$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f.cer File: bd567d0a-963f-4ba3-9f4c-c354a7181b9f.cer (raw, json) Hash identifier: 5RIaiY0PBVAkkqSYqUQkPZUCS2P4VnAHER+55RH1zRc= Subject key identifier: DB:91:CB:99:C2:D5:21:06:A4:A9:A0:83:92:DB:18:3C:55:E9:BA:F6 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D5D27254DFC4563DE80B11A20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f/bd567d0a-963f-4ba3-9f4c-c354a7181b9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 01 Apr 2026 16:50:38 +0000 Certificate not after: Tue 04 Jul 2028 16:50:38 +0000 Subordinate resources: AS: 18874 IP: 158.184.0.0/16 IP: 205.166.175.0/24 IP: 2620:136:3000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:27:25:4d:fc:45:63:de:80:b1:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 1 16:50:38 2026 GMT Not After : Jul 4 16:50:38 2028 GMT Subject: CN=bd567d0a-963f-4ba3-9f4c-c354a7181b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:dd:ef:6c:5a:18:6d:eb:33:1b:6e:6f:3b: 19:52:ad:37:f7:d9:63:60:5c:1b:a3:8f:8f:28:99: 5a:d4:a7:1c:c2:71:a4:18:3c:f6:41:f7:36:0f:b7: 06:a0:6f:11:4e:38:83:6a:9f:06:ec:c2:da:b8:2f: 19:72:12:74:70:e4:74:56:d0:bc:28:e4:f7:fc:aa: cf:fa:c7:9c:8e:a2:ef:13:c0:a2:a3:89:e3:69:fe: 72:68:74:7b:fd:44:e6:90:48:1a:2d:32:13:ad:03: e9:e4:f9:f1:9b:fe:d1:3c:40:d9:f7:81:e4:81:cc: 89:58:df:2b:8e:d3:d1:60:de:f9:f4:2b:57:fe:8f: ce:37:37:41:51:af:41:2e:94:00:54:9b:3d:45:cd: ce:94:67:a8:df:b6:2d:12:e6:58:7e:c1:4f:0e:7c: 95:08:33:5c:df:18:71:3f:47:67:58:95:89:5a:e3: e3:a9:24:a8:3c:d7:74:69:1a:c3:b0:86:50:6e:89: 65:d0:0e:b8:b1:8f:33:a4:6b:e9:b6:59:16:b5:10: 3e:89:93:f6:d0:6b:17:b4:2b:b2:41:2e:6d:0e:4a: 10:84:cb:ea:46:11:eb:61:cd:2b:0c:f7:63:c1:d3: 75:74:70:74:14:a1:6d:44:75:7c:dd:f1:e0:c1:42: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:91:CB:99:C2:D5:21:06:A4:A9:A0:83:92:DB:18:3C:55:E9:BA:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f/bd567d0a-963f-4ba3-9f4c-c354a7181b9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 158.184.0.0/16 205.166.175.0/24 IPv6: 2620:136:3000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18874 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4f:93:e3:56:75:c8:b7:04:f4:bb:89:da:5f:5c:37:2f:b8: 7f:f0:27:35:0e:ae:7c:cf:4f:e6:4c:2f:f7:9e:05:98:b0:a6: a1:7d:b9:50:7c:14:6b:3d:bb:1a:e6:f4:20:c2:f5:a0:6d:62: 5e:d6:3b:80:b7:8b:94:4c:6b:0c:6a:27:f7:55:99:15:70:4a: c1:24:29:2f:cb:07:bc:61:dc:a7:67:5d:72:ca:f1:42:3f:84: 09:7d:af:78:19:96:f3:1a:da:f8:e6:20:9d:ae:7c:d8:72:32: 91:ee:be:be:e9:98:ae:e5:71:36:a2:e2:64:30:ad:de:ae:93: 36:b7:6b:25:82:9c:b7:88:46:29:45:31:44:f5:9a:6c:d9:a4: ff:25:f5:9a:69:60:cf:eb:9a:3c:86:20:09:5b:06:f4:a7:f2: e4:c5:a8:52:16:7c:09:5b:e4:ff:c9:1c:5c:36:36:3e:8d:40: 68:69:41:50:cd:d8:56:82:58:0d:3a:99:b5:8b:4b:fc:c3:7b: f7:45:56:8c:5e:75:6f:8d:77:48:97:36:36:d7:27:85:54:36: 8f:5c:47:57:6a:d2:22:5e:6b:04:7e:5a:b8:a3:c1:0f:4e:d8: 4d:89:eb:09:32:7a:2a:23:26:2d:53:b2:ba:d6:1f:ad:18:af: 33:fa:85:e4 -----BEGIN CERTIFICATE----- MIIHHTCCBgWgAwIBAgIUAQ0Mn0MoWE1dJyVN/EVj3oCxGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwMTE2NTAzOFoXDTI4MDcwNDE2NTAzOFowLzEtMCsGA1UEAxMk YmQ1NjdkMGEtOTYzZi00YmEzLTlmNGMtYzM1NGE3MTgxYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj3d72xaGG3rMxtubzsZUq0399ljYFwbo4+P KJla1KccwnGkGDz2Qfc2D7cGoG8RTjiDap8G7MLauC8ZchJ0cOR0VtC8KOT3/KrP +secjqLvE8Cio4njaf5yaHR7/UTmkEgaLTITrQPp5Pnxm/7RPEDZ94HkgcyJWN8r jtPRYN759CtX/o/ONzdBUa9BLpQAVJs9Rc3OlGeo37YtEuZYfsFPDnyVCDNc3xhx P0dnWJWJWuPjqSSoPNd0aRrDsIZQboll0A64sY8zpGvptlkWtRA+iZP20GsXtCuy QS5tDkoQhMvqRhHrYc0rDPdjwdN1dHB0FKFtRHV83fHgwUIVqQIDAQABo4IELzCC BCswHQYDVR0OBBYEFNuRy5nC1SEGpKmgg5LbGDxV6br2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i ZDU2N2QwYS05NjNmLTRiYTMtOWY0Yy1jMzU0YTcxODFiOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JkNTY3ZDBhLTk2M2YtNGJhMy05 ZjRjLWMzNTRhNzE4MWI5Zi9iZDU2N2QwYS05NjNmLTRiYTMtOWY0Yy1jMzU0YTcx ODFiOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwNAYIKwYBBQUH AQcBAf8EJTAjMBEEAgABMAsDAwCeuAMEAM2mrzAOBAIAAjAIAwYAJiABNjAwGQYI KwYBBQUHAQgBAf8ECjAIoAYwBAICSbowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcO AjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMv cnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAM0+T41Z1yLcE9LuJ2l9c Ny+4f/AnNQ6ufM9P5kwv954FmLCmoX25UHwUaz27Gub0IML1oG1iXtY7gLeLlExr DGon91WZFXBKwSQpL8sHvGHcp2ddcsrxQj+ECX2veBmW8xra+OYgna582HIyke6+ vumYruVxNqLiZDCt3q6TNrdrJYKct4hGKUUxRPWabNmk/yX1mmlgz+uaPIYgCVsG 9Kfy5MWoUhZ8CVvk/8kcXDY2Po1AaGlBUM3YVoJYDTqZtYtL/MN790VWjF51b413 SJc2NtcnhVQ2j1xHV2rSIl5rBH5auKPBD07YTYnrCTJ6KiMmLVOyutYfrRivM/qF 5A== -----END CERTIFICATE-----Generated at Fri Apr 17 15:06:24 2026 by rpki-client