$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389.cer File: cff1a08e-9692-475a-9b04-916530111389.cer (raw, json) Hash identifier: o2f5wopmaSzF7rJn7x61gqnMbnqo5rSfuoP8U+QQpRU= Subject key identifier: FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584CDA1112CD58D5FC450168E4D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Fri 13 Feb 2026 17:55:16 +0000 Certificate not after: Thu 18 May 2028 16:55:16 +0000 Subordinate resources: AS: 402086 IP: 142.249.222.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:da:11:12:cd:58:d5:fc:45:01:68:e4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Feb 13 17:55:16 2026 GMT Not After : May 18 16:55:16 2028 GMT Subject: CN=cff1a08e-9692-475a-9b04-916530111389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e0:23:de:c1:16:78:50:df:76:a8:6e:32:7d: 0d:65:2f:cf:6e:a3:e3:bb:03:05:6a:66:95:61:57: 61:4c:e3:80:6c:fd:f8:80:bc:b0:22:0a:9b:e3:cf: 3d:5a:be:65:a1:61:05:fa:5e:37:27:d4:ed:ff:15: 8c:9b:36:92:af:f9:4e:c2:37:ac:0e:2d:50:17:e0: a3:37:73:c1:51:d4:f3:b2:17:78:e2:25:5b:17:1c: 39:e2:b2:2a:fe:a9:67:c0:0c:3b:b0:d6:ba:2a:81: a3:c6:b0:33:ab:c6:54:c0:92:68:9a:b2:c5:65:6e: d9:c9:b8:5a:9d:90:44:f0:20:7c:13:02:1a:cd:46: 6c:8f:99:75:6d:9e:db:d2:c3:53:4e:ea:3c:87:01: 62:2d:d2:e5:51:0b:14:49:7a:15:2d:38:35:74:06: 2f:e4:d0:d2:a6:25:38:31:e4:d5:8e:ac:08:18:b5: b8:c7:b2:45:a6:f8:1a:7f:9b:bb:b2:21:f8:2e:2b: 59:a4:b1:9f:38:65:a3:9a:ae:d4:52:68:ba:30:14: 37:45:5f:2b:4b:bc:30:39:b3:c3:50:2e:4f:7b:65: 84:b3:8f:59:c4:be:56:e2:59:57:55:8d:7c:0d:a8: 3e:51:ff:af:54:7c:a2:9f:01:cc:46:67:ee:65:1d: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BB:C0:9A:85:4C:31:0C:1B:9C:EF:DB:73:82:1C:CB:10:B9:F4:B1 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cff1a08e-9692-475a-9b04-916530111389/cff1a08e-9692-475a-9b04-916530111389.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 142.249.222.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 402086 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ff:fe:13:99:33:2c:57:0b:3d:bb:60:7f:d8:01:dd:fe:87: 39:b1:c8:56:ed:41:e5:aa:5d:91:8e:cb:69:72:ba:3f:68:08: c9:1a:eb:0e:ae:97:3d:c6:52:80:79:49:9a:4b:e8:f4:cd:b6: 2d:19:8c:51:fd:9f:38:41:86:63:0f:16:69:04:7f:91:6c:1b: fe:e1:4c:29:54:a2:59:37:90:f5:91:a4:8e:7f:a6:fd:12:4a: 43:b3:a7:07:5f:1e:86:d0:d7:e8:bb:be:ad:0b:66:c6:ba:e9: 0c:16:f8:80:6f:b4:67:a1:86:05:ee:da:ff:3e:d2:c3:cb:12: 15:12:99:77:a1:dc:42:2b:48:82:21:1c:aa:d7:e6:57:2e:bb: 84:ca:dd:ab:88:e8:ee:e7:8f:b2:3c:72:fa:e5:95:6e:b7:6c: 27:e2:b4:7d:b3:de:c6:ae:b7:0a:d9:e0:d6:18:85:da:52:4c: 10:b5:94:5d:69:3d:3c:d5:24:f7:98:ff:be:da:1a:a4:e1:49: 28:8d:10:5c:51:15:8f:9b:a8:26:e4:4d:a6:e6:dc:92:77:95: 4e:fa:81:23:17:c9:fd:d1:cd:97:53:37:e3:68:cc:ba:73:5f: a4:7c:c0:02:f5:80:d1:3e:d5:98:4c:3e:7a:1f:15:51:3f:5b: 9d:6d:76:4a -----BEGIN CERTIFICATE----- MIIHCTCCBfGgAwIBAgIUAQ0Mn0MoWEzaERLNWNX8RQFo5NgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDIxMzE3NTUxNloXDTI4MDUxODE2NTUxNlowLzEtMCsGA1UEAxMk Y2ZmMWEwOGUtOTY5Mi00NzVhLTliMDQtOTE2NTMwMTExMzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOAj3sEWeFDfdqhuMn0NZS/PbqPjuwMFamaV YVdhTOOAbP34gLywIgqb4889Wr5loWEF+l43J9Tt/xWMmzaSr/lOwjesDi1QF+Cj N3PBUdTzshd44iVbFxw54rIq/qlnwAw7sNa6KoGjxrAzq8ZUwJJomrLFZW7Zybha nZBE8CB8EwIazUZsj5l1bZ7b0sNTTuo8hwFiLdLlUQsUSXoVLTg1dAYv5NDSpiU4 MeTVjqwIGLW4x7JFpvgaf5u7siH4LitZpLGfOGWjmq7UUmi6MBQ3RV8rS7wwObPD UC5Pe2WEs49ZxL5W4llXVY18Dag+Uf+vVHyinwHMRmfuZR3FzQIDAQABo4IEGzCC BBcwHQYDVR0OBBYEFP+7wJqFTDEMG5zv23OCHMsQufSxMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9j ZmYxYTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1MzAxMTEzODkvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2NmZjFhMDhlLTk2OTItNDc1YS05 YjA0LTkxNjUzMDExMTM4OS9jZmYxYTA4ZS05NjkyLTQ3NWEtOWIwNC05MTY1MzAx MTEzODkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwHwYIKwYBBQUH AQcBAf8EEDAOMAwEAgABMAYDBACO+d4wGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BiKmMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJn//hOZMyxXCz27YH/YAd3+hzmxyFbtQeWqXZGOy2lyuj9o CMka6w6ulz3GUoB5SZpL6PTNti0ZjFH9nzhBhmMPFmkEf5FsG/7hTClUolk3kPWR pI5/pv0SSkOzpwdfHobQ1+i7vq0LZsa66QwW+IBvtGehhgXu2v8+0sPLEhUSmXeh 3EIrSIIhHKrX5lcuu4TK3auI6O7nj7I8cvrllW63bCfitH2z3sautwrZ4NYYhdpS TBC1lF1pPTzVJPeY/77aGqThSSiNEFxRFY+bqCbkTabm3JJ3lU76gSMXyf3RzZdT N+NozLpzX6R8wAL1gNE+1ZhMPnofFVE/W51tdko= -----END CERTIFICATE-----Generated at Fri Feb 27 08:44:13 2026 by rpki-client