$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bcb54c82-341d-4c4b-bb41-078eb6f6fe06.cer File: bcb54c82-341d-4c4b-bb41-078eb6f6fe06.cer (raw, json) Hash identifier: CHU+ejb/G/mOjL0s+Xd0brHtyEjobHPEKo+zlOY9wlU= Subject key identifier: BC:56:B0:59:AD:CE:8B:AB:DD:2F:03:95:2F:ED:2D:87:71:2D:78:0D Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584DFA09B8F649E80B9BA8161890 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bcb54c82-341d-4c4b-bb41-078eb6f6fe06/bcb54c82-341d-4c4b-bb41-078eb6f6fe06.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bcb54c82-341d-4c4b-bb41-078eb6f6fe06/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 27 May 2026 21:33:15 +0000 Certificate not after: Sun 07 May 2028 20:24:33 +0000 Subordinate resources: AS: 399049 IP: 64.8.96.0/19 IP: 131.162.96.0/20 IP: 147.136.96.0/19 IP: 162.120.96.0/19 IP: 192.153.72.0/22 IP: 2606:6c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:09:b8:f6:49:e8:0b:9b:a8:16:18:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: May 27 21:33:15 2026 GMT Not After : May 7 20:24:33 2028 GMT Subject: CN=bcb54c82-341d-4c4b-bb41-078eb6f6fe06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:13:06:ee:af:d4:89:39:1d:54:7c:da:25:8c: 3a:57:78:0d:7e:a5:fd:5e:20:38:55:85:56:29:bf: 74:ba:6e:34:57:a2:1f:24:a0:60:cc:fc:6b:f6:3a: 90:92:4a:17:3b:8e:15:b8:b9:e6:94:33:be:e4:b1: 8a:ba:e0:69:3e:4f:70:7a:0d:77:34:e8:1e:ff:41: e9:c8:ea:e8:0b:7a:70:f7:a9:ed:bb:31:4f:27:e2: fb:a9:06:fd:1b:1e:bf:65:3b:8b:26:7e:63:df:32: 05:4f:d3:06:19:d6:03:6e:7b:39:db:cf:3c:cd:f1: 58:9e:2f:4a:60:7d:12:e6:ef:95:72:ee:93:24:3f: 19:68:91:67:85:c8:e4:03:af:20:a0:48:00:f8:a1: 70:81:de:6d:5e:2b:a1:cb:a5:b5:3c:bc:b8:57:3b: aa:53:d1:d8:65:41:e0:2e:e3:8b:81:2e:e1:e2:2b: ac:28:71:61:13:24:2b:1f:f9:a9:e7:79:47:a7:d7: 4a:c6:ca:27:ca:2a:34:45:cc:9c:2a:56:b6:04:cc: aa:4b:9f:90:b0:a4:25:24:03:fd:e3:4d:25:29:27: de:bc:99:e6:28:27:2a:0c:74:17:0b:6c:45:7b:18: 90:f1:40:ab:d5:95:28:6c:08:63:ed:57:3f:ee:bf: ec:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:56:B0:59:AD:CE:8B:AB:DD:2F:03:95:2F:ED:2D:87:71:2D:78:0D Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bcb54c82-341d-4c4b-bb41-078eb6f6fe06/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bcb54c82-341d-4c4b-bb41-078eb6f6fe06/bcb54c82-341d-4c4b-bb41-078eb6f6fe06.