$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer File: 52bcbe0c-a14d-4b7d-b551-284e8fa1a655.cer (raw, json) Hash identifier: FOaIqhVMP8mm6MS1dOhOoyK3QoYjOyWsoXjjNNQOQQ4= Subject key identifier: 8B:7A:66:13:DC:77:A7:37:90:40:64:A3:AD:D3:D2:C5:9B:CA:C3:95 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D09B248E342C8B0DDCD6A5400 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Mar 2026 19:23:04 +0000 Certificate not after: Sun 04 Jun 2028 18:23:04 +0000 Subordinate resources: AS: 7328 IP: 159.14.0.0/16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:b2:48:e3:42:c8:b0:dd:cd:6a:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 2 19:23:04 2026 GMT Not After : Jun 4 18:23:04 2028 GMT Subject: CN=52bcbe0c-a14d-4b7d-b551-284e8fa1a655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6f:0f:29:c8:b4:07:f4:0f:ce:5c:ec:41:25: 3d:a3:ba:32:c7:6e:b5:fa:a2:0d:da:de:3a:17:82: db:5e:d4:d0:ed:dc:2c:d0:e5:7e:fc:95:84:00:65: 07:bb:03:9b:3b:07:ae:d1:b1:6a:3f:9c:01:14:bb: 4e:92:d8:d8:09:57:3e:11:97:59:d5:52:59:64:ab: ed:d5:9c:b5:05:fd:6e:ab:16:5e:e8:13:6f:aa:80: af:63:00:95:7f:2e:ae:71:b7:a3:07:42:9c:19:10: 82:79:51:0c:3a:c8:9b:ae:20:bd:e8:cf:b5:c4:01: bf:14:3f:1e:07:8d:cc:6c:2d:0d:b8:8b:5d:1d:52: 7a:ce:1f:ff:6c:67:8e:90:02:f5:b0:72:e1:6b:b3: bd:02:01:8a:7b:a1:d4:9a:e4:b4:00:9b:2d:95:f5: 2f:f2:05:80:94:0b:06:b6:1c:c6:7d:52:20:ca:99: 38:ee:c3:0d:07:dc:93:62:4f:ba:5f:c9:c9:dc:d7: 99:f3:b1:95:fa:a8:1a:53:7d:55:31:e9:3c:1b:43: 2d:e4:20:88:41:15:e3:f5:35:57:ca:76:f7:76:71: 7b:03:21:17:89:63:cb:46:49:29:11:82:c9:0f:39: ed:09:51:a9:2d:04:8c:98:03:0b:62:98:de:8d:10: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:7A:66:13:DC:77:A7:37:90:40:64:A3:AD:D3:D2:C5:9B:CA:C3:95 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/52bcbe0c-a14d-4b7d-b551-284e8fa1a655/52bcbe0c-a14d-4b7d-b551-284e8fa1a655.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 159.14.0.0/16 sbgp-autonomousSysNum: critical Autonomous System Numbers: 7328 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:67:cd:f1:a4:b7:06:15:5d:ee:77:8d:0e:77:63:84:10:30: fe:58:a0:57:a0:a1:fd:61:e4:5e:bb:90:f9:fd:41:a5:39:cc: 0c:35:54:08:53:56:29:a4:c5:05:93:8f:9a:52:a1:8f:6f:5c: 0b:35:70:2f:d5:b8:71:51:13:e8:2b:3a:c1:61:e6:43:5c:62: 30:8a:d4:d9:65:29:39:b6:e3:64:8b:67:1f:da:97:ea:dd:c5: b5:9f:57:be:74:28:55:75:df:93:a3:ac:e6:03:10:2c:54:89: b7:e9:67:8f:cb:75:50:63:41:01:00:2b:da:70:ae:ff:10:63: 8e:3a:20:32:7d:ce:52:e7:3c:83:63:2a:54:79:b9:04:db:75: a1:e4:67:86:f5:5e:52:d9:be:a0:f0:f5:cb:20:8a:60:c1:08: 0b:07:cc:68:d7:24:6d:de:45:2c:f5:20:ba:fb:f7:6b:d1:27: 99:5e:49:a5:40:84:b1:26:56:38:86:d9:94:44:af:ee:05:77: ba:71:24:5b:f1:63:65:cb:38:55:32:65:d8:f5:b4:1b:be:1c: 17:0e:0f:a6:a1:42:83:90:4b:b0:f4:12:bd:92:a1:bb:9a:9c: 86:e1:03:00:b5:54:f5:ec:3b:b4:d0:b5:dd:b9:af:1e:88:dc: bb:e1:54:ca -----BEGIN CERTIFICATE----- MIIHBzCCBe+gAwIBAgIUAQ0Mn0MoWE0JskjjQsiw3c1qVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwMjE5MjMwNFoXDTI4MDYwNDE4MjMwNFowLzEtMCsGA1UEAxMk NTJiY2JlMGMtYTE0ZC00YjdkLWI1NTEtMjg0ZThmYTFhNjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh28PKci0B/QPzlzsQSU9o7oyx261+qIN2t46 F4LbXtTQ7dws0OV+/JWEAGUHuwObOweu0bFqP5wBFLtOktjYCVc+EZdZ1VJZZKvt 1Zy1Bf1uqxZe6BNvqoCvYwCVfy6ucbejB0KcGRCCeVEMOsibriC96M+1xAG/FD8e B43MbC0NuItdHVJ6zh//bGeOkAL1sHLha7O9AgGKe6HUmuS0AJstlfUv8gWAlAsG thzGfVIgypk47sMNB9yTYk+6X8nJ3NeZ87GV+qgaU31VMek8G0Mt5CCIQRXj9TVX ynb3dnF7AyEXiWPLRkkpEYLJDzntCVGpLQSMmAMLYpjejRBc8QIDAQABo4IEGTCC BBUwHQYDVR0OBBYEFIt6ZhPcd6c3kEBko63T0sWbysOVMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81 MmJjYmUwYy1hMTRkLTRiN2QtYjU1MS0yODRlOGZhMWE2NTUvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzUyYmNiZTBjLWExNGQtNGI3ZC1i NTUxLTI4NGU4ZmExYTY1NS81MmJjYmUwYy1hMTRkLTRiN2QtYjU1MS0yODRlOGZh MWE2NTUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHgYIKwYBBQUH AQcBAf8EDzANMAsEAgABMAUDAwCfDjAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIc oDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA2Z83xpLcGFV3ud40Od2OEEDD+WKBXoKH9YeReu5D5/UGlOcwM NVQIU1YppMUFk4+aUqGPb1wLNXAv1bhxURPoKzrBYeZDXGIwitTZZSk5tuNki2cf 2pfq3cW1n1e+dChVdd+To6zmAxAsVIm36WePy3VQY0EBACvacK7/EGOOOiAyfc5S 5zyDYypUebkE23Wh5GeG9V5S2b6g8PXLIIpgwQgLB8xo1yRt3kUs9SC6+/dr0SeZ XkmlQISxJlY4htmURK/uBXe6cSRb8WNlyzhVMmXY9bQbvhwXDg+moUKDkEuw9BK9 kqG7mpyG4QMAtVT17Du00LXdua8eiNy74VTK -----END CERTIFICATE-----Generated at Tue Mar 3 08:59:12 2026 by rpki-client