$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d.cer File: 07dc0b8a-4776-47f3-8037-78c17c3b905d.cer (raw, json) Hash identifier: yi0eJzwYBIb1lcyKqNN3rbVgrawQW1m2G0ng1rUpNzE= Subject key identifier: 66:BD:C0:82:F4:DA:3A:DC:4C:FE:B1:94:40:CA:6A:AE:5D:AF:E2:37 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CD49D2DBDA9DDF86B3F9C5E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/07dc0b8a-4776-47f3-8037-78c17c3b905d.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Feb 2026 19:02:42 +0000 Certificate not after: Tue 16 May 2028 18:02:42 +0000 Subordinate resources: IP: 205.144.32.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:9d:2d:bd:a9:dd:f8:6b:3f:9c:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 11 19:02:42 2026 GMT Not After : May 16 18:02:42 2028 GMT Subject: CN=07dc0b8a-4776-47f3-8037-78c17c3b905d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:59:6f:2e:d6:2b:e4:64:3c:d7:1d:00:74: 07:3f:92:e4:f3:e2:70:64:29:4f:85:76:43:0c:ad: c6:f9:80:4a:8a:ba:f5:37:91:0e:04:11:70:c5:f5: c2:b6:7d:e8:cc:59:b8:17:99:6b:c8:c3:44:0e:d7: c1:fb:4d:ba:e0:59:74:e7:34:97:21:ab:3d:bd:92: 8f:71:9f:9a:92:d6:d3:8f:33:62:9d:da:77:92:48: 52:e3:e2:25:11:59:70:06:83:1d:f5:53:5f:1a:5b: 67:9b:18:9a:6e:03:ea:79:be:90:3d:00:78:00:bc: 98:10:4b:25:83:97:28:68:fd:02:89:1f:8a:3e:a7: a1:82:b1:c1:59:58:0c:32:2d:7d:d8:ed:c5:bb:58: e9:ed:fb:ba:67:83:01:84:b5:9c:21:1f:f3:58:5a: a2:b9:90:50:6f:9a:4a:9b:46:97:33:79:0d:1a:b8: ac:d4:ae:57:56:3b:b3:7c:9f:d1:4d:f0:79:6d:21: f9:5a:37:2c:79:c1:34:61:17:05:79:b6:2b:55:92: 99:48:cf:7d:44:9e:e9:75:33:fa:c6:fd:f0:7d:8b: b8:74:30:d9:ed:b2:d0:53:13:9e:3e:5f:0d:70:a4: e7:e1:e6:9e:ba:b7:70:44:c8:d5:e9:90:73:e4:c9: 95:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BD:C0:82:F4:DA:3A:DC:4C:FE:B1:94:40:CA:6A:AE:5D:AF:E2:37 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/07dc0b8a-4776-47f3-8037-78c17c3b905d/07dc0b8a-4776-47f3-8037-78c17c3b905d.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 205.144.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:12:cf:b6:88:6f:16:c5:aa:32:65:f5:09:d3:8b:a4:d6:a6: 7a:52:98:b6:61:f4:46:e6:51:e8:80:09:0b:53:e9:bd:44:2a: 61:4c:59:75:70:5b:23:d6:20:a7:41:dd:f6:7d:cf:13:83:a9: 61:2f:89:73:08:86:3d:68:8a:cc:46:86:a8:e1:f5:56:ae:a7: d4:eb:03:14:1a:e6:e7:7c:1e:af:ca:99:01:0d:4a:a9:fc:7c: 73:a5:16:ec:01:a9:ee:b1:ba:dd:d6:ee:ef:39:65:95:fd:9f: 6a:f5:14:8f:86:b4:96:7f:ea:11:9d:e1:4b:94:aa:54:a2:74: f6:62:ed:85:2a:ef:e2:a2:1b:35:b6:a3:62:fa:69:35:ce:c0: 14:88:c4:c1:73:40:7a:a9:b6:07:4f:03:28:5a:5d:4e:31:7f: 30:32:93:29:0d:d3:7f:40:34:52:34:ca:7e:c1:92:4d:23:de: d9:f9:84:08:7a:8d:40:11:b6:88:da:39:6f:6e:e2:6c:34:8a: 55:71:03:4e:59:da:68:2d:35:ed:79:b5:ce:5a:05:8a:ec:4f: 03:e1:ff:82:85:96:29:5a:03:fb:73:b7:97:be:f2:df:97:13: 04:90:0f:c3:fc:79:5c:97:c9:14:c5:db:59:5b:e8:26:5b:40: d7:7c:cb:59 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzUnS29qd34az+cXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMTE5MDI0MloXDTI4MDUxNjE4MDI0MlowLzEtMCsGA1UEAxMk MDdkYzBiOGEtNDc3Ni00N2YzLTgwMzctNzhjMTdjM2I5MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIxZby7WK+RkPNcdAHQHP5Lk8+JwZClPhXZD DK3G+YBKirr1N5EOBBFwxfXCtn3ozFm4F5lryMNEDtfB+0264Fl05zSXIas9vZKP cZ+aktbTjzNindp3kkhS4+IlEVlwBoMd9VNfGltnmxiabgPqeb6QPQB4ALyYEEsl g5coaP0CiR+KPqehgrHBWVgMMi192O3Fu1jp7fu6Z4MBhLWcIR/zWFqiuZBQb5pK m0aXM3kNGris1K5XVjuzfJ/RTfB5bSH5WjcsecE0YRcFebYrVZKZSM99RJ7pdTP6 xv3wfYu4dDDZ7bLQUxOePl8NcKTn4eaeurdwRMjV6ZBz5MmVOwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFGa9wIL02jrcTP6xlEDKaq5dr+I3MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w N2RjMGI4YS00Nzc2LTQ3ZjMtODAzNy03OGMxN2MzYjkwNWQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzA3ZGMwYjhhLTQ3NzYtNDdmMy04 MDM3LTc4YzE3YzNiOTA1ZC8wN2RjMGI4YS00Nzc2LTQ3ZjMtODAzNy03OGMxN2Mz YjkwNWQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATNkCAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEANRLPtohvFsWqMmX1CdOL pNamelKYtmH0RuZR6IAJC1PpvUQqYUxZdXBbI9Ygp0Hd9n3PE4OpYS+JcwiGPWiK zEaGqOH1Vq6n1OsDFBrm53wer8qZAQ1Kqfx8c6UW7AGp7rG63dbu7zlllf2favUU j4a0ln/qEZ3hS5SqVKJ09mLthSrv4qIbNbajYvppNc7AFIjEwXNAeqm2B08DKFpd TjF/MDKTKQ3Tf0A0UjTKfsGSTSPe2fmECHqNQBG2iNo5b27ibDSKVXEDTlnaaC01 7Xm1zloFiuxPA+H/goWWKVoD+3O3l77y35cTBJAPw/x5XJfJFMXbWVvoJltA13zL WQ== -----END CERTIFICATE-----Generated at Fri Feb 27 03:44:52 2026 by rpki-client