$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer File: 8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer (raw, json) Hash identifier: LtN+9gvFb07hJBM7vnwNEAnMlJjCztEmq88TnoFmOdc= Subject key identifier: F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584DCC2D8BC3D3D2255C6F44BDC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 11 May 2026 11:18:15 +0000 Certificate not after: Sun 23 Jul 2028 15:52:17 +0000 Subordinate resources: AS: 402410 AS: 402498 IP: 23.156.220.0/24 IP: 2602:f3f0::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cc:2d:8b:c3:d3:d2:25:5c:6f:44:bd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: May 11 11:18:15 2026 GMT Not After : Jul 23 15:52:17 2028 GMT Subject: CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e8:61:15:d1:c8:d7:41:c6:10:6a:dd:d4:f3: 13:1a:cb:c6:a6:2c:21:28:b0:a0:6d:70:68:19:fd: d6:bb:1e:1a:94:33:b4:68:cd:4f:1d:04:b5:93:4b: 85:a8:ab:94:3e:15:d1:94:4c:2c:b1:cd:63:4e:9e: 3c:3b:01:52:52:84:04:57:a4:16:ce:89:55:f0:e4: be:45:6f:54:3b:e4:03:99:c3:31:b2:c3:ec:d6:72: 78:9c:99:08:52:2a:b5:a5:af:dc:19:85:bc:6e:d7: d3:94:f6:04:15:9b:51:a3:da:fb:72:71:28:c3:f5: 2a:85:38:53:8a:39:8c:fa:6f:aa:b3:c2:2c:52:c6: 92:5e:6d:1f:d9:d5:68:c4:3d:f5:5f:e1:91:65:d4: 76:e9:9c:8e:0c:d3:4d:a3:8e:a5:2a:87:6b:84:b0: 36:06:a1:94:e9:1d:74:71:9b:a1:b7:ca:e2:57:4e: 23:79:17:d3:30:0f:39:b9:26:60:53:c5:b6:95:b4: ea:98:55:00:8f:b6:7a:31:bd:06:84:07:40:e1:fa: 24:17:06:f8:c5:cd:e2:8e:20:1d:1f:2c:48:20:79: 14:d6:1a:ef:ae:ef:5b:77:9e:02:e5:e9:a3:68:39: e3:c8:59:ec:40:a7:aa:c1:67:83:47:6c:1e:2c:db: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.156.220.0/24 IPv6: 2602:f3f0::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402410 402498 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b4:b0:0f:a4:26:a4:76:be:e9:6a:a8:a9:12:03:c0:42:b8: 9a:ee:33:e0:b8:39:65:da:f5:da:35:21:f3:13:30:0b:17:61: ce:47:0a:e3:cc:c0:9e:d8:27:9e:17:64:ec:ae:4a:a4:5a:8b: e6:1e:2d:bc:06:cc:bf:85:77:4e:9b:2d:82:9e:e6:61:ea:0c: 54:0e:d8:ed:01:48:64:c9:a7:e8:ad:89:49:94:a0:e3:5b:e0: 14:d9:a8:38:36:aa:1c:1e:f4:3f:ad:07:06:c3:28:9e:f0:94: a7:18:bf:b5:78:af:71:cc:09:1c:4f:78:0f:4d:ff:92:5e:a7: 3f:86:df:a3:3d:69:43:ea:98:f8:e6:4f:40:a1:84:4a:07:38: 42:b0:be:78:67:d9:36:46:09:6b:69:4e:66:5f:a1:aa:48:45: e9:b2:27:0a:71:44:84:95:d6:a1:17:6d:c7:80:b2:65:fc:f4: a2:b0:76:71:c9:f2:45:d9:b2:a4:21:cf:2f:1a:29:83:c6:ec: 14:d8:40:b1:bc:21:2f:dd:96:00:8d:fc:72:04:67:1c:08:34: 1c:2a:3d:77:64:63:51:c3:69:01:17:58:3b:66:f7:08:de:c7: fc:af:74:5d:a7:91:ea:06:65:e0:12:03:c6:ba:45:6d:16:4e: 48:12:72:79 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE3MLYvD09IlXG9EvcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDUxMTExMTgxNVoXDTI4MDcyMzE1NTIxN1owLzEtMCsGA1UEAxMk OGE2YzY4M2QtNWMwMS00N2VhLTgzOGQtMDRjODhkNDlmNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+hhFdHI10HGEGrd1PMTGsvGpiwhKLCgbXBo Gf3Wux4alDO0aM1PHQS1k0uFqKuUPhXRlEwssc1jTp48OwFSUoQEV6QWzolV8OS+ RW9UO+QDmcMxssPs1nJ4nJkIUiq1pa/cGYW8btfTlPYEFZtRo9r7cnEow/UqhThT ijmM+m+qs8IsUsaSXm0f2dVoxD31X+GRZdR26ZyODNNNo46lKodrhLA2BqGU6R10 cZuht8riV04jeRfTMA85uSZgU8W2lbTqmFUAj7Z6Mb0GhAdA4fokFwb4xc3ijiAd HyxIIHkU1hrvru9bd54C5emjaDnjyFnsQKeqwWeDR2weLNtidwIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFPVFlzdaGsbNjewxSAvKkqzdPnzZMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 YTZjNjgzZC01YzAxLTQ3ZWEtODM4ZC0wNGM4OGQ0OWY2YWMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzhhNmM2ODNkLTVjMDEtNDdlYS04 MzhkLTA0Yzg4ZDQ5ZjZhYy84YTZjNjgzZC01YzAxLTQ3ZWEtODM4ZC0wNGM4OGQ0 OWY2YWMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnNwwDgQCAAIwCAMGBCYC8/AAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwYj6gIDBiRCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAC20sA+kJqR2vulqqKkS A8BCuJruM+C4OWXa9do1IfMTMAsXYc5HCuPMwJ7YJ54XZOyuSqRai+YeLbwGzL+F d06bLYKe5mHqDFQO2O0BSGTJp+itiUmUoONb4BTZqDg2qhwe9D+tBwbDKJ7wlKcY v7V4r3HMCRxPeA9N/5Jepz+G36M9aUPqmPjmT0ChhEoHOEKwvnhn2TZGCWtpTmZf oapIRemyJwpxRISV1qEXbceAsmX89KKwdnHJ8kXZsqQhzy8aKYPG7BTYQLG8IS/d lgCN/HIEZxwINBwqPXdkY1HDaQEXWDtm9wjex/yvdF2nkeoGZeASA8a6RW0WTkgS cnk= -----END CERTIFICATE-----Generated at Wed May 13 00:43:52 2026 by rpki-client