$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.cer File: ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.cer (raw, json) Hash identifier: 9KYU/oe4+O4/lEbYYbHtN+MOctVSDdJId2oKG7gNW0I= Subject key identifier: CC:42:C3:CE:85:EB:3E:F3:3F:67:00:95:CB:5E:92:64:C1:67:1F:EC Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D1CD892D612EA402BF4F89080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 09 Mar 2026 16:00:35 +0000 Certificate not after: Sun 11 Jun 2028 16:00:35 +0000 Subordinate resources: AS: 1656 AS: 14531 AS: 54959 IP: 129.218.0.0/16 IP: 130.72.0.0/16 IP: 134.133.0.0/16 IP: 140.76.0.0/16 IP: 141.240.0.0/16 IP: 146.69.0.0/16 IP: 147.170.0.0/16 IP: 162.16.0.0/16 IP: 164.101.0.0/16 IP: 166.17.0.0 -- 166.18.255.255 IP: 166.21.0.0 -- 166.31.255.255 IP: 192.30.247.0/24 IP: 192.31.92.0/24 IP: 192.35.21.0 -- 192.35.24.255 IP: 198.177.239.0 -- 198.177.240.255 IP: 199.26.226.0/23 IP: 199.201.199.0/24 IP: 2620:58::/40 IP: 2620:141::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1c:d8:92:d6:12:ea:40:2b:f4:f8:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 9 16:00:35 2026 GMT Not After : Jun 11 16:00:35 2028 GMT Subject: CN=ee6d5b49-4a20-434b-9e90-b7d78b27ebf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:4d:9f:3b:15:b2:70:78:58:95:7f:cc:18: 93:0b:4e:36:21:42:a2:fa:a2:c2:a2:a7:79:b5:86: 0c:ed:e7:42:b9:0a:72:81:fe:82:8a:4b:0b:b0:81: 69:54:3e:ba:3f:6e:8c:12:b8:6a:81:01:ed:a6:33: e5:b7:86:3a:eb:0c:5e:75:f8:0b:2a:16:94:8f:11: c6:b4:89:3f:8c:9f:8d:4a:a3:72:de:5c:6a:80:f2: e9:6d:2e:f5:f3:fe:ac:55:ca:c4:d4:4e:c1:bb:62: 18:70:0d:25:f1:e2:e2:17:af:e2:ec:a2:9f:e1:2a: de:04:a2:01:66:cb:06:fc:7a:61:71:d2:29:db:1b: af:1e:49:21:12:e1:0e:53:c1:33:9e:c9:b9:c6:4d: 65:b4:b3:38:d7:68:62:61:60:30:b1:9d:4a:9a:69: 48:29:81:87:50:94:c0:63:1a:6b:c5:9a:39:89:75: 7c:b6:ce:02:b8:a9:40:42:a7:21:4c:a4:2b:74:c8: 17:6e:46:b6:42:8e:bb:b6:c6:52:cb:1a:7d:23:7f: 86:b7:23:f2:1d:20:a9:1c:63:6b:11:94:0d:fb:56: 64:91:0c:3c:68:a7:a3:78:63:dc:4b:95:4b:37:2d: 35:88:4a:d7:d8:2e:0e:7c:5a:4b:47:ef:5d:0c:e9: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:42:C3:CE:85:EB:3E:F3:3F:67:00:95:CB:5E:92:64:C1:67:1F:EC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1/ee6d5b49-4a20-434b-9e90-b7d78b27ebf1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 129.218.0.0/16 130.72.0.0/16 134.133.0.0/16 140.76.0.0/16 141.240.0.0/16 146.69.0.0/16 147.170.0.0/16 162.16.0.0/16 164.101.0.0/16 166.17.0.0-166.18.255.255 166.21.0.0-166.31.255.255 192.30.247.0/24 192.31.92.0/24 192.35.21.0-192.35.24.255 198.177.239.0-198.177.240.255 199.26.226.0/23 199.201.199.0/24 IPv6: 2620:58::/40 2620:141::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 