$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f.cer File: bd567d0a-963f-4ba3-9f4c-c354a7181b9f.cer (raw, json) Hash identifier: Juq5n5DUznQ/eUZjr4S+heTjS9CsMemGDNhaetdKtp4= Subject key identifier: DB:91:CB:99:C2:D5:21:06:A4:A9:A0:83:92:DB:18:3C:55:E9:BA:F6 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584ECB53330DD434A1D616D86A40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f/bd567d0a-963f-4ba3-9f4c-c354a7181b9f.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Mon 10 Aug 2026 20:45:15 +0000 Certificate not after: Tue 04 Jul 2028 16:50:38 +0000 Subordinate resources: AS: 18874 IP: 158.184.0.0 -- 158.184.2.255 IP: 158.184.4.0 -- 158.184.109.255 IP: 158.184.111.0 -- 158.184.191.255 IP: 158.184.208.0 -- 158.184.212.255 IP: 158.184.214.0 -- 158.184.223.255 IP: 158.184.225.0 -- 158.184.228.255 IP: 158.184.230.0 -- 158.184.255.255 IP: 205.166.175.0/24 IP: 2620:136:3000::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:53:33:0d:d4:34:a1:d6:16:d8:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Aug 10 20:45:15 2026 GMT Not After : Jul 4 16:50:38 2028 GMT Subject: CN=bd567d0a-963f-4ba3-9f4c-c354a7181b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:dd:ef:6c:5a:18:6d:eb:33:1b:6e:6f:3b: 19:52:ad:37:f7:d9:63:60:5c:1b:a3:8f:8f:28:99: 5a:d4:a7:1c:c2:71:a4:18:3c:f6:41:f7:36:0f:b7: 06:a0:6f:11:4e:38:83:6a:9f:06:ec:c2:da:b8:2f: 19:72:12:74:70:e4:74:56:d0:bc:28:e4:f7:fc:aa: cf:fa:c7:9c:8e:a2:ef:13:c0:a2:a3:89:e3:69:fe: 72:68:74:7b:fd:44:e6:90:48:1a:2d:32:13:ad:03: e9:e4:f9:f1:9b:fe:d1:3c:40:d9:f7:81:e4:81:cc: 89:58:df:2b:8e:d3:d1:60:de:f9:f4:2b:57:fe:8f: ce:37:37:41:51:af:41:2e:94:00:54:9b:3d:45:cd: ce:94:67:a8:df:b6:2d:12:e6:58:7e:c1:4f:0e:7c: 95:08:33:5c:df:18:71:3f:47:67:58:95:89:5a:e3: e3:a9:24:a8:3c:d7:74:69:1a:c3:b0:86:50:6e:89: 65:d0:0e:b8:b1:8f:33:a4:6b:e9:b6:59:16:b5:10: 3e:89:93:f6:d0:6b:17:b4:2b:b2:41:2e:6d:0e:4a: 10:84:cb:ea:46:11:eb:61:cd:2b:0c:f7:63:c1:d3: 75:74:70:74:14:a1:6d:44:75:7c:dd:f1:e0:c1:42: 15:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:91:CB:99:C2:D5:21:06:A4:A9:A0:83:92:DB:18:3C:55:E9:BA:F6 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bd567d0a-963f-4ba3-9f4c-c354a7181b9f/bd567d0a-963f-4ba3-9f4c-c354a7181b9f.