$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1.cer File: 5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1.cer (raw, json) Hash identifier: lKt34Ulw/Df7IJ8bmlgccmEfVdQ0SnshVsLxep52FeI= Subject key identifier: 02:85:3C:72:44:9D:1B:25:00:05:12:17:7F:18:BE:EE:F5:1B:45:6D Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D493747575C04784A05A4E440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1/5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 13:26:58 +0000 Certificate not after: Tue 27 Jun 2028 13:26:58 +0000 Subordinate resources: AS: 11981 IP: 23.162.168.0/24 IP: 2602:ff94::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:37:47:57:5c:04:78:4a:05:a4:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 25 13:26:58 2026 GMT Not After : Jun 27 13:26:58 2028 GMT Subject: CN=5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:74:b1:87:5d:2c:93:d3:ec:ae:e5:0a:db:47: ab:39:f7:d7:04:2f:e1:3f:36:b6:e9:79:cd:84:30: 47:ce:76:c9:21:c8:73:6c:56:dc:ad:1f:38:cd:4c: 40:78:98:fc:f0:e8:c3:2d:11:06:01:ae:af:d2:e0: a3:6e:f6:9b:e1:eb:c7:67:c3:27:f7:2d:4b:bf:ee: 74:46:f8:64:25:fb:c8:b5:c0:0f:f4:6d:4a:3c:a2: 26:83:c6:28:d2:f2:fb:31:a1:48:24:f6:14:61:00: 4a:b2:ba:76:14:5c:1a:92:28:45:f1:ae:68:81:ff: 9f:42:ca:46:32:27:05:03:7c:fb:99:58:c3:f9:82: 02:07:de:ae:30:d3:12:4c:93:7a:f7:90:ab:d6:4f: 90:21:ba:96:b4:9f:59:22:4c:41:0a:82:bb:f1:9e: 9f:63:85:27:80:d9:87:e0:d9:4f:37:26:6c:d4:3f: 0a:be:f1:fb:78:98:0a:40:3d:cc:9a:9e:91:79:cb: 21:e6:0d:c6:e6:d0:fc:5a:11:42:eb:08:12:73:ba: 6d:2e:22:49:3b:fa:b2:1b:a1:6f:18:fe:35:d3:49: 67:5b:ee:6a:6b:fd:11:25:bd:7f:39:7c:c6:53:7e: c6:d4:86:99:ce:1a:80:be:59:9d:4a:ee:aa:77:26: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:85:3C:72:44:9D:1B:25:00:05:12:17:7F:18:BE:EE:F5:1B:45:6D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1/5963eb99-5620-4f5a-8c1c-2bc7f0eecaf1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.162.168.0/24 IPv6: 2602:ff94::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11981 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d7:a5:0f:77:5f:38:85:71:d6:ad:13:75:b5:25:7d:11:98: 6c:fd:3c:f8:3f:bb:e3:82:7e:cc:f4:67:7c:6b:79:7c:ef:97: 2e:fc:8d:ef:68:d8:e8:fd:af:8a:4f:2b:a8:f9:bb:7d:b3:3a: 64:9d:70:eb:0f:b2:fa:71:0d:29:33:cb:42:c2:01:24:49:d3: 3b:f6:5d:c0:3b:5a:9f:01:ba:81:0a:1c:97:cb:47:40:e1:ac: fe:69:97:69:6e:18:25:29:8b:da:f9:83:03:ab:19:2a:1f:4c: 80:71:e6:d3:70:a5:64:a1:9c:80:d8:17:56:bf:18:47:19:5c: 15:f7:f8:0c:c1:8c:8c:00:0a:3c:a0:b8:f2:6a:c0:34:8d:c3: 8f:ab:f3:39:7b:a5:c6:5c:23:c0:a5:9e:9a:23:f1:ad:28:f2: 6d:ca:ee:5a:4d:63:eb:f5:9f:4f:fa:bd:0e:d9:03:81:fa:47: a3:7b:c1:5f:9b:28:d7:b2:93:6b:82:15:fc:6f:25:50:47:09: 30:66:9c:bf:f6:20:cb:6a:04:d5:c8:ef:0e:f3:2c:4d:a1:00: 40:27:ff:a5:a8:da:a2:3e:2b:b2:2c:59:2f:3b:57:76:6d:5c: 86:20:31:d1:97:ec:eb:2b:81:c1:9f:f1:2b:bc:34:b8:d4:3a: db:43:5a:6c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE1JN0dXXAR4SgWk5EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyNTEzMjY1OFoXDTI4MDYyNzEzMjY1OFowLzEtMCsGA1UEAxMk NTk2M2ViOTktNTYyMC00ZjVhLThjMWMtMmJjN2YwZWVjYWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXSxh10sk9PsruUK20erOffXBC/hPza26XnN hDBHznbJIchzbFbcrR84zUxAeJj88OjDLREGAa6v0uCjbvab4evHZ8Mn9y1Lv+50 RvhkJfvItcAP9G1KPKImg8Yo0vL7MaFIJPYUYQBKsrp2FFwakihF8a5ogf+fQspG MicFA3z7mVjD+YICB96uMNMSTJN695Cr1k+QIbqWtJ9ZIkxBCoK78Z6fY4UngNmH 4NlPNyZs1D8KvvH7eJgKQD3Mmp6Recsh5g3G5tD8WhFC6wgSc7ptLiJJO/qyG6Fv GP4100lnW+5qa/0RJb1/OXzGU37G1IaZzhqAvlmdSu6qdyZgawIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFAKFPHJEnRslAAUSF38Yvu71G0VtMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 OTYzZWI5OS01NjIwLTRmNWEtOGMxYy0yYmM3ZjBlZWNhZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzU5NjNlYjk5LTU2MjAtNGY1YS04 YzFjLTJiYzdmMGVlY2FmMS81OTYzZWI5OS01NjIwLTRmNWEtOGMxYy0yYmM3ZjBl ZWNhZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXoqgwDgQCAAIwCAMGACYC/5QAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAi7NMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABfXpQ93XziFcdatE3W1JX0RmGz9 PPg/u+OCfsz0Z3xreXzvly78je9o2Oj9r4pPK6j5u32zOmSdcOsPsvpxDSkzy0LC ASRJ0zv2XcA7Wp8BuoEKHJfLR0DhrP5pl2luGCUpi9r5gwOrGSofTIBx5tNwpWSh nIDYF1a/GEcZXBX3+AzBjIwACjyguPJqwDSNw4+r8zl7pcZcI8Clnpoj8a0o8m3K 7lpNY+v1n0/6vQ7ZA4H6R6N7wV+bKNeyk2uCFfxvJVBHCTBmnL/2IMtqBNXI7w7z LE2hAEAn/6Wo2qI+K7IsWS87V3ZtXIYgMdGX7OsrgcGf8Su8NLjUOttDWmw= -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:47 2026 by rpki-client