$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888.cer File: 8e4e3399-63fe-44ac-8683-bec0b82b7888.cer (raw, json) Hash identifier: FwOYz7lO7Q0AeLqE80mIC6RI3awuvu5q7UjcGn7ghV0= Subject key identifier: CA:63:9F:3A:9E:98:27:B8:20:FB:C1:1F:49:8B:31:68:0F:3F:B3:BA Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D2582189511F19B909E461180 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/8e4e3399-63fe-44ac-8683-bec0b82b7888.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 12 Mar 2026 18:28:37 +0000 Certificate not after: Wed 14 Jun 2028 18:28:37 +0000 Subordinate resources: IP: 198.181.229.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:25:82:18:95:11:f1:9b:90:9e:46:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 12 18:28:37 2026 GMT Not After : Jun 14 18:28:37 2028 GMT Subject: CN=8e4e3399-63fe-44ac-8683-bec0b82b7888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6c:15:6d:d6:fc:c8:b0:52:4c:38:95:42:ab: 06:91:b7:6a:0f:55:04:79:5a:ae:fd:ae:7f:a9:cf: 94:2e:f1:09:c8:f5:1b:25:00:73:29:b1:4f:73:59: 73:5b:32:0b:da:ac:33:62:0e:23:b0:28:37:ec:1c: af:b1:43:76:c1:7c:36:88:5b:5f:1b:ad:eb:ab:5e: a0:fa:a5:0c:f4:2d:45:96:32:7c:3c:b2:91:24:3d: 93:f9:03:9e:b1:b4:6a:fd:2b:ee:df:80:f4:6f:ca: 6d:f7:4f:61:72:bd:a1:df:71:42:ad:90:6a:e4:b1: bb:4a:1f:ea:c0:b8:a5:1c:52:22:1a:ca:c8:40:38: c8:fa:38:a8:78:1e:5c:cd:73:1c:3c:be:ab:ff:4d: c4:4f:ee:f6:f3:ef:0a:12:4a:b8:a3:44:65:d2:79: 7d:43:7b:46:bf:c6:de:55:95:64:ed:12:7c:01:9e: aa:d5:f2:68:b6:ff:09:e8:68:c9:84:29:0c:11:ad: 0c:67:6e:d5:3e:1b:8c:67:d5:fc:d0:f3:f1:e3:c4: cf:c0:cb:90:d5:a6:0e:f2:36:69:12:86:ab:a2:f4: 15:34:af:fd:b2:25:c5:79:9c:7b:f1:33:60:e4:f8: 57:55:95:72:8a:1d:f8:cd:4e:a3:7a:19:10:1d:43: ba:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:63:9F:3A:9E:98:27:B8:20:FB:C1:1F:49:8B:31:68:0F:3F:B3:BA Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e4e3399-63fe-44ac-8683-bec0b82b7888/8e4e3399-63fe-44ac-8683-bec0b82b7888.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 198.181.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d2:36:be:e8:48:9d:af:08:54:bf:41:cf:76:c2:a6:2e:23: 8c:3c:77:a4:55:33:5a:dd:a2:ba:49:4d:2e:0f:d2:a2:83:4a: d3:09:a3:dc:b6:48:37:37:c8:5c:69:ff:db:1d:5b:63:ac:c6: bd:3d:25:a2:2f:62:db:b7:2e:64:43:2e:98:10:ad:75:62:7a: 42:40:45:e2:98:28:d5:5e:8f:00:22:86:85:cb:f5:a5:b5:65: e8:cb:a7:56:f3:11:0a:cc:b1:45:74:59:bb:99:3e:91:d8:f2: f0:5a:5a:a0:53:a5:bc:4b:ab:20:40:3e:a4:58:30:52:25:19: 8d:3b:18:4d:36:62:46:d0:97:da:56:d7:48:af:8c:7f:d4:02: eb:53:7f:57:20:3d:64:bf:9d:7b:67:3f:24:88:da:66:3e:1d: bf:03:1f:5c:a9:43:80:3f:b0:16:2b:c9:6a:ab:25:d5:97:d1: 8f:e4:36:c9:a8:5e:2f:9f:f3:7c:2f:a5:db:7b:cc:6d:06:84: 49:8b:22:83:4a:62:98:c5:d2:f5:39:ac:83:1d:16:49:a2:26: fc:ea:d8:e1:7f:b0:c3:e9:30:bd:0b:06:e3:82:ff:99:3b:2f: 3b:33:6f:64:04:dd:4c:29:1c:1a:c4:9b:0b:c3:22:07:ed:dd: 29:84:a5:ef -----BEGIN CERTIFICATE----- MIIG7TCCBdWgAwIBAgIUAQ0Mn0MoWE0lghiVEfGbkJ5GEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMxMjE4MjgzN1oXDTI4MDYxNDE4MjgzN1owLzEtMCsGA1UEAxMk OGU0ZTMzOTktNjNmZS00NGFjLTg2ODMtYmVjMGI4MmI3ODg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGwVbdb8yLBSTDiVQqsGkbdqD1UEeVqu/a5/ qc+ULvEJyPUbJQBzKbFPc1lzWzIL2qwzYg4jsCg37ByvsUN2wXw2iFtfG63rq16g +qUM9C1FljJ8PLKRJD2T+QOesbRq/Svu34D0b8pt909hcr2h33FCrZBq5LG7Sh/q wLilHFIiGsrIQDjI+jioeB5czXMcPL6r/03ET+728+8KEkq4o0Rl0nl9Q3tGv8be VZVk7RJ8AZ6q1fJotv8J6GjJhCkMEa0MZ27VPhuMZ9X80PPx48TPwMuQ1aYO8jZp EoarovQVNK/9siXFeZx78TNg5PhXVZVyih34zU6jehkQHUO6wQIDAQABo4ID/zCC A/swHQYDVR0OBBYEFMpjnzqemCe4IPvBH0mLMWgPP7O6MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84 ZTRlMzM5OS02M2ZlLTQ0YWMtODY4My1iZWMwYjgyYjc4ODgvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzhlNGUzMzk5LTYzZmUtNDRhYy04 NjgzLWJlYzBiODJiNzg4OC84ZTRlMzM5OS02M2ZlLTQ0YWMtODY4My1iZWMwYjgy Yjc4ODgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADGteUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJtI2vuhIna8IVL9Bz3bC pi4jjDx3pFUzWt2iuklNLg/SooNK0wmj3LZINzfIXGn/2x1bY6zGvT0loi9i27cu ZEMumBCtdWJ6QkBF4pgo1V6PACKGhcv1pbVl6MunVvMRCsyxRXRZu5k+kdjy8Fpa oFOlvEurIEA+pFgwUiUZjTsYTTZiRtCX2lbXSK+Mf9QC61N/VyA9ZL+de2c/JIja Zj4dvwMfXKlDgD+wFivJaqsl1ZfRj+Q2yaheL5/zfC+l23vMbQaESYsig0pimMXS 9Tmsgx0WSaIm/OrY4X+ww+kwvQsG44L/mTsvOzNvZATdTCkcGsSbC8MiB+3dKYSl 7w== -----END CERTIFICATE-----Generated at Mon Mar 16 15:04:34 2026 by rpki-client