$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f.cer File: 72ef9c16-2d45-4e8c-b035-49d30318c10f.cer (raw, json) Hash identifier: R3McW9VM4elZj157hjAxsN6pznOqwTOzlZmDMzdf2Nk= Subject key identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D9ACE0D707167D9E3C2D9A9F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 23 Apr 2026 18:51:14 +0000 Certificate not after: Sun 16 Jul 2028 20:27:59 +0000 Subordinate resources: AS: 10352 AS: 11717 AS: 36206 IP: 63.247.32.0/20 IP: 66.170.64.0/20 IP: 66.208.64.0/20 IP: 206.176.192.0/19 IP: 209.94.160.0/19 IP: 216.105.208.0/20 IP: 2605:7240::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:ce:0d:70:71:67:d9:e3:c2:d9:a9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 23 18:51:14 2026 GMT Not After : Jul 16 20:27:59 2028 GMT Subject: CN=72ef9c16-2d45-4e8c-b035-49d30318c10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7f:3c:c9:32:c1:37:c8:ab:e0:e2:a7:0a:88: 25:e1:57:d1:07:d0:80:4e:dc:ec:28:ee:10:d6:36: df:9e:6e:bf:05:2f:9d:c0:d3:fe:ef:78:b0:56:14: 9d:c4:b8:3c:26:76:e3:c0:0c:0a:93:e5:35:d8:a0: dd:05:ee:0d:a7:95:09:89:7f:c9:71:2c:09:26:f6: b0:3d:b2:5f:65:14:0f:52:0d:9b:52:fb:6d:28:34: 3b:41:b7:b4:8e:b5:cf:08:32:41:18:9d:5e:f5:8b: ae:ab:d0:0a:d4:f3:dc:f4:b9:b7:65:b8:5b:55:f1: d4:7c:d8:39:44:c2:6c:73:2d:e8:bb:74:b2:f6:58: c3:4e:17:af:84:51:4b:34:52:80:9c:fa:b8:94:ba: f8:3f:f0:57:4c:aa:d9:43:be:4f:95:6d:36:c2:e3: 5d:7e:3e:a6:bb:0e:11:7f:66:0d:92:2a:d2:9e:5f: 24:3f:4f:bf:73:32:90:1a:e3:ac:d5:7a:64:dd:34: f6:22:93:e9:f1:27:d7:82:c6:9d:17:72:73:c5:72: 70:88:2d:46:b2:d3:25:fd:f5:5b:64:19:5a:71:0d: e6:e3:fe:ab:12:ef:a2:2b:cb:09:26:bb:0a:96:9a: 6f:b5:fa:47:ed:87:e6:77:24:5b:28:73:70:38:2b: 9c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:94:1A:1E:95:79:AF:CD:53:2F:66:8F:4F:D2:5F:63:F7:6A:A8:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/72ef9c16-2d45-4e8c-b035-49d30318c10f/72ef9c16-2d45-4e8c-b035-49d30318c10f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 63.247.32.0/20 66.170.64.0/20 66.208.64.0/20 206.176.192.0/19 209.94.160.0/19 216.105.208.0/20 IPv6: 2605:7240::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 10352 11717 36206 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:36:f6:0c:f3:68:a4:51:74:fe:ae:3b:e3:f4:12:f3:5a:bd: 85:3e:11:9b:2d:66:36:a5:d9:65:5c:12:46:48:f8:70:a6:b9: 54:63:3f:ef:27:8c:01:10:50:37:2e:42:af:87:44:3a:33:69: 54:77:4a:72:57:af:03:d4:89:cf:db:9b:f0:b2:2c:76:b4:18: 4f:63:68:48:cb:64:d4:e5:6f:ac:02:99:cd:78:c9:b6:4e:f3: 75:93:0c:ae:c7:b0:98:03:98:ab:dc:d4:c4:69:5e:84:41:d1: 70:15:74:32:99:c8:47:ee:e5:2a:4f:e8:35:00:8c:bc:d2:14: ed:6a:f8:35:23:a5:fc:19:3a:75:ca:50:e0:3f:93:af:26:1b: f2:f3:c7:50:0b:0c:3e:c7:da:bf:5f:fd:82:74:ba:0a:a8:7b: 13:d0:1a:ae:6b:59:de:a5:69:37:39:8c:87:86:54:be:b0:da: 0a:c7:dc:c1:2a:ab:a1:a5:ad:07:da:9d:9f:3c:9f:8d:32:8e: 00:f7:6f:a2:a0:c2:5d:67:d4:8a:27:54:1e:f7:4a:0a:a4:f0: 20:2f:52:29:50:20:fa:f6:6c:05:53:9c:49:bb:12:e3:dc:48: 26:f4:a3:f8:33:8f:bc:ca:d8:44:b7:8c:4e:04:9f:1c:00:3d: 79:ea:b8:28 -----BEGIN CERTIFICATE----- MIIHPjCCBiagAwIBAgIUAQ0Mn0MoWE2azg1wcWfZ48LZqfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQyMzE4NTExNFoXDTI4MDcxNjIwMjc1OVowLzEtMCsGA1UEAxMk NzJlZjljMTYtMmQ0NS00ZThjLWIwMzUtNDlkMzAzMThjMTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX88yTLBN8ir4OKnCogl4VfRB9CATtzsKO4Q 1jbfnm6/BS+dwNP+73iwVhSdxLg8JnbjwAwKk+U12KDdBe4Np5UJiX/JcSwJJvaw PbJfZRQPUg2bUvttKDQ7Qbe0jrXPCDJBGJ1e9Yuuq9AK1PPc9Lm3ZbhbVfHUfNg5 RMJscy3ou3Sy9ljDThevhFFLNFKAnPq4lLr4P/BXTKrZQ75PlW02wuNdfj6muw4R f2YNkirSnl8kP0+/czKQGuOs1Xpk3TT2IpPp8SfXgsadF3JzxXJwiC1GstMl/fVb ZBlacQ3m4/6rEu+iK8sJJrsKlppvtfpH7YfmdyRbKHNwOCucjQIDAQABo4IEUDCC BEwwHQYDVR0OBBYEFMCUGh6Vea/NUy9mj0/SX2P3aqiIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83 MmVmOWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQzMDMxOGMxMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzcyZWY5YzE2LTJkNDUtNGU4Yy1i MDM1LTQ5ZDMwMzE4YzEwZi83MmVmOWMxNi0yZDQ1LTRlOGMtYjAzNS00OWQzMDMx OGMxMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAQ/9yADBARCqkADBARC0EADBAXOsMADBAXRXqAD BATYadAwDQQCAAIwBwMFACYFckAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICKHAC Ai3FAgMAjW4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAjTb2DPNopFF0/q474/QS81q9hT4Rmy1mNqXZZVwS Rkj4cKa5VGM/7yeMARBQNy5Cr4dEOjNpVHdKclevA9SJz9ub8LIsdrQYT2NoSMtk 1OVvrAKZzXjJtk7zdZMMrsewmAOYq9zUxGlehEHRcBV0MpnIR+7lKk/oNQCMvNIU 7Wr4NSOl/Bk6dcpQ4D+TryYb8vPHUAsMPsfav1/9gnS6Cqh7E9AarmtZ3qVpNzmM h4ZUvrDaCsfcwSqroaWtB9qdnzyfjTKOAPdvoqDCXWfUiidUHvdKCqTwIC9SKVAg +vZsBVOcSbsS49xIJvSj+DOPvMrYRLeMTgSfHAA9eeq4KA== -----END CERTIFICATE-----Generated at Wed May 13 00:44:04 2026 by rpki-client