1656 14531 54959 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:9f:02:95:04:b7:f8:72:ac:2d:db:fc:08:1f:0f:7f:1f:3d: f3:9a:fe:e5:9f:9c:b6:5a:06:23:04:92:e6:0b:94:37:54:f8: 4d:ba:f6:81:c2:83:f2:20:5d:e3:b4:38:96:e4:6a:b3:63:58: 5b:89:0b:9e:fb:12:f0:47:56:9a:13:b0:20:24:a4:ed:f8:76: b0:da:73:95:4a:6d:58:64:8e:85:1f:c5:2d:b2:bb:e2:27:15: 4e:9a:8e:ba:c4:aa:e8:1d:59:1e:65:cb:45:09:50:f9:2e:25: 62:2f:75:29:6e:49:d0:db:7d:30:ff:ad:95:fc:c8:86:9c:d4: 47:08:26:de:1a:64:58:a6:f3:09:d9:3e:7d:53:a4:ca:c0:ef: 56:67:99:20:73:6c:9a:a6:fc:0b:22:0b:6c:a5:35:80:20:66: 07:e4:53:13:38:4c:34:14:0d:98:3a:e0:4d:94:5d:d0:0a:be: 66:0c:87:7e:fe:94:e5:f8:5e:78:76:84:65:61:3b:1a:7c:cc: 45:8c:7e:4e:50:2c:1b:32:06:75:c7:60:b7:e8:c7:03:24:14: 08:6a:bd:21:4c:3b:8a:a7:05:01:c9:7c:5e:96:cd:e0:69:0c: a1:93:09:e8:0c:d5:02:be:de:13:1b:ad:1b:66:83:51:94:83: ce:6f:8b:82 -----BEGIN CERTIFICATE----- MIIHnzCCBoegAwIBAgIUAQ0Mn0MoWE0c2JLWEupAK/T4kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwOTE2MDAzNVoXDTI4MDYxMTE2MDAzNVowLzEtMCsGA1UEAxMk ZWU2ZDViNDktNGEyMC00MzRiLTllOTAtYjdkNzhiMjdlYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm31NnzsVsnB4WJV/zBiTC042IUKi+qLCoqd5 tYYM7edCuQpygf6CiksLsIFpVD66P26MErhqgQHtpjPlt4Y66wxedfgLKhaUjxHG tIk/jJ+NSqNy3lxqgPLpbS718/6sVcrE1E7Bu2IYcA0l8eLiF6/i7KKf4SreBKIB ZssG/HphcdIp2xuvHkkhEuEOU8Eznsm5xk1ltLM412hiYWAwsZ1KmmlIKYGHUJTA YxprxZo5iXV8ts4CuKlAQqchTKQrdMgXbka2Qo67tsZSyxp9I3+GtyPyHSCpHGNr EZQN+1ZkkQw8aKejeGPcS5VLNy01iErX2C4OfFpLR+9dDOkcKQIDAQABo4IEsTCC BK0wHQYDVR0OBBYEFMxCw86F6z7zP2cAlctekmTBZx/sMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l ZTZkNWI0OS00YTIwLTQzNGItOWU5MC1iN2Q3OGIyN2ViZjEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2VlNmQ1YjQ5LTRhMjAtNDM0Yi05 ZTkwLWI3ZDc4YjI3ZWJmMS9lZTZkNWI0OS00YTIwLTQzNGItOWU5MC1iN2Q3OGIy N2ViZjEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwgawGCCsGAQUF BwEHAQH/BIGcMIGZMH8EAgABMHkDAwCB2gMDAIJIAwMAhoUDAwCMTAMDAI3wAwMA kkUDAwCTqgMDAKIQAwMApGUwCgMDAKYRAwMAphIwCgMDAKYVAwMFpgADBADAHvcD BADAH1wwDAMEAMAjFQMEAMAjGDAMAwQAxrHvAwQAxrHwAwQBxxriAwQAx8nHMBYE AgACMBADBgAmIABYAAMGBCYgAUEAMCIGCCsGAQUFBwEIAQH/BBMwEaAPMA0CAgZ4 AgI4wwIDANavMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAD+fApUEt/hyrC3b/AgfD38fPfOa/uWfnLZaBiME kuYLlDdU+E269oHCg/IgXeO0OJbkarNjWFuJC577EvBHVpoTsCAkpO34drDac5VK bVhkjoUfxS2yu+InFU6ajrrEqugdWR5ly0UJUPkuJWIvdSluSdDbfTD/rZX8yIac 1EcIJt4aZFim8wnZPn1TpMrA71ZnmSBzbJqm/AsiC2ylNYAgZgfkUxM4TDQUDZg6 4E2UXdAKvmYMh37+lOX4Xnh2hGVhOxp8zEWMfk5QLBsyBnXHYLfoxwMkFAhqvSFM O4qnBQHJfF6WzeBpDKGTCegM1QK+3hMbrRtmg1GUg85vi4I= -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:52 2026 by rpki-client