$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90.cer File: bfb16251-8a46-41ea-abc1-b785c8d4dc90.cer (raw, json) Hash identifier: SswMhoFMwjxoZr8qSEairAewqA+QGuSmMSfq4C1g9W4= Subject key identifier: 34:5F:46:B2:98:49:F4:7A:2B:C2:45:64:40:80:B3:A6:48:37:1A:07 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CCC4A09311094912A1863FB80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/bfb16251-8a46-41ea-abc1-b785c8d4dc90.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 08 Feb 2026 19:28:43 +0000 Certificate not after: Sat 13 May 2028 18:28:43 +0000 Subordinate resources: AS: 402162 IP: 149.112.186.0/24 IP: 2604:b2c0::/32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:cc:4a:09:31:10:94:91:2a:18:63:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 8 19:28:43 2026 GMT Not After : May 13 18:28:43 2028 GMT Subject: CN=bfb16251-8a46-41ea-abc1-b785c8d4dc90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:12:11:2d:ef:34:c4:04:a6:95:04:3e:ee:4d: 0c:a7:41:19:35:85:88:20:bf:70:4f:b1:f8:b0:11: c3:20:cc:a6:07:15:16:4c:ec:a1:7b:a6:e8:11:08: 6c:1c:ab:2f:fc:60:b2:d2:62:6f:33:8b:30:3d:48: d3:e7:e7:41:2c:4c:e0:e4:54:d4:80:b9:66:8b:78: e3:39:dd:ac:79:79:07:80:ea:89:10:eb:00:49:58: 19:20:d3:0e:57:59:e8:91:a4:87:47:7a:9b:94:b5: 84:fc:41:59:ea:4b:33:09:de:71:56:a4:26:77:f4: e9:93:39:04:f0:6d:55:4c:51:9a:a2:17:02:a4:7e: 92:b4:f8:7f:cf:10:1b:18:50:4b:e4:66:5a:61:ff: 1d:db:46:8c:b2:8c:95:4e:0b:5d:22:50:30:3d:ed: ee:35:54:cf:35:d2:f2:f5:d6:46:9f:f7:6f:9b:cd: 1a:bf:dc:2c:de:ff:1f:67:f5:de:ea:61:e3:f3:4f: 0d:83:fc:bb:0f:a9:37:4d:78:fe:d4:bc:d1:cd:d1: cc:10:1e:e3:a4:45:84:b0:6c:f8:74:c6:20:78:af: 9d:2f:ab:e9:d7:92:03:49:0b:c1:35:d8:b4:8b:76: 68:00:13:e4:13:74:6a:ef:49:cf:8e:c9:e8:59:a3: 60:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5F:46:B2:98:49:F4:7A:2B:C2:45:64:40:80:B3:A6:48:37:1A:07 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/bfb16251-8a46-41ea-abc1-b785c8d4dc90/bfb16251-8a46-41ea-abc1-b785c8d4dc90.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 149.112.186.0/24 IPv6: 2604:b2c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402162 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b0:12:40:2e:6a:1d:e8:95:23:fc:70:aa:71:0b:96:ba:a1: 38:7c:12:16:b8:1d:56:d9:84:64:79:ea:ad:38:bc:5d:c1:f0: 47:3c:92:ce:ae:61:34:fb:f1:4c:a1:16:4a:11:ea:c4:d0:1c: 62:25:3c:20:6b:e2:fd:91:08:ef:93:66:ab:d8:b2:57:a1:f5: a8:5d:4b:4b:63:a2:23:88:21:ef:52:bd:1c:a8:e5:96:82:ed: 06:67:51:96:8c:a4:cf:db:b0:d3:63:db:1f:ae:a8:f7:59:f1: 01:f4:48:34:24:00:e5:0d:2e:91:c8:a1:94:15:aa:14:93:6b: 8f:20:ce:d1:2a:4e:84:2b:06:8f:3e:95:1c:85:85:3d:e6:9b: 0d:7b:a5:8e:4b:4f:93:59:c5:ff:d5:bc:16:a8:80:80:94:48: 4b:b9:c8:51:bc:8d:20:8a:3e:d4:90:fd:6d:60:e3:4a:e4:e4: 20:bf:48:2f:0a:2d:e4:9e:cc:10:02:2a:80:5f:14:e1:49:d7: 54:e7:fa:5f:af:7f:82:15:7a:3d:07:4e:22:49:a8:2c:cd:d6: 10:66:01:80:9c:dd:5f:fa:92:e0:5a:1e:fa:e3:c3:22:75:00: c0:39:9b:4e:9a:39:44:89:44:39:95:55:8d:1b:5d:97:e7:8a: 50:e7:e9:7c -----BEGIN CERTIFICATE----- MIIHGDCCBgCgAwIBAgIUAQ0Mn0MoWEzMSgkxEJSRKhhj+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIwODE5Mjg0M1oXDTI4MDUxMzE4Mjg0M1owLzEtMCsGA1UEAxMk YmZiMTYyNTEtOGE0Ni00MWVhLWFiYzEtYjc4NWM4ZDRkYzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBIRLe80xASmlQQ+7k0Mp0EZNYWIIL9wT7H4 sBHDIMymBxUWTOyhe6boEQhsHKsv/GCy0mJvM4swPUjT5+dBLEzg5FTUgLlmi3jj Od2seXkHgOqJEOsASVgZINMOV1nokaSHR3qblLWE/EFZ6kszCd5xVqQmd/TpkzkE 8G1VTFGaohcCpH6StPh/zxAbGFBL5GZaYf8d20aMsoyVTgtdIlAwPe3uNVTPNdLy 9dZGn/dvm80av9ws3v8fZ/Xe6mHj808Ng/y7D6k3TXj+1LzRzdHMEB7jpEWEsGz4 dMYgeK+dL6vp15IDSQvBNdi0i3ZoABPkE3Rq70nPjsnoWaNgfwIDAQABo4IEKjCC BCYwHQYDVR0OBBYEFDRfRrKYSfR6K8JFZECAs6ZINxoHMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9i ZmIxNjI1MS04YTQ2LTQxZWEtYWJjMS1iNzg1YzhkNGRjOTAvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2JmYjE2MjUxLThhNDYtNDFlYS1h YmMxLWI3ODVjOGQ0ZGM5MC9iZmIxNjI1MS04YTQ2LTQxZWEtYWJjMS1iNzg1Yzhk NGRjOTAubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLgYIKwYBBQUH AQcBAf8EHzAdMAwEAgABMAYDBACVcLowDQQCAAIwBwMFACYEssAwGgYIKwYBBQUH AQgBAf8ECzAJoAcwBQIDBiLyMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKGwEkAuah3olSP8cKpxC5a6oTh8 Eha4HVbZhGR56q04vF3B8Ec8ks6uYTT78UyhFkoR6sTQHGIlPCBr4v2RCO+TZqvY sleh9ahdS0tjoiOIIe9SvRyo5ZaC7QZnUZaMpM/bsNNj2x+uqPdZ8QH0SDQkAOUN LpHIoZQVqhSTa48gztEqToQrBo8+lRyFhT3mmw17pY5LT5NZxf/VvBaogICUSEu5 yFG8jSCKPtSQ/W1g40rk5CC/SC8KLeSezBACKoBfFOFJ11Tn+l+vf4IVej0HTiJJ qCzN1hBmAYCc3V/6kuBaHvrjwyJ1AMA5m06aOUSJRDmVVY0bXZfnilDn6Xw= -----END CERTIFICATE-----Generated at Tue Feb 24 02:23:35 2026 by rpki-client