$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer File: 40898705-dca0-471d-ab1b-b12e6e8e7c83.cer (raw, json) Hash identifier: nS5zyYdC0PWY04FXn2BAT07JxpVPqPlaRibLqqFDmHE= Subject key identifier: D4:50:5F:18:28:00:9D:4A:97:41:09:C9:41:47:31:78:ED:C9:48:6D Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D4445D3F7A85EC2EE988BEB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 18:57:14 +0000 Certificate not after: Sun 25 Jun 2028 18:57:14 +0000 Subordinate resources: AS: 402261 IP: 23.154.132.0/24 IP: 2620:7f:1450::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:45:d3:f7:a8:5e:c2:ee:98:8b:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 23 18:57:14 2026 GMT Not After : Jun 25 18:57:14 2028 GMT Subject: CN=40898705-dca0-471d-ab1b-b12e6e8e7c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e9:fa:27:3f:2b:76:ad:02:03:b9:41:02:7f: ec:02:cb:36:a6:5d:e1:3a:ad:cf:69:36:70:2c:a6: 4a:fa:96:e4:42:ee:f4:a4:ea:b7:76:d5:99:19:f6: 6d:58:d8:d0:52:92:73:ad:17:67:fc:23:ea:de:4a: 16:f4:bf:31:49:a6:fd:d6:a2:ad:ae:ed:70:25:e3: d6:ee:87:7e:14:ad:8c:3b:ab:b9:fd:52:3d:6f:27: 5c:5e:ef:82:c3:e8:cc:59:ba:d9:ef:10:71:88:8b: 38:2f:e1:f0:89:2f:9f:d3:58:0a:d8:12:8e:fd:cc: 04:dd:5e:c0:ea:e1:cc:7d:dc:17:80:e2:5a:42:d5: 1c:64:f4:ab:63:57:2a:8c:98:71:b9:5b:51:62:42: e8:10:7d:5f:c3:6a:ec:e4:da:0f:57:e1:2b:d4:b5: a3:8b:88:0a:0f:ce:69:8d:78:15:ed:7a:f7:ae:5b: 95:76:1d:6c:ed:53:9e:b7:97:73:f3:b4:70:d3:84: 5f:93:a3:42:35:a1:de:fd:51:85:09:b1:b9:56:4a: 7f:fe:c4:c9:bb:51:73:de:6a:19:7e:bd:6b:46:52: a1:69:da:60:3d:0d:f2:6e:79:90:ed:70:c2:65:5f: 64:11:f5:cc:b6:37:c5:dc:7d:ee:30:a8:53:d5:35: ad:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:50:5F:18:28:00:9D:4A:97:41:09:C9:41:47:31:78:ED:C9:48:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.154.132.0/24 IPv6: 2620:7f:1450::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402261 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ec:b6:8c:10:1a:71:59:d3:7f:b0:c8:e9:ce:77:b1:42:88: 9a:ef:95:68:63:79:37:9e:14:7e:73:e7:18:ac:ab:4f:28:cd: 1e:12:40:8c:b1:f1:30:82:97:65:73:e2:0b:9b:cc:a5:3f:f0: 6f:c7:b7:94:41:c1:76:bc:74:9d:48:3a:7f:93:38:fa:2d:9b: e8:b3:8b:b2:d1:fc:d7:bb:45:ad:39:8b:7e:de:f9:29:5a:bc: 96:38:d1:64:e6:b7:95:4e:6b:d1:44:ed:11:9c:f0:ef:02:6d: 32:82:48:8c:fe:bc:a8:4a:b4:6a:ac:d2:28:57:d9:f9:2e:4f: 11:02:52:c6:6c:8b:3b:ed:4d:66:41:93:6e:56:12:20:2f:7c: 2e:5f:46:42:1e:54:de:a7:82:78:bc:57:46:91:71:e3:7a:ba: fd:f9:dd:19:6b:6b:50:6b:13:30:3c:b0:ec:4b:33:55:bb:3e: d7:db:56:0f:8b:27:84:2a:9e:7f:33:57:74:27:99:3b:1b:00: 17:d6:e2:20:a3:b4:40:06:cc:70:6c:d6:1a:a2:8e:61:54:f5: d2:a3:c8:d3:31:6d:11:e7:f7:9d:db:44:0b:7d:a7:a9:d5:75: 3a:36:86:17:35:8c:be:17:17:28:9b:ff:21:39:97:73:25:96: e2:6c:8a:bf -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE1ERdP3qF7C7piL6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMzE4NTcxNFoXDTI4MDYyNTE4NTcxNFowLzEtMCsGA1UEAxMk NDA4OTg3MDUtZGNhMC00NzFkLWFiMWItYjEyZTZlOGU3YzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+n6Jz8rdq0CA7lBAn/sAss2pl3hOq3PaTZw LKZK+pbkQu70pOq3dtWZGfZtWNjQUpJzrRdn/CPq3koW9L8xSab91qKtru1wJePW 7od+FK2MO6u5/VI9bydcXu+Cw+jMWbrZ7xBxiIs4L+HwiS+f01gK2BKO/cwE3V7A 6uHMfdwXgOJaQtUcZPSrY1cqjJhxuVtRYkLoEH1fw2rs5NoPV+Er1LWji4gKD85p jXgV7Xr3rluVdh1s7VOet5dz87Rw04Rfk6NCNaHe/VGFCbG5Vkp//sTJu1Fz3moZ fr1rRlKhadpgPQ3ybnmQ7XDCZV9kEfXMtjfF3H3uMKhT1TWtPQIDAQABo4IELDCC BCgwHQYDVR0OBBYEFNRQXxgoAJ1Kl0EJyUFHMXjtyUhtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 MDg5ODcwNS1kY2EwLTQ3MWQtYWIxYi1iMTJlNmU4ZTdjODMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzQwODk4NzA1LWRjYTAtNDcxZC1h YjFiLWIxMmU2ZThlN2M4My80MDg5ODcwNS1kY2EwLTQ3MWQtYWIxYi1iMTJlNmU4 ZTdjODMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXmoQwDwQCAAIwCQMHACYgAH8UUDAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGI1UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAf+y2jBAacVnTf7DI6c53sUKI mu+VaGN5N54UfnPnGKyrTyjNHhJAjLHxMIKXZXPiC5vMpT/wb8e3lEHBdrx0nUg6 f5M4+i2b6LOLstH817tFrTmLft75KVq8ljjRZOa3lU5r0UTtEZzw7wJtMoJIjP68 qEq0aqzSKFfZ+S5PEQJSxmyLO+1NZkGTblYSIC98Ll9GQh5U3qeCeLxXRpFx43q6 /fndGWtrUGsTMDyw7EszVbs+19tWD4snhCqefzNXdCeZOxsAF9biIKO0QAbMcGzW GqKOYVT10qPI0zFtEef3ndtEC32nqdV1OjaGFzWMvhcXKJv/ITmXcyWW4myKvw== -----END CERTIFICATE-----Generated at Thu Mar 26 03:12:27 2026 by rpki-client