$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985.cer File: e84a8059-d166-41ac-97fb-85a0f3e90985.cer (raw, json) Hash identifier: M4pB+2f4CvnwwrX2JW22oVVvWITNsBUopBFB9GGmihw= Subject key identifier: 4D:7A:C5:48:77:93:6F:EF:6A:87:CA:0A:3B:37:56:51:C7:54:3C:69 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D1497B007594248FEAC36A580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/e84a8059-d166-41ac-97fb-85a0f3e90985.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 17:03:22 +0000 Certificate not after: Thu 08 Jun 2028 16:03:22 +0000 Subordinate resources: IP: 161.199.160.0/24 IP: 2602:fd76::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:97:b0:07:59:42:48:fe:ac:36:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 6 17:03:22 2026 GMT Not After : Jun 8 16:03:22 2028 GMT Subject: CN=e84a8059-d166-41ac-97fb-85a0f3e90985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bd:ed:7a:ab:8b:b9:5f:1c:f9:7e:4b:1c:26: 4f:b1:40:2f:0b:98:e8:44:6b:48:7d:a8:32:95:16: 62:8a:1c:93:27:ac:e6:15:9a:59:8c:c9:44:92:cc: 8a:1f:00:98:9f:ca:5c:49:cb:bd:4a:d1:8f:a0:4a: 38:c7:f2:27:89:41:03:6e:e3:51:62:ff:e6:85:63: c5:24:1f:35:b9:a5:e0:ae:44:93:60:f5:55:f1:b2: d6:cd:28:ce:0c:ce:64:a7:e7:09:13:b4:02:c1:27: a0:02:22:24:fe:1c:ea:32:a3:2c:95:75:98:e1:8f: f9:cb:6a:ca:65:aa:87:a4:8c:86:6c:ce:fa:4d:78: 4d:58:4c:7b:6f:09:aa:3b:35:6b:61:66:91:b8:9b: 67:ec:dd:b0:c3:74:35:4d:db:50:1d:fb:5b:41:64: d4:ab:a9:e0:0a:7a:e8:eb:24:05:d7:a3:1f:49:e0: c9:0f:56:70:9b:5e:86:53:71:5d:3e:ff:f5:ed:d1: d6:17:f2:a0:97:7e:e0:f8:45:c4:07:f4:a6:ad:ad: 20:5c:2e:e9:08:76:65:b6:56:2a:bf:90:78:18:2d: 0d:d6:1f:2c:36:69:29:00:0f:38:de:c0:78:fa:42: ec:20:a4:ff:61:f1:e5:eb:57:6b:3a:07:db:6e:2f: 2a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7A:C5:48:77:93:6F:EF:6A:87:CA:0A:3B:37:56:51:C7:54:3C:69 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e84a8059-d166-41ac-97fb-85a0f3e90985/e84a8059-d166-41ac-97fb-85a0f3e90985.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 161.199.160.0/24 IPv6: 2602:fd76::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:1e:c7:d2:c3:f7:fe:70:c2:c0:35:bc:ac:53:08:1f:cc:3d: 77:48:ed:d0:f8:c5:e4:5a:b5:6d:9c:f4:ac:40:b7:30:ad:56: 75:3c:2f:9b:58:66:5d:61:66:27:31:b8:e4:6d:17:81:3c:e4: 12:25:32:69:ee:63:16:56:05:3d:1f:0f:cf:72:6b:29:aa:d6: ff:6e:15:bc:5f:f8:7d:8b:31:40:50:9f:32:ea:00:ca:e3:d2: 24:8b:40:47:14:a6:36:8b:17:82:1d:df:3b:32:42:94:6a:07: bf:93:7d:5a:09:64:f5:08:6c:bc:49:b0:b6:41:11:82:97:b1: 90:20:89:93:42:bf:1c:00:70:75:78:2d:e7:84:4d:54:f3:76: 36:de:cf:a1:d1:16:9b:a6:18:c8:7a:92:d8:fa:52:1b:ca:d7: f8:e5:38:a5:c8:10:74:3e:cd:e4:13:3e:47:6a:18:ef:2f:72: 11:1d:a2:14:87:d1:d6:60:bb:2f:eb:ac:ed:f8:20:e2:6d:30: 82:9a:96:8a:98:61:27:29:8c:18:be:7d:29:7a:f6:df:05:bd: 39:2a:f2:a7:17:71:9c:e6:d5:c1:04:79:29:d1:00:5c:10:ba: 0d:93:5a:3e:ea:23:29:63:51:10:42:cf:03:1a:da:aa:1d:a7: 65:5a:50:cc -----BEGIN CERTIFICATE----- MIIG/TCCBeWgAwIBAgIUAQ0Mn0MoWE0Ul7AHWUJI/qw2pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNjE3MDMyMloXDTI4MDYwODE2MDMyMlowLzEtMCsGA1UEAxMk ZTg0YTgwNTktZDE2Ni00MWFjLTk3ZmItODVhMGYzZTkwOTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr3tequLuV8c+X5LHCZPsUAvC5joRGtIfagy lRZiihyTJ6zmFZpZjMlEksyKHwCYn8pcScu9StGPoEo4x/IniUEDbuNRYv/mhWPF JB81uaXgrkSTYPVV8bLWzSjODM5kp+cJE7QCwSegAiIk/hzqMqMslXWY4Y/5y2rK ZaqHpIyGbM76TXhNWEx7bwmqOzVrYWaRuJtn7N2ww3Q1TdtQHftbQWTUq6ngCnro 6yQF16MfSeDJD1Zwm16GU3FdPv/17dHWF/Kgl37g+EXEB/Smra0gXC7pCHZltlYq v5B4GC0N1h8sNmkpAA843sB4+kLsIKT/YfHl61drOgfbbi8qwwIDAQABo4IEDzCC BAswHQYDVR0OBBYEFE16xUh3k2/vaofKCjs3VlHHVDxpMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l ODRhODA1OS1kMTY2LTQxYWMtOTdmYi04NWEwZjNlOTA5ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2U4NGE4MDU5LWQxNjYtNDFhYy05 N2ZiLTg1YTBmM2U5MDk4NS9lODRhODA1OS1kMTY2LTQxYWMtOTdmYi04NWEwZjNl OTA5ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAChx6AwDgQCAAIwCAMGBCYC/XYAMFQGA1UdIAEB /wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJp bi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEB AHIex9LD9/5wwsA1vKxTCB/MPXdI7dD4xeRatW2c9KxAtzCtVnU8L5tYZl1hZicx uORtF4E85BIlMmnuYxZWBT0fD89yaymq1v9uFbxf+H2LMUBQnzLqAMrj0iSLQEcU pjaLF4Id3zsyQpRqB7+TfVoJZPUIbLxJsLZBEYKXsZAgiZNCvxwAcHV4LeeETVTz djbez6HRFpumGMh6ktj6UhvK1/jlOKXIEHQ+zeQTPkdqGO8vchEdohSH0dZguy/r rO34IOJtMIKaloqYYScpjBi+fSl69t8FvTkq8qcXcZzm1cEEeSnRAFwQug2TWj7q IyljURBCzwMa2qodp2VaUMw= -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:44 2026 by rpki-client