$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea66a5f5-06b4-45df-bd16-666ac8a93d84.cer File: ea66a5f5-06b4-45df-bd16-666ac8a93d84.cer (raw, json) Hash identifier: Ri5EqZayb6Nx4FcpAHL//+UkB5IJU+9G2MI3mAlEa4A= Subject key identifier: 27:F6:B6:27:2E:06:44:D1:06:69:E8:97:79:35:FA:E2:B1:AE:F3:88 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584DF6D9A98AAA3528846BB012C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea66a5f5-06b4-45df-bd16-666ac8a93d84/ea66a5f5-06b4-45df-bd16-666ac8a93d84.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea66a5f5-06b4-45df-bd16-666ac8a93d84/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Tue 26 May 2026 18:08:59 +0000 Certificate not after: Mon 28 Aug 2028 18:08:59 +0000 Subordinate resources: AS: 32555 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f6:d9:a9:8a:aa:35:28:84:6b:b0:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: May 26 18:08:59 2026 GMT Not After : Aug 28 18:08:59 2028 GMT Subject: CN=ea66a5f5-06b4-45df-bd16-666ac8a93d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:15:61:7a:fb:fc:72:e9:c4:12:4f:b5:76:1e: d8:94:c0:67:5e:b7:3c:90:67:3c:39:f6:a6:08:3d: bb:c1:9c:1c:0a:7f:4b:2b:6c:29:85:c4:23:f4:7f: 4d:9f:31:3d:5e:ae:aa:f4:1d:e8:67:47:db:6a:4d: c2:2d:b0:3d:d5:8b:94:15:00:68:a4:8b:12:41:8a: 23:6e:7a:1e:21:ee:59:e2:2b:be:09:89:a9:31:b3: 0d:34:ef:1d:bb:f2:7c:a8:79:4a:81:b9:a2:9d:e1: bc:0b:05:4f:8d:ef:44:5f:ef:8f:4f:66:4a:79:05: 26:e8:1b:72:68:c8:72:97:3d:36:fb:69:56:48:13: f7:cf:c9:05:c1:09:d6:15:8c:20:f1:74:1f:e9:37: 05:eb:6e:34:dc:a4:e1:f3:87:6b:07:d3:56:a2:78: d1:ad:25:b3:54:68:86:58:5b:ab:1e:49:ee:28:a7: 60:d8:e1:16:cd:13:da:e9:d8:e0:77:6a:af:c0:35: 56:8f:b1:c6:a6:f8:69:51:b2:d2:1f:3a:31:0b:49: 43:d6:cc:71:1f:7b:f4:d6:c3:d4:0a:89:17:9f:97: 63:36:45:e1:6f:67:ce:f7:52:7e:fb:d6:66:e8:ab: 69:6a:25:83:bb:ff:8f:d6:00:2b:ef:5d:dc:b1:3a: 92:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F6:B6:27:2E:06:44:D1:06:69:E8:97:79:35:FA:E2:B1:AE:F3:88 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea66a5f5-06b4-45df-bd16-666ac8a93d84/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ea66a5f5-06b4-45df-bd16-666ac8a93d84/ea66a5f5-06b4-45df-bd16-666ac8a93d84.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-autonomousSysNum: critical Autonomous System Numbers: 32555 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:5e:5c:e2:3c:91:4c:c3:01:64:a2:3b:ac:37:ee:43:56:b4: 2b:0c:78:78:f2:18:03:3b:16:89:d4:6d:62:05:2f:a5:ea:09: 14:38:c2:87:e5:f1:13:26:a5:cb:c0:92:f5:08:24:9d:f7:e9: 87:5a:05:37:1f:07:f5:92:79:5f:f8:d8:7a:c3:9e:b9:f1:85: 26:9a:7e:34:37:d0:c7:d4:0d:61:37:9f:2f:4c:67:0e:18:97: 2c:69:28:94:72:43:a9:91:88:b2:c8:31:22:05:3f:20:25:25: 40:0e:57:41:01:b6:47:62:54:1a:26:d6:73:a1:37:3d:68:3d: a3:ef:7a:73:10:5a:75:62:7e:a1:b1:42:96:05:f3:72:6b:41: 8d:cf:fe:66:51:9d:a6:aa:7a:20:07:e2:88:08:1a:2d:63:10: 17:44:39:03:41:37:b6:b3:7e:71:de:77:35:70:88:83:f0:c1: 71:0f:25:fa:f0:ab:ef:3a:87:12:a6:83:e9:93:6f:45:7d:05: 18:41:51:50:14:a3:bf:ad:d7:f8:d7:16:b5:6c:39:46:90:8e: 07:26:a8:3a:ad:37:ff:3e:e1:ea:fd:6c:be:d5:8a:9b:50:b9: 00:dc:aa:86:80:02:ee:f2:2a:29:82:d7:b3:c0:f0:6d:c0:40: c7:95:37:37 -----BEGIN CERTIFICATE----- MIIG5zCCBc+gAwIBAgIUAQ0Mn0MoWE322amKqjUohGuwEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDUyNjE4MDg1OVoXDTI4MDgyODE4MDg1OVowLzEtMCsGA1UEAxMk ZWE2NmE1ZjUtMDZiNC00NWRmLWJkMTYtNjY2YWM4YTkzZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xVhevv8cunEEk+1dh7YlMBnXrc8kGc8Ofam CD27wZwcCn9LK2wphcQj9H9NnzE9Xq6q9B3oZ0fbak3CLbA91YuUFQBopIsSQYoj bnoeIe5Z4iu+CYmpMbMNNO8du/J8qHlKgbmineG8CwVPje9EX++PT2ZKeQUm6Bty aMhylz02+2lWSBP3z8kFwQnWFYwg8XQf6TcF62403KTh84drB9NWonjRrSWzVGiG WFurHknuKKdg2OEWzRPa6djgd2qvwDVWj7HGpvhpUbLSHzoxC0lD1sxxH3v01sPU CokXn5djNkXhb2fO91J++9Zm6KtpaiWDu/+P1gAr713csTqSmQIDAQABo4ID+TCC A/UwHQYDVR0OBBYEFCf2ticuBkTRBmnol3k1+uKxrvOIMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9l YTY2YTVmNS0wNmI0LTQ1ZGYtYmQxNi02NjZhYzhhOTNkODQvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2VhNjZhNWY1LTA2YjQtNDVkZi1i ZDE2LTY2NmFjOGE5M2Q4NC9lYTY2YTVmNS0wNmI0LTQ1ZGYtYmQxNi02NjZhYzhh OTNkODQubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwGQYIKwYBBQUH AQgBAf8ECjAIoAYwBAICfyswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAHl5c4jyRTMMBZKI7rDfuQ1a0Kwx4 ePIYAzsWidRtYgUvpeoJFDjCh+XxEyaly8CS9Qgknffph1oFNx8H9ZJ5X/jYesOe ufGFJpp+NDfQx9QNYTefL0xnDhiXLGkolHJDqZGIssgxIgU/ICUlQA5XQQG2R2JU GibWc6E3PWg9o+96cxBadWJ+obFClgXzcmtBjc/+ZlGdpqp6IAfiiAgaLWMQF0Q5 A0E3trN+cd53NXCIg/DBcQ8l+vCr7zqHEqaD6ZNvRX0FGEFRUBSjv63X+NcWtWw5 RpCOByaoOq03/z7h6v1svtWKm1C5ANyqhoAC7vIqKYLXs8DwbcBAx5U3Nw== -----END CERTIFICATE-----Generated at Mon Jun 1 21:45:36 2026 by rpki-client