$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a.cer File: 85a507ae-7969-4a54-b25c-2e757bf0990a.cer (raw, json) Hash identifier: nXGyuwf8Si7diAn51g9V2KlvtjZn39oCZAQej0dw55g= Subject key identifier: 5A:D2:D1:17:21:36:34:82:99:87:5F:5E:CA:F9:31:C1:E5:F8:CA:C4 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D4132498149DF43170423D900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 16:30:26 +0000 Certificate not after: Sat 24 Jun 2028 16:30:26 +0000 Subordinate resources: AS: 14991 IP: 207.32.224.0/19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:41:32:49:81:49:df:43:17:04:23:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 22 16:30:26 2026 GMT Not After : Jun 24 16:30:26 2028 GMT Subject: CN=85a507ae-7969-4a54-b25c-2e757bf0990a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:56:ea:ab:75:70:98:d6:c5:12:8b:30:c5:09: 44:fb:6f:31:02:34:4c:c3:2d:1c:c6:09:b8:ad:be: 3d:18:d6:ca:cb:6e:b4:58:05:4c:59:bb:f9:84:9d: fe:4a:a3:2f:df:a1:3b:95:7c:90:70:5f:85:90:76: 12:61:b1:f8:81:e4:88:4f:50:bd:bd:74:8d:f4:d5: bc:21:77:76:31:49:ee:1d:a1:9d:af:52:23:af:17: af:9c:89:e0:39:bf:df:94:ca:f6:78:2f:e0:bf:6f: 36:88:73:e1:75:9f:41:29:8b:e2:4b:d7:c6:4e:4d: cd:f2:2d:cf:dd:de:7b:04:99:fa:18:06:af:4d:ec: 4e:8d:c6:00:da:21:9c:8f:11:a9:d5:10:4b:5a:7d: b9:2a:82:33:f9:d1:83:ff:9f:5a:64:5d:0d:85:6d: 40:e1:9c:b6:1a:c1:6e:aa:c8:73:37:7f:1c:ea:3d: 11:4d:ae:34:35:05:16:12:23:84:d4:1a:58:f7:90: 8f:c5:6e:24:8b:8f:da:90:32:65:37:75:a6:87:c9: 78:4c:1c:c9:0e:35:b5:5d:9a:97:ea:f1:ca:3e:d9: 1b:7c:46:7a:53:3d:5f:46:39:8c:34:ce:be:55:af: e5:ef:53:52:ab:4e:0f:f0:cd:0b:34:6e:b5:4f:e0: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:D2:D1:17:21:36:34:82:99:87:5F:5E:CA:F9:31:C1:E5:F8:CA:C4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/85a507ae-7969-4a54-b25c-2e757bf0990a/85a507ae-7969-4a54-b25c-2e757bf0990a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 207.32.224.0/19 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14991 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d1:52:f9:b4:17:25:ab:51:17:2f:99:af:55:7c:5b:44:18: 57:2a:e6:7b:c8:cf:4d:d8:6b:86:7a:40:f5:f0:5e:09:bb:7b: 6d:9f:d4:8b:54:b3:a2:0b:bb:9d:33:76:7c:6f:34:72:f7:90: d4:11:5d:b6:d8:e2:b2:bd:c0:31:85:c8:07:55:2c:79:dc:81: 5d:e6:29:30:af:79:71:5b:c0:d7:21:85:b3:c2:9b:22:fa:76: ba:b1:9c:a3:29:c3:3f:f7:e3:82:10:23:90:9a:60:dd:b4:2d: 6c:40:40:51:e7:83:ad:12:80:e8:05:45:d8:bc:9c:a1:7b:52: 86:25:f0:3f:c6:e0:e8:fa:9c:3b:ae:40:bc:c1:b8:f7:82:c9: 8c:f7:cb:fd:7e:0d:27:c2:da:0e:b2:37:0a:04:bb:4f:8c:77: 51:90:d0:76:78:40:e8:97:e5:fd:0b:02:b2:78:e3:f3:08:18: 5f:d8:5d:86:8a:c1:f6:97:80:02:bf:2d:a3:0a:f5:b0:9a:dc: 36:9d:70:65:b1:10:6b:32:24:a0:db:73:a4:8b:27:a1:17:da: d5:f2:ff:98:b3:ee:e3:02:b9:c7:c0:1b:de:59:b3:46:d6:30: d6:b2:40:83:6f:d6:5b:1b:04:19:79:56:f2:37:79:1e:4a:da: ac:93:37:5c -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWE1BMkmBSd9DFwQj2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMjE2MzAyNloXDTI4MDYyNDE2MzAyNlowLzEtMCsGA1UEAxMk ODVhNTA3YWUtNzk2OS00YTU0LWIyNWMtMmU3NTdiZjA5OTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVbqq3VwmNbFEoswxQlE+28xAjRMwy0cxgm4 rb49GNbKy260WAVMWbv5hJ3+SqMv36E7lXyQcF+FkHYSYbH4geSIT1C9vXSN9NW8 IXd2MUnuHaGdr1IjrxevnIngOb/flMr2eC/gv282iHPhdZ9BKYviS9fGTk3N8i3P 3d57BJn6GAavTexOjcYA2iGcjxGp1RBLWn25KoIz+dGD/59aZF0NhW1A4Zy2GsFu qshzN38c6j0RTa40NQUWEiOE1BpY95CPxW4ki4/akDJlN3Wmh8l4TBzJDjW1XZqX 6vHKPtkbfEZ6Uz1fRjmMNM6+Va/l71NSq04P8M0LNG61T+CyEwIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFFrS0RchNjSCmYdfXsr5McHl+MrEMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 NWE1MDdhZS03OTY5LTRhNTQtYjI1Yy0yZTc1N2JmMDk5MGEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzg1YTUwN2FlLTc5NjktNGE1NC1i MjVjLTJlNzU3YmYwOTkwYS84NWE1MDdhZS03OTY5LTRhNTQtYjI1Yy0yZTc1N2Jm MDk5MGEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAXPIOAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC Oo8wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAKNFS+bQXJatRFy+Zr1V8W0QYVyrme8jPTdhrhnpA9fBeCbt7 bZ/Ui1Szogu7nTN2fG80cveQ1BFdttjisr3AMYXIB1UsedyBXeYpMK95cVvA1yGF s8KbIvp2urGcoynDP/fjghAjkJpg3bQtbEBAUeeDrRKA6AVF2LycoXtShiXwP8bg 6PqcO65AvMG494LJjPfL/X4NJ8LaDrI3CgS7T4x3UZDQdnhA6Jfl/QsCsnjj8wgY X9hdhorB9peAAr8towr1sJrcNp1wZbEQazIkoNtzpIsnoRfa1fL/mLPu4wK5x8Ab 3lmzRtYw1rJAg2/WWxsEGXlW8jd5HkrarJM3XA== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:57 2026 by rpki-client