$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899.cer File: cae112c4-38cb-44c3-a8df-43152814a899.cer (raw, json) Hash identifier: yxMHInnQ/5IUqdHFJJcXVAzm7vgwSQsaHeTHgqP0nYY= Subject key identifier: 8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D443015E549F216D46ACC9A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 23 Mar 2026 18:13:26 +0000 Certificate not after: Sun 25 Jun 2028 18:13:26 +0000 Subordinate resources: AS: 63019 IP: 162.251.192.0/21 IP: 185.213.68.0/22 IP: 2602:ffce::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:30:15:e5:49:f2:16:d4:6a:cc:9a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 23 18:13:26 2026 GMT Not After : Jun 25 18:13:26 2028 GMT Subject: CN=cae112c4-38cb-44c3-a8df-43152814a899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7a:c1:98:c3:00:4c:4b:e0:0d:25:e7:ef:3c: 5f:f5:8f:24:8b:ca:4d:4d:20:e9:aa:61:d4:9c:7b: ba:7c:27:e9:41:3b:94:d2:b5:54:65:9a:b8:b1:34: ae:50:dc:46:df:07:01:f2:5b:0d:f1:53:79:a2:50: 9a:de:b3:ad:30:36:c2:9f:92:90:cf:28:f7:8c:fb: aa:e9:fd:63:77:ed:cc:6c:d6:83:9b:2e:0f:19:74: 58:30:75:89:10:69:35:a6:4e:62:1f:51:9b:87:d3: 5e:1c:c6:4f:3f:3f:f7:a1:7b:72:ac:af:c2:89:d7: 07:6b:77:ce:c0:4f:a9:5e:5d:ba:03:8d:ae:07:4e: ea:1b:61:14:ef:39:3c:99:72:93:25:72:fe:7c:ab: 99:9a:8c:ae:9d:57:a2:fc:e3:5d:65:21:e0:c8:34: 0b:50:80:1f:d2:be:1c:e9:01:22:bc:de:b9:51:24: cf:15:a8:0c:4f:af:16:18:88:ae:f6:b8:23:98:2d: 63:f1:0f:b5:46:00:32:17:5d:78:58:62:88:1a:c7: 6f:0c:d9:82:48:fb:4e:8e:23:d1:e9:dc:57:b8:10: 23:ac:f9:84:5b:f1:f4:d0:64:d3:1d:37:28:a6:12: 99:ea:07:85:89:25:fe:ee:c8:e3:32:a3:cb:b1:6f: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FB:2B:76:55:E7:4F:03:1A:41:E5:F6:06:91:57:0A:CC:A4:F2:5A Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cae112c4-38cb-44c3-a8df-43152814a899/cae112c4-38cb-44c3-a8df-43152814a899.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 162.251.192.0/21 185.213.68.0/22 IPv6: 2602:ffce::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 63019 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:27:83:ed:42:57:a9:3b:c1:7a:ee:99:b0:85:80:8e:d2:1a: 20:df:10:bd:8a:dd:55:fe:9a:32:3d:01:cc:7c:7f:6e:5c:93: c9:db:6b:b0:fc:10:39:98:4c:5b:2f:8d:3f:80:74:97:1c:76: 24:21:c3:c9:2e:28:0a:8e:56:48:8f:68:32:88:8e:0e:f2:cf: 39:ed:e4:b7:97:7a:a1:22:d9:2a:c1:44:f9:47:16:a5:a1:97: a7:06:0e:96:f2:60:39:9c:87:ce:38:42:0b:70:41:38:74:9a: c3:ed:dd:a0:a0:66:7a:01:be:64:eb:5d:77:4e:b1:e9:b9:68: e7:55:75:9f:b8:02:3b:23:7d:9a:6d:95:f7:c1:b1:5f:c2:fc: a3:d4:14:5d:79:da:6c:0e:67:01:d0:62:f4:7c:8e:65:8c:c0: d9:82:06:86:c6:20:ac:4d:e7:f1:19:10:e7:ec:a1:09:51:de: ef:aa:5d:be:45:1a:cd:20:5a:71:b3:f3:89:c2:64:55:48:b5: a8:b8:34:5f:77:2d:f8:1c:fe:44:e9:57:7d:64:60:c0:4b:73: b9:b0:d1:a1:e3:2d:b5:fa:94:18:e9:50:5b:a0:c7:27:fb:69: f2:98:9a:8c:d3:7b:3a:53:fc:0d:37:d0:ee:c3:14:e5:8b:4f: 5f:15:a0:09 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE1EMBXlSfIW1GrMmiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMyMzE4MTMyNloXDTI4MDYyNTE4MTMyNlowLzEtMCsGA1UEAxMk Y2FlMTEyYzQtMzhjYi00NGMzLWE4ZGYtNDMxNTI4MTRhODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnrBmMMATEvgDSXn7zxf9Y8ki8pNTSDpqmHU nHu6fCfpQTuU0rVUZZq4sTSuUNxG3wcB8lsN8VN5olCa3rOtMDbCn5KQzyj3jPuq 6f1jd+3MbNaDmy4PGXRYMHWJEGk1pk5iH1Gbh9NeHMZPPz/3oXtyrK/CidcHa3fO wE+pXl26A42uB07qG2EU7zk8mXKTJXL+fKuZmoyunVei/ONdZSHgyDQLUIAf0r4c 6QEivN65USTPFagMT68WGIiu9rgjmC1j8Q+1RgAyF114WGKIGsdvDNmCSPtOjiPR 6dxXuBAjrPmEW/H00GTTHTcophKZ6geFiSX+7sjjMqPLsW+/FwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFI37K3ZV508DGkHl9gaRVwrMpPJaMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j YWUxMTJjNC0zOGNiLTQ0YzMtYThkZi00MzE1MjgxNGE4OTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2NhZTExMmM0LTM4Y2ItNDRjMy1h OGRmLTQzMTUyODE0YTg5OS9jYWUxMTJjNC0zOGNiLTQ0YzMtYThkZi00MzE1Mjgx NGE4OTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAOi+8ADBAK51UQwDgQCAAIwCAMGBCYC/84AMBoG CCsGAQUFBwEIAQH/BAswCaAHMAUCAwD2KzBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBcJ4PtQlepO8F67pmw hYCO0hog3xC9it1V/poyPQHMfH9uXJPJ22uw/BA5mExbL40/gHSXHHYkIcPJLigK jlZIj2gyiI4O8s857eS3l3qhItkqwUT5RxaloZenBg6W8mA5nIfOOEILcEE4dJrD 7d2goGZ6Ab5k6113TrHpuWjnVXWfuAI7I32abZX3wbFfwvyj1BRdedpsDmcB0GL0 fI5ljMDZggaGxiCsTefxGRDn7KEJUd7vql2+RRrNIFpxs/OJwmRVSLWouDRfdy34 HP5E6Vd9ZGDAS3O5sNGh4y21+pQY6VBboMcn+2nymJqM03s6U/wNN9DuwxTli09f FaAJ -----END CERTIFICATE-----Generated at Wed Mar 25 21:22:19 2026 by rpki-client