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 158.184.0.0-158.184.2.255 158.184.4.0-158.184.109.255 158.184.111.0-158.184.191.255 158.184.208.0-158.184.212.255 158.184.214.0-158.184.223.255 158.184.225.0-158.184.228.255 158.184.230.0-158.184.255.255 205.166.175.0/24 IPv6: 2620:136:3000::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 18874 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c0:52:04:2f:85:97:0e:8d:90:72:ed:5f:7f:5d:29:4f:df: bd:44:2d:19:a5:64:ef:b6:64:7d:6c:9c:5d:00:dc:9f:3d:9b: 58:21:31:0a:d7:02:2d:12:b5:e1:0c:49:47:36:b0:88:d9:c8: ac:9b:65:dc:93:f9:e1:7b:25:db:b2:b5:ae:5c:5f:7b:6e:45: 94:52:1b:8e:7a:15:98:98:b8:5f:64:01:ce:27:58:46:29:bb: 9c:36:3d:ef:96:25:e6:aa:a7:36:cc:2f:b4:56:f9:e6:9f:3c: 63:6e:ae:2e:88:7d:cc:9d:15:f0:11:8a:99:68:00:93:af:be: 01:51:3b:ea:6d:c9:63:15:26:0c:19:12:80:5c:89:4d:26:04: 24:da:31:46:ac:13:8a:2e:9c:e6:ab:dd:66:81:85:59:b2:fb: ce:00:cc:c4:31:60:d2:e0:8d:b0:4b:b4:7b:e0:35:af:d0:3b: e3:e1:ae:4c:f9:3d:bc:bf:5d:d8:73:49:57:a2:78:5f:ab:ca: 0a:3c:41:21:de:da:6f:d7:28:3b:54:f7:5f:ba:9c:86:a4:8d: 51:17:fd:d5:9f:5f:1d:b3:1d:d0:4a:49:2d:59:42:cf:5a:00: e3:f3:c2:fd:7d:9b:a9:93:0b:a3:b0:a6:32:9d:56:95:10:33: 71:ba:5b:6d -----BEGIN CERTIFICATE----- MIIHejCCBmKgAwIBAgIUAQ0Mn0MoWE7LUzMN1DSh1hbYakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDgxMDIwNDUxNVoXDTI4MDcwNDE2NTAzOFowLzEtMCsGA1UEAxMk YmQ1NjdkMGEtOTYzZi00YmEzLTlmNGMtYzM1NGE3MTgxYjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj3d72xaGG3rMxtubzsZUq0399ljYFwbo4+P KJla1KccwnGkGDz2Qfc2D7cGoG8RTjiDap8G7MLauC8ZchJ0cOR0VtC8KOT3/KrP +secjqLvE8Cio4njaf5yaHR7/UTmkEgaLTITrQPp5Pnxm/7RPEDZ94HkgcyJWN8r jtPRYN759CtX/o/ONzdBUa9BLpQAVJs9Rc3OlGeo37YtEuZYfsFPDnyVCDNc3xhx P0dnWJWJWuPjqSSoPNd0aRrDsIZQboll0A64sY8zpGvptlkWtRA+iZP20GsXtCuy QS5tDkoQhMvqRhHrYc0rDPdjwdN1dHB0FKFtRHV83fHgwUIVqQIDAQABo4IEjDCC BIgwHQYDVR0OBBYEFNuRy5nC1SEGpKmgg5LbGDxV6br2MIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i ZDU2N2QwYS05NjNmLTRiYTMtOWY0Yy1jMzU0YTcxODFiOWYvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JkNTY3ZDBhLTk2M2YtNGJhMy05 ZjRjLWMzNTRhNzE4MWI5Zi9iZDU2N2QwYS05NjNmLTRiYTMtOWY0Yy1jMzU0YTcx ODFiOWYubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwgZAGCCsGAQUF BwEHAQH/BIGAMH4wbAQCAAEwZjALAwMDnrgDBACeuAIwDAMEAp64BAMEAZ64bDAM AwQAnrhvAwQGnriAMAwDBASeuNADBACeuNQwDAMEAZ641gMEBZ64wDAMAwQAnrjh AwQAnrjkMAsDBAGeuOYDAwCeuAMEAM2mrzAOBAIAAjAIAwYAJiABNjAwGQYIKwYB BQUHAQgBAf8ECjAIoAYwBAICSbowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAm8BSBC+Flw6NkHLtX39dKU/f vUQtGaVk77ZkfWycXQDcnz2bWCExCtcCLRK14QxJRzawiNnIrJtl3JP54Xsl27K1 rlxfe25FlFIbjnoVmJi4X2QBzidYRim7nDY975Yl5qqnNswvtFb55p88Y26uLoh9 zJ0V8BGKmWgAk6++AVE76m3JYxUmDBkSgFyJTSYEJNoxRqwTii6c5qvdZoGFWbL7 zgDMxDFg0uCNsEu0e+A1r9A74+GuTPk9vL9d2HNJV6J4X6vKCjxBId7ab9coO1T3 X7qchqSNURf91Z9fHbMd0EpJLVlCz1oA4/PC/X2bqZMLo7CmMp1WlRAzcbpbbQ== -----END CERTIFICATE-----Generated at Mon Aug 31 09:57:47 2026 by rpki-client