$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer File: 75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.cer (raw, json) Hash identifier: Oo3dhiAaF8T4Z/KvfHvGXAjAoMailIvha1EC8Vu29Rs= Subject key identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D394347A91AC4F3FAA61CAB00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 19 Mar 2026 20:18:13 +0000 Certificate not after: Wed 21 Jun 2028 20:18:13 +0000 Subordinate resources: AS: 80 AS: 1295 AS: 3655 AS: 7942 AS: 30163 AS: 30437 AS: 394007 IP: 165.156.0.0/16 IP: 192.35.38.0 -- 192.35.41.255 IP: 192.131.182.0 -- 192.131.185.255 IP: 192.131.225.0/24 IP: 192.153.170.0/24 IP: 205.173.88.0/21 IP: 2620:12b:f000::/40 IP: 2620:1d0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:43:47:a9:1a:c4:f3:fa:a6:1c:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 19 20:18:13 2026 GMT Not After : Jun 21 20:18:13 2028 GMT Subject: CN=75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:df:d7:dd:28:77:b3:58:44:f0:c6:76:b3:84: 40:27:b2:3b:e5:26:e0:57:f5:e1:cc:c8:36:a8:c3: 02:93:9b:8c:13:7d:b0:b6:ac:06:09:94:d0:ff:78: 52:04:23:3c:6b:5d:08:11:34:c1:3c:f3:6a:2b:eb: 9a:9b:29:a9:e9:c8:eb:20:ca:51:92:10:a6:c5:8b: ba:59:53:57:ea:fa:0a:2a:c7:94:a8:45:d1:0e:b1: de:10:ca:ae:4b:04:dc:c4:2b:b8:02:f0:d1:eb:a9: ce:7c:7b:40:a2:35:18:5c:0e:14:7e:75:7c:11:77: 68:50:1f:96:3c:df:35:ea:05:86:5e:dc:27:d7:a8: 65:8a:88:38:81:31:73:88:ea:56:90:c7:3d:ad:aa: 09:24:20:38:98:1e:c6:fc:9e:6b:4d:5f:54:14:47: e7:28:1f:b8:0c:2a:56:84:19:05:bb:31:8c:93:e0: 5c:aa:32:cf:d2:af:b6:e3:9b:69:30:3d:8f:d9:22: 98:9b:48:9d:c0:a4:a7:c8:a2:5a:00:9a:9c:c5:65: 0a:68:43:95:ce:61:4c:94:09:a6:d1:ea:45:e7:fa: b5:7f:b4:36:94:49:74:ed:2b:66:c9:50:66:79:72: 4d:97:16:cf:08:34:5e:28:f9:42:df:a1:e9:24:06: 7e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5D:77:66:28:0A:AE:1C:F1:EF:FB:C5:79:8B:79:BF:53:7C:73:2B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5/75fe52b2-38bb-42cb-919b-5f8fdbfc4bd5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 165.156.0.0/16 192.35.38.0-192.35.41.255 192.131.182.0-192.131.185.255 192.131.225.0/24 192.153.170.0/24 205.173.88.0/21 IPv6: 2620:12b:f000::/40 2620:1d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 80 1295 3655 7942 30163 30437 394007 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:4b:22:43:c8:7e:0a:fb:77:aa:05:3e:df:9f:bf:59:a0:e8: 