$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.cer File: 525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.cer (raw, json) Hash identifier: 4u13Jw8msisuKf27nzy7t4WrlGhiah75VdqlylqgkGQ= Subject key identifier: 97:63:49:0F:63:63:DA:51:20:26:F9:78:0D:6C:3F:A6:FB:84:FA:8A Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D4C41ABE38FB65C3B78584C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 26 Mar 2026 15:35:20 +0000 Certificate not after: Wed 28 Jun 2028 15:35:20 +0000 Subordinate resources: AS: 53739 IP: 199.127.160.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4c:41:ab:e3:8f:b6:5c:3b:78:58:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 26 15:35:20 2026 GMT Not After : Jun 28 15:35:20 2028 GMT Subject: CN=525bd4b1-ca84-434f-9b43-8f0e44bbd2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ba:3a:6d:9d:47:3a:7b:8f:52:16:c2:54:6d: 88:f5:6d:98:fc:7a:85:5f:02:9f:d8:fc:36:2c:ab: d5:f7:c7:c2:69:75:b3:09:18:2c:12:0d:c6:8b:cb: 3f:7c:0d:da:8b:de:d5:72:31:4e:67:8e:1e:f1:e0: b8:6a:a5:1e:39:34:b2:7c:60:2a:1a:40:53:7e:a2: aa:29:83:69:33:be:4d:e5:41:85:45:47:1e:9b:e2: fe:97:6d:fd:f4:54:19:7d:25:65:7c:c4:dc:82:cc: fe:94:aa:42:1d:40:77:d2:b8:2c:90:26:9c:23:b7: a7:9d:f2:b9:cf:d4:b0:a2:c3:51:31:2f:08:c2:ed: fd:aa:3c:45:f3:32:2f:f2:3a:cd:a5:15:df:e6:22: 08:28:1d:1f:91:0c:d3:2a:5b:d3:42:52:6e:de:88: 22:3d:49:42:7b:7a:d1:bb:72:67:94:6d:82:ab:4f: c5:f7:43:dc:c2:60:09:13:4b:ff:5d:4a:80:bc:8b: 54:0e:66:cb:03:5b:53:a1:c8:a9:25:fb:6b:96:ba: a9:1d:9f:0a:b2:f1:52:8f:f2:68:c6:b5:4e:0f:c9: 74:84:c2:12:25:f3:be:eb:3c:34:34:40:90:7d:c9: 85:2b:3a:d3:2c:a0:68:84:7d:72:11:72:11:3e:f3: 27:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:63:49:0F:63:63:DA:51:20:26:F9:78:0D:6C:3F:A6:FB:84:FA:8A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5/525bd4b1-ca84-434f-9b43-8f0e44bbd2d5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 199.127.160.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53739 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:bc:65:a0:71:e3:94:07:a8:c3:e1:10:56:e1:8a:91:d9:05: ab:43:3b:33:64:91:aa:53:5b:89:40:2f:9e:45:eb:1d:d6:24: 35:0e:0b:b7:3c:ab:b8:45:a3:0f:5e:4f:37:90:6d:50:95:9e: 5c:8e:30:99:30:34:21:58:5e:ba:50:1d:15:5a:35:65:11:3f: 0e:34:41:ab:05:6c:00:e6:32:7e:5e:34:5b:89:09:43:fa:0e: b1:e5:c5:c2:1d:03:90:c9:b7:1b:ec:2c:e3:17:86:9e:55:36: 1f:a0:36:da:68:0a:a7:a8:9c:df:8d:43:7f:85:93:3f:5f:da: 27:66:5a:c8:d1:3e:fe:7f:c9:2c:74:c3:04:82:63:04:45:84: da:d1:72:16:9c:84:f3:7d:30:e2:c2:3f:cf:03:03:dd:87:4a: 91:99:81:96:91:e7:41:e0:dc:38:4c:68:c2:08:ae:62:27:0f: 2f:43:23:eb:01:f3:aa:7e:51:16:3f:85:f7:5d:49:7b:2a:99: 24:26:fe:30:f9:6f:35:26:3f:f5:7a:5d:81:aa:b1:b0:59:d6: 4e:30:e0:6b:67:7e:21:5c:61:17:5b:f7:d2:5e:26:8c:16:47: 19:61:24:13:ae:0b:03:d5:45:a6:58:3f:70:50:a1:b6:c6:7c: df:78:ee:70 -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE1MQavjj7ZcO3hYTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyNjE1MzUyMFoXDTI4MDYyODE1MzUyMFowLzEtMCsGA1UEAxMk NTI1YmQ0YjEtY2E4NC00MzRmLTliNDMtOGYwZTQ0YmJkMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLo6bZ1HOnuPUhbCVG2I9W2Y/HqFXwKf2Pw2 LKvV98fCaXWzCRgsEg3Gi8s/fA3ai97VcjFOZ44e8eC4aqUeOTSyfGAqGkBTfqKq KYNpM75N5UGFRUcem+L+l2399FQZfSVlfMTcgsz+lKpCHUB30rgskCacI7ennfK5 z9SwosNRMS8Iwu39qjxF8zIv8jrNpRXf5iIIKB0fkQzTKlvTQlJu3ogiPUlCe3rR u3JnlG2Cq0/F90PcwmAJE0v/XUqAvItUDmbLA1tTocipJftrlrqpHZ8KsvFSj/Jo xrVOD8l0hMISJfO+6zw0NECQfcmFKzrTLKBohH1yEXIRPvMnQwIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFJdjSQ9jY9pRICb5eA1sP6b7hPqKMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 MjViZDRiMS1jYTg0LTQzNGYtOWI0My04ZjBlNDRiYmQyZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzUyNWJkNGIxLWNhODQtNDM0Zi05 YjQzLThmMGU0NGJiZDJkNS81MjViZDRiMS1jYTg0LTQzNGYtOWI0My04ZjBlNDRi YmQyZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPHf6AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID ANHrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIS8ZaBx45QHqMPhEFbhipHZBatDOzNkkapTW4lAL55F6x3W JDUOC7c8q7hFow9eTzeQbVCVnlyOMJkwNCFYXrpQHRVaNWURPw40QasFbADmMn5e NFuJCUP6DrHlxcIdA5DJtxvsLOMXhp5VNh+gNtpoCqeonN+NQ3+Fkz9f2idmWsjR Pv5/ySx0wwSCYwRFhNrRchachPN9MOLCP88DA92HSpGZgZaR50Hg3DhMaMIIrmIn Dy9DI+sB86p+URY/hfddSXsqmSQm/jD5bzUmP/V6XYGqsbBZ1k4w4GtnfiFcYRdb 99JeJowWRxlhJBOuCwPVRaZYP3BQobbGfN947nA= -----END CERTIFICATE-----Generated at Sat Mar 28 12:48:53 2026 by rpki-client