$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99.cer File: d041dd54-b389-4aef-92a6-9d7a8fd91e99.cer (raw, json) Hash identifier: d9zcipAkKqE4d2TsPd6PlpAAjft4QSA0VoeVL1yRoiw= Subject key identifier: 19:1C:DA:70:60:DF:67:F2:02:E5:63:DA:D8:C9:5C:5F:A1:77:D9:9B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D11856E8F6DF18A81EF9A7380 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/d041dd54-b389-4aef-92a6-9d7a8fd91e99.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Mar 2026 14:39:10 +0000 Certificate not after: Wed 07 Jun 2028 13:39:10 +0000 Subordinate resources: AS: 54049 IP: 199.66.112.0/22 IP: 2620:cd:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:85:6e:8f:6d:f1:8a:81:ef:9a:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 5 14:39:10 2026 GMT Not After : Jun 7 13:39:10 2028 GMT Subject: CN=d041dd54-b389-4aef-92a6-9d7a8fd91e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:cc:73:0f:be:9f:72:93:6b:a5:2c:9f:53: c0:22:54:25:a7:d2:3c:c1:d1:62:06:4a:03:a0:9b: 7b:e9:d3:60:59:31:a1:50:a2:ea:6d:ab:1f:65:1c: f2:fc:58:a1:24:00:2f:83:68:ec:1b:e2:6b:58:64: 4d:57:bb:10:f5:cb:5a:7a:e3:4c:d6:b4:42:2f:af: 6a:db:0b:8f:ac:f4:0b:b9:19:33:cd:11:10:71:04: bb:78:12:e4:ec:5d:29:b6:a1:e5:32:a9:63:eb:1a: 18:b3:f6:f6:e2:49:87:8b:71:3a:4c:f9:d6:3d:28: 09:1a:2a:e7:6f:d5:c5:35:68:c3:cc:19:c7:b2:0e: 8e:f3:42:18:86:0b:f3:c4:79:4f:71:d7:d9:98:ad: 6b:c8:85:c4:bc:bd:59:0a:ef:7e:48:3f:e3:f9:31: 13:88:dc:b9:df:d5:35:59:25:c3:6a:99:ec:4d:c0: da:99:b0:43:88:d8:55:c4:4c:81:fa:91:cc:a4:84: 9a:eb:bc:45:47:84:34:39:57:33:6d:ab:24:8e:b5: 5e:ce:ce:c2:8e:0d:93:88:85:fc:e4:80:a4:7b:ae: 08:bb:67:ea:3f:be:20:02:e5:95:2e:3f:d5:d7:ae: c3:5b:1a:31:f9:c8:d0:18:cc:8e:60:2e:af:30:82: 7a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1C:DA:70:60:DF:67:F2:02:E5:63:DA:D8:C9:5C:5F:A1:77:D9:9B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d041dd54-b389-4aef-92a6-9d7a8fd91e99/d041dd54-b389-4aef-92a6-9d7a8fd91e99.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 199.66.112.0/22 IPv6: 2620:cd:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 54049 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f4:c6:e0:e8:13:6a:3d:50:7d:e7:ce:21:a8:b9:73:fd:96: 0b:26:b5:dc:c8:77:20:34:e2:81:ee:a1:3e:23:0e:95:b2:f7: b1:0a:6f:a9:69:14:6f:a5:3b:da:bf:4e:4d:75:a1:bf:1b:ca: da:08:8a:71:52:c8:3c:65:6f:d5:90:3d:29:df:6d:56:ac:4d: 3c:37:0f:bb:3a:35:27:5b:5c:6c:f6:f3:f5:e3:95:7b:04:d4: c0:66:2a:14:d6:73:95:13:94:9b:f4:6d:d8:81:04:5f:3f:08: f2:c0:1a:c1:0b:70:b4:9e:f9:2f:bf:1c:f8:8b:91:93:50:99: 7c:e2:89:57:c5:43:ee:44:03:fe:2c:e6:52:94:2c:cf:6d:28: c6:c4:b2:fc:cc:a4:9f:e8:d2:10:97:cb:41:fd:a9:da:41:2c: d1:bb:bf:69:81:55:06:9d:1f:56:9b:9c:88:05:49:6c:e8:b7: c4:fb:6e:d9:f8:b2:3f:af:82:1d:00:48:87:ac:b1:a1:75:01: 4b:b6:7b:b6:09:a8:84:ad:a4:51:39:de:01:94:2b:61:2a:ec: e0:94:b4:42:14:76:f0:0b:8d:1d:ef:eb:71:55:dc:ec:30:bc: 35:c3:da:99:1d:a7:ba:78:51:20:1f:d8:9b:2a:09:1f:1f:94: 2d:6a:23:41 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE0RhW6PbfGKge+ac4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNTE0MzkxMFoXDTI4MDYwNzEzMzkxMFowLzEtMCsGA1UEAxMk ZDA0MWRkNTQtYjM4OS00YWVmLTkyYTYtOWQ3YThmZDkxZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fDMcw++n3KTa6Usn1PAIlQlp9I8wdFiBkoD oJt76dNgWTGhUKLqbasfZRzy/FihJAAvg2jsG+JrWGRNV7sQ9ctaeuNM1rRCL69q 2wuPrPQLuRkzzREQcQS7eBLk7F0ptqHlMqlj6xoYs/b24kmHi3E6TPnWPSgJGirn b9XFNWjDzBnHsg6O80IYhgvzxHlPcdfZmK1ryIXEvL1ZCu9+SD/j+TETiNy539U1 WSXDapnsTcDambBDiNhVxEyB+pHMpISa67xFR4Q0OVczbaskjrVezs7Cjg2TiIX8 5ICke64Iu2fqP74gAuWVLj/V167DWxox+cjQGMyOYC6vMIJ6CwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFBkc2nBg32fyAuVj2tjJXF+hd9mbMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9k MDQxZGQ1NC1iMzg5LTRhZWYtOTJhNi05ZDdhOGZkOTFlOTkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2QwNDFkZDU0LWIzODktNGFlZi05 MmE2LTlkN2E4ZmQ5MWU5OS9kMDQxZGQ1NC1iMzg5LTRhZWYtOTJhNi05ZDdhOGZk OTFlOTkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBALHQnAwDwQCAAIwCQMHACYgAM2AADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMA0yEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAePTG4OgTaj1QfefOIai5c/2W Cya13Mh3IDTige6hPiMOlbL3sQpvqWkUb6U72r9OTXWhvxvK2giKcVLIPGVv1ZA9 Kd9tVqxNPDcPuzo1J1tcbPbz9eOVewTUwGYqFNZzlROUm/Rt2IEEXz8I8sAawQtw tJ75L78c+IuRk1CZfOKJV8VD7kQD/izmUpQsz20oxsSy/Mykn+jSEJfLQf2p2kEs 0bu/aYFVBp0fVpuciAVJbOi3xPtu2fiyP6+CHQBIh6yxoXUBS7Z7tgmohK2kUTne AZQrYSrs4JS0QhR28AuNHe/rcVXc7DC8NcPamR2nunhRIB/YmyoJHx+ULWojQQ== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:50 2026 by rpki-client