC:AA:21:FF:B9:7B:03:D2:59:D5 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2c9b4e4b-748b-4793-9d99-06f7509dca83/2c9b4e4b-748b-4793-9d99-06f7509dca83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 162.252.232.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27173 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:2a:ac:f4:f1:64:1d:59:9b:d5:67:a0:12:ca:06:14:35:9e: bc:54:23:30:25:aa:19:bd:c8:14:87:ae:d4:ed:3e:f6:8e:ac: a2:a6:d2:13:1f:72:2f:d4:04:b8:aa:6d:e9:29:e9:1c:ef:06: 42:57:2f:1d:00:e3:f8:36:85:11:e9:2e:f5:82:1f:e4:a9:05: dc:d7:b9:86:f6:e5:d0:a5:02:b9:f9:1b:f0:6e:23:fc:88:33: d5:60:0a:5c:ff:ad:6a:71:38:2d:a3:cc:de:8c:55:e7:e8:34: 60:23:ec:7c:49:55:37:13:ca:b2:3c:cd:7b:98:1b:a5:de:e7: a0:d7:bc:06:00:3f:ae:02:50:f8:69:83:54:69:4a:50:46:94: 27:94:39:c1:57:7e:c3:c4:59:6a:0f:08:47:33:3e:6b:18:1b: 2d:5c:61:4d:93:f6:58:c7:63:80:81:34:04:a8:2a:ca:71:f4: e1:3f:3d:88:e5:b3:79:ee:41:50:d3:61:db:55:ef:34:20:1c: 99:7c:f4:61:1c:1c:d4:57:f7:51:18:59:72:7f:de:77:57:d5: 94:0f:5b:c0:20:16:66:61:0a:ac:9d:78:cc:ea:2a:02:9c:14: b5:d0:42:a5:ca:90:bc:e8:80:f5:77:b8:db:fb:c8:ec:51:d5: 35:ac:87:dd -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE1DQS4MkV8qHssDlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMzEwMTIwNFoXDTI4MDYyNTEwMTIwNFowLzEtMCsGA1UEAxMk MmM5YjRlNGItNzQ4Yi00NzkzLTlkOTktMDZmNzUwOWRjYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwA5eEipDCL9xr1ZV00q8B3s1L6YkS4Mv1b9 QhOIY6nYnlw4lq1AQokuDjMs/FyKArsHBXgFDt+nHX6xoSzB76Ja7kdj3rmi+GEY mBUSLexToH+ADh9AR8ar0V0W18sQIRx14JwStq20w2fpNoipwUp7c8NHBcpJqt/i 36HE0VBQQX3cBPXSzLMrzYlk9fyjp3SmtxYVK3F3YdjwGhtXVpq5OpVAfOXsUXct aAOIAkPKBOC9a6vxKm9Gl66m7iiryArK4aNzf0eofXfwZEB2FDlkvMZI9jYS7H9M TD2owBQzV3cQqt8Upehq7LpDvgWndY9703cIJZ6+SfocWcYSOwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFAadhbvwaBKshjjsqiH/uXsD0lnVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y YzliNGU0Yi03NDhiLTQ3OTMtOWQ5OS0wNmY3NTA5ZGNhODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzJjOWI0ZTRiLTc0OGItNDc5My05 ZDk5LTA2Zjc1MDlkY2E4My8yYzliNGU0Yi03NDhiLTQ3OTMtOWQ5OS0wNmY3NTA5 ZGNhODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAKi/OgwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC aiUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEARiqs9PFkHVmb1WegEsoGFDWevFQjMCWqGb3IFIeu1O0+9o6s oqbSEx9yL9QEuKpt6SnpHO8GQlcvHQDj+DaFEeku9YIf5KkF3Ne5hvbl0KUCufkb 8G4j/Igz1WAKXP+tanE4LaPM3oxV5+g0YCPsfElVNxPKsjzNe5gbpd7noNe8BgA/ rgJQ+GmDVGlKUEaUJ5Q5wVd+w8RZag8IRzM+axgbLVxhTZP2WMdjgIE0BKgqynH0 4T89iOWzee5BUNNh21XvNCAcmXz0YRwc1Ff3URhZcn/ed1fVlA9bwCAWZmEKrJ14 zOoqApwUtdBCpcqQvOiA9Xe42/vI7FHVNayH3Q== -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:48 2026 by rpki-client