$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.cer File: cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.cer (raw, json) Hash identifier: hVEapykUG08JZo59gUy6QIPRpjvcb2s49Ww8F4Afdic= Subject key identifier: A9:A3:A4:31:B4:6B:63:43:F4:75:9C:6D:8A:15:61:D8:F5:56:2B:28 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D73C83C2BFC1C2100C2CE9980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 09 Apr 2026 19:22:59 +0000 Certificate not after: Wed 12 Jul 2028 19:22:59 +0000 Subordinate resources: AS: 402383 IP: 23.156.36.0/24 IP: 2602:f3fd::/40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:c8:3c:2b:fc:1c:21:00:c2:ce:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 9 19:22:59 2026 GMT Not After : Jul 12 19:22:59 2028 GMT Subject: CN=cd5fe8f0-47b2-4750-ab7b-e9ed929415f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:11:f5:c3:43:7b:71:5a:cc:8c:f5:90:c6:35: b2:bf:51:51:4c:8f:6c:82:82:6b:04:a6:c1:c1:7a: f9:c3:be:94:e8:9b:1b:5f:e2:08:45:fb:3f:36:b0: 48:35:82:9e:ed:f4:0f:ec:dd:e5:38:32:d3:c6:6f: 1a:53:52:cd:2f:d1:e0:72:d4:2e:d4:90:87:2d:33: e2:be:fe:3b:7c:68:99:88:71:47:0a:69:5f:08:91: 8f:c4:c6:1e:2c:bd:a0:42:66:72:d2:e6:dc:f2:22: 3e:20:65:81:8c:09:41:1b:61:32:73:15:5e:74:d2: 3b:94:41:d3:d3:7c:15:37:e8:3d:f3:33:11:be:16: 37:8c:72:a9:57:0c:89:94:f8:c9:15:fa:72:41:4f: 47:a5:f7:f3:42:aa:77:cf:3a:bc:26:7b:36:16:31: e3:89:4a:4d:26:af:cc:5f:55:f9:e2:76:27:81:27: c6:47:f9:0c:54:fb:8e:04:d6:06:4e:ec:87:75:bc: 3f:30:1f:1d:80:6f:96:8c:42:d4:7c:ee:26:20:b6: 46:28:1f:17:50:ff:30:dd:f2:f8:ba:c9:9d:ac:29: 7b:89:2f:af:cd:ef:37:f8:dc:3c:a4:20:a3:84:6d: 55:bf:d5:df:35:b3:78:39:fe:56:be:08:4b:8e:eb: ae:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:A4:31:B4:6B:63:43:F4:75:9C:6D:8A:15:61:D8:F5:56:2B:28 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2/cd5fe8f0-47b2-4750-ab7b-e9ed929415f2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 23.156.36.0/24 IPv6: 2602:f3fd::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402383 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:4d:2f:6a:1b:11:1e:8d:7e:4a:4c:ad:6e:0d:e4:f7:65:d6: 1e:0b:7d:ed:33:d4:be:94:85:d9:84:a7:cb:48:9a:1a:98:a4: 8b:78:d5:d2:2c:f2:43:ae:be:4b:92:1c:13:e9:ad:43:59:e2: 8a:c0:56:b0:b8:fe:ca:fd:31:ad:d2:8c:6b:06:52:2e:52:ea: 50:db:2f:09:32:db:aa:32:dc:da:d3:6f:d3:68:58:5b:87:a9: a3:f9:ec:81:f1:54:5f:6a:9f:6b:b9:96:29:27:0b:39:76:61: 96:26:b8:46:9c:a3:24:b2:ce:ad:cf:7f:08:5b:13:ee:85:57: e4:93:5a:01:49:2d:ae:a5:c2:e3:ed:7b:9d:69:db:5a:68:de: f3:a1:29:f9:89:e0:1e:35:c9:b6:e8:e9:31:58:53:69:45:7c: 68:3f:b5:6f:ca:b1:78:6b:bf:58:15:4b:7e:7f:c8:e0:ec:43: 41:df:74:3d:58:e9:c0:51:c5:c4:d2:82:14:e5:c1:2a:fc:2a: 9a:5e:14:15:3a:9c:00:fa:9e:47:86:12:0a:d5:c3:65:c1:e6: 85:84:1f:53:04:a4:05:75:a2:ab:41:ad:f4:c6:ff:19:18:4a: db:94:ec:48:af:05:1a:53:eb:27:10:c2:b4:0d:a2:b3:a7:65: 17:53:cd:b5 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1zyDwr/BwhAMLOmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwOTE5MjI1OVoXDTI4MDcxMjE5MjI1OVowLzEtMCsGA1UEAxMk Y2Q1ZmU4ZjAtNDdiMi00NzUwLWFiN2ItZTllZDkyOTQxNWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RH1w0N7cVrMjPWQxjWyv1FRTI9sgoJrBKbB wXr5w76U6JsbX+IIRfs/NrBINYKe7fQP7N3lODLTxm8aU1LNL9HgctQu1JCHLTPi vv47fGiZiHFHCmlfCJGPxMYeLL2gQmZy0ubc8iI+IGWBjAlBG2EycxVedNI7lEHT 03wVN+g98zMRvhY3jHKpVwyJlPjJFfpyQU9HpffzQqp3zzq8Jns2FjHjiUpNJq/M X1X54nYngSfGR/kMVPuOBNYGTuyHdbw/MB8dgG+WjELUfO4mILZGKB8XUP8w3fL4 usmdrCl7iS+vze83+Nw8pCCjhG1Vv9XfNbN4Of5WvghLjuuuPwIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFKmjpDG0a2ND9HWcbYoVYdj1VisoMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j ZDVmZThmMC00N2IyLTQ3NTAtYWI3Yi1lOWVkOTI5NDE1ZjIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2NkNWZlOGYwLTQ3YjItNDc1MC1h YjdiLWU5ZWQ5Mjk0MTVmMi9jZDVmZThmMC00N2IyLTQ3NTAtYWI3Yi1lOWVkOTI5 NDE1ZjIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXnCQwDgQCAAIwCAMGACYC8/0AMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYjzzBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAsTS9qGxEejX5KTK1uDeT3ZdYe C33tM9S+lIXZhKfLSJoamKSLeNXSLPJDrr5LkhwT6a1DWeKKwFawuP7K/TGt0oxr BlIuUupQ2y8JMtuqMtza02/TaFhbh6mj+eyB8VRfap9ruZYpJws5dmGWJrhGnKMk ss6tz38IWxPuhVfkk1oBSS2upcLj7XudadtaaN7zoSn5ieAeNcm26OkxWFNpRXxo P7VvyrF4a79YFUt+f8jg7ENB33Q9WOnAUcXE0oIU5cEq/CqaXhQVOpwA+p5HhhIK 1cNlweaFhB9TBKQFdaKrQa30xv8ZGErblOxIrwUaU+snEMK0DaKzp2UXU821 -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:07 2026 by rpki-client