$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108.cer File: 0cf9a0ab-2fba-4c49-9664-539b7448b108.cer (raw, json) Hash identifier: +M5pP4CFbb2uglWZ71G5Wqw3YuxJqV3vTRflT8qOkhA= Subject key identifier: BB:30:BC:AC:15:4B:B2:7F:AB:7D:40:C3:47:88:2C:C3:ED:79:DF:D4 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CB35F61A9B5F1A866FDC78CC0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/0cf9a0ab-2fba-4c49-9664-539b7448b108.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 30 Jan 2026 21:16:31 +0000 Certificate not after: Thu 04 May 2028 20:16:31 +0000 Subordinate resources: AS: 14368 IP: 96.46.208.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:5f:61:a9:b5:f1:a8:66:fd:c7:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Jan 30 21:16:31 2026 GMT Not After : May 4 20:16:31 2028 GMT Subject: CN=0cf9a0ab-2fba-4c49-9664-539b7448b108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1d:c6:94:9d:90:62:ea:d0:93:03:75:4e:72: 07:81:6e:20:f3:47:9b:b3:81:7b:b7:0b:38:66:13: 23:f4:8f:21:a8:ff:f7:23:8e:45:e0:99:7c:73:61: 34:c4:1b:a7:df:e2:63:f1:30:fb:9b:4a:7d:a2:d6: 7f:0e:67:3a:a6:4e:aa:a9:27:c3:48:1f:0e:ed:fd: 21:8c:99:61:d0:7e:c8:da:5f:ad:66:13:8b:8a:af: 9d:e4:57:9a:b0:e7:57:65:2f:5e:18:70:42:19:5f: 02:c8:4e:01:01:30:34:7d:57:a9:9c:01:e4:30:12: 06:b3:d9:58:cb:39:49:3b:e7:8d:71:f9:c2:26:ed: ab:be:ff:d9:c9:5d:2e:54:2a:1a:32:7a:81:fe:62: 4d:84:01:f2:f1:3a:d5:87:9b:54:d7:0a:f4:cf:52: 1d:2e:b7:be:5e:19:4c:46:4b:05:2b:7f:c7:0a:e5: 8e:a1:1a:30:9d:4b:1f:95:cf:bc:82:e1:70:3e:97: 8f:cd:7f:00:ea:25:65:9f:f1:88:04:06:1f:f8:e2: 61:c2:3d:9c:a4:ab:d1:26:35:42:e8:ef:03:df:d7: 28:63:b9:21:6c:12:bf:ed:fb:56:aa:f9:4f:78:20: 32:8e:d3:6b:37:e2:c4:42:a5:5a:0e:bd:94:4b:4d: 2d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:30:BC:AC:15:4B:B2:7F:AB:7D:40:C3:47:88:2C:C3:ED:79:DF:D4 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0cf9a0ab-2fba-4c49-9664-539b7448b108/0cf9a0ab-2fba-4c49-9664-539b7448b108.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 96.46.208.0/20 sbgp-autonomousSysNum: critical Autonomous System Numbers: 14368 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:69:87:c5:10:81:ba:06:4c:0b:aa:ea:4c:44:99:fd:f9:95: f8:e8:b8:0d:c9:fb:63:7f:3d:73:6f:12:e4:e2:94:8b:20:ca: b4:70:0e:52:c0:5f:3f:2f:3d:28:06:92:dd:17:33:56:0e:38: 73:d1:be:53:e5:b9:ab:ba:53:ae:10:20:ad:25:d0:3d:f1:f0: 45:71:79:5c:93:46:cf:e2:5d:e2:70:d8:fa:39:83:62:be:11: 8f:85:25:e4:93:02:8f:de:e5:5f:e6:c5:15:9c:ab:41:4d:43: 15:b5:30:b6:50:6f:7a:17:b6:77:72:38:77:78:b5:c0:78:6c: b4:29:aa:cc:c8:03:58:6e:79:dc:91:58:65:72:42:56:d4:63: 55:87:b0:6b:94:11:b0:e9:e9:73:ce:ce:a5:10:b1:c5:aa:2a: 03:8c:bc:5d:7b:01:f5:cd:11:5d:c0:4f:de:ef:92:9b:5d:9a: 8f:0b:cf:22:1c:36:25:76:56:6d:02:b1:4c:73:ec:a7:1d:88: b2:33:11:0b:de:cf:37:d9:ac:3a:bd:92:91:dc:d7:e2:29:b9: c4:13:29:fc:f8:68:03:c3:bf:73:d5:de:2b:cc:ac:21:6a:74: a7:d0:ad:1f:cf:0e:55:d8:24:a6:3e:23:d3:ff:27:20:0f:1b: a2:f8:6f:09 -----BEGIN CERTIFICATE----- MIIHCDCCBfCgAwIBAgIUAQ0Mn0MoWEyzX2GptfGoZv3HjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDEzMDIxMTYzMVoXDTI4MDUwNDIwMTYzMVowLzEtMCsGA1UEAxMk MGNmOWEwYWItMmZiYS00YzQ5LTk2NjQtNTM5Yjc0NDhiMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R3GlJ2QYurQkwN1TnIHgW4g80ebs4F7tws4 ZhMj9I8hqP/3I45F4Jl8c2E0xBun3+Jj8TD7m0p9otZ/Dmc6pk6qqSfDSB8O7f0h jJlh0H7I2l+tZhOLiq+d5FeasOdXZS9eGHBCGV8CyE4BATA0fVepnAHkMBIGs9lY yzlJO+eNcfnCJu2rvv/ZyV0uVCoaMnqB/mJNhAHy8TrVh5tU1wr0z1IdLre+XhlM RksFK3/HCuWOoRownUsflc+8guFwPpePzX8A6iVln/GIBAYf+OJhwj2cpKvRJjVC 6O8D39coY7khbBK/7ftWqvlPeCAyjtNrN+LEQqVaDr2US00tDQIDAQABo4IEGjCC BBYwHQYDVR0OBBYEFLswvKwVS7J/q31Aw0eILMPted/UMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8w Y2Y5YTBhYi0yZmJhLTRjNDktOTY2NC01MzliNzQ0OGIxMDgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzBjZjlhMGFiLTJmYmEtNGM0OS05 NjY0LTUzOWI3NDQ4YjEwOC8wY2Y5YTBhYi0yZmJhLTRjNDktOTY2NC01MzliNzQ0 OGIxMDgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBARgLtAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAIC OCAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAGGmHxRCBugZMC6rqTESZ/fmV+Oi4Dcn7Y389c28S5OKUiyDK tHAOUsBfPy89KAaS3RczVg44c9G+U+W5q7pTrhAgrSXQPfHwRXF5XJNGz+Jd4nDY +jmDYr4Rj4Ul5JMCj97lX+bFFZyrQU1DFbUwtlBvehe2d3I4d3i1wHhstCmqzMgD WG553JFYZXJCVtRjVYewa5QRsOnpc87OpRCxxaoqA4y8XXsB9c0RXcBP3u+Sm12a jwvPIhw2JXZWbQKxTHPspx2IsjMRC97PN9msOr2SkdzX4im5xBMp/PhoA8O/c9Xe K8ysIWp0p9CtH88OVdgkpj4j0/8nIA8bovhvCQ== -----END CERTIFICATE-----Generated at Fri Feb 27 14:26:08 2026 by rpki-client