$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.cer File: 91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.cer (raw, json) Hash identifier: wGfcABDzg/XZKjC4WpBuXGc9kCK+nHbMR6Kh2lbjWeQ= Subject key identifier: C9:7E:23:7E:30:DE:F6:1E:7A:9B:FD:9E:1B:B1:42:55:C8:D1:9B:54 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D0EC15F47A43EBFE5CC108300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Mar 2026 14:52:31 +0000 Certificate not after: Tue 06 Jun 2028 13:52:31 +0000 Subordinate resources: IP: 198.202.151.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:c1:5f:47:a4:3e:bf:e5:cc:10:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 4 14:52:31 2026 GMT Not After : Jun 6 13:52:31 2028 GMT Subject: CN=91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3f:f2:70:69:8d:99:ba:6a:de:76:21:db:5b: a2:ff:b4:23:a3:b3:34:e1:88:33:37:12:c9:ed:4b: 89:74:7c:e6:8b:f7:ef:74:5d:66:c6:14:39:04:e1: cd:ae:56:ac:0c:bc:47:9d:20:87:31:7b:21:90:53: af:87:df:35:be:ce:67:be:86:90:ef:3c:3a:ab:11: c0:08:57:06:d4:f4:e9:67:4d:bd:8e:9c:7a:62:bb: 3d:b2:e1:09:a9:67:e5:c4:6c:c7:d1:34:f4:e6:65: 21:ac:da:d3:7b:6b:58:5b:3e:d8:40:78:49:7b:c5: 20:bc:b9:67:35:ca:9b:f3:71:d5:0d:46:b7:8b:4c: eb:8f:b4:a5:85:eb:6c:81:cc:2d:6f:4a:ce:d5:40: b5:21:c2:fc:39:0e:41:7e:51:14:9f:b0:c5:66:ef: ce:6c:1b:bd:d1:44:83:59:a3:2f:88:fb:db:fa:db: 59:b0:8d:f5:39:af:f7:17:83:9c:3b:49:62:cc:60: 0c:6c:05:4b:c5:e3:61:a7:e6:fd:e9:91:74:63:7e: 6e:3f:be:af:4c:27:c0:a1:e7:65:c6:ef:10:78:8c: 3e:65:30:2c:f0:d3:3f:8c:b6:8b:44:d4:32:8b:c9: c7:18:d7:1c:b4:ed:38:7e:5e:9c:ba:79:27:55:47: 6f:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7E:23:7E:30:DE:F6:1E:7A:9B:FD:9E:1B:B1:42:55:C8:D1:9B:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f/91cbbd67-2ab3-43c0-bd6c-0d6538a55f0f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 198.202.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:a3:49:a3:4c:07:61:0c:a2:d8:86:a9:4c:5b:ce:b0:43:76: 68:61:48:d5:bc:dd:bb:26:ee:04:e4:13:5a:cd:ad:5f:5e:d5: de:ff:87:0f:d8:f0:fc:44:d5:4e:65:df:35:48:ee:eb:b0:54: 00:6c:ef:ca:2b:18:eb:1b:b3:ba:68:61:e2:35:44:63:0c:16: e1:98:99:23:44:f6:c2:3a:e5:95:2b:a9:4f:8c:98:6f:d3:26: 48:5b:bc:5c:91:26:ba:ca:6b:3e:51:15:b4:37:1b:d2:bd:f7: 01:3b:1a:57:dc:7a:5c:ea:a0:e2:f0:16:a1:c9:c3:14:ce:28: 56:58:45:5e:a3:05:48:ea:a3:49:15:dd:09:b5:c3:ad:02:c0: cc:e7:20:1d:78:46:0f:d2:14:1f:32:17:e9:93:30:eb:58:1b: ee:a2:2c:2b:4c:9a:8c:8d:d8:67:b1:ff:73:b3:8e:46:b8:0c: 70:0c:28:33:7c:8b:07:d2:b6:9b:63:13:fd:af:39:7d:85:2b: f2:03:99:be:8d:8c:df:24:c1:4a:a7:56:0c:d0:c5:d5:37:a6: 63:4d:8e:58:15:80:b1:0d:ef:7e:c3:2a:81:ce:d6:6b:45:16: 81:e3:60:7d:57:dc:7c:a8:11:ee:9f:48:f7:12:6a:24:18:34: 67:de:81:4b -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0OwV9HpD6/5cwQgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNDE0NTIzMVoXDTI4MDYwNjEzNTIzMVowLzEtMCsGA1UEAxMk OTFjYmJkNjctMmFiMy00M2MwLWJkNmMtMGQ2NTM4YTU1ZjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD/ycGmNmbpq3nYh21ui/7Qjo7M04YgzNxLJ 7UuJdHzmi/fvdF1mxhQ5BOHNrlasDLxHnSCHMXshkFOvh981vs5nvoaQ7zw6qxHA CFcG1PTpZ029jpx6Yrs9suEJqWflxGzH0TT05mUhrNrTe2tYWz7YQHhJe8UgvLln Ncqb83HVDUa3i0zrj7Slhetsgcwtb0rO1UC1IcL8OQ5BflEUn7DFZu/ObBu90USD WaMviPvb+ttZsI31Oa/3F4OcO0lizGAMbAVLxeNhp+b96ZF0Y35uP76vTCfAoedl xu8QeIw+ZTAs8NM/jLaLRNQyi8nHGNcctO04fl6cunknVUdvjwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMl+I34w3vYeepv9nhuxQlXI0ZtUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 MWNiYmQ2Ny0yYWIzLTQzYzAtYmQ2Yy0wZDY1MzhhNTVmMGYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzkxY2JiZDY3LTJhYjMtNDNjMC1i ZDZjLTBkNjUzOGE1NWYwZi85MWNiYmQ2Ny0yYWIzLTQzYzAtYmQ2Yy0wZDY1Mzhh NTVmMGYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGypcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPaNJo0wHYQyi2IapTFvO sEN2aGFI1bzduybuBOQTWs2tX17V3v+HD9jw/ETVTmXfNUju67BUAGzvyisY6xuz umhh4jVEYwwW4ZiZI0T2wjrllSupT4yYb9MmSFu8XJEmusprPlEVtDcb0r33ATsa V9x6XOqg4vAWocnDFM4oVlhFXqMFSOqjSRXdCbXDrQLAzOcgHXhGD9IUHzIX6ZMw 61gb7qIsK0yajI3YZ7H/c7OORrgMcAwoM3yLB9K2m2MT/a85fYUr8gOZvo2M3yTB SqdWDNDF1TemY02OWBWAsQ3vfsMqgc7Wa0UWgeNgfVfcfKgR7p9I9xJqJBg0Z96B Sw== -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:45 2026 by rpki-client