$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.cer File: ac1693ef-e9a9-469b-9bc9-4fd318a8e897.cer (raw, json) Hash identifier: V3/U1Wc0nHdV0h2YEy5xPdBary9oOXPeDXGo9C/X0AI= Subject key identifier: 02:1D:0E:99:A4:74:6D:EA:31:08:2C:B0:1A:4D:7F:A6:4D:33:27:06 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F85C2B4D714465803C91B7A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer CRL Distribution Point: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 16 Oct 2026 15:30:16 +0000 Certificate not after: Thu 20 Apr 2028 04:37:19 +0000 Subordinate resources: AS: 53336 IP: 143.203.84.0/22 IP: 155.103.252.0/22 IP: 2602:f6c3::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:c2:b4:d7:14:46:58:03:c9:1b:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 16 15:30:16 2026 GMT Not After : Apr 20 04:37:19 2028 GMT Subject: CN=ac1693ef-e9a9-469b-9bc9-4fd318a8e897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:64:0c:6f:44:b1:c6:25:82:1a:24:9b:ed:7e: f7:83:19:2d:26:1b:c1:a7:77:23:48:99:6a:b0:95: b7:75:da:cd:07:e2:9f:1d:a1:c0:fe:91:e9:38:8d: 83:e8:c1:1d:86:04:40:79:ec:11:04:a6:ee:69:50: bb:5d:97:d1:f7:05:f5:71:9d:2b:04:c1:43:cf:b0: 1a:1d:e2:d5:03:e2:84:4d:ab:0d:0d:12:24:7d:3e: 10:22:c3:30:a5:e1:3d:3e:9a:34:c9:30:9c:c1:8a: d8:7e:27:ae:7f:68:61:94:96:6c:6b:ea:fd:bf:10: da:85:ca:4d:c6:00:1c:a5:2a:8b:12:5e:a8:e5:44: d9:06:68:a7:97:75:27:2c:05:c3:54:1c:10:47:60: 27:14:4d:81:7b:38:fd:6c:96:3b:9b:83:57:52:53: 94:c9:3b:fb:db:19:5f:fe:5e:ca:0e:51:b4:7c:5f: d1:11:94:e5:d9:67:9e:3d:25:78:a8:b7:a0:80:45: 73:65:f7:16:d9:c6:14:93:a7:09:a6:45:99:79:95: 7a:ad:4a:1c:80:71:12:60:f0:28:39:4a:41:fd:f6: e7:a3:8e:07:13:19:06:ea:8a:22:08:f7:c4:c5:4d: 9a:91:b1:29:aa:e1:1f:60:0e:57:aa:32:30:03:2f: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1D:0E:99:A4:74:6D:EA:31:08:2C:B0:1A:4D:7F:A6:4D:33:27:06 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ac1693ef-e9a9-469b-9bc9-4fd318a8e897/ac1693ef-e9a9-469b-9bc9-4fd318a8e897.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 143.203.84.0/22 155.103.252.0/22 IPv6: 2602:f6c3::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 53336 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:22:cb:d7:ca:69:1c:d0:97:97:ad:1b:05:76:f7:91:37:b5: 7e:35:07:ed:42:2f:e9:7f:3f:0b:d2:bd:55:0c:a6:73:52:e8: 19:75:6c:90:c7:9d:4e:af:90:04:54:f3:7c:e0:73:98:d3:11: b7:a1:0f:6e:79:f1:16:83:65:b4:16:91:e3:2c:e5:74:53:20: d2:00:45:db:82:ea:e3:6e:67:31:11:da:f2:e3:a6:6d:da:49: ca:dd:fb:5c:bd:60:26:a3:6b:b8:2c:69:81:cb:cc:cb:37:27: d7:24:24:e1:f3:39:4e:a2:1d:07:b1:61:b9:1e:e4:98:b1:d4: f4:91:b4:1a:86:ab:fc:8c:dc:b9:83:c2:4c:56:25:e5:d7:05: 93:1f:38:b2:ca:ae:a3:7b:af:f4:59:d6:3e:5c:3c:d4:65:a6: 2c:7e:55:7c:26:19:b8:ea:66:94:c4:00:f8:d2:09:4b:47:42: f1:4e:f0:99:36:6c:24:d3:2a:36:8e:41:ab:50:1c:f2:19:47: 60:2c:c0:86:8a:0e:5b:b9:c7:87:bb:4e:32:57:72:11:4b:b2: 6c:81:3b:1c:75:17:fd:20:4e:8e:36:54:1e:d6:b1:d6:47:dc: dc:8f:02:e6:8a:5e:19:22:08:5b:1d:2a:bf:f7:66:7a:5e:bc: d4:b9:7c:03 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE+FwrTXFEZYA8kbegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAxNjE1MzAxNloXDTI4MDQyMDA0MzcxOVowLzEtMCsGA1UEAxMk YWMxNjkzZWYtZTlhOS00NjliLTliYzktNGZkMzE4YThlODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGQMb0SxxiWCGiSb7X73gxktJhvBp3cjSJlq sJW3ddrNB+KfHaHA/pHpOI2D6MEdhgRAeewRBKbuaVC7XZfR9wX1cZ0rBMFDz7Aa HeLVA+KETasNDRIkfT4QIsMwpeE9Ppo0yTCcwYrYfieuf2hhlJZsa+r9vxDahcpN xgAcpSqLEl6o5UTZBminl3UnLAXDVBwQR2AnFE2Bezj9bJY7m4NXUlOUyTv72xlf /l7KDlG0fF/REZTl2WeePSV4qLeggEVzZfcW2cYUk6cJpkWZeZV6rUocgHESYPAo OUpB/fbno44HExkG6ooiCPfExU2akbEpquEfYA5XqjIwAy8tvwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFAIdDpmkdG3qMQgssBpNf6ZNMycGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9h YzE2OTNlZi1lOWE5LTQ2OWItOWJjOS00ZmQzMThhOGU4OTcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2FjMTY5M2VmLWU5YTktNDY5Yi05 YmM5LTRmZDMxOGE4ZTg5Ny9hYzE2OTNlZi1lOWE5LTQ2OWItOWJjOS00ZmQzMThh OGU4OTcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAKPy1QDBAKbZ/wwDgQCAAIwCAMGBCYC9sMAMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDQWDBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAwIsvXymkc0JeXrRsF dveRN7V+NQftQi/pfz8L0r1VDKZzUugZdWyQx51Or5AEVPN84HOY0xG3oQ9uefEW g2W0FpHjLOV0UyDSAEXbgurjbmcxEdry46Zt2knK3ftcvWAmo2u4LGmBy8zLNyfX JCTh8zlOoh0HsWG5HuSYsdT0kbQahqv8jNy5g8JMViXl1wWTHziyyq6je6/0WdY+ XDzUZaYsflV8Jhm46maUxAD40glLR0LxTvCZNmwk0yo2jkGrUBzyGUdgLMCGig5b uceHu04yV3IRS7JsgTscdRf9IE6ONlQe1rHWR9zcjwLmil4ZIghbHSq/92Z6XrzU uXwD -----END CERTIFICATE-----Generated at Sat Nov 14 21:45:08 2026 by rpki-client