$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer File: 7672a82f-eb52-44bf-b38f-f09fc313d7d5.cer (raw, json) Hash identifier: olRMXnLql595djqPLwPNbuqSXJXSqWd9KSHgs9YNbWc= Subject key identifier: 36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D49009CFE4800B9CD2F34F240 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 25 Mar 2026 11:36:49 +0000 Certificate not after: Tue 27 Jun 2028 11:36:49 +0000 Subordinate resources: AS: 46920 IP: 23.175.128.0/24 IP: 64.29.18.0/23 IP: 74.113.176.0/21 IP: 136.175.40.0/22 IP: 142.99.106.0/23 IP: 199.229.220.0/22 IP: 2605:c00::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:00:9c:fe:48:00:b9:cd:2f:34:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 25 11:36:49 2026 GMT Not After : Jun 27 11:36:49 2028 GMT Subject: CN=7672a82f-eb52-44bf-b38f-f09fc313d7d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0b:a2:fd:b9:ab:01:2f:8b:b2:51:83:e8:1b: eb:fd:84:7a:c6:54:63:00:42:f4:72:01:46:10:41: f3:0d:c9:c1:21:7f:ef:1c:3b:11:45:f8:8a:01:52: bf:56:41:3f:6a:c0:65:03:49:03:09:40:0e:fd:84: f1:b6:e8:f5:07:1b:14:91:06:49:d3:07:ba:da:8d: 56:17:79:46:63:00:06:af:6c:2f:18:1e:11:2c:26: 12:0a:78:61:a0:de:d8:71:62:73:af:5b:13:75:0f: 90:da:d1:36:fd:c7:1f:96:f2:77:40:6e:d1:0a:5e: 8e:59:8a:1a:4c:2d:44:ec:d2:f8:9c:6e:eb:cb:11: d1:49:5e:e7:22:55:ac:9b:b6:5b:53:02:9d:11:85: c1:4f:8b:88:ae:e1:55:78:e3:2e:5c:fb:cd:c4:23: 12:a9:9f:b9:09:20:c7:ab:8b:70:35:b9:b1:43:76: 71:28:fb:b6:16:ca:6a:86:2d:72:b7:f8:30:7c:73: 1a:3a:08:fb:19:e2:b6:ce:b5:10:73:d6:d3:26:e9: 40:2d:56:9e:93:d6:e0:bc:89:2b:fb:ff:2a:8f:d8: 44:03:c2:5d:92:34:f5:ae:ae:cb:3f:13:6a:72:32: 02:29:b2:83:c5:d2:2d:2d:53:cd:b1:d1:d5:6a:05: f4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:13:56:11:E6:98:E6:D8:AC:4C:BD:DF:F3:EE:DA:FB:19:AC:6D:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7672a82f-eb52-44bf-b38f-f09fc313d7d5/7672a82f-eb52-44bf-b38f-f09fc313d7d5.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.175.128.0/24 64.29.18.0/23 74.113.176.0/21 136.175.40.0/22 142.99.106.0/23 199.229.220.0/22 IPv6: 2605:c00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 46920 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:f2:86:82:f4:bd:af:e7:e4:18:cc:eb:27:27:46:10:45:90: aa:8a:6d:d7:f2:00:d1:e7:e9:56:b5:a4:df:90:f4:65:64:05: 46:e8:fd:36:eb:8f:44:37:2f:71:52:f6:9b:74:17:04:02:c1: 5e:8f:5d:fa:b5:8e:d5:d1:f0:be:b0:a9:99:88:c0:1d:58:5e: fc:ff:5e:c0:21:a2:cb:10:e3:1a:3a:ea:e7:0a:8f:d3:aa:f7: fe:72:ca:cf:1d:bb:d1:49:ff:67:e5:c3:26:1d:1a:55:46:8e: 88:84:cd:dd:75:11:e6:af:f1:e2:9c:a5:af:82:d9:11:8e:23: 69:c2:c6:b8:a5:44:47:26:0f:67:03:94:e4:11:40:ef:e5:f9: ef:cc:75:f3:b7:c1:f7:a9:cf:a0:82:76:e1:41:95:b5:ba:e6: b4:14:84:0d:33:31:6e:fb:f0:f4:f5:6d:dc:19:6b:93:8f:ef: 4a:37:ac:d9:45:0d:e6:27:70:3a:bd:9d:f7:26:46:f5:35:d2: fc:b5:a5:70:c5:44:29:9a:03:93:4d:b2:17:c0:ad:a1:76:0c: 42:6d:0f:29:61:3a:02:c4:dc:66:f5:27:ec:2e:c2:85:08:73: 6f:09:b6:8f:88:fd:d2:84:0b:69:47:8b:bc:51:9c:b3:32:87: 6e:9b:09:aa -----BEGIN CERTIFICATE----- MIIHNjCCBh6gAwIBAgIUAQ0Mn0MoWE1JAJz+SAC5zS808kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyNTExMzY0OVoXDTI4MDYyNzExMzY0OVowLzEtMCsGA1UEAxMk NzY3MmE4MmYtZWI1Mi00NGJmLWIzOGYtZjA5ZmMzMTNkN2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQui/bmrAS+LslGD6Bvr/YR6xlRjAEL0cgFG EEHzDcnBIX/vHDsRRfiKAVK/VkE/asBlA0kDCUAO/YTxtuj1BxsUkQZJ0we62o1W F3lGYwAGr2wvGB4RLCYSCnhhoN7YcWJzr1sTdQ+Q2tE2/ccflvJ3QG7RCl6OWYoa TC1E7NL4nG7ryxHRSV7nIlWsm7ZbUwKdEYXBT4uIruFVeOMuXPvNxCMSqZ+5CSDH q4twNbmxQ3ZxKPu2Fspqhi1yt/gwfHMaOgj7GeK2zrUQc9bTJulALVaek9bgvIkr +/8qj9hEA8JdkjT1rq7LPxNqcjICKbKDxdItLVPNsdHVagX0oQIDAQABo4IESDCC BEQwHQYDVR0OBBYEFDYTVhHmmObYrEy93/Pu2vsZrG0NMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS83 NjcyYTgyZi1lYjUyLTQ0YmYtYjM4Zi1mMDlmYzMxM2Q3ZDUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzc2NzJhODJmLWViNTItNDRiZi1i MzhmLWYwOWZjMzEzZDdkNS83NjcyYTgyZi1lYjUyLTQ0YmYtYjM4Zi1mMDlmYzMx M2Q3ZDUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwTAYIKwYBBQUH AQcBAf8EPTA7MCoEAgABMCQDBAAXr4ADBAFAHRIDBANKcbADBAKIrygDBAGOY2oD BALH5dwwDQQCAAIwBwMFACYFDAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDALdI MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAPyhoL0va/n5BjM6ycnRhBFkKqKbdfyANHn6Va1pN+Q9GVkBUbo /Tbrj0Q3L3FS9pt0FwQCwV6PXfq1jtXR8L6wqZmIwB1YXvz/XsAhossQ4xo66ucK j9Oq9/5yys8du9FJ/2flwyYdGlVGjoiEzd11Eeav8eKcpa+C2RGOI2nCxrilREcm D2cDlOQRQO/l+e/MdfO3wfepz6CCduFBlbW65rQUhA0zMW778PT1bdwZa5OP70o3 rNlFDeYncDq9nfcmRvU10vy1pXDFRCmaA5NNshfAraF2DEJtDylhOgLE3Gb1J+wu woUIc28Jto+I/dKEC2lHi7xRnLMyh26bCao= -----END CERTIFICATE-----Generated at Wed Mar 25 22:50:00 2026 by rpki-client