$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8fea90f4-8126-4b0e-948a-d594bfd791cb.cer File: 8fea90f4-8126-4b0e-948a-d594bfd791cb.cer (raw, json) Hash identifier: ultXFDoQD99yhYkP8gj6tI6VX1+LRSjQFSj1dH3XP8s= Subject key identifier: A2:DB:A7:E9:54:9B:84:47:EE:0C:36:F1:A7:C2:C5:2B:59:EE:8B:5F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D2B0BDD85342F76EA32A60520 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8fea90f4-8126-4b0e-948a-d594bfd791cb/8fea90f4-8126-4b0e-948a-d594bfd791cb.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8fea90f4-8126-4b0e-948a-d594bfd791cb/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 14 Mar 2026 18:05:14 +0000 Certificate not after: Fri 16 Jun 2028 18:05:14 +0000 Subordinate resources: AS: 12049 AS: 19127 IP: 23.147.192.0/24 IP: 2001:504:80::/44 IP: 2602:fbe5::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:0b:dd:85:34:2f:76:ea:32:a6:05:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 14 18:05:14 2026 GMT Not After : Jun 16 18:05:14 2028 GMT Subject: CN=8fea90f4-8126-4b0e-948a-d594bfd791cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c2:4d:9e:0f:99:b9:aa:dc:ac:93:ea:95:ee: 5a:63:3d:49:59:9d:1f:a8:55:07:28:5b:e4:bc:f6: 15:ef:46:0f:09:dd:4e:10:fe:4e:95:08:c7:98:a0: fe:33:57:d9:79:fc:d4:59:ce:08:ca:01:a9:5a:1d: d2:67:5c:0f:2e:43:67:0b:38:58:c7:86:3d:be:cf: 38:21:4d:ff:9d:67:7b:89:83:32:10:48:e8:84:25: 50:e4:aa:0e:a6:60:f9:68:51:a1:e1:0c:80:f0:47: 45:a8:05:02:5a:1f:0e:e6:ed:4b:d1:0d:b1:85:60: a3:57:38:29:68:44:df:1c:8a:c7:99:d7:a3:1e:aa: 80:5f:d4:c9:78:16:31:6d:97:9c:04:c0:59:7e:84: d1:3c:f4:b7:ea:67:17:7a:07:4d:0a:c9:30:17:c9: f0:59:75:1f:7f:87:4f:b8:3c:cf:55:e3:42:6e:c3: 5a:ed:f0:30:3b:4f:5f:a4:b5:10:31:14:07:72:65: 66:86:2e:a8:34:e7:fe:e9:2e:c6:8e:f2:76:19:e0: d3:73:3b:bd:5b:90:be:fb:18:52:1c:12:f2:db:3b: ab:1e:e5:83:27:e3:b4:5e:08:8a:a7:df:85:df:81: 4d:23:da:69:f9:e3:38:b0:bb:55:46:31:36:4f:0d: bc:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DB:A7:E9:54:9B:84:47:EE:0C:36:F1:A7:C2:C5:2B:59:EE:8B:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8fea90f4-8126-4b0e-948a-d594bfd791cb/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8fea90f4-8126-4b0e-948a-d594bfd791cb/8fea90f4-8126-4b0e-948a-d594bfd791cb.