$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ebfd3d86-12b0-4eb0-8eab-6df9bbeede72.cer File: ebfd3d86-12b0-4eb0-8eab-6df9bbeede72.cer (raw, json) Hash identifier: IM9wGauBRgE+FhUDatNtgTpa+32Pm7JI31iVnNN8MkY= Subject key identifier: AC:DC:3D:31:E3:81:2F:CC:1C:C0:B8:0A:61:42:0C:A7:BA:9D:DE:83 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D89BA82FED4D4EAEA2592AD60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ebfd3d86-12b0-4eb0-8eab-6df9bbeede72/ebfd3d86-12b0-4eb0-8eab-6df9bbeede72.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ebfd3d86-12b0-4eb0-8eab-6df9bbeede72/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 17 Apr 2026 16:03:07 +0000 Certificate not after: Thu 20 Jul 2028 16:03:07 +0000 Subordinate resources: AS: 6922 IP: 141.198.0.0/16 IP: 168.32.0.0 -- 168.60.255.255 IP: 204.64.0.0/14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:ba:82:fe:d4:d4:ea:ea:25:92:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 17 16:03:07 2026 GMT Not After : Jul 20 16:03:07 2028 GMT Subject: CN=ebfd3d86-12b0-4eb0-8eab-6df9bbeede72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:b9:fd:9f:53:59:b8:2e:0e:d6:74:1b:75: e0:7f:7d:a7:91:44:79:8d:b2:23:b0:f3:13:e1:d5: 81:2a:2c:b9:9f:7c:80:64:79:0f:cf:5a:a6:2d:a7: 21:e9:fb:de:2b:d9:cc:13:19:93:52:1a:00:e5:9b: 66:06:09:13:74:3d:c0:e0:03:5c:da:0c:4a:b5:ec: 9a:9b:97:64:c3:30:c7:be:46:c6:30:56:13:60:d5: f6:65:20:c0:89:ac:9b:6e:1d:8a:ef:6d:ed:b4:09: b8:a5:bf:f2:ee:79:5f:08:13:30:21:36:c9:5c:4e: fd:0d:64:b1:ba:1d:af:f2:8e:c9:87:82:7d:78:f5: 47:8b:cd:57:61:4e:51:36:61:fa:4a:f7:3e:e4:6e: 45:bd:8f:bf:52:b3:06:2a:84:52:ff:c4:c0:45:c0: 46:75:98:0e:d9:f2:1a:56:5d:df:38:d8:12:c0:42: 40:61:8d:d8:27:f7:86:9d:57:b0:c4:81:fc:10:63: 69:24:5b:3a:f9:10:0b:19:d2:07:d3:2c:5e:d1:e2: 54:2d:59:4f:e8:fa:ea:54:45:f8:16:5e:69:a1:27: 77:e3:cd:a8:05:13:2c:e5:b4:1c:fd:b1:32:0e:61: 3c:56:eb:fd:26:db:cf:b6:2a:b5:0e:ee:a6:fb:74: c6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:DC:3D:31:E3:81:2F:CC:1C:C0:B8:0A:61:42:0C:A7:BA:9D:DE:83 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ebfd3d86-12b0-4eb0-8eab-6df9bbeede72/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ebfd3d86-12b0-4eb0-8eab-6df9bbeede72/ebfd3d86-12b0-4eb0-8eab-6df9bbeede72.