$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.cer File: f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.cer (raw, json) Hash identifier: AZLvDukpV62F2O5fHvgjKrnQH5Vpz6RxeDxUOgahGRE= Subject key identifier: 83:FD:B6:BF:B7:A3:E3:72:D6:DE:3D:80:9A:C0:07:44:62:27:59:86 Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Certificate serial: 010D0C9F4328584D5FB9994FFA0FC24E3A083B00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 02 Apr 2026 14:57:20 +0000 Certificate not after: Wed 05 Jul 2028 14:57:20 +0000 Subordinate resources: AS: 26340 AS: 399970 IP: 149.112.152.0/22 IP: 2602:fc3b:: -- 2602:fc3b:dfff:ffff:ffff:ffff:ffff:ffff Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:b9:99:4f:fa:0f:c2:4e:3a:08:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125 Validity Not Before: Apr 2 14:57:20 2026 GMT Not After : Jul 5 14:57:20 2028 GMT Subject: CN=f2cbf686-6d0c-48f0-8f94-dee10e9a88c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:da:3c:38:8e:63:d5:0d:d9:e2:33:67:df:d0: 12:d6:ce:05:15:94:77:90:2b:33:46:0e:40:0d:07: fd:8c:dd:b8:94:57:be:9b:59:00:0c:e1:d2:03:39: 16:bd:71:f9:47:f3:5e:99:5c:93:3c:58:9c:6c:f0: af:74:13:f0:03:d7:23:f2:61:e3:b4:57:6f:b3:1a: cb:4c:8c:63:9b:97:05:b0:be:24:2b:b2:0f:8d:d1: a6:20:1d:7b:37:90:6c:32:11:92:57:78:85:51:d5: b9:ea:51:03:a9:c5:23:a3:17:e6:a4:f9:9e:db:10: ea:2f:48:4d:4d:63:f2:3f:95:52:d6:9a:da:b0:37: 26:e3:5c:c2:3e:0c:86:3c:6d:52:ec:2e:33:7e:84: 8e:ac:65:19:7a:bb:1c:03:09:50:9e:d3:24:e2:c9: 91:f1:09:a7:24:2b:9e:f1:26:3f:ec:7a:c9:ba:ea: ee:24:96:cb:53:4d:d9:6b:1a:f6:d8:9f:ad:70:ad: d4:36:46:74:e0:4b:8b:4d:46:fc:48:de:e7:59:ae: 5c:1f:8e:9b:20:cc:b4:49:ba:8a:fd:a0:bf:6c:da: e4:5d:4e:1c:ca:1d:a8:83:7b:7d:de:fa:f5:0b:60: 34:08:06:18:03:52:52:2f:ea:9d:f3:80:4c:61:f8: 85:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FD:B6:BF:B7:A3:E3:72:D6:DE:3D:80:9A:C0:07:44:62:27:59:86 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7/f2cbf686-6d0c-48f0-8f94-dee10e9a88c7.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl X509v3 Authority Key Identifier: keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer sbgp-ipAddrBlock: critical IPv4: 149.112.152.0/22 IPv6: 2602:fc3b::-2602:fc3b:dfff:ffff:ffff:ffff:ffff:ffff sbgp-autonomousSysNum: critical Autonomous System Numbers: 26340 399970 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:90:66:10:d9:1f:45:65:d0:f2:d6:05:b2:f8:4f:ed:ac:8f: 03:69:1d:00:4a:8f:f7:c5:f5:ae:bd:24:f3:18:fe:88:90:ad: c2:c9:1c:c8:26:ea:be:4f:46:0b:97:96:53:f4:96:78:c3:ec: c5:7c:68:07:d0:bc:32:4f:06:4e:ab:81:de:06:d4:c8:4b:c2: 