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 64.8.96.0/19 131.162.96.0/20 147.136.96.0/19 162.120.96.0/19 192.153.72.0/22 IPv6: 2606:6c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 399049 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:17:46:56:13:fe:f8:05:67:1d:8a:7c:eb:8d:94:3c:3e:2a: 6e:b1:9a:60:ba:fe:82:92:79:c8:95:7e:13:29:8b:db:cc:41: 28:09:73:a6:be:b9:bc:48:e4:de:93:0c:01:1e:5e:c6:1b:d8: 33:3e:c8:4c:f5:8f:57:cc:8e:ce:d0:4f:b7:51:76:04:91:da: 26:fe:3f:8c:d2:f9:35:ad:11:80:ca:d6:f6:91:14:a5:06:0e: 67:b1:b7:54:fe:e7:29:c8:5a:86:31:84:9c:6b:e9:39:a7:51: 6c:68:9d:8e:6b:2f:80:36:25:3d:56:00:92:5c:87:cf:2d:76: 64:a4:2e:eb:a8:ad:e4:07:80:44:66:74:de:02:6c:22:38:f4: 0d:94:e2:a2:4f:1d:6f:53:8c:01:a3:a5:48:b5:1b:1d:4e:34: bf:2d:91:cb:64:4c:4d:e3:d2:6c:3c:1a:04:34:c9:38:9f:a5: 8b:92:9e:ff:54:21:93:66:96:d3:8d:78:39:84:f9:c0:b9:6a: 71:20:d8:69:02:c8:eb:e8:73:0b:d5:7d:ce:b4:6e:3b:f3:35: e0:2f:d5:93:d0:54:5f:e6:5d:4b:60:96:a7:d1:30:ba:22:85: e8:e7:ab:4d:84:eb:3e:a8:d0:d4:3f:c1:fc:8f:b7:20:01:d3: 09:3d:d0:69 -----BEGIN CERTIFICATE----- MIIHMDCCBhigAwIBAgIUAQ0Mn0MoWE36Cbj2SegLm6gWGJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDUyNzIxMzMxNVoXDTI4MDUwNzIwMjQzM1owLzEtMCsGA1UEAxMk YmNiNTRjODItMzQxZC00YzRiLWJiNDEtMDc4ZWI2ZjZmZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihMG7q/UiTkdVHzaJYw6V3gNfqX9XiA4VYVW Kb90um40V6IfJKBgzPxr9jqQkkoXO44VuLnmlDO+5LGKuuBpPk9weg13NOge/0Hp yOroC3pw96ntuzFPJ+L7qQb9Gx6/ZTuLJn5j3zIFT9MGGdYDbns52888zfFYni9K YH0S5u+Vcu6TJD8ZaJFnhcjkA68goEgA+KFwgd5tXiuhy6W1PLy4VzuqU9HYZUHg LuOLgS7h4iusKHFhEyQrH/mp53lHp9dKxsonyio0RcycKla2BMyqS5+QsKQlJAP9 400lKSfevJnmKCcqDHQXC2xFexiQ8UCr1ZUobAhj7Vc/7r/sWwIDAQABo4IEQjCC BD4wHQYDVR0OBBYEFLxWsFmtzour3S8DlS/tLYdxLXgNMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i Y2I1NGM4Mi0zNDFkLTRjNGItYmI0MS0wNzhlYjZmNmZlMDYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JjYjU0YzgyLTM0MWQtNGM0Yi1i YjQxLTA3OGViNmY2ZmUwNi9iY2I1NGM4Mi0zNDFkLTRjNGItYmI0MS0wNzhlYjZm NmZlMDYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwRgYIKwYBBQUH AQcBAf8ENzA1MCQEAgABMB4DBAVACGADBASDomADBAWTiGADBAWieGADBALAmUgw DQQCAAIwBwMFACYGBsAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBhbJMFQGA1Ud IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQAD ggEBAFYXRlYT/vgFZx2KfOuNlDw+Km6xmmC6/oKSeciVfhMpi9vMQSgJc6a+ubxI 5N6TDAEeXsYb2DM+yEz1j1fMjs7QT7dRdgSR2ib+P4zS+TWtEYDK1vaRFKUGDmex t1T+5ynIWoYxhJxr6TmnUWxonY5rL4A2JT1WAJJch88tdmSkLuuoreQHgERmdN4C bCI49A2U4qJPHW9TjAGjpUi1Gx1ONL8tkctkTE3j0mw8GgQ0yTifpYuSnv9UIZNm ltONeDmE+cC5anEg2GkCyOvocwvVfc60bjvzNeAv1ZPQVF/mXUtglqfRMLoihejn q02E6z6o0NQ/wfyPtyAB0wk90Gk= -----END CERTIFICATE-----Generated at Mon Jun 1 21:45:45 2026 by rpki-client