$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/480bcf0e-c040-41e8-be0d-b24856cb1951.cer File: 480bcf0e-c040-41e8-be0d-b24856cb1951.cer (raw, json) Hash identifier: o5rdulFzDUBRZPvYNsP+b8LTEc+COJFpDxcOpXfPNv8= Subject key identifier: D4:7A:6C:45:44:F7:6D:DE:21:DC:DA:01:D0:7E:66:E0:0D:2F:8F:1C Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D1528BB2CB81E14B737CB8420 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/480bcf0e-c040-41e8-be0d-b24856cb1951/480bcf0e-c040-41e8-be0d-b24856cb1951.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/480bcf0e-c040-41e8-be0d-b24856cb1951/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 06 Mar 2026 21:55:37 +0000 Certificate not after: Thu 08 Jun 2028 20:55:37 +0000 Subordinate resources: IP: 144.17.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:28:bb:2c:b8:1e:14:b7:37:cb:84:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 6 21:55:37 2026 GMT Not After : Jun 8 20:55:37 2028 GMT Subject: CN=480bcf0e-c040-41e8-be0d-b24856cb1951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:be:96:74:db:72:56:e8:72:ed:b2:61:e8:99: 86:c8:76:14:e1:7a:66:f1:c5:b0:3a:eb:e2:b4:f1: e6:68:8c:10:93:94:fd:81:a6:4f:3f:89:a8:64:b7: a3:1c:86:92:e0:c6:4e:69:7f:ba:b7:33:62:40:c9: 7f:7e:f5:7d:5e:8d:f9:a4:b5:1f:66:0f:92:77:12: c8:31:d4:de:bd:56:03:e8:3a:f5:b9:bb:b3:ab:53: 8c:dc:1c:20:29:d7:35:59:dc:f9:50:1f:7c:fc:2c: 2e:c4:66:7c:f7:21:fa:b4:3b:cc:b6:6c:dc:fc:d0: db:c7:1f:01:a5:fb:0d:79:37:ed:35:20:ec:f6:5e: 97:61:92:6c:b3:b5:f5:62:07:b9:b5:07:0c:34:8f: 14:ea:ca:5a:47:84:88:55:4e:3b:86:12:a0:8d:03: 28:ea:b6:78:66:11:68:fc:ea:7e:89:34:c5:0e:28: 57:b4:2d:dd:cf:7e:84:89:52:8f:51:d3:3c:5f:bf: 1e:c7:69:ab:6b:32:f1:df:4e:e4:d9:96:70:99:01: 6d:4f:e9:5b:6e:25:bb:2c:c7:be:9a:46:6d:64:e0: 63:e1:9b:b7:c3:3d:6b:fd:96:4d:86:f4:87:ca:71: cb:1e:e0:dd:38:5c:9e:39:9b:2d:47:df:be:62:fe: 27:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7A:6C:45:44:F7:6D:DE:21:DC:DA:01:D0:7E:66:E0:0D:2F:8F:1C Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/480bcf0e-c040-41e8-be0d-b24856cb1951/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/480bcf0e-c040-41e8-be0d-b24856cb1951/480bcf0e-c040-41e8-be0d-b24856cb1951.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 144.17.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:1c:ab:9a:c1:ec:9f:c1:68:d1:d2:16:42:12:af:fc:bb:1f: d0:85:bd:9c:55:40:84:b4:a6:8f:47:d3:db:35:9b:f3:fd:74: ff:0d:33:32:d4:da:7f:7e:31:67:dd:f0:7a:14:cb:42:b8:2a: d8:1d:57:66:4c:d4:12:82:d8:2a:46:05:f0:67:4b:77:46:9e: e2:4d:0f:66:9c:0e:a0:24:b2:7d:5a:b9:d1:0e:6f:37:19:0b: 12:85:a1:35:21:bd:be:5c:bc:d2:93:41:50:21:61:78:d6:80: 6d:4e:7f:6f:12:4b:46:96:7d:23:70:e4:12:07:ac:a0:4b:f7: 60:5a:3a:4e:31:2d:ba:da:34:2e:1b:a8:b8:62:cb:c5:cc:e1: 69:41:80:81:38:e5:aa:20:02:f8:a6:6f:6b:d1:05:d6:77:d6: 31:89:10:23:21:12:3b:3e:82:17:47:64:35:52:04:e7:2b:67: 61:4b:7d:87:46:08:71:bf:c8:77:f2:48:01:3b:07:0b:d5:0b: e5:bf:41:f6:e6:72:f1:21:1c:8b:5d:23:3b:e2:76:41:d3:96: 49:36:26:31:49:ea:50:64:8a:08:74:02:a2:02:78:7e:f7:58: db:00:e9:08:68:29:c8:23:dc:c0:84:ad:68:d4:f7:50:61:98: 74:11:ad:11 -----BEGIN CERTIFICATE----- MIIG7DCCBdSgAwIBAgIUAQ0Mn0MoWE0VKLssuB4UtzfLhCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwNjIxNTUzN1oXDTI4MDYwODIwNTUzN1owLzEtMCsGA1UEAxMk NDgwYmNmMGUtYzA0MC00MWU4LWJlMGQtYjI0ODU2Y2IxOTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr6WdNtyVuhy7bJh6JmGyHYU4Xpm8cWwOuvi tPHmaIwQk5T9gaZPP4moZLejHIaS4MZOaX+6tzNiQMl/fvV9Xo35pLUfZg+SdxLI MdTevVYD6Dr1ubuzq1OM3BwgKdc1Wdz5UB98/CwuxGZ89yH6tDvMtmzc/NDbxx8B pfsNeTftNSDs9l6XYZJss7X1Yge5tQcMNI8U6spaR4SIVU47hhKgjQMo6rZ4ZhFo /Op+iTTFDihXtC3dz36EiVKPUdM8X78ex2mrazLx307k2ZZwmQFtT+lbbiW7LMe+ mkZtZOBj4Zu3wz1r/ZZNhvSHynHLHuDdOFyeOZstR9++Yv4nbQIDAQABo4ID/jCC A/owHQYDVR0OBBYEFNR6bEVE923eIdzaAdB+ZuANL48cMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80 ODBiY2YwZS1jMDQwLTQxZTgtYmUwZC1iMjQ4NTZjYjE5NTEvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzQ4MGJjZjBlLWMwNDAtNDFlOC1i ZTBkLWIyNDg1NmNiMTk1MS80ODBiY2YwZS1jMDQwLTQxZTgtYmUwZC1iMjQ4NTZj YjE5NTEubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCQETBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQChHKuaweyfwWjR0hZCEq/8 ux/Qhb2cVUCEtKaPR9PbNZvz/XT/DTMy1Np/fjFn3fB6FMtCuCrYHVdmTNQSgtgq RgXwZ0t3Rp7iTQ9mnA6gJLJ9WrnRDm83GQsShaE1Ib2+XLzSk0FQIWF41oBtTn9v EktGln0jcOQSB6ygS/dgWjpOMS262jQuG6i4YsvFzOFpQYCBOOWqIAL4pm9r0QXW d9YxiRAjIRI7PoIXR2Q1UgTnK2dhS32HRghxv8h38kgBOwcL1Qvlv0H25nLxIRyL XSM74nZB05ZJNiYxSepQZIoIdAKiAnh+91jbAOkIaCnII9zAhK1o1PdQYZh0Ea0R -----END CERTIFICATE-----Generated at Sun Mar 15 09:28:24 2026 by rpki-client