$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f19c1697-6f03-4ecf-a34f-b6e24213bb9f.cer File: f19c1697-6f03-4ecf-a34f-b6e24213bb9f.cer (raw, json) Hash identifier: qdYUCPnPYCSnlZmV6cEjmiT7Ox8irMz9v8UgxUFVZQs= Subject key identifier: DB:7B:66:84:FF:CF:91:3D:CD:05:DC:CD:F2:D3:E7:24:C6:20:09:54 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D11C182232D3121B99ECED680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f19c1697-6f03-4ecf-a34f-b6e24213bb9f/f19c1697-6f03-4ecf-a34f-b6e24213bb9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f19c1697-6f03-4ecf-a34f-b6e24213bb9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 05 Mar 2026 16:40:13 +0000 Certificate not after: Wed 07 Jun 2028 15:40:13 +0000 Subordinate resources: IP: 208.88.70.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:c1:82:23:2d:31:21:b9:9e:ce:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 5 16:40:13 2026 GMT Not After : Jun 7 15:40:13 2028 GMT Subject: CN=f19c1697-6f03-4ecf-a34f-b6e24213bb9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:90:ec:a5:5e:2d:dc:46:f6:ef:68:97:29: d1:e6:7e:3f:25:92:ec:ad:44:90:e0:94:12:8c:25: 40:bc:aa:88:e6:cf:83:93:ea:80:62:70:40:36:86: a0:5d:91:83:e1:2b:ac:b2:5e:b5:a7:9c:3c:eb:8a: 14:5b:27:ac:ff:9d:2f:71:9d:88:3d:4b:b0:44:36: 72:df:83:11:50:62:bb:7c:02:0d:bb:a2:ee:43:dd: 45:45:38:3e:8e:96:d6:4d:4d:f6:ae:47:67:7c:e2: 60:ed:35:9a:1b:f1:f7:13:da:4c:d9:98:06:2f:23: 9a:7e:d5:66:93:ad:ce:7a:76:2c:fd:eb:54:cb:de: c6:39:ea:bd:97:38:17:f4:5f:d2:5f:3f:59:e8:ec: 9d:68:b4:ce:bc:13:8a:0c:fb:11:a6:9b:5b:1a:5b: db:7c:71:a5:fb:c4:0f:9f:a9:16:b1:e5:8d:2b:76: ca:3f:b4:40:30:95:30:c0:d4:ee:6d:7f:a7:d0:9c: 95:f6:11:08:0c:8d:a9:4f:6e:96:cd:5f:ae:59:4c: f3:9a:a3:35:9e:5b:8a:77:b2:0b:a4:2d:6c:8e:82: e8:66:c4:44:1a:00:18:45:44:b4:ab:da:4b:2f:a5: 4e:9b:f1:63:e4:72:03:0a:1e:2b:9f:93:3f:c6:1d: 98:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7B:66:84:FF:CF:91:3D:CD:05:DC:CD:F2:D3:E7:24:C6:20:09:54 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f19c1697-6f03-4ecf-a34f-b6e24213bb9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f19c1697-6f03-4ecf-a34f-b6e24213bb9f/f19c1697-6f03-4ecf-a34f-b6e24213bb9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 208.88.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:49:c8:58:4c:41:dc:4c:ec:a9:42:37:46:0c:f3:16:1b:6a: 76:2d:49:4c:7e:1d:53:4b:7c:10:5b:c6:cc:7a:a0:73:9c:31: 30:c0:84:89:e5:b0:fc:e4:f3:c7:e0:a1:6c:63:73:a4:59:c3: f3:aa:37:ce:29:99:29:68:79:d6:7c:95:29:c5:5f:62:72:6a: 46:60:c1:85:80:a6:66:21:c2:a3:69:7d:73:af:d5:64:00:c8: 9e:9c:f9:8f:c3:bd:2f:1d:d5:29:73:e1:a7:cd:1c:bc:82:14: ec:69:27:4a:97:d6:6f:19:a7:64:ac:86:be:7e:7d:74:7b:c5: 80:9a:bb:28:d6:9f:df:ee:db:a2:94:c2:22:b0:99:7f:cb:46: 4e:f2:39:95:65:b1:a8:2d:2b:09:79:a2:a7:90:a5:26:5d:8b: 33:cb:56:ca:9a:ba:c9:23:ae:20:f1:b3:77:61:d0:bd:a3:13: 93:4b:59:6c:2b:88:44:9a:ad:f7:7d:3d:6f:00:86:4a:15:74: 38:7d:3e:8a:e4:c3:10:f2:c4:bc:99:89:9e:3f:8b:33:4e:0e: be:ff:38:ab:b8:1a:da:f9:59:11:0a:b2:b7:7a:47:d8:12:d9: e2:66:b5:30:84:74:9e:0a:b3:74:11:16:b7:7f:77:39:86:9c: dd:1e:44:bb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0RwYIjLTEhuZ7O1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNTE2NDAxM1oXDTI4MDYwNzE1NDAxM1owLzEtMCsGA1UEAxMk ZjE5YzE2OTctNmYwMy00ZWNmLWEzNGYtYjZlMjQyMTNiYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJuQ7KVeLdxG9u9olynR5n4/JZLsrUSQ4JQS jCVAvKqI5s+Dk+qAYnBANoagXZGD4Sussl61p5w864oUWyes/50vcZ2IPUuwRDZy 34MRUGK7fAINu6LuQ91FRTg+jpbWTU32rkdnfOJg7TWaG/H3E9pM2ZgGLyOaftVm k63OenYs/etUy97GOeq9lzgX9F/SXz9Z6OydaLTOvBOKDPsRpptbGlvbfHGl+8QP n6kWseWNK3bKP7RAMJUwwNTubX+n0JyV9hEIDI2pT26WzV+uWUzzmqM1nluKd7IL pC1sjoLoZsREGgAYRUS0q9pLL6VOm/Fj5HIDCh4rn5M/xh2YVQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFNt7ZoT/z5E9zQXczfLT5yTGIAlUMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m MTljMTY5Ny02ZjAzLTRlY2YtYTM0Zi1iNmUyNDIxM2JiOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2YxOWMxNjk3LTZmMDMtNGVjZi1h MzRmLWI2ZTI0MjEzYmI5Zi9mMTljMTY5Ny02ZjAzLTRlY2YtYTM0Zi1iNmUyNDIx M2JiOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADQWEYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADUnIWExB3EzsqUI3Rgzz Fhtqdi1JTH4dU0t8EFvGzHqgc5wxMMCEieWw/OTzx+ChbGNzpFnD86o3zimZKWh5 1nyVKcVfYnJqRmDBhYCmZiHCo2l9c6/VZADInpz5j8O9Lx3VKXPhp80cvIIU7Gkn SpfWbxmnZKyGvn59dHvFgJq7KNaf3+7bopTCIrCZf8tGTvI5lWWxqC0rCXmip5Cl Jl2LM8tWypq6ySOuIPGzd2HQvaMTk0tZbCuIRJqt9309bwCGShV0OH0+iuTDEPLE vJmJnj+LM04Ovv84q7ga2vlZEQqyt3pH2BLZ4ma1MIR0ngqzdBEWt393OYac3R5E uw== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:59 2026 by rpki-client