$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6.cer File: 0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6.cer (raw, json) Hash identifier: d69ZnHKXzY1tk7uwGgbs7cumWQHQoCD94t+ohPNqouM= Subject key identifier: A8:60:D0:07:3F:24:E8:32:73:D5:31:B8:C3:EB:C7:84:49:C9:26:21 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D605A85DFA482CCA659891B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6/0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Apr 2026 20:21:34 +0000 Certificate not after: Wed 05 Jul 2028 20:21:34 +0000 Subordinate resources: IP: 207.207.209.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:5a:85:df:a4:82:cc:a6:59:89:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 2 20:21:34 2026 GMT Not After : Jul 5 20:21:34 2028 GMT Subject: CN=0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:45:d4:25:2f:21:e5:77:2c:04:21:cb:57:4c: 76:20:48:b5:ac:34:2d:89:af:a5:5c:fb:8c:c3:16: 5f:3c:b2:ac:9a:45:80:8f:93:d1:ad:55:01:fa:9f: 6d:b5:e2:3d:4c:ed:5d:76:0b:f9:b0:c3:5b:b6:56: 23:5d:1e:17:c2:64:d8:a8:73:1b:90:d1:a0:42:2f: 98:6f:19:02:e7:d2:07:48:6c:f9:d4:6e:eb:f3:15: 88:f0:51:72:7b:f2:bb:9b:34:4b:d9:73:de:9e:b8: ea:a3:ef:01:9c:b9:30:db:06:da:9c:11:79:ac:63: fe:bf:e1:63:49:27:b5:e5:f5:15:5e:4d:c4:0d:67: 54:5e:37:9c:78:c9:cc:7d:9b:b9:8e:1c:37:59:fc: 0a:c9:43:d9:1d:a3:b4:ac:78:d7:16:c6:0e:99:c8: 47:26:c6:f2:2d:8f:3b:20:20:ea:72:0c:40:a1:9f: 49:7f:c8:ee:d2:18:68:11:22:e2:f1:4f:e6:13:1a: 7b:18:ad:9c:a6:2b:d9:ed:c7:65:f0:f7:ce:59:67: 0b:f8:4f:59:73:bb:fd:cf:9d:12:36:f4:28:e8:ac: b7:3a:4c:a2:d3:af:b5:47:88:81:88:29:b5:e4:68: 71:86:c3:d1:f1:51:8a:db:f4:30:5c:cc:d2:f7:ee: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:60:D0:07:3F:24:E8:32:73:D5:31:B8:C3:EB:C7:84:49:C9:26:21 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6/0ba0e7bf-574c-41ae-b40e-75f79a2e6fa6.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 207.207.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:33:d8:50:b8:26:ca:6d:94:8b:93:79:4c:b0:88:2b:fb:56: 8b:79:b1:87:30:90:47:81:f7:67:98:28:c7:4a:e5:1b:fc:b5: b2:d2:9d:45:72:89:53:67:8c:23:c5:3c:5a:8d:35:b2:4e:43: 20:86:79:ff:01:ca:2c:96:0e:81:43:8e:92:61:20:64:db:59: e7:6d:f1:87:c6:3e:a1:05:ad:ca:75:69:d9:a0:e8:b8:f0:71: cd:d1:ce:05:be:a7:a9:29:03:f6:6c:79:42:51:48:a4:02:a1: 6b:14:c7:c8:ca:19:0d:53:6c:84:1e:db:3c:85:cd:9a:20:54: f1:53:71:ca:d3:5b:28:3a:ca:65:f6:96:d2:f7:04:a8:8e:55: 1f:75:44:04:b3:96:0a:f4:75:9c:1f:47:be:65:86:90:91:b6: f0:ac:c2:9c:c3:de:15:4c:98:eb:da:64:ce:dc:c0:a1:e3:77: 0c:0a:88:82:94:12:37:d8:a1:d7:b8:52:fd:45:3b:f0:29:9e: b7:4d:64:03:01:e4:8f:a7:c8:d6:15:09:ee:10:e9:48:ad:2f: bb:11:99:cf:82:18:6b:17:7f:87:48:9b:22:ad:b2:b4:31:df: 3b:98:2b:90:95:48:e7:0a:24:cf:d1:d3:2e:fd:b8:53:75:5b: cc:0a:3b:19 -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE1gWoXfpILMplmJGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwMjIwMjEzNFoXDTI4MDcwNTIwMjEzNFowLzEtMCsGA1UEAxMk MGJhMGU3YmYtNTc0Yy00MWFlLWI0MGUtNzVmNzlhMmU2ZmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEXUJS8h5XcsBCHLV0x2IEi1rDQtia+lXPuM wxZfPLKsmkWAj5PRrVUB+p9tteI9TO1ddgv5sMNbtlYjXR4XwmTYqHMbkNGgQi+Y bxkC59IHSGz51G7r8xWI8FFye/K7mzRL2XPenrjqo+8BnLkw2wbanBF5rGP+v+Fj SSe15fUVXk3EDWdUXjeceMnMfZu5jhw3WfwKyUPZHaO0rHjXFsYOmchHJsbyLY87 ICDqcgxAoZ9Jf8ju0hhoESLi8U/mExp7GK2cpivZ7cdl8PfOWWcL+E9Zc7v9z50S NvQo6Ky3Okyi06+1R4iBiCm15GhxhsPR8VGK2/QwXMzS9+4D8QIDAQABo4ID/zCC A/swHQYDVR0OBBYEFKhg0Ac/JOgyc9UxuMPrx4RJySYhMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w YmEwZTdiZi01NzRjLTQxYWUtYjQwZS03NWY3OWEyZTZmYTYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzBiYTBlN2JmLTU3NGMtNDFhZS1i NDBlLTc1Zjc5YTJlNmZhNi8wYmEwZTdiZi01NzRjLTQxYWUtYjQwZS03NWY3OWEy ZTZmYTYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADPz9EwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAezPYULgmym2Ui5N5TLCI K/tWi3mxhzCQR4H3Z5gox0rlG/y1stKdRXKJU2eMI8U8Wo01sk5DIIZ5/wHKLJYO gUOOkmEgZNtZ523xh8Y+oQWtynVp2aDouPBxzdHOBb6nqSkD9mx5QlFIpAKhaxTH yMoZDVNshB7bPIXNmiBU8VNxytNbKDrKZfaW0vcEqI5VH3VEBLOWCvR1nB9HvmWG kJG28KzCnMPeFUyY69pkztzAoeN3DAqIgpQSN9ih17hS/UU78Cmet01kAwHkj6fI 1hUJ7hDpSK0vuxGZz4IYaxd/h0ibIq2ytDHfO5grkJVI5wokz9HTLv24U3VbzAo7 GQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:07 2026 by rpki-client