$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1.cer File: 270feb68-f8d6-4567-90e5-6325ba1775d1.cer (raw, json) Hash identifier: GAmuD7T8Xgi/NfVerNbfEqzdHr5HSw7qInQWqNTOtEE= Subject key identifier: 37:64:91:13:4E:F3:73:25:9C:5E:EF:A4:A1:12:9E:E9:DD:C6:7E:9F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584F5EF01D10C4F482FF6DFCF440 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 02 Oct 2026 17:45:14 +0000 Certificate not after: Fri 16 Jun 2028 05:43:23 +0000 Subordinate resources: AS: 11421 AS: 402298 IP: 23.154.164.0/24 IP: 143.203.124.0/22 IP: 2602:f429::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:f0:1d:10:c4:f4:82:ff:6d:fc:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Oct 2 17:45:14 2026 GMT Not After : Jun 16 05:43:23 2028 GMT Subject: CN=270feb68-f8d6-4567-90e5-6325ba1775d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d5:be:0a:13:39:83:a7:40:53:8c:fc:34:44: 19:3c:8b:ca:3b:9f:0e:16:71:ae:a7:3c:07:b7:c1: a3:8e:5e:08:48:11:04:c7:c0:f2:f2:fc:0a:0b:0a: f8:29:d0:b5:fb:3c:66:be:5e:64:27:00:18:26:92: 58:1f:47:49:0c:ee:6f:75:0d:df:47:90:1f:99:b8: 02:04:0f:9f:56:a0:02:e6:b1:52:c4:46:ec:c5:cb: ff:69:20:55:ac:0b:4f:f9:f0:7b:74:05:24:ad:27: 69:1e:47:d0:80:21:68:ec:44:80:96:d3:1c:00:e2: 0d:cf:b5:d6:91:be:2c:63:61:4c:69:cd:72:0d:50: 14:cf:8b:db:2f:66:17:e4:e4:e1:e0:ea:4f:9c:6b: 59:d3:d4:3d:c9:e0:b6:32:d1:85:f6:8c:86:60:36: 21:35:44:b6:aa:74:f7:b6:f2:11:19:ef:b0:bb:31: aa:88:e2:14:f3:ab:e2:99:3f:82:1f:ec:a3:7b:61: c0:2e:29:ab:be:ec:ad:b5:ad:7a:cc:1a:a8:14:61: 18:1e:7e:99:57:ed:5d:1e:8b:08:7a:b8:85:a0:25: 58:d0:e2:0c:a9:c5:0a:73:f4:7f:36:d4:be:4a:6e: e4:c2:2b:c1:55:ce:c2:70:18:90:5f:b9:94:c8:e1: 5f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:64:91:13:4E:F3:73:25:9C:5E:EF:A4:A1:12:9E:E9:DD:C6:7E:9F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/270feb68-f8d6-4567-90e5-6325ba1775d1/270feb68-f8d6-4567-90e5-6325ba1775d1.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.154.164.0/24 143.203.124.0/22 IPv6: 2602:f429::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11421 402298 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:cd:27:0f:af:e7:db:3b:eb:84:c8:75:f7:25:a3:fe:ba:20: 86:73:d9:c0:f9:8b:d9:70:13:03:f8:fa:f1:68:fd:9f:a6:5d: 0e:7f:96:9f:32:31:78:3c:d4:77:be:c9:59:26:24:43:f9:5b: ba:43:7b:cb:f7:bb:6b:96:bf:63:ea:e8:a9:20:2a:57:bc:94: 98:1a:d1:2f:f2:b2:3e:58:42:ce:8f:45:91:3f:bd:2a:f0:0e: ea:fa:5b:6f:cf:42:25:78:d8:e4:20:8f:7e:b5:ff:b9:83:ba: 37:70:77:f4:d0:8c:9d:39:89:d3:59:dc:15:13:92:28:db:d2: a8:b5:d2:67:8a:10:0c:f7:22:d9:37:23:93:7c:3a:f8:c9:82: f4:a6:00:30:2d:b8:6b:23:35:1a:9f:6d:47:5b:f9:40:66:41: c2:f3:c4:fb:c0:77:cb:7a:8a:c8:77:84:70:53:8e:09:7a:7e: 02:1f:8f:fd:53:46:f4:a9:5e:03:47:23:0d:9a:38:65:34:d9: 75:c6:49:0d:08:ef:ca:b8:a4:25:c4:7c:11:a7:35:e0:d8:23: 6b:ca:85:81:27:d2:35:e5:18:f6:8d:c6:01:ed:1f:0f:a4:47: cb:84:ed:09:ac:8f:c8:67:c9:8f:f8:45:1b:67:c1:a6:fc:6c: 5a:88:94:60 -----BEGIN CERTIFICATE----- MIIHIzCCBgugAwIBAgIUAQ0Mn0MoWE9e8B0QxPSC/2389EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MTAwMjE3NDUxNFoXDTI4MDYxNjA1NDMyM1owLzEtMCsGA1UEAxMk MjcwZmViNjgtZjhkNi00NTY3LTkwZTUtNjMyNWJhMTc3NWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9W+ChM5g6dAU4z8NEQZPIvKO58OFnGupzwH t8Gjjl4ISBEEx8Dy8vwKCwr4KdC1+zxmvl5kJwAYJpJYH0dJDO5vdQ3fR5AfmbgC BA+fVqAC5rFSxEbsxcv/aSBVrAtP+fB7dAUkrSdpHkfQgCFo7ESAltMcAOINz7XW kb4sY2FMac1yDVAUz4vbL2YX5OTh4OpPnGtZ09Q9yeC2MtGF9oyGYDYhNUS2qnT3 tvIRGe+wuzGqiOIU86vimT+CH+yje2HALimrvuytta16zBqoFGEYHn6ZV+1dHosI eriFoCVY0OIMqcUKc/R/NtS+Sm7kwivBVc7CcBiQX7mUyOFfRQIDAQABo4IENTCC BDEwHQYDVR0OBBYEFDdkkRNO83MlnF7vpKESnundxn6fMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8y NzBmZWI2OC1mOGQ2LTQ1NjctOTBlNS02MzI1YmExNzc1ZDEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzI3MGZlYjY4LWY4ZDYtNDU2Ny05 MGU1LTYzMjViYTE3NzVkMS8yNzBmZWI2OC1mOGQ2LTQ1NjctOTBlNS02MzI1YmEx Nzc1ZDEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNQYIKwYBBQUH AQcBAf8EJjAkMBIEAgABMAwDBAAXmqQDBAKPy3wwDgQCAAIwCAMGACYC9CkAMB4G CCsGAQUFBwEIAQH/BA8wDaALMAkCAiydAgMGI3owVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEABs0nD6/n2zvr hMh19yWj/roghnPZwPmL2XATA/j68Wj9n6ZdDn+WnzIxeDzUd77JWSYkQ/lbukN7 y/e7a5a/Y+roqSAqV7yUmBrRL/KyPlhCzo9FkT+9KvAO6vpbb89CJXjY5CCPfrX/ uYO6N3B39NCMnTmJ01ncFROSKNvSqLXSZ4oQDPci2Tcjk3w6+MmC9KYAMC24ayM1 Gp9tR1v5QGZBwvPE+8B3y3qKyHeEcFOOCXp+Ah+P/VNG9KleA0cjDZo4ZTTZdcZJ DQjvyrikJcR8Eac14Ngja8qFgSfSNeUY9o3GAe0fD6RHy4TtCayPyGfJj/hFG2fB pvxsWoiUYA== -----END CERTIFICATE-----Generated at Sun Oct 11 23:37:53 2026 by rpki-client