$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8.cer File: 8e894247-f145-41e0-8385-49772b1534b8.cer (raw, json) Hash identifier: JKYmQOdTB/H1Bv/CGr6XueUJZWurrN7aDGel2rEddac= Subject key identifier: 7F:9D:99:60:F3:89:49:12:9D:CD:A2:A6:ED:C8:45:6C:11:F0:08:6B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D256A54D7A6B210CC96665C80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/8e894247-f145-41e0-8385-49772b1534b8.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Mar 2026 17:40:44 +0000 Certificate not after: Wed 14 Jun 2028 17:40:44 +0000 Subordinate resources: IP: 170.6.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:6a:54:d7:a6:b2:10:cc:96:66:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 12 17:40:44 2026 GMT Not After : Jun 14 17:40:44 2028 GMT Subject: CN=8e894247-f145-41e0-8385-49772b1534b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:b5:f1:62:a6:4d:73:ad:56:76:fc:5e:45:dc: 01:bc:c6:67:c9:c2:73:47:61:b0:26:10:2e:8c:ad: fc:e5:ee:4f:f8:34:a8:a6:8b:fc:1c:7d:8b:e0:e4: 93:8a:be:ce:bd:8e:00:6e:2f:33:9e:5e:24:b4:23: 91:c8:8e:50:c9:c2:93:56:60:c8:3d:f8:e2:f2:a5: 76:ed:09:dc:ba:9e:7c:16:e9:cf:5e:03:7f:b2:b3: 0b:9a:87:9f:e0:81:da:61:f1:34:94:42:59:3f:54: 8f:63:d8:6e:89:5e:54:83:b0:f2:f0:9d:b1:63:6e: 1c:75:9b:39:66:66:2a:ac:97:e5:20:82:8e:dc:a6: ae:39:d8:f1:94:4e:0b:df:7b:b2:45:c7:8d:c2:43: 46:7b:8b:8b:cc:22:cc:e7:3b:64:9b:7a:83:d6:f7: 18:54:4b:53:f7:72:65:78:6d:6f:15:80:2a:f3:01: c3:01:a6:d6:f4:8f:81:20:cd:9a:4a:a7:ef:e8:ed: 2f:a2:cf:79:53:c8:04:47:2c:96:da:5a:da:aa:9d: 51:1f:13:ce:e8:2c:48:64:ff:b6:7e:09:b7:ec:a4: 2f:b9:ef:17:da:c6:19:72:07:2d:fc:8d:23:c5:a7: f8:f2:14:46:0a:73:da:28:28:eb:cd:bf:12:ca:34: 45:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9D:99:60:F3:89:49:12:9D:CD:A2:A6:ED:C8:45:6C:11:F0:08:6B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e894247-f145-41e0-8385-49772b1534b8/8e894247-f145-41e0-8385-49772b1534b8.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 170.6.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:87:6f:c3:71:c6:6e:07:39:62:59:eb:87:11:fd:9d:e4:b7: 56:8f:c5:31:ad:0d:d3:8d:6d:8a:54:d5:51:5f:06:9f:c0:3b: f1:4d:30:7c:e5:d1:9f:00:1c:b4:c2:6a:1d:04:a6:06:ea:ff: c5:34:41:59:99:cd:bd:87:eb:51:c9:8f:73:5d:f4:25:61:fe: bf:b9:2e:ec:67:f8:66:c9:66:7c:b2:68:2d:f3:78:45:9d:30: 93:e4:9a:bc:7e:02:49:74:48:bc:cc:d1:30:3f:b2:63:77:4f: fe:d9:a1:98:e4:56:94:29:8b:5e:19:4b:78:b9:5b:20:cd:91: f5:b0:83:6a:7e:4a:c6:2f:0b:32:de:25:a0:b1:a6:9c:74:c8: 1f:e9:77:fe:9a:8e:43:3e:c5:a2:74:a1:0c:f5:76:c2:aa:2f: 32:1a:c3:6b:b3:ec:c4:2c:0f:47:9a:ab:32:fe:cb:a2:e0:b9: b3:8b:ed:46:31:d0:3b:09:bf:7c:6e:97:6b:95:1c:c6:32:3a: 9f:c5:ed:96:c4:bb:80:43:06:40:a8:ea:d9:01:ac:37:0c:40: 00:2b:98:58:0b:01:ce:2a:7a:64:4d:cd:8d:7b:78:f9:85:f3: 10:fa:04:94:46:52:ef:07:80:28:b8:93:3f:27:ba:aa:fe:65: ea:3b:30:ad -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE0lalTXprIQzJZmXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxMjE3NDA0NFoXDTI4MDYxNDE3NDA0NFowLzEtMCsGA1UEAxMk OGU4OTQyNDctZjE0NS00MWUwLTgzODUtNDk3NzJiMTUzNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7bXxYqZNc61WdvxeRdwBvMZnycJzR2GwJhAu jK385e5P+DSopov8HH2L4OSTir7OvY4Abi8znl4ktCORyI5QycKTVmDIPfji8qV2 7Qncup58FunPXgN/srMLmoef4IHaYfE0lEJZP1SPY9huiV5Ug7Dy8J2xY24cdZs5 ZmYqrJflIIKO3KauOdjxlE4L33uyRceNwkNGe4uLzCLM5ztkm3qD1vcYVEtT93Jl eG1vFYAq8wHDAabW9I+BIM2aSqfv6O0vos95U8gERyyW2lraqp1RHxPO6CxIZP+2 fgm37KQvue8X2sYZcgct/I0jxaf48hRGCnPaKCjrzb8SyjRFWwIDAQABo4ID/jCC A/owHQYDVR0OBBYEFH+dmWDziUkSnc2ipu3IRWwR8AhrMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 ZTg5NDI0Ny1mMTQ1LTQxZTAtODM4NS00OTc3MmIxNTM0YjgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzhlODk0MjQ3LWYxNDUtNDFlMC04 Mzg1LTQ5NzcyYjE1MzRiOC84ZTg5NDI0Ny1mMTQ1LTQxZTAtODM4NS00OTc3MmIx NTM0YjgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCqBjBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABh2/DccZuBzliWeuHEf2d 5LdWj8UxrQ3TjW2KVNVRXwafwDvxTTB85dGfABy0wmodBKYG6v/FNEFZmc29h+tR yY9zXfQlYf6/uS7sZ/hmyWZ8smgt83hFnTCT5Jq8fgJJdEi8zNEwP7Jjd0/+2aGY 5FaUKYteGUt4uVsgzZH1sINqfkrGLwsy3iWgsaacdMgf6Xf+mo5DPsWidKEM9XbC qi8yGsNrs+zELA9Hmqsy/sui4Lmzi+1GMdA7Cb98bpdrlRzGMjqfxe2WxLuAQwZA qOrZAaw3DEAAK5hYCwHOKnpkTc2Ne3j5hfMQ+gSURlLvB4AouJM/J7qq/mXqOzCt -----END CERTIFICATE-----Generated at Wed Mar 25 22:52:50 2026 by rpki-client