$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b06e1c2b-eee4-4e93-9218-60662c73c5b9.cer File: b06e1c2b-eee4-4e93-9218-60662c73c5b9.cer (raw, json) Hash identifier: 5lhvf7usL/DVrq64rLmyJ8SVuwF8Rn9jfrRr+pJcJ8w= Subject key identifier: BD:D1:4C:50:13:B0:F1:E2:B1:91:0C:15:BE:3C:EA:B5:93:A2:ED:29 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D84453304CC21E168EDE16300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b06e1c2b-eee4-4e93-9218-60662c73c5b9/b06e1c2b-eee4-4e93-9218-60662c73c5b9.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b06e1c2b-eee4-4e93-9218-60662c73c5b9/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 15 Apr 2026 17:07:42 +0000 Certificate not after: Tue 18 Jul 2028 17:07:42 +0000 Subordinate resources: IP: 104.171.193.0/24 IP: 104.171.195.0/24 IP: 104.171.204.0/22 IP: 199.246.24.0/23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:84:45:33:04:cc:21:e1:68:ed:e1:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 15 17:07:42 2026 GMT Not After : Jul 18 17:07:42 2028 GMT Subject: CN=b06e1c2b-eee4-4e93-9218-60662c73c5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:a2:73:f1:ab:33:b3:65:75:05:b4:5b:dd: e5:06:a7:cb:7d:50:80:fe:ca:0e:d8:a8:4e:a8:4a: 88:61:3b:29:dc:99:e3:4e:35:4d:12:e6:df:06:8b: 93:4c:e0:ef:8f:06:7e:3f:c6:f6:88:97:2f:68:0b: 93:79:b8:24:39:84:83:64:1d:df:9a:8b:85:40:5d: 68:68:69:67:ce:aa:a7:f6:52:97:9e:2e:95:9e:29: 6c:ac:77:56:99:b9:e6:51:9b:d2:0f:41:af:e1:f5: d7:3e:07:57:3b:a8:0f:c0:f7:87:ae:d6:65:ca:23: 91:c2:fb:21:96:1f:be:b0:f7:4f:af:d3:71:75:0a: 98:50:ac:79:d9:5e:3c:f3:01:3c:68:cb:a3:d7:15: 26:57:e8:aa:ef:87:6b:1b:45:ff:a4:52:9c:14:4a: e3:6a:8f:de:2c:ef:e1:94:dd:b2:36:66:c7:e6:cb: 65:4d:ee:56:3b:99:a4:4a:f4:3b:90:ad:5e:16:0a: e8:08:0b:b7:50:99:11:70:63:4c:a2:6f:67:23:cd: 73:c2:d3:56:24:71:c0:d8:ef:9c:a9:a0:be:4f:57: 25:73:16:6c:f8:f3:b0:5f:74:8b:b7:83:ad:b1:f5: a1:00:8a:fc:6d:6a:e6:db:3a:00:71:fd:34:21:c0: 50:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D1:4C:50:13:B0:F1:E2:B1:91:0C:15:BE:3C:EA:B5:93:A2:ED:29 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b06e1c2b-eee4-4e93-9218-60662c73c5b9/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b06e1c2b-eee4-4e93-9218-60662c73c5b9/b06e1c2b-eee4-4e93-9218-60662c73c5b9.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 104.171.193.0/24 104.171.195.0/24 104.171.204.0/22 199.246.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c1:6c:ae:43:a9:e6:64:e5:49:5f:02:d2:07:ce:20:4b:b7: db:4c:a1:ad:70:c7:03:c9:73:90:17:8d:8e:f9:e7:ac:2b:ce: 70:5c:9d:9d:a1:67:e7:53:78:8c:e8:a2:38:48:60:ff:2d:ff: 06:42:28:10:9b:a2:6b:cd:73:9f:bf:99:84:75:bf:bf:79:0a: b1:bb:1f:ed:51:37:58:5f:3f:83:e9:47:fe:c6:55:6a:9c:82: 78:55:69:c6:48:74:22:ec:e9:a6:54:0e:45:58:b7:5e:d0:a6: 4d:9a:d4:02:8b:f6:76:ac:30:f1:b3:bb:66:e7:1e:39:86:32: 47:4d:27:61:42:35:77:ce:34:a0:6e:2c:0c:74:b0:78:70:d7: 64:ea:c5:c6:45:e2:e1:a3:3e:fd:e3:5c:95:17:36:8e:be:ef: 90:aa:1c:9b:32:b6:eb:8e:46:5a:2c:56:8f:bf:18:12:ff:78: 21:1f:b5:1c:a2:00:e0:5a:a4:e1:b3:0d:f5:f4:2f:0e:17:16: a2:2e:00:50:06:44:65:9b:99:12:0d:8c:c2:ea:c4:8f:da:8a: ba:4d:f3:ad:72:27:4a:f6:a1:d4:52:e6:de:c8:74:7f:1a:65: 54:1c:ce:eb:33:68:93:28:2b:ae:33:d0:8b:9c:23:ef:34:d7: 5f:bb:e4:1e -----BEGIN CERTIFICATE----- MIIG/zCCBeegAwIBAgIUAQ0Mn0MoWE2ERTMEzCHhaO3hYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxNTE3MDc0MloXDTI4MDcxODE3MDc0MlowLzEtMCsGA1UEAxMk YjA2ZTFjMmItZWVlNC00ZTkzLTkyMTgtNjA2NjJjNzNjNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1Wic/GrM7NldQW0W93lBqfLfVCA/soO2KhO qEqIYTsp3JnjTjVNEubfBouTTODvjwZ+P8b2iJcvaAuTebgkOYSDZB3fmouFQF1o aGlnzqqn9lKXni6VnilsrHdWmbnmUZvSD0Gv4fXXPgdXO6gPwPeHrtZlyiORwvsh lh++sPdPr9NxdQqYUKx52V488wE8aMuj1xUmV+iq74drG0X/pFKcFErjao/eLO/h lN2yNmbH5stlTe5WO5mkSvQ7kK1eFgroCAu3UJkRcGNMom9nI81zwtNWJHHA2O+c qaC+T1clcxZs+POwX3SLt4OtsfWhAIr8bWrm2zoAcf00IcBQzwIDAQABo4IEETCC BA0wHQYDVR0OBBYEFL3RTFATsPHisZEMFb486rWTou0pMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i MDZlMWMyYi1lZWU0LTRlOTMtOTIxOC02MDY2MmM3M2M1YjkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2IwNmUxYzJiLWVlZTQtNGU5My05 MjE4LTYwNjYyYzczYzViOS9iMDZlMWMyYi1lZWU0LTRlOTMtOTIxOC02MDY2MmM3 M2M1YjkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBABoq8EDBABoq8MDBAJoq8wDBAHH9hgwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAC8FsrkOp5mTlSV8C0gfOIEu320yhrXDHA8lzkBeNjvnnrCvOcFydnaFn51N4 jOiiOEhg/y3/BkIoEJuia81zn7+ZhHW/v3kKsbsf7VE3WF8/g+lH/sZVapyCeFVp xkh0IuzpplQORVi3XtCmTZrUAov2dqww8bO7ZuceOYYyR00nYUI1d840oG4sDHSw eHDXZOrFxkXi4aM+/eNclRc2jr7vkKocmzK2645GWixWj78YEv94IR+1HKIA4Fqk 4bMN9fQvDhcWoi4AUAZEZZuZEg2MwurEj9qKuk3zrXInSvah1FLm3sh0fxplVBzO 6zNokygrrjPQi5wj7zTXX7vkHg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:07 2026 by rpki-client