$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742.cer File: 30c9bb22-dd43-4440-b234-4d1b58e8e742.cer (raw, json) Hash identifier: ZBIhhJwKKThhDDdXykl6dVKRgkkcbUW/xw/NHu7hZt0= Subject key identifier: 7D:79:46:FA:36:39:8E:C0:51:7C:5C:14:1A:20:24:C4:C3:86:E3:62 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CE8A6871DA05335892DAA8890 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/30c9bb22-dd43-4440-b234-4d1b58e8e742.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 18 Feb 2026 23:17:42 +0000 Certificate not after: Tue 23 May 2028 22:17:42 +0000 Subordinate resources: IP: 206.81.96.0/21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:e8:a6:87:1d:a0:53:35:89:2d:aa:88:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 18 23:17:42 2026 GMT Not After : May 23 22:17:42 2028 GMT Subject: CN=30c9bb22-dd43-4440-b234-4d1b58e8e742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:80:47:3e:85:4d:e0:a6:d9:1e:5e:8a:87: 99:82:e7:6f:1d:4a:80:42:06:79:06:3c:14:32:5d: 1a:90:4c:7c:58:ac:27:5c:5e:04:37:88:49:d9:60: bf:61:f3:ab:d0:c6:71:1d:6b:7a:c8:d5:81:2c:98: ab:21:f9:ca:47:df:49:21:53:ad:76:48:f3:ca:07: 11:77:66:bf:5a:9a:22:8d:13:dd:8c:50:fa:6c:2e: 18:38:08:61:64:e8:c2:7c:5c:54:5e:26:d9:13:33: 13:c0:05:5f:17:39:c0:6f:7d:44:74:d4:6c:d6:4d: 48:05:d1:c6:c2:ff:0d:8b:f2:27:35:ff:48:7d:44: 0a:4a:72:62:43:ed:3b:a8:5b:80:c7:b3:e1:39:a0: ac:b6:17:2b:82:b1:25:b1:44:1d:9e:7d:dd:63:26: f1:4c:e0:76:4b:00:19:c0:f5:ba:c9:dd:33:82:b5: 6f:2d:18:c6:1f:da:49:ac:78:19:ea:68:cc:21:93: 84:45:bb:3f:11:70:06:87:34:a2:4c:d9:6a:e2:f8: 57:89:4d:ac:8d:ee:f8:52:a9:a2:52:0d:a0:8f:4d: 93:c9:49:04:65:a2:1a:5c:c6:dd:cb:1e:4c:dc:0b: d2:5a:cb:81:1b:1f:ea:7c:38:62:28:36:6f:86:ce: 7d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:79:46:FA:36:39:8E:C0:51:7C:5C:14:1A:20:24:C4:C3:86:E3:62 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/30c9bb22-dd43-4440-b234-4d1b58e8e742/30c9bb22-dd43-4440-b234-4d1b58e8e742.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 206.81.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:73:af:92:7a:b0:40:b0:d6:05:c7:a7:b7:36:a7:9b:2b:b8: 56:19:b3:14:65:4f:e9:ae:d9:e9:30:00:58:b1:02:2c:88:51: 81:47:df:04:d9:a9:57:bf:4e:61:24:9a:d4:54:31:f6:d6:ab: 3e:4b:29:4c:53:a0:90:13:a1:7e:d9:f2:fd:6b:c8:6a:85:c0: 00:9c:70:0f:54:01:9a:7f:b0:44:ef:80:1d:37:2c:0e:9e:ff: a5:25:e6:15:55:96:ec:c4:09:b8:99:40:73:54:f0:16:14:03: 69:b1:7c:cf:d7:dc:52:20:1f:98:3d:59:df:10:0c:75:68:d0: c3:bb:64:83:0b:93:f2:5b:5e:4c:ed:32:15:51:79:66:11:23: 59:cd:e3:25:2d:e0:ca:42:9b:c1:e1:cd:a9:41:e4:88:1b:b1: 3c:04:90:84:92:0f:0f:b5:cb:c0:db:c8:83:6f:cb:ba:db:cf: b1:70:56:ee:eb:75:7b:ec:c5:38:09:b8:e8:1e:52:19:59:19: 04:19:bf:dc:c9:f8:74:67:bf:f1:93:29:1c:a8:80:bd:2f:0d: 34:1d:9e:0b:fc:43:87:41:1b:e3:a4:41:8f:8f:80:a5:e7:de: cb:13:1f:f4:1a:26:82:c6:ee:41:c0:3e:37:cd:0a:fc:c5:01: b6:36:db:eb -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzopocdoFM1iS2qiJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxODIzMTc0MloXDTI4MDUyMzIyMTc0MlowLzEtMCsGA1UEAxMk MzBjOWJiMjItZGQ0My00NDQwLWIyMzQtNGQxYjU4ZThlNzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLCARz6FTeCm2R5eioeZgudvHUqAQgZ5BjwU Ml0akEx8WKwnXF4EN4hJ2WC/YfOr0MZxHWt6yNWBLJirIfnKR99JIVOtdkjzygcR d2a/WpoijRPdjFD6bC4YOAhhZOjCfFxUXibZEzMTwAVfFznAb31EdNRs1k1IBdHG wv8Ni/InNf9IfUQKSnJiQ+07qFuAx7PhOaCsthcrgrElsUQdnn3dYybxTOB2SwAZ wPW6yd0zgrVvLRjGH9pJrHgZ6mjMIZOERbs/EXAGhzSiTNlq4vhXiU2sje74Uqmi Ug2gj02TyUkEZaIaXMbdyx5M3AvSWsuBGx/qfDhiKDZvhs59NwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFH15Rvo2OY7AUXxcFBogJMTDhuNiMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8z MGM5YmIyMi1kZDQzLTQ0NDAtYjIzNC00ZDFiNThlOGU3NDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzMwYzliYjIyLWRkNDMtNDQ0MC1i MjM0LTRkMWI1OGU4ZTc0Mi8zMGM5YmIyMi1kZDQzLTQ0NDAtYjIzNC00ZDFiNThl OGU3NDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBAPOUWAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVnOvknqwQLDWBcentzan myu4VhmzFGVP6a7Z6TAAWLECLIhRgUffBNmpV79OYSSa1FQx9tarPkspTFOgkBOh ftny/WvIaoXAAJxwD1QBmn+wRO+AHTcsDp7/pSXmFVWW7MQJuJlAc1TwFhQDabF8 z9fcUiAfmD1Z3xAMdWjQw7tkgwuT8lteTO0yFVF5ZhEjWc3jJS3gykKbweHNqUHk iBuxPASQhJIPD7XLwNvIg2/LutvPsXBW7ut1e+zFOAm46B5SGVkZBBm/3Mn4dGe/ 8ZMpHKiAvS8NNB2eC/xDh0Eb46RBj4+ApefeyxMf9BomgsbuQcA+N80K/MUBtjbb 6w== -----END CERTIFICATE-----Generated at Thu Feb 19 22:21:08 2026 by rpki-client