$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer File: ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.cer (raw, json) Hash identifier: AnHbeG3lgUqRcGGYBfgkNGtesPAs32c+66JvzohW/3A= Subject key identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D17952C9374302B65BC2DBA00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sat 07 Mar 2026 18:45:44 +0000 Certificate not after: Fri 09 Jun 2028 17:45:44 +0000 Subordinate resources: AS: 13898 IP: 23.171.216.0/24 IP: 104.37.192.0/22 IP: 2602:f97c::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:95:2c:93:74:30:2b:65:bc:2d:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 7 18:45:44 2026 GMT Not After : Jun 9 17:45:44 2028 GMT Subject: CN=ba371da1-cd74-46bd-82a8-de7b9f7a9ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4d:93:71:cd:d2:92:3d:07:f6:cb:f1:d5:66: 65:df:75:4d:88:b3:02:95:c0:50:c8:58:3b:61:ed: a7:03:54:a0:68:05:c0:47:95:c2:2c:5a:cd:38:17: 1a:e2:f8:79:aa:2f:21:ee:5c:4e:0e:98:93:0a:cc: 0c:ff:1a:0d:0b:91:5a:8d:e5:6d:f2:b6:9c:e0:c7: e5:e7:fb:14:16:92:96:7b:26:21:bb:3c:5d:77:29: 2e:12:fb:60:fe:c7:be:f2:cd:95:f2:82:9a:4c:22: 5a:56:c3:53:f0:7c:29:75:2c:0a:61:53:6b:5a:7a: 28:8f:b1:fa:f4:56:9c:70:66:b7:1f:01:a4:ee:98: 95:94:bf:ad:99:cc:e1:f8:55:3a:09:52:1c:c6:4d: 30:58:b2:b9:ff:85:e0:1c:a0:0a:76:90:1b:95:be: 60:7c:d9:ce:02:2d:a5:c7:fe:bc:fd:73:9b:0d:8f: 03:81:2e:25:33:3a:ed:09:b1:4b:6b:ff:bf:e9:ad: b0:8a:c5:79:ee:a5:d7:69:c4:d7:15:ae:c7:00:c0: b2:98:b9:49:20:e3:4f:26:fd:16:e2:97:8c:3e:29: 38:9f:c4:52:69:0c:b3:25:5e:74:cc:a9:63:fd:87: 42:61:aa:7b:c1:a6:26:da:60:94:fc:80:35:64:2a: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2D:60:F6:42:2A:04:1A:A1:84:7A:85:B6:56:BD:0F:CA:4A:99:4B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa/ba371da1-cd74-46bd-82a8-de7b9f7a9ffa.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.171.216.0/24 104.37.192.0/22 IPv6: 2602:f97c::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 13898 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9f:40:99:d4:d8:dc:86:31:09:68:d9:cd:7b:e9:f1:ae:1b: d1:88:b5:b5:e8:19:6e:d1:0a:25:44:13:25:5f:a9:c3:23:4d: 1b:14:35:82:6f:fd:8d:3f:11:fe:8f:6a:7e:4d:da:2d:57:33: 6b:a0:16:4e:ab:27:57:21:6e:f4:a5:f3:55:74:14:0c:a1:fe: e9:97:cc:40:62:87:1b:87:ca:ba:99:c7:80:c8:e7:25:2f:93: da:51:88:12:da:75:b3:2d:a9:f3:b9:6a:c9:84:26:80:3a:67: 00:d6:73:6b:f7:68:e5:41:89:7a:99:6f:bf:c3:e7:db:fa:f3: f5:31:a8:01:93:29:34:88:3a:c6:b8:bc:53:09:cf:61:b0:76: 5c:5e:81:90:c8:64:cb:e5:37:f2:ab:44:4d:ba:0f:07:63:20: 34:b1:3b:7f:11:51:a0:a8:e8:c9:16:2d:e3:3c:f5:2d:74:99: 3d:3e:2e:8e:04:e4:eb:62:ea:ec:c0:61:b8:92:7b:01:24:35: 72:ca:42:ed:2f:a8:2b:c8:b9:14:76:73:50:36:8b:94:0d:3e: b4:ca:2c:bc:f2:c0:85:b5:a9:b3:35:db:d6:16:1d:24:d2:7b: 60:04:0c:80:5e:19:bf:1a:77:65:2d:04:ae:b6:63:f8:1b:c3: 1d:d2:a3:55 -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE0XlSyTdDArZbwtugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNzE4NDU0NFoXDTI4MDYwOTE3NDU0NFowLzEtMCsGA1UEAxMk YmEzNzFkYTEtY2Q3NC00NmJkLTgyYTgtZGU3YjlmN2E5ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE2Tcc3Skj0H9svx1WZl33VNiLMClcBQyFg7 Ye2nA1SgaAXAR5XCLFrNOBca4vh5qi8h7lxODpiTCswM/xoNC5FajeVt8rac4Mfl 5/sUFpKWeyYhuzxddykuEvtg/se+8s2V8oKaTCJaVsNT8HwpdSwKYVNrWnooj7H6 9FaccGa3HwGk7piVlL+tmczh+FU6CVIcxk0wWLK5/4XgHKAKdpAblb5gfNnOAi2l x/68/XObDY8DgS4lMzrtCbFLa/+/6a2wisV57qXXacTXFa7HAMCymLlJIONPJv0W 4peMPik4n8RSaQyzJV50zKlj/YdCYap7waYm2mCU/IA1ZCqy/QIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFD0tYPZCKgQaoYR6hbZWvQ/KSplLMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i YTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3YTlmZmEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JhMzcxZGExLWNkNzQtNDZiZC04 MmE4LWRlN2I5ZjdhOWZmYS9iYTM3MWRhMS1jZDc0LTQ2YmQtODJhOC1kZTdiOWY3 YTlmZmEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXq9gDBAJoJcAwDgQCAAIwCAMGACYC+XwAMBkG CCsGAQUFBwEIAQH/BAowCKAGMAQCAjZKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAASfQJnU2NyGMQlo2c17 6fGuG9GItbXoGW7RCiVEEyVfqcMjTRsUNYJv/Y0/Ef6Pan5N2i1XM2ugFk6rJ1ch bvSl81V0FAyh/umXzEBihxuHyrqZx4DI5yUvk9pRiBLadbMtqfO5asmEJoA6ZwDW c2v3aOVBiXqZb7/D59v68/UxqAGTKTSIOsa4vFMJz2GwdlxegZDIZMvlN/KrRE26 DwdjIDSxO38RUaCo6MkWLeM89S10mT0+Lo4E5Oti6uzAYbiSewEkNXLKQu0vqCvI uRR2c1A2i5QNPrTKLLzywIW1qbM129YWHSTSe2AEDIBeGb8ad2UtBK62Y/gbwx3S o1U= -----END CERTIFICATE-----Generated at Wed Mar 25 22:53:50 2026 by rpki-client