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.147.192.0/24 IPv6: 2001:504:80::/44 2602:fbe5::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 12049 19127 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:7b:59:20:a1:76:5a:e7:fb:e7:61:c6:17:16:64:6b:29:15: f9:c4:5d:1c:e7:25:5b:38:49:a0:3e:81:02:06:90:60:75:a9: 29:b0:c8:0b:fb:b2:3f:14:33:fa:39:7b:64:89:c8:d3:92:50: 6a:7a:63:43:92:85:06:61:b6:4d:01:69:e4:64:b4:79:0e:87: 1b:1a:01:f7:f3:2c:a4:d1:d7:f1:94:e9:69:3a:da:02:6d:40: 9e:93:90:45:c0:14:94:79:39:ef:be:4a:10:c9:38:0a:7f:3e: a5:a0:eb:d0:a7:c1:9a:b9:26:0b:14:5f:bc:27:eb:eb:16:c4: 9f:ec:e9:20:92:4d:b3:31:14:7e:de:d5:e3:9f:92:2c:f1:09: e6:15:6a:69:f3:cf:6b:bc:52:58:90:77:64:77:bc:5d:88:88: 5c:24:b4:8f:5c:7d:6b:90:18:be:fb:3c:4f:24:a6:c8:ee:cd: cb:a8:ea:e4:d5:c4:e6:46:92:48:51:ea:0f:fd:5a:77:bf:75: 47:7d:88:a7:60:02:f1:b9:c3:94:35:07:bf:00:b3:1e:91:e8: 13:6d:84:14:3d:95:9c:68:03:5a:3d:c2:a4:be:9c:1d:9f:21: bf:5d:9c:3c:d3:63:09:d4:72:89:8d:25:8e:a2:d7:96:ea:02: 50:c0:d0:19 -----BEGIN CERTIFICATE----- MIIHJTCCBg2gAwIBAgIUAQ0Mn0MoWE0rC92FNC926jKmBSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxNDE4MDUxNFoXDTI4MDYxNjE4MDUxNFowLzEtMCsGA1UEAxMk OGZlYTkwZjQtODEyNi00YjBlLTk0OGEtZDU5NGJmZDc5MWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68JNng+ZuarcrJPqle5aYz1JWZ0fqFUHKFvk vPYV70YPCd1OEP5OlQjHmKD+M1fZefzUWc4IygGpWh3SZ1wPLkNnCzhYx4Y9vs84 IU3/nWd7iYMyEEjohCVQ5KoOpmD5aFGh4QyA8EdFqAUCWh8O5u1L0Q2xhWCjVzgp aETfHIrHmdejHqqAX9TJeBYxbZecBMBZfoTRPPS36mcXegdNCskwF8nwWXUff4dP uDzPVeNCbsNa7fAwO09fpLUQMRQHcmVmhi6oNOf+6S7GjvJ2GeDTczu9W5C++xhS HBLy2zurHuWDJ+O0XgiKp9+F34FNI9pp+eM4sLtVRjE2Tw28AQIDAQABo4IENzCC BDMwHQYDVR0OBBYEFKLbp+lUm4RH7gw28afCxStZ7otfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 ZmVhOTBmNC04MTI2LTRiMGUtOTQ4YS1kNTk0YmZkNzkxY2IvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzhmZWE5MGY0LTgxMjYtNGIwZS05 NDhhLWQ1OTRiZmQ3OTFjYi84ZmVhOTBmNC04MTI2LTRiMGUtOTQ4YS1kNTk0YmZk NzkxY2IubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMAwEAgABMAYDBAAXk8AwFwQCAAIwEQMHBCABBQQAgAMGACYC++UA MB0GCCsGAQUFBwEIAQH/BA4wDKAKMAgCAi8RAgJKtzBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDe1kgoXZa 5/vnYcYXFmRrKRX5xF0c5yVbOEmgPoECBpBgdakpsMgL+7I/FDP6OXtkicjTklBq emNDkoUGYbZNAWnkZLR5DocbGgH38yyk0dfxlOlpOtoCbUCek5BFwBSUeTnvvkoQ yTgKfz6loOvQp8GauSYLFF+8J+vrFsSf7Okgkk2zMRR+3tXjn5Is8QnmFWpp889r vFJYkHdkd7xdiIhcJLSPXH1rkBi++zxPJKbI7s3LqOrk1cTmRpJIUeoP/Vp3v3VH fYinYALxucOUNQe/ALMekegTbYQUPZWcaANaPcKkvpwdnyG/XZw802MJ1HKJjSWO oteW6gJQwNAZ -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:49 2026 by rpki-client