43:46:48:5e:46:f6:b1:44:c9:bf:da:a1:e2:89:f5:c8:41:d5: 8b:3d:6a:7f:d6:6a:29:11:89:4f:23:51:e5:b5:7f:d3:7d:f6: f1:22:5d:c8:2b:e0:31:3a:b3:4e:76:c5:7b:80:a5:6f:58:1e: cb:06:d4:e2:cd:12:5e:86:86:78:33:ff:e6:65:d1:68:0b:68: bb:e9:87:fa:79:ec:03:fe:b5:90:ee:d8:dd:f8:7b:34:93:91: b5:91:1f:bb:4a:f4:b0:00:5d:2a:e1:1c:33:ab:5f:82:f2:8e: 68:b2:4d:5a:bf:ee:37:a1:b9:d5:2a:8e:c5:e0:ad:6c:9a:47: 2c:22:84:44:ff:b4:03:72:e3:c0:56:6f:0c:2b:9d:3c:ac:73: 77:27:1b:49:07:cd:ed:0b:3e:5f:ff:cb:b0:de:5e:55:3a:4b: 72:42:1e:30:25:7c:54:15:17:2a:ef:7b:d0:3d:98:51:7f:48: f1:d1:87:b3 -----BEGIN CERTIFICATE----- MIIHJjCCBg6gAwIBAgIUAQ0Mn0MoWE1fuZlP+g/CTjoIOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEwYWZh MTI1MB4XDTI2MDQwMjE0NTcyMFoXDTI4MDcwNTE0NTcyMFowLzEtMCsGA1UEAxMk ZjJjYmY2ODYtNmQwYy00OGYwLThmOTQtZGVlMTBlOWE4OGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNo8OI5j1Q3Z4jNn39AS1s4FFZR3kCszRg5A DQf9jN24lFe+m1kADOHSAzkWvXH5R/NemVyTPFicbPCvdBPwA9cj8mHjtFdvsxrL TIxjm5cFsL4kK7IPjdGmIB17N5BsMhGSV3iFUdW56lEDqcUjoxfmpPme2xDqL0hN TWPyP5VS1prasDcm41zCPgyGPG1S7C4zfoSOrGUZerscAwlQntMk4smR8QmnJCue 8SY/7HrJuuruJJbLU03Zaxr22J+tcK3UNkZ04EuLTUb8SN7nWa5cH46bIMy0SbqK /aC/bNrkXU4cyh2og3t93vr1C2A0CAYYA1JSL+qd84BMYfiFDwIDAQABo4IEODCC BDQwHQYDVR0OBBYEFIP9tr+3o+Ny1t49gJrAB0RiJ1mGMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9m MmNiZjY4Ni02ZDBjLTQ4ZjAtOGY5NC1kZWUxMGU5YTg4YzcvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEt MjY5NS00YzBlLWFlN2QtZTZjYjEwYWZhMTI1L2YyY2JmNjg2LTZkMGMtNDhmMC04 Zjk0LWRlZTEwZTlhODhjNy9mMmNiZjY4Ni02ZDBjLTQ4ZjAtOGY5NC1kZWUxMGU5 YTg4YzcubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3 YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kZTAyN2ExYS0yNjk1LTRj MGUtYWU3ZC1lNmNiMTBhZmExMjUuY3JsMB8GA1UdIwQYMBaAFI/ufJcZkVSukBMJ EBDJGyOR9PYWMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Rl MDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS5jZXIwOAYIKwYBBQUH AQcBAf8EKTAnMAwEAgABMAYDBAKVcJgwFwQCAAIwETAPAwUAJgL8OwMGBSYC/DvA MB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAmbkAgMGGmIwVAYDVR0gAQH/BEowSDBG BggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9y ZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAE5BmENkf RWXQ8tYFsvhP7ayPA2kdAEqP98X1rr0k8xj+iJCtwskcyCbqvk9GC5eWU/SWeMPs xXxoB9C8Mk8GTquB3gbUyEvCQ0ZIXkb2sUTJv9qh4on1yEHViz1qf9ZqKRGJTyNR 5bV/03328SJdyCvgMTqzTnbFe4Clb1geywbU4s0SXoaGeDP/5mXRaAtou+mH+nns A/61kO7Y3fh7NJORtZEfu0r0sABdKuEcM6tfgvKOaLJNWr/uN6G51SqOxeCtbJpH LCKERP+0A3LjwFZvDCudPKxzdycbSQfN7Qs+X//LsN5eVTpLckIeMCV8VBUXKu97 0D2YUX9I8dGHsw== -----END CERTIFICATE-----Generated at Thu Apr 9 21:38:15 2026 by rpki-client