$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e.cer File: 4a1f1870-2d18-4f29-a8d8-91987d2f683e.cer (raw, json) Hash identifier: 5j+v61NgkhYY9xFjIBRnX/e2gnJapA1RSVTdjqncXsI= Subject key identifier: C6:E9:FD:71:4C:EE:F8:67:DA:C7:F3:9D:BD:A1:91:42:46:1C:EB:04 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D1D04CC379A8241FA14C92080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Mar 2026 17:29:41 +0000 Certificate not after: Sun 11 Jun 2028 17:29:41 +0000 Subordinate resources: IP: 192.70.132.0/24 IP: 192.77.181.0/24 IP: 204.145.242.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1d:04:cc:37:9a:82:41:fa:14:c9:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 9 17:29:41 2026 GMT Not After : Jun 11 17:29:41 2028 GMT Subject: CN=4a1f1870-2d18-4f29-a8d8-91987d2f683e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:29:a4:2c:b0:fd:aa:85:78:94:14:e8:9d: fd:a9:88:d0:51:a1:13:30:b1:47:78:cc:ce:ad:9e: a5:a7:64:5c:f6:38:7b:ea:ba:b7:3c:00:6d:d2:6d: f2:dc:45:b2:71:31:0b:09:61:27:b7:31:5d:85:4f: 9b:1c:e8:04:cb:f4:e7:27:31:b9:4c:5e:25:49:c2: df:63:54:ff:cd:58:2f:29:be:41:56:f1:b7:75:e0: f6:71:47:5c:c8:81:bd:5b:7a:d4:6c:ca:7f:ac:7d: f4:c4:26:48:ab:f6:04:a3:c6:c0:57:3f:e0:af:40: 5c:7f:3f:5d:45:29:8c:bb:59:f0:52:12:af:c4:1f: bd:c7:7d:b1:e7:f5:53:bb:33:e5:eb:59:08:82:ae: c7:37:37:72:bb:af:70:d0:67:f3:eb:87:4b:05:21: 80:14:be:52:4b:da:ee:23:17:8f:6b:17:45:bc:77: 9c:a8:37:05:9e:24:c0:8c:1e:7f:f1:e0:5f:ea:4b: 4f:7d:e8:c8:8f:42:4f:ad:66:ac:2d:5a:14:56:7f: 89:5e:15:69:85:49:b3:db:c8:6f:91:ca:9a:32:31: 32:d2:03:cd:b7:3a:79:53:c6:16:79:c7:53:14:81: 58:9e:54:5e:4e:e7:cf:97:9c:d8:f2:dd:90:a9:3e: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E9:FD:71:4C:EE:F8:67:DA:C7:F3:9D:BD:A1:91:42:46:1C:EB:04 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4a1f1870-2d18-4f29-a8d8-91987d2f683e/4a1f1870-2d18-4f29-a8d8-91987d2f683e.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 192.70.132.0/24 192.77.181.0/24 204.145.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:da:24:32:1c:98:fe:01:c4:63:6b:dc:e4:b6:8d:3b:a0:5a: 88:63:11:88:ac:c3:f7:59:82:24:f9:8e:a5:f1:1f:2e:fc:4d: 22:08:de:dc:8a:b9:ab:e2:c9:73:a8:dd:06:51:85:1a:c9:dc: 01:0c:78:09:ff:f6:1e:bb:43:5b:93:3d:30:69:03:02:1f:f7: 2b:51:2a:a8:eb:2f:32:94:f5:30:b2:d4:33:56:44:b4:9c:f4: 98:68:7a:7c:10:f6:a6:06:4e:92:54:a2:79:cd:65:4e:bc:a5: de:83:3c:21:58:f8:f4:b5:ae:01:be:cc:3e:5f:7a:02:b3:78: 35:f2:ee:1a:45:af:7d:39:10:f3:1a:cc:80:62:8a:90:c5:fc: 0d:2c:99:d9:6f:18:70:09:1b:e9:ed:96:dc:9d:aa:07:ce:e6: e8:7e:1f:4e:f6:88:c6:79:ff:94:e7:dd:d1:9b:ca:55:cf:2d: 25:07:ae:35:e8:21:7d:46:c1:55:29:f2:d8:94:e1:28:e2:82: b3:f3:8e:49:f4:87:a3:87:5a:05:ce:78:b3:0e:aa:21:77:14: 19:b1:df:b7:32:19:d8:98:00:05:32:b3:95:c1:ee:c9:c8:a3: b5:0c:1f:f5:0c:bd:55:6d:11:53:14:70:86:1a:d1:8e:12:f3: 72:4b:14:41 -----BEGIN CERTIFICATE----- MIIG+TCCBeGgAwIBAgIUAQ0Mn0MoWE0dBMw3moJB+hTJIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwOTE3Mjk0MVoXDTI4MDYxMTE3Mjk0MVowLzEtMCsGA1UEAxMk NGExZjE4NzAtMmQxOC00ZjI5LWE4ZDgtOTE5ODdkMmY2ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLwppCyw/aqFeJQU6J39qYjQUaETMLFHeMzO rZ6lp2Rc9jh76rq3PABt0m3y3EWycTELCWEntzFdhU+bHOgEy/TnJzG5TF4lScLf Y1T/zVgvKb5BVvG3deD2cUdcyIG9W3rUbMp/rH30xCZIq/YEo8bAVz/gr0Bcfz9d RSmMu1nwUhKvxB+9x32x5/VTuzPl61kIgq7HNzdyu69w0Gfz64dLBSGAFL5SS9ru IxePaxdFvHecqDcFniTAjB5/8eBf6ktPfejIj0JPrWasLVoUVn+JXhVphUmz28hv kcqaMjEy0gPNtzp5U8YWecdTFIFYnlReTufPl5zY8t2QqT4JxQIDAQABo4IECzCC BAcwHQYDVR0OBBYEFMbp/XFM7vhn2sfznb2hkUJGHOsEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 YTFmMTg3MC0yZDE4LTRmMjktYThkOC05MTk4N2QyZjY4M2UvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzRhMWYxODcwLTJkMTgtNGYyOS1h OGQ4LTkxOTg3ZDJmNjgzZS80YTFmMTg3MC0yZDE4LTRmMjktYThkOC05MTk4N2Qy ZjY4M2UubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwKwYIKwYBBQUH AQcBAf8EHDAaMBgEAgABMBIDBADARoQDBADATbUDBAHMkfIwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAX9ok MhyY/gHEY2vc5LaNO6BaiGMRiKzD91mCJPmOpfEfLvxNIgje3Iq5q+LJc6jdBlGF GsncAQx4Cf/2HrtDW5M9MGkDAh/3K1EqqOsvMpT1MLLUM1ZEtJz0mGh6fBD2pgZO klSiec1lTryl3oM8IVj49LWuAb7MPl96ArN4NfLuGkWvfTkQ8xrMgGKKkMX8DSyZ 2W8YcAkb6e2W3J2qB87m6H4fTvaIxnn/lOfd0ZvKVc8tJQeuNeghfUbBVSny2JTh KOKCs/OOSfSHo4daBc54sw6qIXcUGbHftzIZ2JgABTKzlcHuycijtQwf9Qy9VW0R UxRwhhrRjhLzcksUQQ== -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:49 2026 by rpki-client