$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a.cer File: 945d092c-cdd6-43ab-83ae-c3c597895e5a.cer (raw, json) Hash identifier: TroyfgUtgYEUBVk148ASkWoc82qnjFWdu9MYb/OZyZg= Subject key identifier: C5:28:C0:2B:09:33:62:CA:C8:A4:83:B4:E9:B5:7E:18:CC:FB:44:B8 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D34A1200259242258F06F6D00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/945d092c-cdd6-43ab-83ae-c3c597895e5a.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Mar 2026 04:28:15 +0000 Certificate not after: Tue 20 Jun 2028 04:28:15 +0000 Subordinate resources: AS: 14107 IP: 64.5.0.0/19 IP: 2604:2400::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:a1:20:02:59:24:22:58:f0:6f:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 18 04:28:15 2026 GMT Not After : Jun 20 04:28:15 2028 GMT Subject: CN=945d092c-cdd6-43ab-83ae-c3c597895e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:85:9d:7a:d0:a6:fd:80:3d:60:cd:83:fa:90: bb:fe:be:04:f3:01:a2:e6:94:d3:5c:fa:03:ef:fa: 40:a7:d9:56:e1:3e:74:0f:a4:b9:bb:81:b1:f0:45: 5b:1a:23:23:1f:1a:0b:a6:ad:0e:2a:07:23:be:30: 35:d5:2b:ec:8e:fb:c8:97:50:9b:0e:65:d7:70:02: da:b3:91:b1:e8:d4:6e:18:aa:07:88:6f:d0:4a:a4: f3:2c:7a:ef:4e:d7:e4:62:0b:d4:8d:7c:ad:f4:e9: 5b:df:f4:ec:3f:33:9f:ca:68:69:d5:55:f1:23:4e: 9d:73:f0:2e:84:04:d4:73:0f:d2:63:85:51:0d:a6: 9d:75:77:da:ff:98:41:71:85:da:ba:06:aa:f0:ee: 4c:e3:10:d9:ba:60:04:6d:32:4a:2d:5b:1b:a6:4e: 5d:49:3e:ba:12:42:e4:f6:93:77:6b:01:f8:bb:d3: f7:03:f2:73:73:c9:83:f1:b6:2a:d0:70:3f:7d:d5: 2b:90:39:1d:02:08:a3:c7:62:3d:19:51:4a:cb:03: 86:05:a0:16:50:b0:96:cf:ea:b2:5c:08:8b:58:68: d3:1b:6e:70:d9:5a:40:7c:af:36:fe:64:77:7e:a2: 74:79:9f:a9:c2:a0:62:a0:ec:3a:51:d7:39:64:d0: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:28:C0:2B:09:33:62:CA:C8:A4:83:B4:E9:B5:7E:18:CC:FB:44:B8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/945d092c-cdd6-43ab-83ae-c3c597895e5a/945d092c-cdd6-43ab-83ae-c3c597895e5a.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 64.5.0.0/19 IPv6: 2604:2400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14107 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:5c:7f:b2:0a:df:fe:14:3e:b5:14:a9:37:86:12:fb:d7:56: 43:95:10:4c:cd:5d:db:fc:f3:c9:b3:18:5b:d9:6c:8c:5f:cf: d4:9b:ea:69:76:fb:94:c4:a7:17:ad:4c:a7:ab:1b:6c:f5:d9: 83:2d:1b:6b:66:57:72:75:c1:67:c7:c3:fa:3e:4b:0f:ac:84: 1a:ef:97:9b:81:15:72:4e:9e:5a:9d:9a:70:98:c4:23:4f:4b: 84:bc:39:c7:77:3c:3c:24:5e:c0:69:c4:9d:52:0d:3e:aa:db: 83:80:b9:8c:6c:5c:42:2e:76:51:e3:bf:5e:54:d4:f4:60:5a: 45:6d:9f:62:d6:b9:9a:23:ff:19:97:e4:a9:a1:5c:e9:22:12: 6e:47:c0:bd:67:92:34:8f:73:96:d8:2f:f3:a4:08:6a:3c:1d: c7:1b:ed:0c:c0:5a:79:6f:df:6a:50:42:c8:4f:47:36:a3:b7: e1:8b:86:e2:90:cc:59:60:82:5a:ac:73:d5:eb:60:8c:f7:cd: c0:70:38:ca:ad:53:4e:8e:05:31:fb:0e:7e:ac:b1:eb:fd:43: 6d:9b:66:35:5a:48:b3:42:80:49:82:34:65:29:db:d0:a9:9c: a2:e7:01:1c:84:46:47:ce:15:67:df:2a:ee:d8:20:df:d8:09: 5d:ad:c2:50 -----BEGIN CERTIFICATE----- MIIHFzCCBf+gAwIBAgIUAQ0Mn0MoWE00oSACWSQiWPBvbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxODA0MjgxNVoXDTI4MDYyMDA0MjgxNVowLzEtMCsGA1UEAxMk OTQ1ZDA5MmMtY2RkNi00M2FiLTgzYWUtYzNjNTk3ODk1ZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYWdetCm/YA9YM2D+pC7/r4E8wGi5pTTXPoD 7/pAp9lW4T50D6S5u4Gx8EVbGiMjHxoLpq0OKgcjvjA11SvsjvvIl1CbDmXXcALa s5Gx6NRuGKoHiG/QSqTzLHrvTtfkYgvUjXyt9Olb3/TsPzOfymhp1VXxI06dc/Au hATUcw/SY4VRDaaddXfa/5hBcYXaugaq8O5M4xDZumAEbTJKLVsbpk5dST66EkLk 9pN3awH4u9P3A/Jzc8mD8bYq0HA/fdUrkDkdAgijx2I9GVFKywOGBaAWULCWz+qy XAiLWGjTG25w2VpAfK82/mR3fqJ0eZ+pwqBioOw6Udc5ZNDKJwIDAQABo4IEKTCC BCUwHQYDVR0OBBYEFMUowCsJM2LKyKSDtOm1fhjM+0S4MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 NDVkMDkyYy1jZGQ2LTQzYWItODNhZS1jM2M1OTc4OTVlNWEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzk0NWQwOTJjLWNkZDYtNDNhYi04 M2FlLWMzYzU5Nzg5NWU1YS85NDVkMDkyYy1jZGQ2LTQzYWItODNhZS1jM2M1OTc4 OTVlNWEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBAVABQAwDQQCAAIwBwMFACYEJAAwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICNxswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEATVx/sgrf/hQ+tRSpN4YS+9dWQ5UQ TM1d2/zzybMYW9lsjF/P1JvqaXb7lMSnF61Mp6sbbPXZgy0ba2ZXcnXBZ8fD+j5L D6yEGu+Xm4EVck6eWp2acJjEI09LhLw5x3c8PCRewGnEnVINPqrbg4C5jGxcQi52 UeO/XlTU9GBaRW2fYta5miP/GZfkqaFc6SISbkfAvWeSNI9zltgv86QIajwdxxvt DMBaeW/falBCyE9HNqO34YuG4pDMWWCCWqxz1etgjPfNwHA4yq1TTo4FMfsOfqyx 6/1DbZtmNVpIs0KASYI0ZSnb0KmcoucBHIRGR84VZ98q7tgg39gJXa3CUA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:53:14 2026 by rpki-client