$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94.cer File: d976d803-9006-4b37-9d12-23e5108d0e94.cer (raw, json) Hash identifier: aa62wkJnFWTXiBjEQW6o71DKYL+pp43js9Q84+9Mnv4= Subject key identifier: 78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D11935B0B5954B5F179970680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Mar 2026 15:07:13 +0000 Certificate not after: Wed 07 Jun 2028 14:07:13 +0000 Subordinate resources: AS: 401918 IP: 96.45.72.0/21 IP: 2604:1f60::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:93:5b:0b:59:54:b5:f1:79:97:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 5 15:07:13 2026 GMT Not After : Jun 7 14:07:13 2028 GMT Subject: CN=d976d803-9006-4b37-9d12-23e5108d0e94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3a:79:41:cd:c9:58:54:18:fd:1c:79:47:29: 04:64:b5:b7:f3:bc:15:83:2a:15:01:10:18:b4:76: b2:e7:ea:a4:e0:c2:3b:96:41:5c:b8:11:34:d5:1d: d3:3a:89:17:4d:1c:66:d6:c3:b6:33:e1:cf:d5:fe: ca:72:7c:a5:ef:04:19:6a:41:82:a1:4a:67:82:78: 00:a8:d6:ab:9f:03:58:98:12:c1:4c:16:85:7f:1d: 34:ee:a1:5a:ef:83:7c:74:a7:e8:2e:53:7a:b3:cd: 37:40:66:de:d6:16:54:5e:f2:fa:b5:15:45:53:79: c7:1f:e0:8d:dd:4a:24:39:db:3f:24:b4:0c:9f:eb: 98:83:88:3c:be:5b:56:19:82:a4:81:8e:c5:9a:4c: 5f:53:8e:e1:d4:d7:0c:7e:ae:26:59:22:a5:77:50: 9f:b1:fa:b9:dd:e8:f1:31:b6:fd:63:6b:f8:41:4b: 5e:bf:ca:9e:83:f9:53:a3:c9:8f:89:16:df:b7:bb: bb:b5:cd:5f:95:93:24:df:1f:46:c9:cf:96:14:7a: e4:00:d5:ce:79:f9:b7:c0:65:61:a2:ee:ca:a4:36: 10:55:29:bb:95:ad:38:49:ae:fd:b0:74:fa:79:93: 91:2e:d9:8f:a4:1b:16:35:85:f4:50:8d:c0:60:09: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E1:07:6B:F3:61:E2:7E:0E:D0:08:5C:7F:63:E4:47:5C:8C:D9:3B Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d976d803-9006-4b37-9d12-23e5108d0e94/d976d803-9006-4b37-9d12-23e5108d0e94.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 96.45.72.0/21 IPv6: 2604:1f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 401918 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:3b:e4:bd:b5:85:58:6f:ef:72:00:e2:98:48:f3:57:86:43: ea:d1:27:d1:63:85:e0:6e:0a:5a:c9:41:22:12:ad:3f:e1:62: 02:b9:c6:96:db:ee:ed:89:85:8a:64:09:13:c5:d9:cb:c7:d1: d3:95:1c:64:49:6b:6e:64:99:0c:89:14:ff:8d:c0:90:fd:78: e6:fd:13:19:f1:1c:c2:fc:7a:6e:2f:77:cf:b4:91:9b:8e:93: 80:1f:32:d5:de:09:73:b7:21:86:de:56:b9:c4:8b:ab:92:11: 84:ab:d6:a6:a4:49:56:48:36:3d:d8:c9:4e:76:9e:65:66:14: 8d:1e:cc:1a:2c:15:89:09:bd:ec:3d:d8:5f:44:be:cf:a7:74: cb:9d:c9:9b:cb:56:d2:d6:71:30:78:b2:80:02:9c:69:3f:c7: 2b:a9:e6:0a:e8:5f:bb:3f:d9:99:c3:34:5d:76:b9:31:bd:88: 28:5c:cc:5c:ad:6a:f6:21:74:1e:cd:8b:32:0c:9e:00:9d:fe: 05:94:d7:33:4b:52:14:b3:3c:8c:ad:4a:fa:07:6e:db:bb:f9: 6b:fc:64:43:92:b9:44:de:07:a2:c5:b1:6f:76:b9:5c:b5:40: 19:a3:5c:85:00:69:7f:03:50:67:6a:8c:b6:da:76:7f:7b:28: a4:f5:21:44 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE0Rk1sLWVS18XmXBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNTE1MDcxM1oXDTI4MDYwNzE0MDcxM1owLzEtMCsGA1UEAxMk ZDk3NmQ4MDMtOTAwNi00YjM3LTlkMTItMjNlNTEwOGQwZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDp5Qc3JWFQY/Rx5RykEZLW387wVgyoVARAY tHay5+qk4MI7lkFcuBE01R3TOokXTRxm1sO2M+HP1f7Kcnyl7wQZakGCoUpngngA qNarnwNYmBLBTBaFfx007qFa74N8dKfoLlN6s803QGbe1hZUXvL6tRVFU3nHH+CN 3UokOds/JLQMn+uYg4g8vltWGYKkgY7FmkxfU47h1NcMfq4mWSKld1Cfsfq53ejx Mbb9Y2v4QUtev8qeg/lTo8mPiRbft7u7tc1flZMk3x9Gyc+WFHrkANXOefm3wGVh ou7KpDYQVSm7la04Sa79sHT6eZORLtmPpBsWNYX0UI3AYAmZHwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFHjhB2vzYeJ+DtAIXH9j5EdcjNk7MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9k OTc2ZDgwMy05MDA2LTRiMzctOWQxMi0yM2U1MTA4ZDBlOTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2Q5NzZkODAzLTkwMDYtNGIzNy05 ZDEyLTIzZTUxMDhkMGU5NC9kOTc2ZDgwMy05MDA2LTRiMzctOWQxMi0yM2U1MTA4 ZDBlOTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBANgLUgwDQQCAAIwBwMFACYEH2AwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiH+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABo75L21hVhv73IA4phI81eGQ+rR J9FjheBuClrJQSISrT/hYgK5xpbb7u2JhYpkCRPF2cvH0dOVHGRJa25kmQyJFP+N wJD9eOb9ExnxHML8em4vd8+0kZuOk4AfMtXeCXO3IYbeVrnEi6uSEYSr1qakSVZI Nj3YyU52nmVmFI0ezBosFYkJvew92F9Evs+ndMudyZvLVtLWcTB4soACnGk/xyup 5groX7s/2ZnDNF12uTG9iChczFytavYhdB7NizIMngCd/gWU1zNLUhSzPIytSvoH btu7+Wv8ZEOSuUTeB6LFsW92uVy1QBmjXIUAaX8DUGdqjLbadn97KKT1IUQ= -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:53 2026 by rpki-client