$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer File: 950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer (raw, json) Hash identifier: XegVia71wvINYzmIn7awn0mJL6aTpdHa8EX/SK5D1ms= Subject key identifier: E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96 Authority key identifier: 2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A Certificate issuer: /CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Certificate serial: 010D0C9F4328584D40C2962034122065F9CDED00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Sun 22 Mar 2026 12:45:22 +0000 Certificate not after: Sat 24 Jun 2028 12:45:22 +0000 Subordinate resources: AS: 400512 IP: 23.133.200.0/24 IP: 2602:fba6::/36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:c2:96:20:34:12:20:65:f9:cd:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b Validity Not Before: Mar 22 12:45:22 2026 GMT Not After : Jun 24 12:45:22 2028 GMT Subject: CN=950eb4ff-cb65-4e8f-90a9-11392dacfad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:35:14:87:c7:31:a2:88:47:58:63:5e:55: 45:11:49:e9:62:30:a3:47:a3:ab:2b:94:58:74:ad: be:8b:69:22:42:4f:c8:78:fa:ea:e2:aa:fa:46:70: 39:20:61:94:63:bf:2c:a7:1a:e2:ca:53:5b:27:ad: 55:e1:6e:b2:c1:e0:fa:2a:34:df:13:e0:9a:a2:84: 59:cd:d1:f5:d7:c9:3d:71:9b:c9:da:2e:2a:3b:e0: 89:7c:38:28:d0:3c:91:4c:c9:34:08:94:4e:3e:56: 68:a2:66:e3:e2:e2:56:48:9e:15:f8:c2:69:dd:25: 8a:fb:4a:b1:54:d1:97:7a:6c:1e:ce:b0:ad:90:9e: 23:02:ad:a8:3b:fc:9e:90:68:cd:7f:28:b1:6c:63: c8:95:3d:8d:22:52:6c:df:f4:5e:e9:4e:4d:e1:80: 62:a1:22:39:bf:5e:df:fc:15:55:fb:47:50:27:3a: 58:59:36:d2:37:bd:1e:f8:7e:d0:86:f6:3b:9b:c4: e0:0b:a0:45:64:85:a3:6b:df:bf:bb:55:fa:8e:ab: a7:32:78:33:68:c3:df:db:9f:be:0f:1f:80:ce:ad: 3a:d2:04:8d:1a:9c:d9:3e:c2:0b:ce:bd:bf:83:ee: 96:a1:69:69:ef:b4:c5:81:bf:b8:a1:d1:86:03:bf: c3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl X509v3 Authority Key Identifier: keyid:2E:51:46:B1:AB:49:1C:0C:D1:1C:25:39:6F:E7:AC:FA:0D:CB:BB:5A X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer sbgp-ipAddrBlock: critical IPv4: 23.133.200.0/24 IPv6: 2602:fba6::/36 sbgp-autonomousSysNum: critical Autonomous System Numbers: 400512 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:f9:e9:6f:a6:5f:ca:80:f9:26:a0:fb:e7:f1:76:f7:a8:47: f0:ac:39:a8:53:69:0b:a7:89:0a:ff:ee:65:7b:8f:c5:57:1c: 0f:7d:1a:fe:98:06:a6:e0:d3:a1:ab:3a:fa:1c:d0:b3:4c:fb: 44:64:16:64:7d:2b:62:24:5d:2a:71:0e:46:84:f8:74:de:aa: 04:19:08:2d:be:6a:b5:5b:a4:54:c7:ec:ea:62:e8:24:9e:9f: 