$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.cer File: e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.cer (raw, json) Hash identifier: PGrDSlS2cqpjaD4r8YokaJyNKJf4OxicHgR198w30mk= Subject key identifier: 58:97:6B:B9:A9:B6:8C:33:64:00:9F:6D:17:4B:49:66:68:1C:19:00 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D8687E98E3FA14AB8423A0300 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 16 Apr 2026 12:33:44 +0000 Certificate not after: Wed 19 Jul 2028 12:33:44 +0000 Subordinate resources: AS: 26767 AS: 397820 IP: 161.199.13.0/24 IP: 161.199.112.0/24 IP: 192.82.209.0/24 IP: 192.133.16.0/24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:87:e9:8e:3f:a1:4a:b8:42:3a:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 16 12:33:44 2026 GMT Not After : Jul 19 12:33:44 2028 GMT Subject: CN=e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:fb:0d:04:ed:7e:88:43:70:1a:52:86:82:fb: 18:dc:3a:b8:29:00:86:03:e0:81:d4:31:ee:0f:7c: cc:bc:5c:46:47:fc:4b:8d:7b:aa:98:9e:37:4d:a2: e6:24:79:aa:44:ce:85:ae:86:85:52:51:10:f2:ef: c5:02:c9:a4:5b:4f:22:99:8f:69:ac:12:68:b3:2c: a2:d6:62:4b:d6:57:9a:b5:89:53:0e:f0:06:6b:22: 90:91:49:9d:c6:34:bc:5e:e8:be:65:51:42:ec:af: d7:73:cb:89:3d:20:47:47:53:df:79:a4:d4:64:00: c9:75:6d:99:fa:da:f0:03:ca:12:74:7f:03:d8:fc: 0b:5f:64:08:11:c0:96:e9:3c:94:7f:12:fe:86:2e: f5:8e:b2:12:35:50:d5:4b:ee:e7:83:b3:17:eb:02: 94:55:ca:e1:4e:09:48:8b:73:cf:c9:a3:a8:92:09: 58:d9:a9:ed:36:56:e5:4e:6e:08:84:e2:91:ae:21: cf:de:01:bc:06:6d:cd:6d:79:54:e8:a4:54:22:b5: f5:48:00:66:21:21:da:30:ec:02:18:81:c2:55:72: 52:72:b7:b2:4f:69:ec:ed:20:88:29:42:29:97:60: 66:5e:d1:53:90:74:42:a7:0a:a9:90:bd:4a:37:90: 02:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:97:6B:B9:A9:B6:8C:33:64:00:9F:6D:17:4B:49:66:68:1C:19:00 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7/e960e02f-3943-4e6d-9cc0-fe4c0a1b67d7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 161.199.13.0/24 161.199.112.0/24 192.82.209.0/24 192.133.16.0/24 sbgp-autonomousSysNum: critical Autonomous System Numbers: 26767 397820 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3a:ab:2a:9a:48:0e:39:35:47:50:82:85:b2:30:19:cf:2f: 26:0e:37:b0:f8:fa:65:61:87:79:75:8e:14:da:ee:07:82:d3: ff:dc:f2:92:27:d9:2c:41:85:c4:90:01:07:9d:9f:ad:89:77: 28:19:20:c4:98:d0:12:01:04:41:ea:a1:45:7e:b3:f6:16:49: f7:ad:49:75:e5:76:fd:27:89:ea:8a:4b:db:f6:b6:5e:07:20: a1:cb:a0:47:7c:c0:1b:ea:37:67:14:b5:ff:2d:d7:5f:4c:fd: 7a:ad:84:9e:95:96:3f:1c:d9:49:e9:48:83:f0:9b:e7:3b:e0: ba:63:82:a3:40:41:30:d0:75:e1:21:8b:75:57:17:2a:0a:97: ac:da:ac:13:18:0b:af:59:c8:a2:51:28:d8:89:95:0e:fe:dc: 71:90:e8:c4:4f:3b:c0:e9:0f:16:e6:a9:24:82:ba:bd:c4:1d: c3:14:5f:50:f6:59:85:9e:df:22:a4:e3:d6:45:d1:19:90:e8: 0a:f1:7e:03:3e:dc:5c:b7:35:f5:32:cd:0f:a7:25:1a:16:55: d5:14:78:d5:ab:91:1e:ca:cb:16:7c:dc:b9:85:ce:3e:33:c4: ea:a3:f0:2c:9b:ce:f9:0e:15:9b:61:1d:a3:b2:29:22:7e:7c: 88:2a:f3:72 -----BEGIN CERTIFICATE----- MIIHHzCCBgegAwIBAgIUAQ0Mn0MoWE2Gh+mOP6FKuEI6AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQxNjEyMzM0NFoXDTI4MDcxOTEyMzM0NFowLzEtMCsGA1UEAxMk ZTk2MGUwMmYtMzk0My00ZTZkLTljYzAtZmU0YzBhMWI2N2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/sNBO1+iENwGlKGgvsY3Dq4KQCGA+CB1DHu D3zMvFxGR/xLjXuqmJ43TaLmJHmqRM6FroaFUlEQ8u/FAsmkW08imY9prBJosyyi 1mJL1leatYlTDvAGayKQkUmdxjS8Xui+ZVFC7K/Xc8uJPSBHR1PfeaTUZADJdW2Z +trwA8oSdH8D2PwLX2QIEcCW6TyUfxL+hi71jrISNVDVS+7ng7MX6wKUVcrhTglI i3PPyaOokglY2antNlblTm4IhOKRriHP3gG8Bm3NbXlU6KRUIrX1SABmISHaMOwC GIHCVXJScreyT2ns7SCIKUIpl2BmXtFTkHRCpwqpkL1KN5ACfwIDAQABo4IEMTCC BC0wHQYDVR0OBBYEFFiXa7mptowzZACfbRdLSWZoHBkAMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l OTYwZTAyZi0zOTQzLTRlNmQtOWNjMC1mZTRjMGExYjY3ZDcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2U5NjBlMDJmLTM5NDMtNGU2ZC05 Y2MwLWZlNGMwYTFiNjdkNy9lOTYwZTAyZi0zOTQzLTRlNmQtOWNjMC1mZTRjMGEx YjY3ZDcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwMQYIKwYBBQUH AQcBAf8EIjAgMB4EAgABMBgDBAChxw0DBAChx3ADBADAUtEDBADAhRAwHgYIKwYB BQUHAQgBAf8EDzANoAswCQICaI8CAwYR/DBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByOqsqmkgOOTVHUIKF sjAZzy8mDjew+PplYYd5dY4U2u4HgtP/3PKSJ9ksQYXEkAEHnZ+tiXcoGSDEmNAS AQRB6qFFfrP2Fkn3rUl15Xb9J4nqikvb9rZeByChy6BHfMAb6jdnFLX/LddfTP16 rYSelZY/HNlJ6UiD8JvnO+C6Y4KjQEEw0HXhIYt1VxcqCpes2qwTGAuvWciiUSjY iZUO/txxkOjETzvA6Q8W5qkkgrq9xB3DFF9Q9lmFnt8ipOPWRdEZkOgK8X4DPtxc tzX1Ms0PpyUaFlXVFHjVq5EeyssWfNy5hc4+M8Tqo/Asm875DhWbYR2jsikifnyI KvNy -----END CERTIFICATE-----Generated at Fri Apr 17 17:26:08 2026 by rpki-client