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 141.198.0.0/16 168.32.0.0-168.60.255.255 204.64.0.0/14 sbgp-autonomousSysNum: critical Autonomous System Numbers: 6922 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e7:19:6d:7e:98:d8:47:81:8c:ba:89:ce:b5:3d:37:7c:96: ce:58:25:f1:0b:f4:97:d1:bd:91:5a:69:f7:b1:89:dd:d8:59: 07:c7:15:50:a7:3c:f6:bf:53:c7:df:01:70:4a:3d:a0:5f:51: b6:f1:66:4d:61:80:9a:11:d1:60:c9:aa:02:d0:2b:f3:b4:fb: 08:d6:ab:c4:ea:07:31:c2:6e:94:6e:f8:18:0c:04:ef:a1:da: ca:f8:92:30:dd:f5:39:b9:8a:90:19:f0:b5:89:1f:c4:26:a9: 39:9d:88:69:09:7e:6e:5f:7d:3c:dc:16:e9:d8:3f:14:92:02: 08:86:35:75:49:97:ce:9c:7e:19:d2:a4:a8:15:59:bd:0c:66: 21:d2:64:d9:20:97:02:19:e6:b8:02:ca:0f:07:1e:e9:78:37: af:c2:f6:42:5d:6d:f6:1a:eb:d4:8a:7b:8c:3e:e8:76:4c:02: 1d:1a:72:16:94:f5:0b:8a:45:20:47:71:ad:be:8f:48:35:a4: 70:e3:85:46:87:ab:62:32:c7:37:d6:4d:ae:3c:4c:7a:b5:4f: e9:a8:61:c2:cc:90:d2:52:99:d8:f1:d3:9d:2c:8f:e0:18:46: ea:90:1a:a4:45:dd:b5:92:40:a1:d0:41:60:a5:dc:88:94:90: bc:3e:ed:22 -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWE2JuoL+1NTq6iWSrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxNzE2MDMwN1oXDTI4MDcyMDE2MDMwN1owLzEtMCsGA1UEAxMk ZWJmZDNkODYtMTJiMC00ZWIwLThlYWItNmRmOWJiZWVkZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6am5/Z9TWbguDtZ0G3Xgf32nkUR5jbIjsPMT 4dWBKiy5n3yAZHkPz1qmLach6fveK9nMExmTUhoA5ZtmBgkTdD3A4ANc2gxKteya m5dkwzDHvkbGMFYTYNX2ZSDAiaybbh2K723ttAm4pb/y7nlfCBMwITbJXE79DWSx uh2v8o7Jh4J9ePVHi81XYU5RNmH6Svc+5G5FvY+/UrMGKoRS/8TARcBGdZgO2fIa Vl3fONgSwEJAYY3YJ/eGnVewxIH8EGNpJFs6+RALGdIH0yxe0eJULVlP6PrqVEX4 Fl5poSd3482oBRMs5bQc/bEyDmE8Vuv9JtvPtiq1Du6m+3TGewIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFKzcPTHjgS/MHMC4CmFCDKe6nd6DMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l YmZkM2Q4Ni0xMmIwLTRlYjAtOGVhYi02ZGY5YmJlZWRlNzIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2ViZmQzZDg2LTEyYjAtNGViMC04 ZWFiLTZkZjliYmVlZGU3Mi9lYmZkM2Q4Ni0xMmIwLTRlYjAtOGVhYi02ZGY5YmJl ZWRlNzIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMBwEAgABMBYDAwCNxjAKAwMFqCADAwCoPAMDAsxAMBkGCCsGAQUF BwEIAQH/BAowCKAGMAQCAhsKMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA3nGW1+mNhHgYy6ic61PTd8ls5Y JfEL9JfRvZFaafexid3YWQfHFVCnPPa/U8ffAXBKPaBfUbbxZk1hgJoR0WDJqgLQ K/O0+wjWq8TqBzHCbpRu+BgMBO+h2sr4kjDd9Tm5ipAZ8LWJH8QmqTmdiGkJfm5f fTzcFunYPxSSAgiGNXVJl86cfhnSpKgVWb0MZiHSZNkglwIZ5rgCyg8HHul4N6/C 9kJdbfYa69SKe4w+6HZMAh0achaU9QuKRSBHca2+j0g1pHDjhUaHq2IyxzfWTa48 THq1T+moYcLMkNJSmdjx050sj+AYRuqQGqRF3bWSQKHQQWCl3IiUkLw+7SI= -----END CERTIFICATE-----Generated at Wed May 13 00:45:14 2026 by rpki-client