$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9.cer File: a24c9f40-601b-4bb8-8c62-250bf812fea9.cer (raw, json) Hash identifier: QpJqFQmlIjVLwAgOokMC1x429xlsjDNGb5yHJr/+kH4= Subject key identifier: 46:D4:B2:A8:A7:A7:BA:3B:72:D6:6D:9E:48:23:5B:CE:83:6F:16:0F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D14AE9603EC10774DA99AA9C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a24c9f40-601b-4bb8-8c62-250bf812fea9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 17:49:31 +0000 Certificate not after: Thu 08 Jun 2028 16:49:31 +0000 Subordinate resources: AS: 30588 IP: 23.152.68.0/24 IP: 2602:81c:f000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:ae:96:03:ec:10:77:4d:a9:9a:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 6 17:49:31 2026 GMT Not After : Jun 8 16:49:31 2028 GMT Subject: CN=a24c9f40-601b-4bb8-8c62-250bf812fea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:e0:65:81:45:dd:99:72:bb:9d:8c:87:5c: ec:3d:2c:5e:36:76:fb:42:5a:f9:25:e7:94:4f:c4: 55:5c:dd:8f:7d:18:b1:e0:8f:c0:08:86:c3:57:17: 1f:f1:e5:62:34:d2:0b:29:03:61:d4:ad:60:96:e9: 0a:a2:52:e2:6e:29:7d:5a:2a:24:99:06:9f:7b:31: 69:66:99:5e:70:ae:28:b4:14:f1:23:bf:37:ff:4a: 4a:c2:d2:13:2d:bb:5b:2e:38:0c:ce:82:ea:29:2b: 08:a0:d3:c3:43:37:3f:42:58:d5:19:56:80:6d:c1: 79:c7:7b:d2:b6:aa:ff:ec:e4:50:0d:47:b6:de:ab: da:af:62:7f:30:a7:99:44:2d:a5:73:dc:1c:4d:b5: 56:78:a0:66:61:40:d6:a7:3c:35:32:ac:70:b9:c0: c0:70:da:4f:cd:c4:94:9e:38:3c:2b:f0:96:48:e9: 40:11:80:74:60:35:17:dc:18:85:27:72:2a:4b:ea: a5:a2:76:aa:00:7f:62:4a:d9:d0:6e:4d:28:98:6b: c8:42:8c:24:e5:4f:ac:d0:13:33:11:df:15:14:1e: 99:f7:f4:c1:8c:e7:df:fb:7f:b2:cb:f6:d6:52:b8: 6a:b8:b4:2b:b0:72:b6:f5:90:34:d7:a4:d9:60:f7: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D4:B2:A8:A7:A7:BA:3B:72:D6:6D:9E:48:23:5B:CE:83:6F:16:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a24c9f40-601b-4bb8-8c62-250bf812fea9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.152.68.0/24 IPv6: 2602:81c:f000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 30588 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:98:57:4e:ba:a9:a7:81:6e:26:da:f4:2a:0f:ae:08:bc:7d: 33:c6:b6:02:58:37:f7:44:23:26:98:03:e3:7c:d1:52:5e:31: d5:ce:00:c7:da:9d:cb:d2:3b:8f:6c:b5:fb:ec:9c:30:f8:ff: 14:18:a8:f3:d6:83:09:ff:f3:74:4b:90:4f:93:74:f6:72:1d: 2e:90:81:5a:7e:1e:49:a7:19:76:73:c7:e8:b4:23:dc:ef:b4: cf:b8:8b:3d:f3:99:e7:96:91:18:43:77:90:cb:f5:8d:5f:89: f9:e9:77:15:30:e8:96:6b:ec:79:b3:c0:36:29:ce:cf:99:05: 9f:0d:3b:8a:65:72:7f:52:7e:67:b6:fc:61:68:a0:5b:7d:53: 6c:63:57:a4:ed:f7:8e:6a:8a:00:50:fc:3a:e7:00:37:7e:b5: 98:9a:4a:d5:5d:34:e8:da:2b:01:a1:70:b0:ea:c4:aa:b1:bd: 92:0b:a5:cc:e6:f3:d7:a7:62:38:5e:3f:b8:67:27:28:7c:47: 7c:fe:12:13:9b:ed:e2:7a:c8:51:f3:71:9a:28:ce:9d:e1:61: ba:c1:7e:df:a9:c9:dd:4e:15:9d:83:90:b4:c0:dd:80:38:9f: a2:ea:03:13:43:6f:c9:08:5c:cf:99:bd:8e:f9:c1:08:1a:96: 21:ef:ad:bc -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE0UrpYD7BB3TamaqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNjE3NDkzMVoXDTI4MDYwODE2NDkzMVowLzEtMCsGA1UEAxMk YTI0YzlmNDAtNjAxYi00YmI4LThjNjItMjUwYmY4MTJmZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyXgZYFF3Zlyu52Mh1zsPSxeNnb7Qlr5JeeU T8RVXN2PfRix4I/ACIbDVxcf8eViNNILKQNh1K1glukKolLibil9WiokmQafezFp ZplecK4otBTxI783/0pKwtITLbtbLjgMzoLqKSsIoNPDQzc/QljVGVaAbcF5x3vS tqr/7ORQDUe23qvar2J/MKeZRC2lc9wcTbVWeKBmYUDWpzw1MqxwucDAcNpPzcSU njg8K/CWSOlAEYB0YDUX3BiFJ3IqS+qlonaqAH9iStnQbk0omGvIQowk5U+s0BMz Ed8VFB6Z9/TBjOff+3+yy/bWUrhquLQrsHK29ZA016TZYPcH9QIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFEbUsqinp7o7ctZtnkgjW86DbxYPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9h MjRjOWY0MC02MDFiLTRiYjgtOGM2Mi0yNTBiZjgxMmZlYTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2EyNGM5ZjQwLTYwMWItNGJiOC04 YzYyLTI1MGJmODEyZmVhOS9hMjRjOWY0MC02MDFiLTRiYjgtOGM2Mi0yNTBiZjgx MmZlYTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBAAXmEQwDwQCAAIwCQMHBCYCCBzwADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJ3fDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTmFdOuqmngW4m2vQqD64IvH0z xrYCWDf3RCMmmAPjfNFSXjHVzgDH2p3L0juPbLX77Jww+P8UGKjz1oMJ//N0S5BP k3T2ch0ukIFafh5Jpxl2c8fotCPc77TPuIs985nnlpEYQ3eQy/WNX4n56XcVMOiW a+x5s8A2Kc7PmQWfDTuKZXJ/Un5ntvxhaKBbfVNsY1ek7feOaooAUPw65wA3frWY mkrVXTTo2isBoXCw6sSqsb2SC6XM5vPXp2I4Xj+4ZycofEd8/hITm+3ieshR83Ga KM6d4WG6wX7fqcndThWdg5C0wN2AOJ+i6gMTQ2/JCFzPmb2O+cEIGpYh7628 -----END CERTIFICATE-----Generated at Wed Mar 25 22:52:56 2026 by rpki-client