$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4.cer File: 834e115f-402c-426f-945e-d1559aee07f4.cer (raw, json) Hash identifier: s/wbofsABbJh/A95p4ewN7GKwiy9gt0mXzg8Mv85QsA= Subject key identifier: C2:9E:C7:6D:EB:C9:17:23:4A:8E:78:0D:E0:06:90:60:91:A3:F5:1E Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC0746EDB04502D38AACD3E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/834e115f-402c-426f-945e-d1559aee07f4.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Feb 2026 13:44:26 +0000 Certificate not after: Tue 09 May 2028 12:44:26 +0000 Subordinate resources: IP: 209.225.112.0/20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:74:6e:db:04:50:2d:38:aa:cd:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 4 13:44:26 2026 GMT Not After : May 9 12:44:26 2028 GMT Subject: CN=834e115f-402c-426f-945e-d1559aee07f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:18:e3:33:7a:5e:ac:08:57:59:3f:de:76: 26:c6:0e:ba:47:8c:b4:a5:30:77:d2:9d:80:e7:f7: 31:ab:99:0f:5a:5d:d0:a0:9c:2a:a1:08:13:a9:2d: ea:02:3d:e6:61:fe:4b:d0:06:29:ec:5a:fd:d6:d4: c9:cf:dd:f8:52:87:15:d8:d9:0d:dd:fd:54:85:ac: 64:20:ee:5c:8a:60:c7:8f:81:75:d6:01:3a:d0:c8: b2:f8:3f:fe:4e:b5:69:f4:71:1d:4c:05:1d:d3:5f: 15:bc:b9:d6:57:e4:b0:35:32:e7:df:de:45:bb:75: 45:b4:54:87:59:41:da:be:fc:d0:72:8f:5e:7a:0d: d6:d1:0a:44:4b:32:a4:fc:4f:01:fb:c6:8f:0b:0c: 2a:2d:a7:41:e3:1b:da:21:cc:66:f2:0f:76:30:53: 78:cb:cc:44:41:22:a2:0b:cf:69:84:3f:c9:23:90: 99:bd:18:01:98:b2:e0:e1:41:77:89:72:be:ec:e0: ad:1a:27:42:97:89:67:a2:50:f6:7b:e9:e9:70:1d: da:af:97:85:72:da:ca:6f:54:c6:dd:03:45:02:42: f3:be:9d:8f:19:ca:62:7f:11:94:d4:81:07:ab:18: f4:fd:c7:a2:5a:6b:8b:8c:3e:0c:e5:2f:10:f9:8f: 22:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9E:C7:6D:EB:C9:17:23:4A:8E:78:0D:E0:06:90:60:91:A3:F5:1E Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/834e115f-402c-426f-945e-d1559aee07f4/834e115f-402c-426f-945e-d1559aee07f4.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 209.225.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:26:e2:18:ab:8b:2b:c1:82:33:76:fd:4b:79:63:97:1c:0f: 76:0b:7f:69:a8:ac:9d:70:2f:98:ef:fa:f5:7d:ae:b9:9d:5b: 90:98:97:76:be:b2:d8:80:e2:5a:88:9e:79:a9:08:2f:04:78: 22:d2:56:dd:64:d7:d9:39:c3:7f:7c:64:83:6a:d2:fa:ef:c9: f2:cf:b2:f8:34:a0:0e:68:e0:ec:ae:b3:d2:72:a2:a1:92:78: 9a:52:b7:3b:63:f5:dd:f6:b3:01:e2:fa:11:0c:1f:f4:be:9c: f3:22:e8:18:ed:d2:53:61:69:fa:fb:69:57:d6:02:34:68:a3: 51:87:04:63:15:aa:70:a6:01:9d:49:9d:41:b1:48:a3:c0:e3: 03:f6:65:9c:f1:75:26:56:44:1c:34:55:2a:78:42:64:09:18: d2:e4:e0:80:4a:f3:79:41:d0:0a:5d:3c:dc:0b:40:cd:8f:f6: 9d:04:f7:45:40:2a:b0:be:6e:bd:df:96:80:72:4e:f4:96:b0: 17:7d:f8:ba:5a:a3:30:fa:fc:38:82:21:22:a5:1a:5c:66:95: fa:1d:96:13:30:39:00:f9:b7:a9:cf:b1:aa:a7:72:29:09:75: dd:2e:1b:da:07:47:db:6d:6b:e6:3a:6e:3d:c9:15:af:fc:46: 47:7c:2b:1c -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWEzAdG7bBFAtOKrNPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNDEzNDQyNloXDTI4MDUwOTEyNDQyNlowLzEtMCsGA1UEAxMk ODM0ZTExNWYtNDAyYy00MjZmLTk0NWUtZDE1NTlhZWUwN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbkY4zN6XqwIV1k/3nYmxg66R4y0pTB30p2A 5/cxq5kPWl3QoJwqoQgTqS3qAj3mYf5L0AYp7Fr91tTJz934UocV2NkN3f1Uhaxk IO5cimDHj4F11gE60Miy+D/+TrVp9HEdTAUd018VvLnWV+SwNTLn395Fu3VFtFSH WUHavvzQco9eeg3W0QpESzKk/E8B+8aPCwwqLadB4xvaIcxm8g92MFN4y8xEQSKi C89phD/JI5CZvRgBmLLg4UF3iXK+7OCtGidCl4lnolD2e+npcB3ar5eFctrKb1TG 3QNFAkLzvp2PGcpifxGU1IEHqxj0/ceiWmuLjD4M5S8Q+Y8iPwIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMKex23ryRcjSo54DeAGkGCRo/UeMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 MzRlMTE1Zi00MDJjLTQyNmYtOTQ1ZS1kMTU1OWFlZTA3ZjQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzgzNGUxMTVmLTQwMmMtNDI2Zi05 NDVlLWQxNTU5YWVlMDdmNC84MzRlMTE1Zi00MDJjLTQyNmYtOTQ1ZS1kMTU1OWFl ZTA3ZjQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBATR4XAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEibiGKuLK8GCM3b9S3lj lxwPdgt/aaisnXAvmO/69X2uuZ1bkJiXdr6y2IDiWoieeakILwR4ItJW3WTX2TnD f3xkg2rS+u/J8s+y+DSgDmjg7K6z0nKioZJ4mlK3O2P13fazAeL6EQwf9L6c8yLo GO3SU2Fp+vtpV9YCNGijUYcEYxWqcKYBnUmdQbFIo8DjA/ZlnPF1JlZEHDRVKnhC ZAkY0uTggErzeUHQCl083AtAzY/2nQT3RUAqsL5uvd+WgHJO9JawF334ulqjMPr8 OIIhIqUaXGaV+h2WEzA5APm3qc+xqqdyKQl13S4b2gdH221r5jpuPckVr/xGR3wr HA== -----END CERTIFICATE-----Generated at Fri Feb 27 03:34:08 2026 by rpki-client