$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c.cer File: a961eafc-626d-458b-880e-038ff7feee7c.cer (raw, json) Hash identifier: 8cjpR0Pafip3j7249FnWKNngxtOZeiO7laLzF/rlhaE= Subject key identifier: 0A:28:7A:7B:7F:59:E7:B4:03:75:50:8C:4E:A0:79:DD:45:2A:53:A8 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D08CADEA5332A2C1504FE9100 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/a961eafc-626d-458b-880e-038ff7feee7c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 02 Mar 2026 11:36:48 +0000 Certificate not after: Sun 04 Jun 2028 10:36:48 +0000 Subordinate resources: AS: 398964 IP: 136.175.161.0/24 IP: 208.73.0.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:ca:de:a5:33:2a:2c:15:04:fe:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Mar 2 11:36:48 2026 GMT Not After : Jun 4 10:36:48 2028 GMT Subject: CN=a961eafc-626d-458b-880e-038ff7feee7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a3:fd:f3:43:85:62:d4:e6:82:5e:7d:48:9e: 57:90:6b:51:54:bb:91:8f:7e:1f:4d:1e:36:36:6d: a7:cb:ae:10:f1:4e:0b:7b:db:91:e1:77:de:b2:5b: 66:6b:a3:df:f2:01:b0:2d:ee:a5:f8:32:f6:d1:0b: 75:18:cc:30:e2:a3:9b:62:38:04:49:ee:56:f0:18: 2c:25:5e:d3:f7:a4:3e:89:1e:5b:13:cc:ad:66:9c: f7:00:88:78:a1:44:fb:5a:80:cc:0c:91:b9:ea:53: 79:3f:ce:da:20:84:25:bd:f5:5a:fa:db:01:a8:2e: 7a:a0:65:d8:54:c5:2a:0d:67:d8:8f:cd:f1:65:40: ae:c3:1f:1b:c3:e6:af:de:25:00:57:eb:b2:7f:a6: 2b:36:de:57:7d:cc:12:cc:a0:62:32:34:17:c7:f7: 84:36:6f:ad:dd:6b:4c:7f:31:c2:46:c8:3b:0d:a6: 5f:60:3b:84:66:62:27:e0:ae:73:2b:a2:93:d6:03: 5a:fb:42:97:82:15:7a:71:29:23:25:1d:49:f6:b4: a7:79:52:c4:4a:dc:d8:de:4d:0c:ae:0a:9d:c2:d2: 87:c4:fb:cd:6b:6f:0b:9d:2c:d5:80:34:9d:1c:37: 56:52:27:1f:e8:07:8c:9e:f4:70:e4:56:0a:fe:58: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:28:7A:7B:7F:59:E7:B4:03:75:50:8C:4E:A0:79:DD:45:2A:53:A8 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/a961eafc-626d-458b-880e-038ff7feee7c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 136.175.161.0/24 208.73.0.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 398964 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c4:46:cb:42:22:1e:6d:c8:d3:b3:7c:2e:ea:12:f0:c6:26: 83:9a:58:21:4a:fc:89:e2:96:6a:37:a8:3f:3c:ef:2a:cf:07: 71:0c:f1:0f:fb:fc:bb:dc:72:39:8c:41:37:35:fe:fc:c8:73: fa:67:ec:5b:fe:d7:d3:4d:1d:2e:95:05:cc:c9:53:af:d4:f3: d4:68:ca:70:2d:4a:16:a1:04:0b:7c:d8:fe:1a:1f:31:ad:97: 8d:22:6b:f8:e7:be:51:54:55:43:96:d4:2f:6f:aa:eb:d5:2e: 52:84:7e:3f:d3:84:fe:50:69:e4:e3:fb:fa:ed:39:1d:e1:17: d4:27:d0:f3:a7:38:43:72:d4:f4:67:c8:c5:e0:1a:55:36:aa: fa:d6:fa:f0:e2:cb:d5:09:5a:6e:f9:7c:4f:a8:51:e0:50:3f: 76:d8:8f:ed:4a:b7:b8:58:f6:75:1b:94:ea:10:79:a5:dd:8d: 31:ac:fc:3b:b0:41:22:32:ae:72:c6:d8:06:52:f2:93:5d:f8: 1c:97:dc:a9:72:17:84:43:12:07:83:b7:07:c8:79:fc:86:4a: 87:ee:41:26:17:0e:fa:7f:af:65:07:4e:ed:eb:83:21:55:9e: d7:e9:17:82:2a:57:d8:25:d9:b1:f0:3f:96:b3:cb:64:3e:00: 1c:24:ad:27 -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWE0Iyt6lMyosFQT+kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDMwMjExMzY0OFoXDTI4MDYwNDEwMzY0OFowLzEtMCsGA1UEAxMk YTk2MWVhZmMtNjI2ZC00NThiLTg4MGUtMDM4ZmY3ZmVlZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqP980OFYtTmgl59SJ5XkGtRVLuRj34fTR42 Nm2ny64Q8U4Le9uR4Xfesltma6Pf8gGwLe6l+DL20Qt1GMww4qObYjgESe5W8Bgs JV7T96Q+iR5bE8ytZpz3AIh4oUT7WoDMDJG56lN5P87aIIQlvfVa+tsBqC56oGXY VMUqDWfYj83xZUCuwx8bw+av3iUAV+uyf6YrNt5XfcwSzKBiMjQXx/eENm+t3WtM fzHCRsg7DaZfYDuEZmIn4K5zK6KT1gNa+0KXghV6cSkjJR1J9rSneVLEStzY3k0M rgqdwtKHxPvNa28LnSzVgDSdHDdWUicf6AeMnvRw5FYK/lg+aQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFAooent/Wee0A3VQjE6ged1FKlOoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9h OTYxZWFmYy02MjZkLTQ1OGItODgwZS0wMzhmZjdmZWVlN2MvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2E5NjFlYWZjLTYyNmQtNDU4Yi04 ODBlLTAzOGZmN2ZlZWU3Yy9hOTYxZWFmYy02MjZkLTQ1OGItODgwZS0wMzhmZjdm ZWVlN2MubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBACIr6EDBALQSQAwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDBhZ0MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBADXERstCIh5tyNOzfC7qEvDGJoOaWCFK/Inilmo3 qD887yrPB3EM8Q/7/LvccjmMQTc1/vzIc/pn7Fv+19NNHS6VBczJU6/U89RoynAt ShahBAt82P4aHzGtl40ia/jnvlFUVUOW1C9vquvVLlKEfj/ThP5QaeTj+/rtOR3h F9Qn0POnOENy1PRnyMXgGlU2qvrW+vDiy9UJWm75fE+oUeBQP3bYj+1Kt7hY9nUb lOoQeaXdjTGs/DuwQSIyrnLG2AZS8pNd+ByX3KlyF4RDEgeDtwfIefyGSofuQSYX Dvp/r2UHTu3rgyFVntfpF4IqV9gl2bHwP5azy2Q+ABwkrSc= -----END CERTIFICATE-----Generated at Tue Mar 3 09:00:44 2026 by rpki-client