$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/899f578c-b87a-4e09-831f-ed94cfdb50db.cer File: 899f578c-b87a-4e09-831f-ed94cfdb50db.cer (raw, json) Hash identifier: G5AOhLZAWDu+9DHC9HTMBx2Y0UtJHnsI4FNMyRZSJ5s= Subject key identifier: C4:EF:3F:50:B3:08:34:67:A4:A8:88:37:6B:4D:C9:5B:B8:51:58:0F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D08E868AD8DE4BD1BC3DAB330 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/899f578c-b87a-4e09-831f-ed94cfdb50db/899f578c-b87a-4e09-831f-ed94cfdb50db.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/899f578c-b87a-4e09-831f-ed94cfdb50db/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Mar 2026 12:36:19 +0000 Certificate not after: Thu 04 May 2028 15:56:29 +0000 Subordinate resources: AS: 402146 IP: 161.210.46.0/24 IP: 161.210.92.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:e8:68:ad:8d:e4:bd:1b:c3:da:b3:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 2 12:36:19 2026 GMT Not After : May 4 15:56:29 2028 GMT Subject: CN=899f578c-b87a-4e09-831f-ed94cfdb50db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7c:bd:ee:3f:20:75:33:82:b2:96:ea:7d:1a: 97:e0:66:e0:10:4b:2d:7c:16:56:c3:55:a1:d6:b4: 76:64:ef:ff:d6:c2:9f:41:88:6b:73:36:5e:49:81: b3:86:8d:6c:2c:e0:ba:1f:46:1b:8e:64:e1:6c:95: 73:57:c9:93:d7:35:45:f7:5c:fa:98:52:b7:da:da: aa:a6:76:40:a7:6a:fd:9e:41:20:3f:bc:6f:73:19: 9f:4a:b3:9c:05:f9:ca:f9:02:67:62:60:6c:8b:fd: 81:5f:21:5c:33:ea:b9:bd:86:97:69:94:f3:c0:00: a7:8a:8b:a3:db:30:b5:09:e0:02:48:db:8c:f9:a9: e1:b2:5b:de:ec:05:2e:42:18:0f:16:0a:e9:8b:89: 54:bc:33:a5:f9:c7:e0:a4:28:bf:22:88:14:0b:25: 8f:9e:dd:27:4e:72:60:dd:35:07:0f:9e:ae:cb:49: 50:78:78:1b:2b:da:09:a1:3e:17:31:f9:e6:1c:6f: 5a:6f:d9:9e:56:0c:b8:f2:8e:fa:69:2f:67:b4:5d: 8f:fe:19:66:c6:24:e3:e4:70:f7:c1:2e:db:5a:f7: d1:0f:5d:cf:d1:e6:f8:8d:eb:85:2c:ca:fc:46:65: d3:1d:3e:be:36:b1:47:30:f4:4b:04:14:4c:11:34: 65:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EF:3F:50:B3:08:34:67:A4:A8:88:37:6B:4D:C9:5B:B8:51:58:0F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/899f578c-b87a-4e09-831f-ed94cfdb50db/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/899f578c-b87a-4e09-831f-ed94cfdb50db/899f578c-b87a-4e09-831f-ed94cfdb50db.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 161.210.46.0/24 161.210.92.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402146 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:4d:c1:a5:80:95:7b:fb:ba:09:c1:cc:e8:6e:ff:70:ee:5a: 62:65:30:c6:44:1d:e4:42:72:ab:b7:b5:90:c8:db:ec:9e:59: c8:8d:72:2a:07:03:01:fc:6c:94:b5:3a:8e:0e:37:45:b4:95: a8:2f:2f:e4:c5:68:3c:20:5a:da:f8:20:34:35:dd:47:09:26: 6c:0a:63:0a:89:36:a6:35:ba:26:48:4a:2f:01:d3:c9:f2:99: 95:e8:49:bc:68:01:36:f4:b2:db:e0:ee:84:a5:25:02:08:04: 3b:6f:14:a6:4a:0a:f6:57:b7:7c:30:3c:dc:ab:78:64:17:c7: c0:54:e6:36:0f:49:db:2c:9b:6a:0d:3e:51:a0:ea:1c:88:99: 33:02:ad:35:68:b6:58:bc:db:58:22:e1:3f:42:c9:0a:36:c4: 5f:b3:b6:59:3f:c6:32:ee:3e:ae:d2:bf:a0:e9:e5:e0:bd:0d: d6:02:03:3f:57:6d:ba:ba:55:bc:c5:1c:8f:f0:4b:86:8a:4f: 20:80:b0:54:b5:76:60:cc:1b:70:ea:52:b3:63:d7:1c:dc:10: 3d:eb:1f:5f:05:6b:62:b3:94:75:df:68:2c:33:a6:d1:84:1c: bb:e0:48:01:82:54:00:d9:ef:b6:fa:9c:0f:4e:cd:a3:0a:f8: 2b:8c:50:3e -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE0I6GitjeS9G8PaszAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwMjEyMzYxOVoXDTI4MDUwNDE1NTYyOVowLzEtMCsGA1UEAxMk ODk5ZjU3OGMtYjg3YS00ZTA5LTgzMWYtZWQ5NGNmZGI1MGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3y97j8gdTOCspbqfRqX4GbgEEstfBZWw1Wh 1rR2ZO//1sKfQYhrczZeSYGzho1sLOC6H0YbjmThbJVzV8mT1zVF91z6mFK32tqq pnZAp2r9nkEgP7xvcxmfSrOcBfnK+QJnYmBsi/2BXyFcM+q5vYaXaZTzwACniouj 2zC1CeACSNuM+anhslve7AUuQhgPFgrpi4lUvDOl+cfgpCi/IogUCyWPnt0nTnJg 3TUHD56uy0lQeHgbK9oJoT4XMfnmHG9ab9meVgy48o76aS9ntF2P/hlmxiTj5HD3 wS7bWvfRD13P0eb4jeuFLMr8RmXTHT6+NrFHMPRLBBRMETRlqwIDAQABo4IEITCC BB0wHQYDVR0OBBYEFMTvP1CzCDRnpKiIN2tNyVu4UVgPMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 OTlmNTc4Yy1iODdhLTRlMDktODMxZi1lZDk0Y2ZkYjUwZGIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1Lzg5OWY1NzhjLWI4N2EtNGUwOS04 MzFmLWVkOTRjZmRiNTBkYi84OTlmNTc4Yy1iODdhLTRlMDktODMxZi1lZDk0Y2Zk YjUwZGIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACh0i4DBAKh0lwwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBiLiMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHNNwaWAlXv7ugnBzOhu/3DuWmJlMMZEHeRCcqu3 tZDI2+yeWciNcioHAwH8bJS1Oo4ON0W0lagvL+TFaDwgWtr4IDQ13UcJJmwKYwqJ NqY1uiZISi8B08nymZXoSbxoATb0stvg7oSlJQIIBDtvFKZKCvZXt3wwPNyreGQX x8BU5jYPSdssm2oNPlGg6hyImTMCrTVotli821gi4T9CyQo2xF+ztlk/xjLuPq7S v6Dp5eC9DdYCAz9Xbbq6VbzFHI/wS4aKTyCAsFS1dmDMG3DqUrNj1xzcED3rH18F a2KzlHXfaCwzptGEHLvgSAGCVADZ77b6nA9OzaMK+CuMUD4= -----END CERTIFICATE-----Generated at Tue Mar 3 08:58:16 2026 by rpki-client