$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585.cer File: f3791260-c6aa-4ddb-bc66-b93e15492585.cer (raw, json) Hash identifier: bGxBMrhSw5xqUia/KEVu91+fIOCnrxzjCTIBloLlgG0= Subject key identifier: A9:E5:01:48:85:8E:58:6B:E0:5C:84:C5:8C:4C:B3:BD:5F:DE:B1:81 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D146CE66650F8E0A6B9EACAC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/f3791260-c6aa-4ddb-bc66-b93e15492585.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 15:37:10 +0000 Certificate not after: Thu 08 Jun 2028 14:37:10 +0000 Subordinate resources: IP: 198.56.8.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6c:e6:66:50:f8:e0:a6:b9:ea:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 6 15:37:10 2026 GMT Not After : Jun 8 14:37:10 2028 GMT Subject: CN=f3791260-c6aa-4ddb-bc66-b93e15492585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:32:59:bb:44:cf:c0:64:ce:fa:7e:c0:4a: 4e:38:f2:6f:ce:e8:7d:3e:a1:d3:12:ce:72:0f:8b: 28:84:a3:d8:7d:56:48:06:da:ec:fa:04:ed:a3:4e: 33:cf:92:79:b2:ba:48:af:8f:9e:a7:64:06:a9:98: 54:2d:a7:30:11:95:4b:32:81:51:f1:5f:05:82:fb: 98:96:09:fd:70:fb:e1:d3:95:93:4d:ec:45:4b:59: 36:11:7b:d5:eb:35:d4:6e:a1:56:be:7a:54:d1:4d: 6c:36:ef:47:3b:c0:24:ec:dc:b1:09:1b:d5:7c:f3: d1:ae:04:92:0e:b3:a3:53:e6:38:31:f2:4a:90:c4: 70:f8:a7:d9:da:3d:20:ef:dc:70:e6:6a:57:bb:d7: ca:f5:55:36:6c:5e:2f:33:5a:5f:f7:de:88:79:4a: 26:7f:2a:e5:ce:66:1e:5e:f9:db:f3:7a:f1:94:b3: 03:f2:ff:be:9f:42:55:e0:5b:f9:1e:62:96:b8:6d: f9:43:9b:84:e9:4f:a4:ea:5e:ff:3b:3c:0e:dd:e7: c7:7f:71:c5:d4:ef:d4:59:2d:05:7f:aa:ad:95:99: 12:10:fb:43:b0:29:e3:f5:22:55:91:4a:88:9b:8f: af:8a:a8:f5:6b:6b:9b:9b:22:5a:97:c3:a0:76:db: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E5:01:48:85:8E:58:6B:E0:5C:84:C5:8C:4C:B3:BD:5F:DE:B1:81 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f3791260-c6aa-4ddb-bc66-b93e15492585/f3791260-c6aa-4ddb-bc66-b93e15492585.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 198.56.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f3:bd:e8:1b:57:57:ed:41:c7:ec:95:0d:ee:88:1f:10:81: 52:d3:0b:1e:05:97:98:81:7d:f2:1a:24:57:ec:64:be:78:8f: dc:d1:70:67:27:46:ab:ef:57:13:7b:79:01:53:fd:16:d0:28: ef:73:ce:4e:61:43:8b:a9:71:7f:a5:8f:3e:6c:bc:c2:0f:2e: e6:cb:ce:57:de:da:76:a4:99:c8:68:05:fc:b0:09:f8:a2:9b: 77:e8:80:6b:51:b5:bf:eb:03:8e:e1:3c:f2:65:d4:6d:24:52: 35:f0:91:65:23:89:3e:13:db:9e:4a:20:a5:94:a5:da:2f:5a: 59:3e:06:ac:7b:d8:b1:68:ed:3e:78:d2:aa:a1:20:4e:3c:f7: 06:bf:5c:63:8b:b0:93:17:86:95:c7:86:5f:1f:dd:7f:0c:1f: a6:f7:ef:76:82:ba:a5:b4:5d:61:51:ed:fd:b7:a8:ca:51:bb: b6:b9:62:df:57:11:76:16:7e:2f:d2:47:60:53:e9:e6:e9:9f: f3:6f:c1:68:da:da:9b:ba:63:33:0b:b1:72:58:e7:06:7a:b0: 33:ae:be:ea:fc:f9:18:99:28:d0:6e:dc:48:d9:c3:31:47:bf: 75:e8:fb:57:7d:45:99:da:df:d2:72:47:eb:cd:84:2a:f5:42: 6a:35:e0:2e -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0UbOZmUPjgprnqysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNjE1MzcxMFoXDTI4MDYwODE0MzcxMFowLzEtMCsGA1UEAxMk ZjM3OTEyNjAtYzZhYS00ZGRiLWJjNjYtYjkzZTE1NDkyNTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs8yWbtEz8Bkzvp+wEpOOPJvzuh9PqHTEs5y D4sohKPYfVZIBtrs+gTto04zz5J5srpIr4+ep2QGqZhULacwEZVLMoFR8V8FgvuY lgn9cPvh05WTTexFS1k2EXvV6zXUbqFWvnpU0U1sNu9HO8Ak7NyxCRvVfPPRrgSS DrOjU+Y4MfJKkMRw+KfZ2j0g79xw5mpXu9fK9VU2bF4vM1pf996IeUomfyrlzmYe Xvnb83rxlLMD8v++n0JV4Fv5HmKWuG35Q5uE6U+k6l7/OzwO3efHf3HF1O/UWS0F f6qtlZkSEPtDsCnj9SJVkUqIm4+viqj1a2ubmyJal8OgdttchQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKnlAUiFjlhr4FyExYxMs71f3rGBMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m Mzc5MTI2MC1jNmFhLTRkZGItYmM2Ni1iOTNlMTU0OTI1ODUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2YzNzkxMjYwLWM2YWEtNGRkYi1i YzY2LWI5M2UxNTQ5MjU4NS9mMzc5MTI2MC1jNmFhLTRkZGItYmM2Ni1iOTNlMTU0 OTI1ODUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPGOAgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAZfO96BtXV+1Bx+yVDe6I HxCBUtMLHgWXmIF98hokV+xkvniP3NFwZydGq+9XE3t5AVP9FtAo73POTmFDi6lx f6WPPmy8wg8u5svOV97adqSZyGgF/LAJ+KKbd+iAa1G1v+sDjuE88mXUbSRSNfCR ZSOJPhPbnkogpZSl2i9aWT4GrHvYsWjtPnjSqqEgTjz3Br9cY4uwkxeGlceGXx/d fwwfpvfvdoK6pbRdYVHt/beoylG7trli31cRdhZ+L9JHYFPp5umf82/BaNram7pj MwuxcljnBnqwM66+6vz5GJko0G7cSNnDMUe/dej7V31Fmdrf0nJH682EKvVCajXg Lg== -----END CERTIFICATE-----Generated at Wed Mar 25 22:49:55 2026 by rpki-client