$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer File: 02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer (raw, json) Hash identifier: zsE+W223ALDxztrh5MU0WajO35izt5bICbN4WnFSPTQ= Subject key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Authority key identifier: AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2 Certificate issuer: /CN=39065acc-beed-4115-bc6c-63de232f2a04 Certificate serial: 010D0C9F4328584DBE63534F0BC1AD14E5A60B80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer Manifest: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft caRepository: rsync://repo.kagl.me/rpki/KeatonAGLair/0/ Notify URL: https://repo.kagl.me/rpki/notification.xml Certificate not before: Wed 06 May 2026 12:45:17 +0000 Certificate not after: Tue 08 Aug 2028 12:45:17 +0000 Subordinate resources: AS: 970 AS: 21957 IP: 104.37.40.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:be:63:53:4f:0b:c1:ad:14:e5:a6:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39065acc-beed-4115-bc6c-63de232f2a04 Validity Not Before: May 6 12:45:17 2026 GMT Not After : Aug 8 12:45:17 2028 GMT Subject: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e4:10:9b:88:cc:e4:1a:60:25:18:e2:cd:9a: 00:dc:7a:b1:13:07:a8:e3:ff:ec:51:9b:ae:fd:b7: 35:df:85:0a:9d:6b:98:74:1f:25:04:04:0f:41:0f: 20:3b:fa:8c:1c:0e:86:6a:eb:d8:0b:b5:8e:ec:61: 4c:8c:cd:01:38:b3:1f:18:4f:fb:a9:15:75:96:08: 5d:f3:c5:e3:61:ae:cb:41:62:db:7d:d2:a9:4e:f1: c8:67:82:df:89:02:29:d6:0f:a0:28:d4:2a:45:47: 50:b3:d1:fe:6d:b3:2a:dd:8e:46:33:a3:16:b2:55: b8:40:6c:5e:98:f8:df:49:88:91:1c:4b:ae:90:4f: f8:de:0d:f2:df:e2:fd:d2:1a:42:ec:7f:37:94:67: a0:d9:bf:52:90:5d:e4:0b:da:86:44:05:94:07:37: 5d:eb:38:34:7e:91:42:a6:85:7b:a3:75:2b:d1:e8: 41:af:c1:f1:56:ea:36:cb:68:d0:57:0d:0e:92:87: 48:19:61:35:23:2e:3e:5d:03:ee:70:61:78:1f:c2: 5c:e2:a3:37:29:9e:d1:60:28:b8:23:01:a3:ab:c1: 08:3b:79:67:fe:79:b0:25:6b:70:36:4f:0b:6e:0d: 96:07:66:41:b6:d0:bc:42:91:95:e7:e1:af:30:70: 96:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Subject Information Access: CA Repository - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/ RPKI Manifest - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft RPKI Notify - URI:https://repo.kagl.me/rpki/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl X509v3 Authority Key Identifier: keyid:AA:CA:03:F3:27:60:7B:A6:55:1E:79:C5:DF:45:DD:98:35:B1:4C:A2 X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer sbgp-ipAddrBlock: critical IPv4: 104.37.40.