9b:be:aa:9a:ce:8b:3a:fa:03:98:2c:70:c4:c7:c6:b3:f9:e8: e3:fe:a7:78:cf:ea:09:67:d9:5b:5a:87:ef:33:ee:b7:88:a3: 72:50:71:31:31:2a:31:b0:bf:dc:5f:61:81:6b:9e:25:de:39: 2d:76:f6:f9:e6:6e:ca:af:44:e7:84:5b:49:55:e0:35:8f:e0: f4:9d:5b:ff:b9:a1:5c:40:86:47:ab:a1:9c:f1:75:0a:1d:bf: 84:1e:92:73:c4:2b:04:3d:00:a3:ce:10:5b:e4:d1:86:96:c7: 71:75:0f:06:54:1a:a4:dd:0b:2c:3d:6c:6e:da:b1:79:f6:4d: 19:43:6f:2e:b0:3c:5b:78:89:cb:aa:a9:6f:98:bb:27:12:0a: 42:92:92:70:79:5d:44:87:c4:b2:0d:89:09:80:b1:5a:7e:23: f9:c1:35:3c:33:aa:5c:1d:b5:b9:fa:bf:fc:15:7e:9f:e7:79: fa:d7:ea:c4:59:20:52:71:88:0f:9a:de:f9:86:31:f2:25:3a: 69:6b:3f:8d:78:71:dd:4b:2b:f7:96:97:9c:76:4e:86:94:0e: 63:28:92:67:b8:bb:b4:bd:48:bc:ad:e8:c3:5f:16:c0:9a:5a: 8c:9d:81:1c -----BEGIN CERTIFICATE----- MIIHZDCCBkygAwIBAgIUAQ0Mn0MoWE05Q0epGsTz+qYcqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxOTIwMTgxM1oXDTI4MDYyMTIwMTgxM1owLzEtMCsGA1UEAxMk NzVmZTUyYjItMzhiYi00MmNiLTkxOWItNWY4ZmRiZmM0YmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt/X3Sh3s1hE8MZ2s4RAJ7I75SbgV/XhzMg2 qMMCk5uME32wtqwGCZTQ/3hSBCM8a10IETTBPPNqK+uamymp6cjrIMpRkhCmxYu6 WVNX6voKKseUqEXRDrHeEMquSwTcxCu4AvDR66nOfHtAojUYXA4UfnV8EXdoUB+W PN816gWGXtwn16hliog4gTFziOpWkMc9raoJJCA4mB7G/J5rTV9UFEfnKB+4DCpW hBkFuzGMk+BcqjLP0q+245tpMD2P2SKYm0idwKSnyKJaAJqcxWUKaEOVzmFMlAmm 0epF5/q1f7Q2lEl07StmyVBmeXJNlxbPCDReKPlC36HpJAZ+dQIDAQABo4IEdjCC BHIwHQYDVR0OBBYEFFhdd2YoCq4c8e/7xXmLeb9TfHMrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83 NWZlNTJiMi0zOGJiLTQyY2ItOTE5Yi01ZjhmZGJmYzRiZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzc1ZmU1MmIyLTM4YmItNDJjYi05 MTliLTVmOGZkYmZjNGJkNS83NWZlNTJiMi0zOGJiLTQyY2ItOTE5Yi01ZjhmZGJm YzRiZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwYwYIKwYBBQUH AQcBAf8EVDBSMDkEAgABMDMDAwClnDAMAwQBwCMmAwQBwCMoMAwDBAHAg7YDBAHA g7gDBADAg+EDBADAmaoDBAPNrVgwFQQCAAIwDwMGACYgASvwAwUAJiAB0DAxBggr BgEFBQcBCAEB/wQiMCCgHjAcAgFQAgIFDwICDkcCAh8GAgJ10wICduUCAwYDFzBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA+SyJDyH4K+3eqBT7fn79ZoOibvqqazos6+gOYLHDEx8az+ejj/qd4 z+oJZ9lbWofvM+63iKNyUHExMSoxsL/cX2GBa54l3jktdvb55m7Kr0TnhFtJVeA1 j+D0nVv/uaFcQIZHq6Gc8XUKHb+EHpJzxCsEPQCjzhBb5NGGlsdxdQ8GVBqk3Qss PWxu2rF59k0ZQ28usDxbeInLqqlvmLsnEgpCkpJweV1Eh8SyDYkJgLFafiP5wTU8 M6pcHbW5+r/8FX6f53n61+rEWSBScYgPmt75hjHyJTppaz+NeHHdSyv3lpecdk6G lA5jKJJnuLu0vUi8rejDXxbAmlqMnYEc -----END CERTIFICATE-----Generated at Wed Mar 25 21:16:41 2026 by rpki-client