$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer File: 8eda9035-7c9b-45a0-b98b-a45be535f082.cer (raw, json) Hash identifier: TeIBxzd5JRcvJEiKcLNVUvKckO0YdbkQZw7ujYGr7Mg= Subject key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority key identifier: C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C Certificate issuer: /CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Certificate serial: 010D0C9F4328584D220D1855AA9D28D4FC8DC0C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Wed 11 Mar 2026 12:45:27 +0000 Certificate not after: Sun 04 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 4969 AS: 8097 AS: 399728 IP: 23.181.208.0/24 IP: 172.98.48.0/22 IP: 2620:98:e000::/44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:22:0d:18:55:aa:9d:28:d4:fc:8d:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a246947-2d62-4a6c-ba05-87187f0099b2 Validity Not Before: Mar 11 12:45:27 2026 GMT Not After : Jun 4 12:45:22 2028 GMT Subject: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:45:bf:b5:66:71:b7:58:a5:ac:ce:9e:97:36: 06:aa:cf:c6:db:b4:67:2b:d7:b8:a8:bf:f8:a2:91: 80:81:76:52:e2:fc:54:0e:aa:1d:50:9f:7d:f6:f4: 48:25:37:08:3e:dd:7a:fc:06:44:13:04:87:55:91: 30:bb:1d:8a:43:ea:77:1f:e5:57:a5:86:5b:49:e4: 3e:f5:ef:70:ce:1f:81:7d:df:e6:1c:f2:60:5f:b6: 8c:d5:c8:ba:45:a7:17:e9:76:02:23:43:e5:6e:af: b2:57:ac:af:b9:e7:45:30:02:91:ec:2f:eb:0a:b1: 28:71:b8:07:b0:75:6a:b7:92:cc:14:f9:fc:d8:65: 9b:f4:27:ba:c9:d5:c6:ea:76:bd:d6:54:57:5c:b4: ee:ab:99:38:a1:68:5b:78:5c:90:60:c1:8a:9e:78: b8:57:e8:20:be:01:e1:4d:f9:bb:10:48:02:ab:0d: 4e:92:9f:25:88:e3:7d:d5:4a:fa:a8:8f:f3:ef:88: 3d:3b:52:1f:55:37:e5:1b:28:04:b4:a2:ed:85:8e: 63:d7:87:22:0a:d3:45:e6:16:d4:5a:85:31:74:2a: a3:39:8f:4b:79:c6:4a:74:83:e0:1f:60:80:d3:50: 0d:91:91:b5:ea:a6:69:3b:22:38:a3:95:d0:e4:b3: e0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl X509v3 Authority Key Identifier: keyid:C8:9D:5A:45:64:1A:6B:D2:23:FA:CA:96:82:30:8E:D6:D2:76:AD:7C X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer sbgp-ipAddrBlock: critical IPv4: 23.181.208.0/24 172.98.48.0/22 IPv6: 2620:98:e000::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 4969 8097 399728 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:2c:31:e2:c5:72:e1:45:f4:e7:19:94:18:69:32:9e:48:1e: df:38:2b:52:55:37:84:87:b5:c3:b7:cf:d4:b4:fa:10:d2:f6: 19:dd:bb:c9:ca:a9:71:4e:68:bc:28:6f:e8:b5:5c:77:58:9b: b4:83:86:6f:7a:03:c1:fb:5f:de:28:8e:13:06:58:76:f3:7a: c0:59:9d:18:b5:1b:6e:f0:42:ca:e5:6d:f0:0f:31:f5:33:26: f3:ef:c0:78:d1:4d:23:5c:a7:ee:c1:2b:67:e8:e9:f1:4f:e6: 8a:c5:54:bc:51:cd:9e:9e:09:39:ad:e8:bc:66:09:e4:89:b3: 97:f9:a6:31:3b:d8:c6:7b:99:f0:2d:f2:73:e2:7f:aa:7a:cd: d3:a5:ed:72:ce:c7:06:94:61:cc:0c:51:11:80:8b:d1:c1:eb: 98:61:28:6c:4d:8a:eb:17:7c:ba:5b:a5:8a:55:10:50:e2:a7: 44:7f:0b:a5:a3:48:a4:9a:8d:68:89:e8:63:5d:5e:6e:b6:d2: 3c:da:bd:87:49:95:bc:ce:31:7b:fe:02:6c:aa:5c:d8:e0:b2: 99:28:e6:3b:af:5e:36:48:3e:05:bc:78:68:51:e0:4a:17:c9: fc:ae:7e:a2:c0:e3:0a:62:15:2b:89:7a:35:4f:38:b9:bd:e0: 1a:4c:56:12 -----BEGIN CERTIFICATE----- MIIHKDCCBhCgAwIBAgIUAQ0Mn0MoWE0iDRhVqp0o1PyNwMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5 OWIyMB4XDTI2MDMxMTEyNDUyN1oXDTI4MDYwNDEyNDUyMlowLzEtMCsGA1UEAxMk OGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVmMDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kW/tWZxt1ilrM6elzYGqs/G27RnK9e4qL/4 opGAgXZS4vxUDqodUJ999vRIJTcIPt16/AZEEwSHVZEwux2KQ+p3H+VXpYZbSeQ+ 9e9wzh+Bfd/mHPJgX7aM1ci6RacX6XYCI0Plbq+yV6yvuedFMAKR7C/rCrEocbgH sHVqt5LMFPn82GWb9Ce6ydXG6na91lRXXLTuq5k4oWhbeFyQYMGKnni4V+ggvgHh Tfm7EEgCqw1Okp8liON91Ur6qI/z74g9O1IfVTflGygEtKLthY5j14ciCtNF5hbU WoUxdCqjOY9LecZKdIPgH2CA01ANkZG16qZpOyI4o5XQ5LPguwIDAQABo4IEOjCC BDYwHQYDVR0OBBYEFGT90rTVqQqg9WZo5CuWUVTnemZzMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84 ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDct MmQ2Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzhlZGE5MDM1LTdjOWItNDVhMC1i OThiLWE0NWJlNTM1ZjA4Mi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUz NWYwODIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2 OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYTI0Njk0Ny0yZDYyLTRh NmMtYmEwNS04NzE4N2YwMDk5YjIuY3JsMB8GA1UdIwQYMBaAFMidWkVkGmvSI/rK loIwjtbSdq18MA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJh MjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi5jZXIwNgYIKwYBBQUH AQcBAf8EJzAlMBIEAgABMAwDBAAXtdADBAKsYjAwDwQCAAIwCQMHBCYgAJjgADAi BggrBgEFBQcBCAEB/wQTMBGgDzANAgITaQICH6ECAwYZcDBUBgNVHSABAf8ESjBI MEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0 L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5LDHi xXLhRfTnGZQYaTKeSB7fOCtSVTeEh7XDt8/UtPoQ0vYZ3bvJyqlxTmi8KG/otVx3 WJu0g4ZvegPB+1/eKI4TBlh283rAWZ0YtRtu8ELK5W3wDzH1Mybz78B40U0jXKfu wStn6OnxT+aKxVS8Uc2engk5rei8ZgnkibOX+aYxO9jGe5nwLfJz4n+qes3Tpe1y zscGlGHMDFERgIvRweuYYShsTYrrF3y6W6WKVRBQ4qdEfwulo0ikmo1oiehjXV5u ttI82r2HSZW8zjF7/gJsqlzY4LKZKOY7r142SD4FvHhoUeBKF8n8rn6iwOMKYhUr iXo1Tzi5veAaTFYS -----END CERTIFICATE-----Generated at Thu Mar 26 00:52:26 2026 by rpki-client