$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754.cer File: 922ae5f9-b830-4b75-87f1-538d9db7f754.cer (raw, json) Hash identifier: l0GJpqtjjEa/yUMbUOkhbpONUkAK9RITzsSAXoMBQAA= Subject key identifier: D4:96:A9:4A:48:78:6F:B8:FB:99:31:CC:C3:4B:C5:71:4D:4C:72:7F Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D86DD8A994D11C2C9AC908200 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/922ae5f9-b830-4b75-87f1-538d9db7f754.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Apr 2026 15:26:16 +0000 Certificate not after: Wed 19 Jul 2028 15:26:16 +0000 Subordinate resources: AS: 402403 IP: 209.162.206.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:dd:8a:99:4d:11:c2:c9:ac:90:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 16 15:26:16 2026 GMT Not After : Jul 19 15:26:16 2028 GMT Subject: CN=922ae5f9-b830-4b75-87f1-538d9db7f754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:77:fe:16:86:c0:5e:eb:ad:1c:31:74:d5:4e: 68:74:6a:88:25:5c:40:29:19:fc:63:15:13:be:37: d9:39:b0:a0:60:52:e1:1e:34:a3:00:8d:0d:bd:9c: e6:ee:5c:72:96:26:89:76:7d:5e:eb:46:e3:b2:fa: ff:52:df:5f:95:75:da:6e:9a:6d:2d:c4:3c:7d:16: d2:16:eb:0d:78:e5:bf:e8:42:78:5d:c6:2d:ca:62: d2:ab:d1:98:01:f8:4b:4c:f1:55:06:09:ad:8d:3c: a7:3f:a1:58:f6:c2:38:84:87:c5:38:29:cd:b6:f0: 5a:ef:e0:62:33:80:1d:20:33:e6:24:5d:9c:68:10: ab:10:c8:ae:c3:8f:04:a8:d3:0f:77:32:cb:5d:dd: 89:90:bb:76:ce:bb:a2:ee:65:78:41:f6:06:87:9f: 8a:de:38:cb:3e:ca:f3:91:e2:2f:00:09:32:27:ca: 3a:4b:31:8b:e9:9f:7c:23:8d:ab:a1:f7:1e:e5:b9: 9a:91:12:6c:ea:3b:ff:e6:92:2f:4f:92:d3:b0:e2: 2a:e2:1f:15:f7:f5:24:fc:9a:71:29:b5:ef:c0:5f: 9e:37:1b:f7:b3:ab:84:42:0f:15:cb:9f:d8:0b:44: e0:e1:dd:e0:83:b2:57:82:2c:ac:47:d8:be:70:1a: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:96:A9:4A:48:78:6F:B8:FB:99:31:CC:C3:4B:C5:71:4D:4C:72:7F Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/922ae5f9-b830-4b75-87f1-538d9db7f754/922ae5f9-b830-4b75-87f1-538d9db7f754.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 209.162.206.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402403 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:dc:ad:9e:6c:81:e2:36:7b:58:75:64:1b:af:1b:08:93:c5: ea:54:d5:7e:10:27:2f:85:c9:2a:f3:d8:0e:83:2f:98:d7:41: b5:b9:76:92:2d:93:d5:74:fb:eb:73:80:86:c9:a2:81:76:32: e9:33:f1:d3:e6:53:b3:4d:58:6b:9c:49:b3:48:cb:42:b6:af: 46:58:d2:4f:50:2e:07:9c:70:dd:f5:93:5e:31:19:57:9f:dc: 0e:50:92:3b:0f:3a:20:e2:a9:cc:60:a2:48:37:78:fa:28:7d: de:7e:e8:ad:44:fe:99:6b:a0:d3:5d:a0:51:5b:d4:31:80:55: 54:77:8b:b4:25:2e:ac:3d:c2:f0:fb:e6:bc:84:c5:06:8a:27: 18:41:f0:4a:83:9d:12:24:94:a2:0f:9c:7b:49:67:6d:8e:a2: 45:54:4c:00:a4:a9:3b:ac:bf:b8:a3:d7:96:33:a4:5a:d3:26: 67:b5:bb:b7:42:35:2e:33:00:e1:3a:f0:9d:d3:7c:56:6d:af: 0e:21:32:ff:4a:9e:84:98:50:2f:be:46:55:1f:7a:bf:3d:60: 47:7a:b3:98:50:56:8f:a5:20:db:b5:95:b6:a8:23:f6:15:52: 10:08:88:58:d4:b5:91:33:b0:f2:c0:da:84:5e:e4:bc:be:58: 43:e4:90:be -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWE2G3YqZTRHCyayQggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxNjE1MjYxNloXDTI4MDcxOTE1MjYxNlowLzEtMCsGA1UEAxMk OTIyYWU1ZjktYjgzMC00Yjc1LTg3ZjEtNTM4ZDlkYjdmNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHf+FobAXuutHDF01U5odGqIJVxAKRn8YxUT vjfZObCgYFLhHjSjAI0NvZzm7lxyliaJdn1e60bjsvr/Ut9flXXabpptLcQ8fRbS FusNeOW/6EJ4XcYtymLSq9GYAfhLTPFVBgmtjTynP6FY9sI4hIfFOCnNtvBa7+Bi M4AdIDPmJF2caBCrEMiuw48EqNMPdzLLXd2JkLt2zrui7mV4QfYGh5+K3jjLPsrz keIvAAkyJ8o6SzGL6Z98I42rofce5bmakRJs6jv/5pIvT5LTsOIq4h8V9/Uk/Jpx KbXvwF+eNxv3s6uEQg8Vy5/YC0Tg4d3gg7JXgiysR9i+cBoJEQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFNSWqUpIeG+4+5kxzMNLxXFNTHJ/MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 MjJhZTVmOS1iODMwLTRiNzUtODdmMS01MzhkOWRiN2Y3NTQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzkyMmFlNWY5LWI4MzAtNGI3NS04 N2YxLTUzOGQ5ZGI3Zjc1NC85MjJhZTVmOS1iODMwLTRiNzUtODdmMS01MzhkOWRi N2Y3NTQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBADRos4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiPjMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE7crZ5sgeI2e1h1ZBuvGwiTxepU1X4QJy+FySrz2A6DL5jX QbW5dpItk9V0++tzgIbJooF2Mukz8dPmU7NNWGucSbNIy0K2r0ZY0k9QLgeccN31 k14xGVef3A5QkjsPOiDiqcxgokg3ePoofd5+6K1E/plroNNdoFFb1DGAVVR3i7Ql Lqw9wvD75ryExQaKJxhB8EqDnRIklKIPnHtJZ22OokVUTACkqTusv7ij15YzpFrT Jme1u7dCNS4zAOE68J3TfFZtrw4hMv9KnoSYUC++RlUfer89YEd6s5hQVo+lINu1 lbaoI/YVUhAIiFjUtZEzsPLA2oRe5Ly+WEPkkL4= -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:26 2026 by rpki-client