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 970 21957 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:6c:0c:ea:b2:80:84:79:dd:5b:f2:80:93:4a:e2:36:da:83: cf:5a:32:1e:b2:2a:70:2a:56:42:f0:7c:4f:b7:a3:83:16:a6: 06:2f:ab:5b:f1:6f:c9:0c:48:cc:f5:a0:2d:16:a0:ba:b0:eb: 5d:2e:d7:4b:e7:a3:ca:3c:37:e4:e6:e1:ce:fc:72:40:fb:20: ac:90:29:1b:9f:58:28:50:ee:7f:2d:c2:23:98:42:11:a2:30: c5:07:77:2d:45:68:b1:03:4f:c9:0c:d7:d7:a9:52:ef:6c:13: f4:dc:4e:06:0f:5d:cc:39:aa:d5:fb:a4:73:fa:15:67:d7:87: 25:cf:67:31:6d:84:4e:30:32:e5:29:d1:73:d8:9e:ed:e2:8a: 81:cb:11:2d:37:50:38:43:2f:f6:2d:0d:1a:78:d6:46:49:6a: a2:85:84:44:e9:5a:3a:15:59:35:60:0f:ef:7e:7e:9f:13:ac: b6:b6:cb:92:e0:49:ca:69:08:b5:fc:d9:4a:e8:bf:4e:80:7e: 3e:6b:fb:01:48:e0:5f:b6:34:86:0c:81:cc:97:dc:14:9b:7b: 77:57:c3:12:bd:2a:5e:ef:05:ae:1d:57:6d:52:ac:bd:ec:b2: a8:0d:3c:0a:59:07:7d:8d:d5:94:9e:87:82:3f:d9:62:52:09: 1b:e8:5f:5c -----BEGIN CERTIFICATE----- MIIGfjCCBWagAwIBAgIUAQ0Mn0MoWE2+Y1NPC8GtFOWmC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwNjVhY2MtYmVlZC00MTE1LWJjNmMtNjNkZTIzMmYy YTA0MB4XDTI2MDUwNjEyNDUxN1oXDTI4MDgwODEyNDUxN1owPTE7MDkGA1UEAxMy MDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1ODliOTk1NmM1MWUz NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO5BCbiMzkGmAlGOLN mgDcerETB6jj/+xRm679tzXfhQqda5h0HyUEBA9BDyA7+owcDoZq69gLtY7sYUyM zQE4sx8YT/upFXWWCF3zxeNhrstBYtt90qlO8chngt+JAinWD6Ao1CpFR1Cz0f5t syrdjkYzoxayVbhAbF6Y+N9JiJEcS66QT/jeDfLf4v3SGkLsfzeUZ6DZv1KQXeQL 2oZEBZQHN13rODR+kUKmhXujdSvR6EGvwfFW6jbLaNBXDQ6Sh0gZYTUjLj5dA+5w YXgfwlziozcpntFgKLgjAaOrwQg7eWf+ebAla3A2TwtuDZYHZkG20LxCkZXn4a8w cJYDAgMBAAGjggOCMIIDfjAdBgNVHQ4EFgQUfsm10iUIwCMcFdq9r1E1mQtmv+0w geIGCCsGAQUFBwELBIHVMIHSMDUGCCsGAQUFBzAFhilyc3luYzovL3JlcG8ua2Fn bC5tZS9ycGtpL0tlYXRvbkFHTGFpci8wLzBhBggrBgEFBQcwCoZVcnN5bmM6Ly9y ZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVEMjI1MDhDMDIz MUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDA2BggrBgEFBQcwDYYqaHR0cHM6 Ly9yZXBvLmthZ2wubWUvcnBraS9ub3RpZmljYXRpb24ueG1sMA8GA1UdEwEB/wQF MAMBAf8wgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaBxXJzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzM5MDY1YWNjLWJlZWQtNDExNS1iYzZjLTYzZGUyMzJmMmEwNC8zOTA2 NWFjYy1iZWVkLTQxMTUtYmM2Yy02M2RlMjMyZjJhMDQuY3JsMB8GA1UdIwQYMBaA FKrKA/MnYHumVR55xd9F3Zg1sUyiMA4GA1UdDwEB/wQEAwIBBjCBwAYIKwYBBQUH AQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3Jl cG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIx NzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMv MzkwNjVhY2MtYmVlZC00MTE1LWJjNmMtNjNkZTIzMmYyYTA0LmNlcjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAmglKDAdBggrBgEFBQcBCAEB/wQOMAygCjAI AgIDygICVcUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN BgkqhkiG9w0BAQsFAAOCAQEAx2wM6rKAhHndW/KAk0riNtqDz1oyHrIqcCpWQvB8 T7ejgxamBi+rW/FvyQxIzPWgLRagurDrXS7XS+ejyjw35ObhzvxyQPsgrJApG59Y KFDufy3CI5hCEaIwxQd3LUVosQNPyQzX16lS72wT9NxOBg9dzDmq1fukc/oVZ9eH Jc9nMW2ETjAy5SnRc9ie7eKKgcsRLTdQOEMv9i0NGnjWRklqooWEROlaOhVZNWAP 735+nxOstrbLkuBJymkItfzZSui/ToB+Pmv7AUjgX7Y0hgyBzJfcFJt7d1fDEr0q Xu8Frh1XbVKsveyyqA08ClkHfY3VlJ6Hgj/ZYlIJG+hfXA== -----END CERTIFICATE-----Generated at Wed May 13 20:57:00 2026 by rpki-client