$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400.cer File: 44f68f8f-fb3d-449e-a030-4b56b7a51400.cer (raw, json) Hash identifier: LjGwrsOWA5TdnDqxVUlUOI9Gk4ToibqVZhycEDZvJB0= Subject key identifier: B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F5EE432E9A509FED5591EE100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 17:21:14 +0000 Certificate not after: Thu 15 Jun 2028 23:39:58 +0000 Subordinate resources: AS: 402274 IP: 23.154.204.0/24 IP: 198.137.201.0/24 IP: 2602:f427::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:e4:32:e9:a5:09:fe:d5:59:1e:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 2 17:21:14 2026 GMT Not After : Jun 15 23:39:58 2028 GMT Subject: CN=44f68f8f-fb3d-449e-a030-4b56b7a51400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:69:ee:ab:c5:7c:ad:a6:bc:4b:2d:a9:f0: 2a:b6:be:35:93:cf:b0:5c:20:b4:79:6e:61:b4:17: 99:56:c1:4d:4f:ea:51:ef:02:d8:55:75:0e:a7:8e: dd:ce:97:5f:13:0e:ac:d9:03:06:fa:3d:81:6c:37: b8:37:c7:b8:4f:cc:bc:57:02:74:2b:f2:5c:9b:2f: b5:c8:38:73:8d:4a:98:0d:ca:c9:18:4e:bb:eb:70: 89:b7:ee:2e:74:d2:ad:c1:23:f1:6b:83:30:58:57: 24:d6:aa:f5:ef:be:b9:75:6a:a8:c3:34:ee:de:6b: db:14:60:80:79:d4:5b:d8:b8:f5:62:27:d8:d4:65: 7a:4d:e2:f5:36:8f:ee:aa:15:0d:22:4d:b2:2b:be: 56:ff:7e:fa:59:d6:63:b0:e5:be:16:39:2f:56:a1: 83:ef:bf:c9:9f:6b:df:9a:79:b6:59:e4:96:12:85: 04:fc:6e:8b:01:b2:d9:ed:4f:64:d4:10:b3:f8:2c: 9f:74:d4:d3:1f:17:e4:8a:68:33:e9:24:ce:9d:50: 70:1e:ff:e0:f8:93:42:19:58:9d:2a:7d:70:8c:6d: 45:41:52:34:63:48:61:ac:38:e5:c2:a6:85:30:24: f3:61:44:35:35:08:bf:1c:28:c0:02:4b:ad:f8:54: ca:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:14:A9:7D:AC:0F:47:A8:85:80:19:DD:CE:38:85:75:EA:66:65:16 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/44f68f8f-fb3d-449e-a030-4b56b7a51400/44f68f8f-fb3d-449e-a030-4b56b7a51400.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.154.204.0/24 198.137.201.0/24 IPv6: 2602:f427::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402274 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:19:20:65:dd:99:19:5c:56:84:86:a8:bc:84:a3:56:94:3d: 40:74:53:49:75:fa:3c:9d:a8:21:c9:85:66:14:3c:d8:4b:b9: 1e:6d:f3:cd:57:f6:e1:1a:44:9b:2a:67:7b:c9:c1:6a:ff:61: 61:59:8b:04:9c:07:16:7f:f5:5a:f6:0e:21:f4:3c:44:aa:e9: 3a:51:5f:d3:9e:88:9b:f2:de:d7:d7:30:e1:9a:cc:a2:16:b6: ca:4b:be:83:2d:4a:3e:69:a8:97:e5:9f:b7:c6:a1:4a:68:ed: 9e:71:13:d9:8e:f8:4c:9e:8b:cf:78:e0:8a:3f:cd:0c:51:b2: e2:e7:ca:7d:d6:9d:68:e9:05:25:f3:80:60:8c:4e:80:9a:4e: 73:ce:eb:ab:ea:aa:77:ca:da:f7:1b:d7:04:62:03:cc:24:3e: 01:72:df:73:97:dd:fd:74:79:af:bf:98:a2:1e:b6:b7:36:4f: cb:b5:d2:2a:72:75:47:e1:58:7e:d1:b3:df:be:59:94:57:55: d7:31:f7:f6:b5:ea:d7:41:79:f1:03:e0:50:4f:0f:51:2c:9a: c4:50:9c:9f:a7:35:b6:70:6e:36:89:d3:00:80:5d:54:72:e5: e2:39:ee:4d:80:ea:98:89:6b:e7:d2:d1:73:77:f3:a0:71:4d: 80:a8:d0:68 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE9e5DLppQn+1Vke4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAwMjE3MjExNFoXDTI4MDYxNTIzMzk1OFowLzEtMCsGA1UEAxMk NDRmNjhmOGYtZmIzZC00NDllLWEwMzAtNGI1NmI3YTUxNDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KVp7qvFfK2mvEstqfAqtr41k8+wXCC0eW5h tBeZVsFNT+pR7wLYVXUOp47dzpdfEw6s2QMG+j2BbDe4N8e4T8y8VwJ0K/Jcmy+1 yDhzjUqYDcrJGE6763CJt+4udNKtwSPxa4MwWFck1qr17765dWqowzTu3mvbFGCA edRb2Lj1YifY1GV6TeL1No/uqhUNIk2yK75W/376WdZjsOW+FjkvVqGD77/Jn2vf mnm2WeSWEoUE/G6LAbLZ7U9k1BCz+CyfdNTTHxfkimgz6STOnVBwHv/g+JNCGVid Kn1wjG1FQVI0Y0hhrDjlwqaFMCTzYUQ1NQi/HCjAAkut+FTKrwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFLQUqX2sD0eohYAZ3c44hXXqZmUWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 NGY2OGY4Zi1mYjNkLTQ0OWUtYTAzMC00YjU2YjdhNTE0MDAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzQ0ZjY4ZjhmLWZiM2QtNDQ5ZS1h MDMwLTRiNTZiN2E1MTQwMC80NGY2OGY4Zi1mYjNkLTQ0OWUtYTAzMC00YjU2Yjdh NTE0MDAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXmswDBADGickwDgQCAAIwCAMGBCYC9CcAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwYjYjBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArGSBl3ZkZXFaEhqi8 hKNWlD1AdFNJdfo8naghyYVmFDzYS7kebfPNV/bhGkSbKmd7ycFq/2FhWYsEnAcW f/Va9g4h9DxEquk6UV/Tnoib8t7X1zDhmsyiFrbKS76DLUo+aaiX5Z+3xqFKaO2e cRPZjvhMnovPeOCKP80MUbLi58p91p1o6QUl84BgjE6Amk5zzuur6qp3ytr3G9cE YgPMJD4Bct9zl939dHmvv5iiHra3Nk/LtdIqcnVH4Vh+0bPfvlmUV1XXMff2terX QXnxA+BQTw9RLJrEUJyfpzW2cG42idMAgF1UcuXiOe5NgOqYiWvn0tFzd/OgcU2A qNBo -----END CERTIFICATE-----Generated at Sat Nov 14 21:47:28 2026 by rpki-client