$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e0c2d40-b49c-4df6-8660-76ae7465ec7c.cer File: 9e0c2d40-b49c-4df6-8660-76ae7465ec7c.cer (raw, json) Hash identifier: wnFfcBvE9r4jTRsEXqTB3rqI+nJNw3hqwjZfMHPPAxo= Subject key identifier: 61:05:00:9B:71:BF:A4:07:0C:BC:0B:5F:CC:FF:FA:3F:6A:4B:24:DC Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D5CBC8CC27CFB2767647318C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e0c2d40-b49c-4df6-8660-76ae7465ec7c/9e0c2d40-b49c-4df6-8660-76ae7465ec7c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e0c2d40-b49c-4df6-8660-76ae7465ec7c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Apr 2026 13:15:51 +0000 Certificate not after: Tue 04 Jul 2028 13:15:51 +0000 Subordinate resources: AS: 398261 IP: 142.202.92.0/24 IP: 2620:80:2000::/48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:bc:8c:c2:7c:fb:27:67:64:73:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 1 13:15:51 2026 GMT Not After : Jul 4 13:15:51 2028 GMT Subject: CN=9e0c2d40-b49c-4df6-8660-76ae7465ec7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:82:a6:fb:65:ae:db:fa:6c:80:5d:28:f2:7b: 99:be:04:35:ff:a0:34:6e:da:4c:03:e6:9d:26:ac: 63:6b:52:53:57:e5:2c:27:02:b0:e9:fb:d2:da:6f: 5f:cc:fd:4a:49:f0:85:04:cd:8e:fb:bd:1e:bd:f6: 75:79:4b:2c:06:c3:9a:f5:28:c0:a5:75:29:62:6d: aa:b3:25:10:e0:f7:62:fb:b2:a0:e2:02:a5:a8:9f: ab:c6:b1:ec:77:5f:79:95:ca:c1:c6:38:80:d2:5b: 1c:c8:6d:ef:51:ae:82:b6:34:51:38:36:2c:ce:c3: 73:1f:a0:4a:7b:0b:1a:19:11:83:38:44:af:9d:75: 3a:61:1b:87:ee:97:f0:93:2d:b1:c1:96:6e:d0:9f: 95:66:10:31:d3:85:e9:d0:c7:72:be:b2:bf:e2:c4: ee:9e:e1:13:95:c4:60:b5:50:64:69:68:25:c1:79: 0e:52:d0:c5:91:56:11:fd:4e:7d:3b:22:4c:6f:98: 42:50:4f:a2:99:a8:28:58:56:55:dc:48:1e:6c:6b: fd:28:59:86:4d:7b:e2:cd:d0:e6:d3:0c:e9:21:c8: e6:b8:e3:75:e9:3f:42:4a:cb:2d:bc:e1:5e:77:11: a9:7f:a6:4e:c5:d1:2a:15:04:ce:92:2a:07:79:4d: 0e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:05:00:9B:71:BF:A4:07:0C:BC:0B:5F:CC:FF:FA:3F:6A:4B:24:DC Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e0c2d40-b49c-4df6-8660-76ae7465ec7c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/9e0c2d40-b49c-4df6-8660-76ae7465ec7c/9e0c2d40-b49c-4df6-8660-76ae7465ec7c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 142.202.92.0/24 IPv6: 2620:80:2000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398261 