$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/05456a8a-26f1-4a5e-9dca-ad00f3ae8db4.cer File: 05456a8a-26f1-4a5e-9dca-ad00f3ae8db4.cer (raw, json) Hash identifier: r1UTflDvlq00+WXa73wTmb8xupFF1Q5V8SRRa+SHHEA= Subject key identifier: BF:66:18:71:AD:4B:16:D9:CA:5D:E6:73:2E:B2:DE:B4:E0:BF:0B:5F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D73F3B60588D073537E645E40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/05456a8a-26f1-4a5e-9dca-ad00f3ae8db4/05456a8a-26f1-4a5e-9dca-ad00f3ae8db4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/05456a8a-26f1-4a5e-9dca-ad00f3ae8db4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Apr 2026 20:50:35 +0000 Certificate not after: Wed 12 Jul 2028 20:50:35 +0000 Subordinate resources: AS: 22187 IP: 204.19.208.0/24 IP: 2620:a:8000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:f3:b6:05:88:d0:73:53:7e:64:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 9 20:50:35 2026 GMT Not After : Jul 12 20:50:35 2028 GMT Subject: CN=05456a8a-26f1-4a5e-9dca-ad00f3ae8db4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1b:85:c2:86:99:5c:31:f1:77:68:29:d3:3e: 94:ae:0e:f7:e1:f5:05:cc:73:00:9b:50:97:b8:8c: b8:59:2b:35:59:b8:4a:34:4c:65:31:ee:a6:29:16: ff:fc:69:4c:82:76:d6:51:b4:63:23:fa:46:e8:b1: 46:24:bd:d3:95:09:f3:4a:3f:3c:c2:ae:a7:d8:b4: e7:1e:77:81:a5:2c:24:4a:5c:4c:a1:09:a9:de:de: b3:2d:86:83:6a:a1:cd:5b:ef:54:e1:85:43:8b:c8: 3f:78:3c:7d:5d:d3:79:d2:0e:08:c0:d6:02:64:a3: a8:38:5c:24:69:65:cf:92:42:8c:00:1b:96:7b:4e: 89:a8:8b:3b:16:46:1f:4b:3e:a4:2b:01:52:6f:8e: 90:54:a9:e8:06:ca:e5:54:35:ed:19:4d:a4:74:ac: f3:77:ee:5c:e1:90:40:4f:0f:5f:2f:b7:c6:8d:e8: 4b:67:c2:b6:41:a4:05:02:d0:09:5e:0c:c8:9d:8d: 6d:bd:62:a3:bd:42:ac:53:d8:de:24:d7:19:54:f3: 11:a0:b3:76:78:34:6d:43:7b:2c:0e:6f:e3:9c:fc: 31:98:13:db:2c:b0:36:e7:67:00:05:6f:37:ff:54: 9c:7e:fd:4e:9e:d4:a1:2e:53:1c:62:4d:c7:f0:7f: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:66:18:71:AD:4B:16:D9:CA:5D:E6:73:2E:B2:DE:B4:E0:BF:0B:5F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/05456a8a-26f1-4a5e-9dca-ad00f3ae8db4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/05456a8a-26f1-4a5e-9dca-ad00f3ae8db4/05456a8a-26f1-4a5e-9dca-ad00f3ae8db4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 204.19.208.0/24 IPv6: 2620:a:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 22187 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:01:e9:22:f2:ea:86:d2:56:b7:82:c6:9a:ee:3b:fc:de:37: c7:b8:6d:87:da:a5:fc:08:79:24:74:66:86:e7:32:9f:e3:21: 7e:d6:2b:53:a6:c7:ba:09:bb:05:37:e5:2a:88:d8:c5:6b:61: 8c:bb:6b:0f:b9:ce:6a:89:09:ae:cb:34:a9:77:ba:d4:4e:c9: 8d:79:8b:fa:6b:8f:c2:83:68:d7:b2:68:ca:2e:97:49:d0:74: 89:4d:21:8c:bb:51:05:b0:5f:67:b9:31:3e:d4:ac:5b:ef:0b: a6:c2:d4:85:e8:d3:3c:35:71:ba:e2:b7:e5:1e:33:50:d0:cd: cf:ce:cf:6b:c4:f1:62:d2:e5:43:95:48:86:92:ac:52:21:81: 7e:6c:9d:56:12:dd:e5:54:ae:97:5b:77:c6:d2:c9:b8:b9:8d: b8:67:2b:b1:85:05:57:66:5d:30:e7:f6:9e:76:ac:97:1a:db: 84:c0:d0:e9:52:54:69:9a:2d:1c:7c:79:b6:4f:f3:db:fa:53: 4e:1b:c7:2c:20:7f:97:a0:28:44:4a:a1:72:6b:e1:e0:27:b0: 84:11:c4:46:a9:2d:ce:af:cb:4b:a1:c1:a7:70:b5:01:91:30: 16:c8:01:4b:ad:57:21:e5:34:7f:a1:7d:94:00:ac:de:9b:fb: 15:8f:60:10 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1z87YFiNBzU35kXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwOTIwNTAzNVoXDTI4MDcxMjIwNTAzNVowLzEtMCsGA1UEAxMk MDU0NTZhOGEtMjZmMS00YTVlLTlkY2EtYWQwMGYzYWU4ZGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxuFwoaZXDHxd2gp0z6Urg734fUFzHMAm1CX uIy4WSs1WbhKNExlMe6mKRb//GlMgnbWUbRjI/pG6LFGJL3TlQnzSj88wq6n2LTn HneBpSwkSlxMoQmp3t6zLYaDaqHNW+9U4YVDi8g/eDx9XdN50g4IwNYCZKOoOFwk aWXPkkKMABuWe06JqIs7FkYfSz6kKwFSb46QVKnoBsrlVDXtGU2kdKzzd+5c4ZBA Tw9fL7fGjehLZ8K2QaQFAtAJXgzInY1tvWKjvUKsU9jeJNcZVPMRoLN2eDRtQ3ss Dm/jnPwxmBPbLLA252cABW83/1Scfv1OntShLlMcYk3H8H8vdwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFL9mGHGtSxbZyl3mcy6y3rTgvwtfMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w NTQ1NmE4YS0yNmYxLTRhNWUtOWRjYS1hZDAwZjNhZThkYjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzA1NDU2YThhLTI2ZjEtNGE1ZS05 ZGNhLWFkMDBmM2FlOGRiNC8wNTQ1NmE4YS0yNmYxLTRhNWUtOWRjYS1hZDAwZjNh ZThkYjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBADME9AwDwQCAAIwCQMHACYgAAqAADAZBggrBgEF BQcBCAEB/wQKMAigBjAEAgJWqzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBRAeki8uqG0la3gsaa7jv83jfH uG2H2qX8CHkkdGaG5zKf4yF+1itTpse6CbsFN+UqiNjFa2GMu2sPuc5qiQmuyzSp d7rUTsmNeYv6a4/Cg2jXsmjKLpdJ0HSJTSGMu1EFsF9nuTE+1Kxb7wumwtSF6NM8 NXG64rflHjNQ0M3Pzs9rxPFi0uVDlUiGkqxSIYF+bJ1WEt3lVK6XW3fG0sm4uY24 ZyuxhQVXZl0w5/aedqyXGtuEwNDpUlRpmi0cfHm2T/Pb+lNOG8csIH+XoChESqFy a+HgJ7CEEcRGqS3Or8tLocGncLUBkTAWyAFLrVch5TR/oX2UAKzem/sVj2AQ -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:26 2026 by rpki-client