1a:39:a4:95:a2:70:a0:9c:51:ce:b8:0a:77:2c:9e:59:30:5f: ed:72:e4:b6:3e:b1:33:10:53:26:11:5c:af:48:b3:85:61:1f: 9b:cc:69:eb:4c:55:b8:81:48:5a:d5:54:26:3c:35:e3:97:23: 5d:62:15:7c:fb:fa:2c:7b:32:6b:5a:3b:7a:b4:dc:0c:31:35: 22:f5:84:a9:1c:a8:11:e5:61:ce:d8:09:96:d0:1e:18:5d:97: fa:f7:ca:c2:fe:ba:26:63:7b:96:53:d9:ef:c3:64:9c:c1:a1: f9:a2:87:02:c4:52:c6:d0:37:03:f3:a2:fc:19:b5:48:22:dd: 98:d6:9a:ff:c7:7b:62:c4:74:fd:25:e9:51:d0:c8:93:24:19: 35:aa:bf:e1:11:f5:97:2c:46:13:60:a3:df:5e:d3:df:eb:15: 48:e4:0a:00 -----BEGIN CERTIFICATE----- MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWE1AwpYgNBIgZfnN7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmVi ODJiMB4XDTI2MDMyMjEyNDUyMloXDTI4MDYyNDEyNDUyMlowLzEtMCsGA1UEAxMk OTUwZWI0ZmYtY2I2NS00ZThmLTkwYTktMTEzOTJkYWNmYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfg1FIfHMaKIR1hjXlVFEUnpYjCjR6OrK5RY dK2+i2kiQk/IePrq4qr6RnA5IGGUY78spxriylNbJ61V4W6yweD6KjTfE+CaooRZ zdH118k9cZvJ2i4qO+CJfDgo0DyRTMk0CJROPlZoombj4uJWSJ4V+MJp3SWK+0qx VNGXemwezrCtkJ4jAq2oO/yekGjNfyixbGPIlT2NIlJs3/Re6U5N4YBioSI5v17f /BVV+0dQJzpYWTbSN70e+H7QhvY7m8TgC6BFZIWja9+/u1X6jqunMngzaMPf25++ Dx+Azq060gSNGpzZPsILzr2/g+6WoWlp77TFgb+4odGGA7/DMQIDAQABo4IEKzCC BCcwHQYDVR0OBBYEFOImPXcdubztO5jJJaDDmwY5HvOWMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85 NTBlYjRmZi1jYjY1LTRlOGYtOTBhOS0xMTM5MmRhY2ZhZDIvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjIt ZGZkZi00YzBjLWI5MGQtM2JjN2E1ZmViODJiLzk1MGViNGZmLWNiNjUtNGU4Zi05 MGE5LTExMzkyZGFjZmFkMi85NTBlYjRmZi1jYjY1LTRlOGYtOTBhOS0xMTM5MmRh Y2ZhZDIubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2Zi MTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YjdmYjEyMi1kZmRmLTRj MGMtYjkwZC0zYmM3YTVmZWI4MmIuY3JsMB8GA1UdIwQYMBaAFC5RRrGrSRwM0Rwl OW/nrPoNy7taMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzVi N2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi5jZXIwLwYIKwYBBQUH AQcBAf8EIDAeMAwEAgABMAYDBAAXhcgwDgQCAAIwCAMGBCYC+6YAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwYcgDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCX+elvpl/KgPkmoPvn8Xb3qEfw rDmoU2kLp4kK/+5le4/FVxwPfRr+mAam4NOhqzr6HNCzTPtEZBZkfStiJF0qcQ5G hPh03qoEGQgtvmq1W6RUx+zqYugknp8aOaSVonCgnFHOuAp3LJ5ZMF/tcuS2PrEz EFMmEVyvSLOFYR+bzGnrTFW4gUha1VQmPDXjlyNdYhV8+/osezJrWjt6tNwMMTUi 9YSpHKgR5WHO2AmW0B4YXZf698rC/romY3uWU9nvw2ScwaH5oocCxFLG0DcD86L8 GbVIIt2Y1pr/x3tixHT9JelR0MiTJBk1qr/hEfWXLEYTYKPfXtPf6xVI5AoA -----END CERTIFICATE-----Generated at Thu Mar 26 04:54:50 2026 by rpki-client