$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f.cer File: 01def58b-19a6-4ba2-b063-220466ef629f.cer (raw, json) Hash identifier: C5nkw01Ii3CgzbFaQ7b55nNFrk4g0M71jFoq9SnEUGs= Subject key identifier: 2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584E7C5F0CA7B2873C001F248300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 13 Jul 2026 14:00:16 +0000 Certificate not after: Mon 05 Jun 2028 17:43:55 +0000 Subordinate resources: AS: 208884 AS: 402247 IP: 23.154.116.0/24 IP: 2602:f43b::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7c:5f:0c:a7:b2:87:3c:00:1f:24:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jul 13 14:00:16 2026 GMT Not After : Jun 5 17:43:55 2028 GMT Subject: CN=01def58b-19a6-4ba2-b063-220466ef629f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:d5:40:81:2c:e7:3a:5a:51:01:e1:e2:d7: 79:50:08:aa:41:b3:40:d3:9e:99:d8:81:f4:62:bf: 88:25:65:a9:85:05:4f:4c:89:34:7e:b8:1d:f1:ed: 7d:56:24:c5:a3:0f:7d:6b:a1:5d:fa:7d:5c:20:0d: 77:50:9a:89:d2:6b:33:4b:41:1e:2c:f8:4f:32:39: 24:31:ce:a8:9e:ac:5e:9c:35:29:49:9f:dd:a2:53: bc:e5:b4:24:3f:e1:6a:85:8f:ce:91:68:a7:de:9f: ed:49:59:3f:e9:5d:ea:0a:5a:22:c8:52:ec:13:7f: 41:25:ef:18:44:59:74:ec:8d:05:dd:2f:8f:ba:3c: 34:6a:29:d8:19:16:23:f6:04:69:dc:d0:63:de:f1: 2b:0d:8b:d3:d1:78:b4:c2:f7:72:33:10:44:9d:ef: 9d:ce:eb:1e:31:44:50:b4:67:0f:6b:db:50:02:e3: 0f:1e:26:cb:56:fc:2f:41:83:a7:a8:5f:3a:c0:3f: c2:51:de:ad:bb:7e:a9:ec:a2:6f:6a:a6:35:39:23: 2d:37:ca:4d:16:f0:35:87:0b:1b:72:5d:39:e6:21: ac:76:a2:37:d8:49:e8:3b:32:47:9e:b8:c8:b1:27: 0a:79:c4:3e:c3:dc:c6:52:fd:73:a6:6d:bc:28:0c: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D8:65:46:AA:8C:90:8C:92:9B:5F:5B:AC:2A:E6:DE:7B:59:5C:8C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/01def58b-19a6-4ba2-b063-220466ef629f/01def58b-19a6-4ba2-b063-220466ef629f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.154.116.0/24 IPv6: 2602:f43b::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 208884 402247 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:29:a3:3f:00:c6:5d:71:98:fd:a0:87:87:8e:5b:4f:5d:68: 9c:a8:7f:9d:37:42:d1:48:17:35:64:3d:05:13:af:98:2a:27: f2:ff:07:02:57:36:af:b2:3b:a7:a0:16:29:55:7d:86:9a:fc: de:b6:8e:2c:d0:96:e1:04:74:ce:85:32:99:b6:1e:27:4f:37: 50:fa:1e:fb:16:33:d7:54:e6:b0:d9:dd:18:b3:c7:53:fc:9a: a2:90:b9:91:f2:10:2e:f7:f0:f9:fd:1d:e2:c2:2a:60:9c:38: fd:50:cb:28:c0:96:21:74:5e:24:cc:0f:ef:bc:ce:6b:0e:ef: fd:de:69:8f:72:8a:2e:23:a4:e3:cb:90:69:1e:bb:35:52:4c: 84:b8:71:46:5c:ba:b1:5c:9d:2b:80:a6:f1:9f:f7:35:91:5a: 78:e1:2d:51:4f:54:61:cd:6b:ba:b8:d1:80:7f:3c:b4:de:6b: 64:5e:0f:8d:2b:18:bf:d0:ac:8e:ed:fd:01:34:37:0f:dd:e5: e5:a3:ce:41:d2:ef:33:6d:38:2b:27:2c:9d:22:e1:84:c6:b7: b4:ac:fc:08:a3:cf:38:5d:c4:a4:8a:1e:dc:6f:e3:d8:e0:f1: c1:13:1b:2b:81:7b:62:50:86:99:9d:1f:bb:76:87:3a:e7:2a: 74:88:3e:1a -----BEGIN CERTIFICATE----- MIIHHjCCBgagAwIBAgIUAQ0Mn0MoWE58Xwynsoc8AB8kgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDcxMzE0MDAxNloXDTI4MDYwNTE3NDM1NVowLzEtMCsGA1UEAxMk MDFkZWY1OGItMTlhNi00YmEyLWIwNjMtMjIwNDY2ZWY2MjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfTVQIEs5zpaUQHh4td5UAiqQbNA056Z2IH0 Yr+IJWWphQVPTIk0frgd8e19ViTFow99a6Fd+n1cIA13UJqJ0mszS0EeLPhPMjkk Mc6onqxenDUpSZ/dolO85bQkP+FqhY/OkWin3p/tSVk/6V3qCloiyFLsE39BJe8Y RFl07I0F3S+Pujw0ainYGRYj9gRp3NBj3vErDYvT0Xi0wvdyMxBEne+dzuseMURQ tGcPa9tQAuMPHibLVvwvQYOnqF86wD/CUd6tu36p7KJvaqY1OSMtN8pNFvA1hwsb cl055iGsdqI32EnoOzJHnrjIsScKecQ+w9zGUv1zpm28KAyvKQIDAQABo4IEMDCC BCwwHQYDVR0OBBYEFCvYZUaqjJCMkptfW6wq5t57WVyMMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w MWRlZjU4Yi0xOWE2LTRiYTItYjA2My0yMjA0NjZlZjYyOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzAxZGVmNThiLTE5YTYtNGJhMi1i MDYzLTIyMDQ2NmVmNjI5Zi8wMWRlZjU4Yi0xOWE2LTRiYTItYjA2My0yMjA0NjZl ZjYyOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXmnQwDgQCAAIwCAMGACYC9DsAMB8GCCsGAQUF BwEIAQH/BBAwDqAMMAoCAwMv9AIDBiNHMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJgpoz8Axl1xmP2gh4eO W09daJyof503QtFIFzVkPQUTr5gqJ/L/BwJXNq+yO6egFilVfYaa/N62jizQluEE dM6FMpm2HidPN1D6HvsWM9dU5rDZ3Rizx1P8mqKQuZHyEC738Pn9HeLCKmCcOP1Q yyjAliF0XiTMD++8zmsO7/3eaY9yii4jpOPLkGkeuzVSTIS4cUZcurFcnSuApvGf 9zWRWnjhLVFPVGHNa7q40YB/PLTea2ReD40rGL/QrI7t/QE0Nw/d5eWjzkHS7zNt OCsnLJ0i4YTGt7Ss/AijzzhdxKSKHtxv49jg8cETGyuBe2JQhpmdH7t2hzrnKnSI Pho= -----END CERTIFICATE-----Generated at Tue Jul 21 21:43:54 2026 by rpki-client