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c5:c3:0e:0c:38:9e:75:58:fa:f5:5b:c9:47:88:86:9a:40: 8a:a9:ce:8f:ec:06:2f:42:37:93:93:5c:43:ed:2b:fb:00:b8: 5b:e8:7f:64:b9:3b:5b:3c:ac:71:be:70:59:b6:ee:61:25:d7: 09:39:c9:61:a3:5c:6d:f4:a8:12:14:da:7b:b3:bb:a6:01:7e: 3f:3d:3f:a3:2d:86:b3:f4:ba:5a:59:85:a1:f1:2a:22:f7:cd: b2:41:a3:45:c0:31:b1:0c:82:a9:63:1b:70:10:f8:64:a1:b2: b6:46:81:5e:ae:91:aa:24:c3:30:15:3f:41:c1:1d:2e:37:80: bb:c1:7e:8d:21:6b:dd:b2:75:a5:de:01:e5:08:2d:d3:2f:dd: e5:75:36:6a:55:13:e1:8c:b3:5b:21:78:3b:73:cd:01:2b:11: 3b:1a:a9:e0:4f:a7:c6:07:8d:a5:75:42:2c:c2:e5:63:3a:3c: 44:2f:fd:1c:5c:a8:95:5b:74:6f:fd:f4:16:19:e6:4c:01:90: 94:94:3f:9e:ee:ec:12:5e:03:0b:58:28:60:eb:69:a1:d5:ba: b3:2d:a7:08:09:07:20:f7:aa:7a:7f:c3:01:e6:69:97:99:94: fd:82:91:12:28:2e:c9:9e:f2:89:05:a0:b8:93:92:69:19:fc: a3:bd:b0:b2 -----BEGIN CERTIFICATE----- MIIHGjCCBgKgAwIBAgIUAQ0Mn0MoWE1cvIzCfPsnZ2RzGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwMTEzMTU1MVoXDTI4MDcwNDEzMTU1MVowLzEtMCsGA1UEAxMk OWUwYzJkNDAtYjQ5Yy00ZGY2LTg2NjAtNzZhZTc0NjVlYzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYKm+2Wu2/psgF0o8nuZvgQ1/6A0btpMA+ad Jqxja1JTV+UsJwKw6fvS2m9fzP1KSfCFBM2O+70evfZ1eUssBsOa9SjApXUpYm2q syUQ4Pdi+7Kg4gKlqJ+rxrHsd195lcrBxjiA0lscyG3vUa6CtjRRODYszsNzH6BK ewsaGRGDOESvnXU6YRuH7pfwky2xwZZu0J+VZhAx04Xp0MdyvrK/4sTunuETlcRg tVBkaWglwXkOUtDFkVYR/U59OyJMb5hCUE+imagoWFZV3EgebGv9KFmGTXvizdDm 0wzpIcjmuON16T9CSsstvOFedxGpf6ZOxdEqFQTOkioHeU0OTwIDAQABo4IELDCC BCgwHQYDVR0OBBYEFGEFAJtxv6QHDLwLX8z/+j9qSyTcMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85 ZTBjMmQ0MC1iNDljLTRkZjYtODY2MC03NmFlNzQ2NWVjN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1LzllMGMyZDQwLWI0OWMtNGRmNi04 NjYwLTc2YWU3NDY1ZWM3Yy85ZTBjMmQ0MC1iNDljLTRkZjYtODY2MC03NmFlNzQ2 NWVjN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMAYIKwYBBQUH AQcBAf8EITAfMAwEAgABMAYDBACOylwwDwQCAAIwCQMHACYgAIAgADAaBggrBgEF BQcBCAEB/wQLMAmgBzAFAgMGE7UwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAWsXDDgw4nnVY+vVbyUeIhppA iqnOj+wGL0I3k5NcQ+0r+wC4W+h/ZLk7Wzyscb5wWbbuYSXXCTnJYaNcbfSoEhTa e7O7pgF+Pz0/oy2Gs/S6WlmFofEqIvfNskGjRcAxsQyCqWMbcBD4ZKGytkaBXq6R qiTDMBU/QcEdLjeAu8F+jSFr3bJ1pd4B5Qgt0y/d5XU2alUT4YyzWyF4O3PNASsR Oxqp4E+nxgeNpXVCLMLlYzo8RC/9HFyolVt0b/30FhnmTAGQlJQ/nu7sEl4DC1go YOtpodW6sy2nCAkHIPeqen/DAeZpl5mU/YKREiguyZ7yiQWguJOSaRn8o72wsg== -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:24 2026 by rpki-client