$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.cer File: 88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.cer (raw, json) Hash identifier: PfHl4m/piSAgj+VF2W7PK1GAfa+J7yoWnrgSGa4wZT8= Subject key identifier: 30:F3:7D:73:28:DE:5B:F8:A8:C9:89:6B:F2:3E:C1:42:A0:E9:EC:ED Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CC0E172171405D03D09802810 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 04 Feb 2026 17:24:05 +0000 Certificate not after: Tue 09 May 2028 16:24:05 +0000 Subordinate resources: AS: 393278 IP: 64.45.168.0/23 IP: 72.46.92.0/22 IP: 141.193.192.0/23 IP: 152.117.48.0/20 IP: 208.79.112.0/22 IP: 2605:33c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:e1:72:17:14:05:d0:3d:09:80:28:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 4 17:24:05 2026 GMT Not After : May 9 16:24:05 2028 GMT Subject: CN=88ab4e91-e06e-4a0d-9b7e-99559f17fa2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0b:f5:67:db:86:62:cb:c2:72:47:ba:74:41: 21:11:77:9c:52:ba:16:e1:ec:a2:57:72:93:18:2d: 8e:35:58:e9:61:1c:30:6c:1e:65:73:38:2f:ba:10: 3a:1c:ca:c7:11:37:79:e6:79:95:ab:b8:71:54:cb: 24:a4:99:1e:6b:da:e0:e2:d0:8b:28:58:85:ec:68: 7f:0e:de:b0:23:2d:2c:cc:ad:28:bc:16:1a:ba:d9: 2b:54:67:5d:cb:4b:d1:7c:3c:f0:72:f4:b7:c8:47: c5:6e:91:4e:76:02:8d:6b:70:91:d9:e8:64:fb:ed: 56:62:ed:27:c5:14:79:04:63:01:52:46:a4:a4:6f: 1f:72:aa:20:03:34:19:0d:0c:60:c8:94:c8:93:4b: d3:52:7e:50:d5:d5:4f:cc:bd:43:8b:f2:f9:b4:18: 1f:5f:9f:84:a1:a1:be:4e:bb:6d:60:f3:f1:76:96: 1c:c6:1b:31:b3:35:1b:1a:10:20:cf:fa:40:f9:97: 33:f0:d5:68:28:de:b0:28:87:f2:a9:c0:b6:c2:2b: 72:56:34:f3:b6:69:62:47:fe:20:0b:fa:cd:38:6d: 71:b2:3f:12:9d:aa:5f:ca:71:df:cd:4e:10:31:da: 96:9f:24:31:a0:47:0d:cf:a8:8f:a1:af:1b:06:1d: 55:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F3:7D:73:28:DE:5B:F8:A8:C9:89:6B:F2:3E:C1:42:A0:E9:EC:ED Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b/88ab4e91-e06e-4a0d-9b7e-99559f17fa2b.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 64.45.168.0/23 72.46.92.0/22 141.193.192.0/23 152.117.48.0/20 208.79.112.0/22 IPv6: 2605:33c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 393278 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:6a:32:b5:58:71:9a:cd:1e:3a:7a:2d:6f:9f:2a:55:79:9a: 36:84:79:ec:e4:7f:87:00:14:52:f5:28:22:43:82:c1:a4:5f: d3:7e:9b:92:2d:e6:a1:5b:47:49:97:84:ba:00:53:14:a3:d3: b3:d8:99:ae:23:cc:f1:71:dd:8a:85:34:62:e8:97:1f:50:01: 4a:e2:18:f2:29:3b:63:79:42:02:f3:0e:e4:5e:77:06:1c:9d: 66:4c:bc:c5:61:be:36:e6:fc:b1:2a:80:c4:67:b6:b9:44:47: 83:e2:c3:16:7d:c2:e9:91:df:96:22:5d:8e:b8:5f:72:31:6c: 3d:28:c1:8d:4c:9d:56:8e:41:bc:04:be:c6:bd:7a:90:a6:98: e0:0b:6f:44:ba:1e:52:9b:79:ed:6d:55:8c:67:40:d4:db:9e: 44:7e:d1:cc:6b:17:04:fb:5e:07:b9:7e:7a:41:dd:e9:45:82: 5c:d5:f3:2d:1b:0f:8d:20:fb:c6:26:cc:00:b1:20:ae:42:a0: fb:3c:83:38:5e:07:ab:76:d0:6d:0b:00:9b:af:48:7e:d4:08: ed:26:8f:19:bc:c8:e1:c9:db:eb:3e:bd:9e:c8:02:f3:e7:cb: 8a:23:84:6b:c0:00:b1:0e:8f:b1:cb:d3:7a:8c:5a:1e:1b:32: 70:de:fa:32 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWEzA4XIXFAXQPQmAKBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwNDE3MjQwNVoXDTI4MDUwOTE2MjQwNVowLzEtMCsGA1UEAxMk ODhhYjRlOTEtZTA2ZS00YTBkLTliN2UtOTk1NTlmMTdmYTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQv1Z9uGYsvCcke6dEEhEXecUroW4eyiV3KT GC2ONVjpYRwwbB5lczgvuhA6HMrHETd55nmVq7hxVMskpJkea9rg4tCLKFiF7Gh/ Dt6wIy0szK0ovBYautkrVGddy0vRfDzwcvS3yEfFbpFOdgKNa3CR2ehk++1WYu0n xRR5BGMBUkakpG8fcqogAzQZDQxgyJTIk0vTUn5Q1dVPzL1Di/L5tBgfX5+EoaG+ TrttYPPxdpYcxhsxszUbGhAgz/pA+Zcz8NVoKN6wKIfyqcC2wityVjTztmliR/4g C/rNOG1xsj8SnapfynHfzU4QMdqWnyQxoEcNz6iPoa8bBh1VWQIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFDDzfXMo3lv4qMmJa/I+wUKg6eztMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 OGFiNGU5MS1lMDZlLTRhMGQtOWI3ZS05OTU1OWYxN2ZhMmIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzg4YWI0ZTkxLWUwNmUtNGEwZC05 YjdlLTk5NTU5ZjE3ZmEyYi84OGFiNGU5MS1lMDZlLTRhMGQtOWI3ZS05OTU1OWYx N2ZhMmIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAFALagDBAJILlwDBAGNwcADBASYdTADBALQT3Aw DQQCAAIwBwMFACYFM8AwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBgA+MFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAHBqMrVYcZrNHjp6LW+fKlV5mjaEeezkf4cAFFL1KCJDgsGkX9N+m5It5qFb R0mXhLoAUxSj07PYma4jzPFx3YqFNGLolx9QAUriGPIpO2N5QgLzDuRedwYcnWZM vMVhvjbm/LEqgMRntrlER4PiwxZ9wumR35YiXY64X3IxbD0owY1MnVaOQbwEvsa9 epCmmOALb0S6HlKbee1tVYxnQNTbnkR+0cxrFwT7Xge5fnpB3elFglzV8y0bD40g +8YmzACxIK5CoPs8gzheB6t20G0LAJuvSH7UCO0mjxm8yOHJ2+s+vZ7IAvPny4oj hGvAALEOj7HL03qMWh4bMnDe+jI= -----END CERTIFICATE-----Generated at Thu Feb 26 11:55:55 2026 by rpki-client